Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 385 of 430.
- CVE-2023-22942 Cross-Site Request Forgery in the ‘ssg/kvstore_client’ REST Endpoint in Splunk Enterprise
- CVE-2023-22941 Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon
- CVE-2023-22940 SPL Command Safeguards Bypass via the ‘collect’ SPL Command Aliases in Splunk Enterprise
- CVE-2023-2294 UCMS Column Configuration saddpost.php cross site scripting
- CVE-2023-22939 SPL Command Safeguards Bypass via the ‘map’ SPL Command in Splunk Enterprise
- CVE-2023-22938 Permissions Validation Failure in the ‘sendemail’ REST API Endpoint in Splunk Enterprise
- CVE-2023-22937 Unnecessary File Extensions Allowed by Lookup Table Uploads in Splunk Enterprise
- CVE-2023-22936 Authenticated Blind Server Side Request Forgery via the ‘search_listener’ Search Parameter in Splunk Enterprise
- CVE-2023-22935 SPL Command Safeguards Bypass via the ‘display.page.search.patterns.sensitivity’ Search Parameter in Splunk Enterprise
- CVE-2023-22934 SPL Command Safeguards Bypass via the ‘pivot’ SPL Command in Splunk Enterprise
- CVE-2023-22933 Persistent Cross-Site Scripting through the ‘module’ Tag in a View in Splunk Enterprise
- CVE-2023-22932 Persistent Cross-Site Scripting through a Base64-encoded Image in a View in Splunk Enterprise
- CVE-2023-22931 ‘createrss’ External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise
- CVE-2023-2293 SourceCodester Purchase Order Management System cross site scripting
- CVE-2023-22924 Memory corruption in NBG-418N v2 firmware
- CVE-2023-22923 Memory corruption in NBG-418N v2 firmware
- CVE-2023-22922 Memory corruption in NBG-418N v2 firmware
- CVE-2023-22921 Cross-site scripting in NBG-418N v2 firmware
- CVE-2023-22920 Misconfiguration in LTE3316-M604
- CVE-2023-22919 Command injection in NBG6604 firmware
- CVE-2023-22918 Information disclosure in ATP series firmware
- CVE-2023-22917 Memory corruption in ATP series firmware
- CVE-2023-22916 Other in ATP series firmware
- CVE-2023-22915 Memory corruption in USG FLEX 50(W) firmware
- CVE-2023-22914 Path traversal in USG FLEX series firmware
- CVE-2023-22913 Command injection in USG FLEX series firmware
- CVE-2023-22912 Weak cryptography in mediawiki:mediawiki
- CVE-2023-22911 Cross-site scripting in fedoraproject:fedora
- CVE-2023-22910 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-2291 Hardcoded credentials in Zoho ManageEngine Multiple Products
- CVE-2023-22909 Denial of service in fedoraproject:fedora
- CVE-2023-22906 Auth bypass in heroelectronix:qubo hcd01 firmware
- CVE-2023-22903 Missing authorization in librephotos project:librephotos
- CVE-2023-22902 Openfind Mail2000 - XSS
- CVE-2023-22901 ChangingTec MOTP - Path Traversal
- CVE-2023-22900 Thinking Software Technology Co., Ltd. Efence - SQL Injection
- CVE-2023-2290 Memory corruption in ThinkPad
- CVE-2023-22899 Zip4j Origin Validation Error
- CVE-2023-22898 Denial of service in circl:pandora
- CVE-2023-22897 Information disclosure in securepoint:unified threat management
- CVE-2023-22895 bzip2 allows attackers to cause a denial of service via a large file that triggers an integer overflow
- CVE-2023-22894 Strapi Cleartext Storage of Sensitive Information
- CVE-2023-22893 Strapi does not verify the access or ID tokens issued during the OAuth flow
- CVE-2023-22892 Information disclosure in smartbear:zephyr enterprise
- CVE-2023-22891 Privilege escalation in smartbear:zephyr enterprise
- CVE-2023-22890 Denial of service in smartbear:zephyr enterprise
- CVE-2023-2289 wordpress vertical image slider plugin <= 1.2.16 - Reflected Cross-Site Scripting
