Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 383 of 430.
- CVE-2023-23388 Windows Bluetooth Driver Elevation of Privilege Vulnerability
- CVE-2023-23385 Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
- CVE-2023-23384 Microsoft SQL Server Remote Code Execution Vulnerability
- CVE-2023-23383 Service Fabric Explorer Spoofing Vulnerability
- CVE-2023-23382 Azure Machine Learning Compute Instance Information Disclosure Vulnerability
- CVE-2023-23381 Visual Studio Remote Code Execution Vulnerability
- CVE-2023-2338 SQL Injection in pimcore/pimcore
- CVE-2023-23379 Microsoft Defender for IoT Elevation of Privilege Vulnerability
- CVE-2023-23378 Print 3D Remote Code Execution Vulnerability
- CVE-2023-23377 3D Builder Remote Code Execution Vulnerability
- CVE-2023-23376 Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation
- CVE-2023-23375 Microsoft ODBC and OLE DB Remote Code Execution Vulnerability
- CVE-2023-23374 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- CVE-2023-23373 QUSBCam2
- CVE-2023-23372 QTS, QuTS hero
- CVE-2023-23371 QVPN Device Client
- CVE-2023-23370 QVPN Device Client
- CVE-2023-2337 ConvertKit < 2.2.1 - Reflected XSS
- CVE-2023-23369 QTS, Multimedia Console, and Media Streaming add-on
- CVE-2023-23368 QTS, QuTS hero, QuTScloud
- CVE-2023-23367 QTS, QuTS hero, QuTScloud
- CVE-2023-23366 Music Station
- CVE-2023-23365 Music Station
- CVE-2023-23364 Multimedia Console
- CVE-2023-23363 QTS
- CVE-2023-23362 QTS, QuTS hero, QuTScloud
- CVE-2023-2336 Path Traversal in pimcore/pimcore
- CVE-2023-23357 QuLog Center
- CVE-2023-23356 QuFirewall
- CVE-2023-23355 QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR
- CVE-2023-23354 QuLog Center
- CVE-2023-2335 Plaintext Password in Registry
- CVE-2023-23349 Information disclosure in Kaspersky Password Manager for Windows
- CVE-2023-23348 HCL Launch is vulnerable to sensitive information disclosure
- CVE-2023-23347 Use of a broken cryptographic algorithm affects HCL DRYiCE iAutomate
- CVE-2023-23346 Use of a broken cryptographic algorithm affects HCL DRYiCE MyCloud
- CVE-2023-23344 HCL BigFix WebUI Insights is susceptible to a lack of sufficient authorization
- CVE-2023-23343 HCL BigFix OSD Bare Metal Server version 311.12 or lower is affected by a clickjacking vulnerability.
- CVE-2023-23342 HCL Nomad for web is affected by cryptographic validation of local data access that can be circumvented
- CVE-2023-2334 Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF
- CVE-2023-23333 Command injection in contec:solarview compact firmware
- CVE-2023-23331 SQL injection in amano:xoffice
- CVE-2023-23330 Path traversal in amano:xoffice
- CVE-2023-2333 Ninja Forms Google Sheet Connector < 1.2.7 - Reflected XSS
- CVE-2023-23328 File upload in avantfax:avantfax
- CVE-2023-23327 Information disclosure in avantfax:avantfax
- CVE-2023-23326 Cross-site scripting in avantfax:avantfax
- CVE-2023-23325 Command injection in zumtobel:netlink ccd firmware
- CVE-2023-23324 Hardcoded credentials in zumtobel:netlink ccd firmware
- CVE-2023-2332 Stored Cross-site Scripting (XSS) in pimcore/pimcore
- CVE-2023-23315 SQL injection in stripe:stripe payment pro
- CVE-2023-23314 File upload in zdir project:zdir
- CVE-2023-23313 Cross-site scripting in draytek:vigor1000b firmware
- CVE-2023-2331 Bypassing hardening via Unquoted Service path vulnerability
- CVE-2023-23306 Memory corruption in garmin:connect-iq
- CVE-2023-23305 Memory corruption in garmin:connect-iq
- CVE-2023-23304 Missing authorization in garmin:connect-iq
- CVE-2023-23303 Memory corruption in garmin:connect-iq
- CVE-2023-23302 Memory corruption in garmin:connect-iq
- CVE-2023-23301 Memory corruption in garmin:connect-iq
- CVE-2023-23300 Memory corruption in garmin:connect-iq
- CVE-2023-2330 Caldera Forms Google Sheets Connector < 1.3 - Access Code Update via CSRF
- CVE-2023-23299 Security feature bypass in garmin:connect-iq
- CVE-2023-23298 Integer overflow in garmin:connect-iq
- CVE-2023-23296 Denial of service in korenix:jetwave 2111 firmware
- CVE-2023-23295 Command injection in korenix:jetwave 2111 firmware
- CVE-2023-23294 Command injection in korenix:jetwave 2111 firmware
- CVE-2023-2329 WooCommerce Google Sheet Connector < 1.3.6 - Access Code Update via CSRF
- CVE-2023-23286 Cross-site scripting in farsight:provide server
- CVE-2023-2328 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-23279 SQL injection in canteen management system project:canteen management system
- CVE-2023-23277 Cross-site scripting in snippet box project:snippet box
- CVE-2023-2327 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-2326 Gravity Forms Google Sheet Connector < 1.3.5 - Access Code Update via CSRF
- CVE-2023-2325 Stored XSS Vulnerability in M-Files Classic Web
- CVE-2023-2324 Elementor Forms Google Sheet Connector < 1.0.7 - Reflected XSS
- CVE-2023-2323 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-2322 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-2321 WPForms Google Sheet Connector < 3.4.6 - Reflected XSS
- CVE-2023-23208 Cross-site scripting in genesys:administrator extension
- CVE-2023-23205 Denial of service in mz-automation:lib60870
- CVE-2023-2320 CF7 Google Sheets Connector < 5.0.2 - Reflected XSS
- CVE-2023-23192 Auth bypass in isdecisions:userlock
- CVE-2023-2319 Other in pcs
- CVE-2023-2318 MarkText DOM-Based Cross-site Scripting leading to Remote Code Execution
- CVE-2023-2317 Typora DOM-Based Cross-site Scripting leading to Remote Code Execution
- CVE-2023-23169 Path traversal in synapsoft:pdfocus
- CVE-2023-23163 SQL injection in phpgurukul:art gallery management system
- CVE-2023-23162 SQL injection in phpgurukul:art gallery management system
- CVE-2023-23161 Cross-site scripting in phpgurukul:art gallery management system
- CVE-2023-2316 Typora Local File Disclosure
- CVE-2023-23158 Cross-site scripting in phpgurukul:art gallery management system
- CVE-2023-23157 Cross-site scripting in phpgurukul:art gallery management system
- CVE-2023-23156 SQL injection in phpgurukul:art gallery management system
- CVE-2023-23155 SQL injection in phpgurukul:art gallery management system
- CVE-2023-23151 Path traversal in bloofox:bloofoxcms
- CVE-2023-23150 Other in lancombg:sa-wr915nd firmware
- CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2
- CVE-2023-23149 Command injection in dek-1705 project:dek-1705 firmware
- CVE-2023-23145 Denial of service in gpac:gpac