Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 384 of 430.
- CVE-2023-23144 Integer overflow in gpac:gpac
- CVE-2023-23143 Memory corruption in gpac:gpac
- CVE-2023-2314 Security feature bypass in Chrome
- CVE-2023-23136 Path traversal in lmxcms:lmxcms
- CVE-2023-23135 File upload in ftdms project:ftdms
- CVE-2023-23132 Hardcoded credentials in selfwealth:selfwealth
- CVE-2023-23131 Weak cryptography in selfwealth:selfwealth
- CVE-2023-23130 Weak cryptography in connectwise:automate
- CVE-2023-2313 Security feature bypass in Chrome
- CVE-2023-23128 Misconfiguration in connectwise:connectwise
- CVE-2023-23127 Misconfiguration in connectwise:connectwise
- CVE-2023-23126 Other in connectwise:automate
- CVE-2023-23120 Weak cryptography in trendnet:tv-ip651wi firmware
- CVE-2023-2312 Use after free in Chrome
- CVE-2023-23119 Weak cryptography in ui:af-2x firmware
- CVE-2023-23110 Security feature bypass in netgear:d6100 firmware
- CVE-2023-2311 Security feature bypass in Chrome
- CVE-2023-23109 Denial of service in crasm project:crasm
- CVE-2023-23108 Null dereference in crasm project:crasm
- CVE-2023-2310 Channel Accessible by Non-Endpoint
- CVE-2023-2309 wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting
- CVE-2023-23088 Memory corruption in json-parser project:json-parser
- CVE-2023-23087 Null dereference in mojojson project:mojojson
- CVE-2023-23086 Memory corruption in mojojson project:mojojson
- CVE-2023-23082 Memory corruption in kodi:kodi
- CVE-2023-23080 Command injection in tenda:cp3 firmware
- CVE-2023-23078 Cross-site scripting in zohocorp:manageengine servicedesk plus
- CVE-2023-23077 Cross-site scripting in zohocorp:manageengine servicedesk plus
- CVE-2023-23076 Command injection in zohocorp:manageengine supportcenter plus
- CVE-2023-23075 Cross-site scripting in zohocorp:manageengine assetexplorer
- CVE-2023-23074 Cross-site scripting in zohocorp:manageengine servicedesk plus
- CVE-2023-23073 Cross-site scripting in zohocorp:manageengine servicedesk plus
- CVE-2023-2307 Cross-Site Request Forgery (CSRF) in builderio/qwik
- CVE-2023-23064 Missing authorization in totolink:a720r firmware
- CVE-2023-23063 Path traversal in cellinx:nvt web server
- CVE-2023-2306 Qognify NiceVision Use of Hard-coded Credentials
- CVE-2023-23059 Misconfiguration in geovision:gv-edge recording manager
- CVE-2023-2305 Download Manager <= 3.2.70 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-23040 Weak cryptography in tp-link:tl-wr940n firmware
- CVE-2023-2304 Favorites <= 2.3.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-23039 Use after free in linux:linux kernel
- CVE-2023-2303 Contact Form and Calls To Action by vcita <= 4.10.5 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2023-23026 Cross-site scripting in simple sales management system project:simple sales management system
- CVE-2023-23024 Cross-site scripting in book store management system project:book store management system
- CVE-2023-23022 Cross-site scripting in oretnom23:employees payroll management system
- CVE-2023-23021 Cross-site scripting in oretnom23:pos - point of sale system
- CVE-2023-2302 Contact Form and Calls To Action by vcita <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-23019 Cross-site scripting in oretnom23:blog site
- CVE-2023-23015 Cross-site scripting in kalkun project:kalkun
- CVE-2023-23014 Cross-site scripting in inventory system project:inventory system
- CVE-2023-23012 Cross-site scripting in classroombookings:classroombookings
- CVE-2023-23011 Cross-site scripting in invoiceplane:invoiceplane
- CVE-2023-23010 Cross-site scripting in ecommerce-codeigniter-bootstrap project:ecommerce-codeigniter-bootstrap
- CVE-2023-2301 Contact Form Builder by vcita <= 4.10.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2023-23009 Denial of service in debian:debian linux
- CVE-2023-23007 SQL injection in ecisp:espcms
- CVE-2023-23006 Null dereference in linux:linux kernel
- CVE-2023-23005 Null dereference in linux:linux kernel
- CVE-2023-23004 Null dereference in linux:linux kernel
- CVE-2023-23003 Other in linux:linux kernel
- CVE-2023-23002 Null dereference in linux:linux kernel
- CVE-2023-23001 Null dereference in linux:linux kernel
- CVE-2023-23000 Null dereference in linux:linux kernel
- CVE-2023-2300 Contact Form Builder by vcita <= 4.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-22999 Null dereference in linux:linux kernel
- CVE-2023-22998 Null dereference in linux:linux kernel
- CVE-2023-22997 Null dereference in linux:linux kernel
- CVE-2023-22996 Other in linux:linux kernel
- CVE-2023-22995 Other in linux:linux kernel
- CVE-2023-2299 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.4.2 - Missing Authorization on REST-API
- CVE-2023-22985 Cross-site scripting in simple guestbook management system project:simple guestbook management system
- CVE-2023-22984 Cross-site scripting in axis:207w firmware
- CVE-2023-2298 Online Booking & Scheduling Calendar for WordPress by vcita <= 4.3.0 - Unauthenticated Stored Cross-Site Scripting
- CVE-2023-22975 Cross-site scripting in jflyfox:jfinal cms
- CVE-2023-22974 Path traversal in open-emr:openemr
- CVE-2023-22973 Path traversal in open-emr:openemr
- CVE-2023-22972 Cross-site scripting in open-emr:openemr
- CVE-2023-22971 Cross-site scripting in hughes:hn7000s firmware
- CVE-2023-22970 Deserialization in fedoraproject:fedora
- CVE-2023-2297 Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Insecure Password Reset Mechanism
- CVE-2023-22964 Auth bypass in zohocorp:manageengine servicedesk plus msp
- CVE-2023-22963 personnummer/dart vulnerable to Improper Input Validation
- CVE-2023-22960 Denial of service in lexmark:b2236 firmware
- CVE-2023-2296 Loginizer 1.7.8 - Reflected XSS
- CVE-2023-22959 SQL injection in webchess project:webchess
- CVE-2023-22958 Auth bypass in syracom:secure login
- CVE-2023-22957 Hardcoded credentials in audiocodes:405hd firmware
- CVE-2023-22956 Hardcoded credentials in audiocodes:405hd firmware
- CVE-2023-22955 Security feature bypass in audiocodes:405hd firmware
- CVE-2023-22953 Code injection in expressionengine:expressionengine
- CVE-2023-22952 Multiple SugarCRM Products Remote Code Execution
- CVE-2023-22951 Hardcoded credentials in tigergraph:cloud
- CVE-2023-22950 Information disclosure in tigergraph:tigergraph
- CVE-2023-2295 Denial of service in libreswan
- CVE-2023-22949 Information disclosure in tigergraph:cloud
- CVE-2023-22948 Information disclosure in tigergraph:tigergraph
- CVE-2023-22947 Privilege escalation in shibboleth:service provider
- CVE-2023-22946 Apache Spark proxy-user privilege escalation from malicious configuration class
- CVE-2023-22945 Missing authorization in fedoraproject:fedora
- CVE-2023-22943 Weak cryptography in Splunk Add-on Builder