- CVE-2023-22889 Code injection in smartbear:zephyr enterprise
- CVE-2023-22888 Apache Airflow: Scheduler remote DoS
- CVE-2023-22887 Apache Airflow path traversal by authenticated user
- CVE-2023-22886 Apache Airflow JDBC Provider: RCE Vulnerability
- CVE-2023-22884 Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read via MySQL provider in Apache Airflow
- CVE-2023-22883 Local Privilege Escalation in Zoom for Windows Installers
- CVE-2023-22882 Denial of Service in Zoom Clients
- CVE-2023-22881 Denial of Service in Zoom Clients
- CVE-2023-22880 Information Disclosure in Zoom for Windows Clients
- CVE-2023-2288 Otter - Gutenberg Blocks < 2.2.6 - Author+ PHAR Deserialization
- CVE-2023-22878 IBM InfoSphere Information Server information disclosure
- CVE-2023-22877 IBM InfoSphere Information Server CSV injection
- CVE-2023-22876 IBM Sterling B2B Integrator information disclosure
- CVE-2023-22875 IBM Security QRadar SIEM information disclosure
- CVE-2023-22874 IBM MQ denial of service
- CVE-2023-22870 IBM Aspera Faspex information disclosure
- CVE-2023-2287 Orbit Fox < 2.10.24 - Author+ Server-Side Request Forgery
- CVE-2023-22869 IBM Aspera Faspex information disclosure
- CVE-2023-22868 IBM Aspera Faspex cross-site scripting
- CVE-2023-22863 IBM Robotic Process Automation information disclosure
- CVE-2023-22862 IBM Aspera information disclosure
- CVE-2023-22860 IBM Cloud Pak for Business Automation cross-site scripting
- CVE-2023-2286 WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup
- CVE-2023-22858 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
- CVE-2023-22857 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
- CVE-2023-22856 Stored cross-site scripting in BlogEngine.NET version 3.3.8.0
- CVE-2023-22855 Code injection in kardex:kardex control center
- CVE-2023-22854 Path traversal in mitel:micontact center business
- CVE-2023-22853 Deserialization in tiki:tiki
- CVE-2023-22852 Cross-site request forgery in tiki:tiki
- CVE-2023-22851 Deserialization in tiki:tiki
- CVE-2023-22850 Deserialization in tiki:tiki
- CVE-2023-2285 WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db
- CVE-2023-22849 Apache Sling App CMS: XSS in CMS Reference / UI Components
- CVE-2023-22848 Missing authorization in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-22847 Information disclosure in pg ivm
- CVE-2023-22846 Datakit CrossCAD/Ware
- CVE-2023-22845 Memory corruption in OpenImageIO
- CVE-2023-22844 Auth bypass in MilesightVPN
- CVE-2023-22843 Stored Cross-Site Scripting (XSS) in Threat Intelligence rules in Guardian/CMC before 22.6.2
- CVE-2023-22842 BIG-IP SIP profile vulnerability
- CVE-2023-22841 Privilege escalation in System Firmware Update Utility (SysFwUpdt) for some Intel(R) Server Boards and Intel(R) Server Systems Based on Intel(R) 621A Chipset
- CVE-2023-22840 Denial of service in Intel(R) oneVPL GPU software
- CVE-2023-2284 WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db
- CVE-2023-22839 BIG-IP DNS profile vulnerability
- CVE-2023-22838 Cross-site scripting in EC-CUBE 4 series
- CVE-2023-22836 Missing authorization in com.palantir.skywise:guardian
- CVE-2023-22835 Denial of Service in Foundry Issues
- CVE-2023-22834 The contour service was not checking that users had permission to create an analysis for a given dataset
- CVE-2023-22833 Mandatory control bypass in Lime2
- CVE-2023-22832 Apache NiFi: Improper Restriction of XML External Entity References in ExtractCCDAAttributes
- CVE-2023-2283 Auth bypass in libssh
- CVE-2023-2282 Auth bypass in Remote Desktop Manager