Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 386 of 430.
- CVE-2023-22819 Uncontrolled resource consumption vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- CVE-2023-22818 Multiple DLL Search Order hijacking Vulnerabilities in SanDisk Security Installer for Windows
- CVE-2023-22817 Server-side Request Forgery vulnerability in Western Digital My Cloud, My Cloud Home and SanDisk ibi products
- CVE-2023-22816 Limited Post-Authentication Remote Command Injection in My Cloud Products
- CVE-2023-22815 Post-authentication remote command injection vulnerability on Western Digital My Cloud OS 5 devices
- CVE-2023-22814 Authentication Bypass issue in My Cloud OS 5 devices
- CVE-2023-22813 Device API endpoint missing access controls on Western Digital Mobile and Web Apps
- CVE-2023-22812 SanDisk PrivateAccess Deprecated TLS protocol versions supported
- CVE-2023-2281 Archiving a team broadcasts unsanitized data over WebSockets
- CVE-2023-22809 Privilege escalation in apple:macos
- CVE-2023-22808 Information disclosure in arm:avalon android gralloc module
- CVE-2023-22807 CVE-2023-22807
- CVE-2023-22806 CVE-2023-22806
- CVE-2023-22805 CVE-2023-22805
- CVE-2023-22804 CVE-2023-22804
- CVE-2023-22803 CVE-2023-22803
- CVE-2023-2280 Missing authorization in WP Directory Kit
- CVE-2023-22799 ReDoS based DoS vulnerability in GlobalID
- CVE-2023-22798 Open redirect in https://github.com/brave/adblock-lists
- CVE-2023-22797 Open Redirect Vulnerability in Action Pack
- CVE-2023-22796 ReDoS based DoS vulnerability in Active Support's underscore
- CVE-2023-22795 ReDoS based DoS vulnerability in Action Dispatch
- CVE-2023-22794 SQL Injection Vulnerability via ActiveRecord comments
- CVE-2023-22793 Deserialization in Management Pack for Microsoft System Center
- CVE-2023-22792 ReDoS based DoS vulnerability in Action Dispatch
- CVE-2023-22791 Aruba InstantOS and ArubaOS 10 Sensitive Information Disclosure
- CVE-2023-22790 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface
- CVE-2023-2279 Cross-site request forgery in WP Directory Kit
- CVE-2023-22789 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface
- CVE-2023-22788 Authenticated Remote Command Execution in Aruba InstantOS or ArubaOS 10 Command Line Interface
- CVE-2023-22787 Unauthenticated Denial of Service (DoS) in Aruba InstantOS or ArubaOS 10 Service Accessed via the PAPI Protocol
- CVE-2023-22786 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-22785 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-22784 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-22783 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-22782 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-22781 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-22780 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-2278 WP Directory Kit <= 1.1.9 - Unauthenticated Local File Inclusion via wdk_public_action
- CVE-2023-22779 Unauthenticated Buffer Overflow Vulnerabilities in Services Accessed by the PAPI Protocol
- CVE-2023-22778 Authenticated Stored Cross-Site Scripting
- CVE-2023-22777 Authenticated Information Disclosure in ArubaOS Web-based Management Interface
- CVE-2023-22776 Authenticated Remote Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Read
- CVE-2023-22775 Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
- CVE-2023-22774 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.
- CVE-2023-22773 Authenticated Path Traversal in ArubaOS Command Line Interface Allows for Arbitrary File Deletion.
- CVE-2023-22772 Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion
- CVE-2023-22771 Insufficient Session Expiration in ArubaOS Command Line Interface
- CVE-2023-22770 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-2277 WP Directory Kit <= 1.1.9 - Cross-Site Request Forgery to Stored Cross-Site Scripting via wdk_resultitem
- CVE-2023-22769 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22768 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22767 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22766 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22765 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22764 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22763 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22762 Authenticated Remote Command Execution in the ArubaOS Command Line Interface
- CVE-2023-22761 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface
- CVE-2023-22760 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface
- CVE-2023-2276 Missing authorization in WCFM Membership – WooCommerce Memberships for Multivendor Marketplace
- CVE-2023-22759 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface
- CVE-2023-22758 Authenticated Remote Command Execution in ArubaOS Web-based Management Interface
- CVE-2023-22757 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
- CVE-2023-22756 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
- CVE-2023-22755 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
- CVE-2023-22754 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
- CVE-2023-22753 Unauthenticated Buffer Overflow Vulnerabilities in ArubaOS Processes
- CVE-2023-22752 Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol
- CVE-2023-22751 Unauthenticated Stack-Based Buffer Overflow Vulnerabilities in the PAPI Protocol
- CVE-2023-22750 Multiple Unauthenticated Command Injections in the PAPI Protocol
- CVE-2023-2275 Missing authorization in WCFM – Multivendor Marketplace REST API for WooCommerce
- CVE-2023-22749 Multiple Unauthenticated Command Injections in the PAPI Protocol
- CVE-2023-22748 Multiple Unauthenticated Command Injections in the PAPI Protocol
- CVE-2023-22747 Multiple Unauthenticated Command Injections in the PAPI Protocol
- CVE-2023-22746 CKAN is vulnerable to session secret shared across instances using Docker images
- CVE-2023-22745 Buffer Overlow in TSS2_RC_Decode in tpm2-tss
- CVE-2023-22743 Git for Windows' installer is susceptible to DLL side loading attacks
- CVE-2023-22742 libgit2 fails to verify SSH keys by default
- CVE-2023-22741 heap-over-flow in stun_parse_attribute in sofia-sip
- CVE-2023-22740 Discourse vulnerable to Allocation of Resources Without Limits via Chat drafts
- CVE-2023-22739 Discourse subject to Allocation of Resources Without Limits or Throttling
- CVE-2023-22738 Improper Preservation of Permissions in vantage6
- CVE-2023-22737 wire-server vulnerable to unauthorized removal of Bots from Conversations
- CVE-2023-22736 argo-cd Controller reconciles apps outside configured namespaces when sharding is enabled
- CVE-2023-22735 Cross-site scripting in zulip
- CVE-2023-22734 Improper Input Newsletter subscription option validation in shopware
- CVE-2023-22733 Improper Output Neutralization in Log Module in shopware
- CVE-2023-22732 Insufficient Session Expiration in Administration in shopware
- CVE-2023-22731 Improper Control of Generation of Code in Twig rendered views in shopware
- CVE-2023-22730 Improper Input Validation of Clearance sale in cart
- CVE-2023-2273 Rapid7 Insight Agent Directory Traversal
- CVE-2023-22729 Silverstripe Framework has open redirect vulnerability on CMSSecurity relogin screen
- CVE-2023-22728 Silverstripe Framework has missing permission check of canView in GridFieldPrintButton
- CVE-2023-22727 Database Query::offset() and limit() vulnerable to SQL injection in cakephp
- CVE-2023-22726 Unrestricted file upload leading to privilege escalation in act
- CVE-2023-22725 glpi vulnerable to XSS on external links
- CVE-2023-22724 glpi contains XSS in RSS Description Link
- CVE-2023-22722 glpi subject to Cross-site Scripting (XSS) - Reflected
- CVE-2023-22721 WordPress Oi Yandex.Maps for WordPress Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)