Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 375 of 430.
- CVE-2023-24241 SQL injection in forget heart message box project:forget heart message box
- CVE-2023-2424 DedeCMS config.php UpDateMemberModCache unrestricted upload
- CVE-2023-24238 Command injection in totolink:a7100ru firmware
- CVE-2023-24236 Command injection in totolink:a7100ru firmware
- CVE-2023-24234 Cross-site scripting in inventory management system project:inventory management system
- CVE-2023-24233 Cross-site scripting in inventory management system project:inventory management system
- CVE-2023-24232 Cross-site scripting in inventory management system project:inventory management system
- CVE-2023-24231 Cross-site scripting in inventory management system project:inventory management system
- CVE-2023-24230 Formwork Cross-site Scripting (XSS) from Page title field
- CVE-2023-2423 Rockwell Automation Armor PowerFlex Vulnerable to Denial-Of-Service
- CVE-2023-24229 Command injection in draytek:vigor2960 firmware
- CVE-2023-24221 SQL injection in luckyframe:luckyframeweb
- CVE-2023-24220 SQL injection in luckyframe:luckyframeweb
- CVE-2023-2422 Keycloak: oauth client impersonation
- CVE-2023-24219 SQL injection in luckyframe:luckyframeweb
- CVE-2023-24217 Path traversal in agilebio:electronic lab notebook
- CVE-2023-24215 Incorrect access control in the /uci/get/ endpoint of NOVUS AirGate 4G firmware v1.1.16 allows unauthenticated attackers to obtain administr
- CVE-2023-24212 Memory corruption in tenda:ax3 firmware
- CVE-2023-2421 Control iD RHiD department cross site scripting
- CVE-2023-24206 SQL injection in davinci project:davinci
- CVE-2023-24205 Misconfiguration in clash project:clash
- CVE-2023-24204 SQL injection in oretnom23:simple customer relationship management system
- CVE-2023-24203 Cross-site scripting in oretnom23:simple customer relationship management system
- CVE-2023-24202 Path traversal in oretnom23:raffle draw system
- CVE-2023-24201 SQL injection in oretnom23:raffle draw system
- CVE-2023-24200 SQL injection in oretnom23:raffle draw system
- CVE-2023-2420 MLECMS common.func.php get_url sql injection
- CVE-2023-24199 SQL injection in oretnom23:raffle draw system
- CVE-2023-24198 SQL injection in oretnom23:raffle draw system
- CVE-2023-24197 SQL injection in oretnom23:online food ordering system
- CVE-2023-24195 Cross-site scripting in oretnom23:online food ordering system
- CVE-2023-24194 Cross-site scripting in oretnom23:online food ordering system
- CVE-2023-24192 Cross-site scripting in oretnom23:online food ordering system
- CVE-2023-24191 Cross-site scripting in oretnom23:online food ordering system
- CVE-2023-2419 Zhong Bang CRMEB SystemAttachmentServices.php videoUpload unrestricted upload
- CVE-2023-24189 XML external entity in bstek:urule
- CVE-2023-24188 Arbitrary file deletion in ureport
- CVE-2023-24187 XML External Entity Reference in ureport
- CVE-2023-24184 Command injection in totolink:a7100ru firmware
- CVE-2023-24182 Cross-site scripting in openwrt:openwrt
- CVE-2023-24181 Cross-site scripting in openwrt:luci
- CVE-2023-24180 Integer overflow in libelfin project:libelfin
- CVE-2023-2418 Konga Login API random values
- CVE-2023-24170 Memory corruption in tenda:ac18 firmware
- CVE-2023-2417 ks-soft Advanced Host Monitor rma_active.exe unquoted search path
- CVE-2023-24169 Memory corruption in tenda:ac18 firmware
- CVE-2023-24167 Memory corruption in tenda:ac18 firmware
- CVE-2023-24166 Memory corruption in tenda:ac18 firmware
- CVE-2023-24165 Memory corruption in tenda:ac18 firmware
- CVE-2023-24164 Memory corruption in tenda:ac18 firmware
- CVE-2023-24163 Dromara hutool vulnerable to SQL Injection
- CVE-2023-24162 Dromara Hutool Deserialization of Untrusted Data vulnerability
- CVE-2023-24161 Command injection in totolink:ca300-poe firmware
- CVE-2023-24160 Command injection in totolink:ca300-poe firmware
- CVE-2023-2416 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.5 - Cross-Site Request Forgery to Account Logout
- CVE-2023-24159 Command injection in totolink:ca300-poe firmware
- CVE-2023-24157 Command injection in totolink:t8 firmware
- CVE-2023-24156 Command injection in totolink:t8 firmware
- CVE-2023-24155 Hardcoded credentials in totolink:t8 firmware
- CVE-2023-24154 Command injection in totolink:t8 firmware
- CVE-2023-24153 Command injection in totolink:t8 firmware
- CVE-2023-24152 Command injection in totolink:t8 firmware
- CVE-2023-24151 Command injection in totolink:t8 firmware
- CVE-2023-24150 Command injection in totolink:t8 firmware
- CVE-2023-2415 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.2.10 - Missing Authorization to Account Logout
- CVE-2023-24149 Hardcoded credentials in totolink:ca300-poe firmware
- CVE-2023-24148 Command injection in totolink:ca300-poe firmware
- CVE-2023-24147 Hardcoded credentials in totolink:ca300-poe firmware
- CVE-2023-24146 Command injection in totolink:ca300-poe firmware
- CVE-2023-24145 Command injection in totolink:ca300-poe firmware
- CVE-2023-24144 Command injection in totolink:ca300-poe firmware
- CVE-2023-24143 Command injection in totolink:ca300-poe firmware
- CVE-2023-24142 Command injection in totolink:ca300-poe firmware
- CVE-2023-24141 Command injection in totolink:ca300-poe firmware
- CVE-2023-24140 Command injection in totolink:ca300-poe firmware
- CVE-2023-2414 Missing authorization in Online Booking & Scheduling Calendar for WordPress by vcita
- CVE-2023-24139 Command injection in totolink:ca300-poe firmware
- CVE-2023-24138 Command injection in totolink:ca300-poe firmware
- CVE-2023-24135 Command injection in jensenofscandinavia:eagle 1200ac firmware
- CVE-2023-24134 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24133 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24132 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24131 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24130 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-2413 SourceCodester AC Repair and Services System manage_booking.php sql injection
- CVE-2023-24129 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24128 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24127 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24126 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24125 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24124 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24123 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24122 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24121 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24120 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-2412 SourceCodester AC Repair and Services System manage_user.php sql injection
- CVE-2023-24119 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24118 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24117 Memory corruption in heimgardtechnologies:eagle 1200ac firmware
- CVE-2023-24114 Code injection in typecho:typecho