Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 388 of 430.
- CVE-2023-22624 XML external entity in zohocorp:manageengine exchange reporter plus
- CVE-2023-22622 Misconfiguration in wordpress:wordpress
- CVE-2023-22621 Strapi plugins vulnerable to Server-Side Template Injection and Remote Code Execution in the Users-Permissions Plugin
- CVE-2023-22620 Information disclosure in securepoint:unified threat management
- CVE-2023-2262 Rockwell Automation Select Logix Communication Modules Vulnerable to Email Object Buffer Overflow
- CVE-2023-22618 Privilege escalation in nokia:wavelite metro 200 and f2b fans firmware
- CVE-2023-22617 Denial of service in powerdns:recursor
- CVE-2023-22616 Memory corruption in insyde:insydeh2o
- CVE-2023-22615 Memory corruption in insyde:insydeh2o
- CVE-2023-22614 Memory corruption in insyde:insydeh2o
- CVE-2023-22613 Memory corruption in insyde:insydeh2o
- CVE-2023-22612 Memory corruption in insyde:insydeh2o
- CVE-2023-22611 Information disclosure in EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA)
- CVE-2023-22610 Missing authorization in EcoStruxure Geo SCADA Expert 2019 - 2021 (formerly known as ClearSCADA)
- CVE-2023-2261 WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration
- CVE-2023-22602 Apache Shiro Interpretation Conflict vulnerability
- CVE-2023-22601 Weak cryptography in InRouter 302
- CVE-2023-22600 Missing authorization in InRouter 302
- CVE-2023-2260 Authorization Bypass Through User-Controlled Key in alfio-event/alf.io
- CVE-2023-22599 Weak cryptography in InRouter 302
- CVE-2023-22598 Command injection in InRouter 302
- CVE-2023-22597 Information disclosure in InRouter 302
- CVE-2023-22595 IBM B2B Advanced Communication cross-site scripting
- CVE-2023-22594 IBM Robotic Process Automation for Cloud Pak cross-site scripting
- CVE-2023-22593 IBM Robotic Process Automation for Cloud Pak security configuration
- CVE-2023-22592 IBM Robotic Process Automation for Cloud Pak insufficient permission settings
- CVE-2023-22591 IBM Robotic Process Automation session fixation
- CVE-2023-2259 Improper Neutralization of Special Elements Used in a Template Engine in alfio-event/alf.io
- CVE-2023-22586 Local File Inclusion in Danfoss AK-EM100
- CVE-2023-22585 Reflected Cross-Site Scripting in Danfoss AK-EM100
- CVE-2023-22584 Cleartext credentials in Danfoss AK-EM100
- CVE-2023-22583 SQL Injection in Danfoss AK-EM100
- CVE-2023-22582 Reflected Cross-Site Scripting in Danfoss AK-EM100
- CVE-2023-22581 White Rabbit Switch - Unauthenticated remote code execution
- CVE-2023-22580 Sequalize - Bad query filtering leading to SQL errors
- CVE-2023-2258 Improper Neutralization of Formula Elements in a CSV File in alfio-event/alf.io
- CVE-2023-22579 Sequalize - Unsafe fall-through in getWhereConditions
- CVE-2023-22578 Sequalize - Default support for “raw attributes” when using parentheses
- CVE-2023-22577 White Rabbit Switch - Password Disclosure Vulnerability
- CVE-2023-22576 Privilege escalation in Dell Repository Manager (DRM)
- CVE-2023-22575 Information disclosure in PowerScale OneFS
- CVE-2023-22574 Information disclosure in PowerScale OneFS
- CVE-2023-22573 Information disclosure in PowerScale OneFS
- CVE-2023-22572 Information disclosure in PowerScale OneFS
- CVE-2023-2257 Auth bypass in Workspace Desktop
- CVE-2023-2256 Product Addons & Fields for WooCommerce < 32.0.7 - Reflected Cross-Site Scripting
- CVE-2023-22551 Denial of service in ftp project:ftp
- CVE-2023-2255 Remote documents loaded without prompt via IFrame
- CVE-2023-2254 Ko-fi Button < 1.3.3 - Admin+ Stored XSS
- CVE-2023-2253 distribution catalog API endpoint can lead to OOM via malicious user input
- CVE-2023-22527 Atlassian Confluence Data Center and Server Template Injection
- CVE-2023-22526 Code injection in Confluence Data Center
- CVE-2023-22524 Security feature bypass in Companion for Mac
- CVE-2023-22523 Other in Assets Discovery Cloud
- CVE-2023-22522 Code injection in Confluence Data Center
- CVE-2023-22521 Code injection in Crowd Data Center
- CVE-2023-2252 Directorist < 7.5.4 - Admin+ LFI
- CVE-2023-22518 Atlassian Confluence Data Center and Server Improper Authorization
- CVE-2023-22516 Code injection in Bamboo Data Center
- CVE-2023-22515 Atlassian Confluence Data Center and Server Broken Access Control
- CVE-2023-22514 Code injection in Sourcetree for Mac
- CVE-2023-22513 Code injection in Bitbucket Data Center
- CVE-2023-22512 Denial of service in Confluence Data Center
- CVE-2023-2251 Uncaught Exception in eemeli/yaml
- CVE-2023-22508 Code injection in Confluence Data Center
- CVE-2023-22506 Code injection in Bamboo Data Center
- CVE-2023-22505 Code injection in Confluence Data Center
- CVE-2023-22504 Missing authorization in Confluence Data Center
- CVE-2023-22503 Information disclosure in Confluence Data Center
- CVE-2023-22501 Auth bypass in Jira Service Management Data Center
- CVE-2023-22500 glpi Unauthorized access to inventory files
- CVE-2023-2250 Privilege escalation in MCE
- CVE-2023-22499 Interactive permission prompt spoofing in Deno
- CVE-2023-22497 Netdata is vulnerable to improper authentication
- CVE-2023-22496 Netdata vulnerable to command injection
- CVE-2023-22495 Izanami is vulnerable to Authorization Bypass
- CVE-2023-22493 RSSHub is vulnerable to SSRF (Server-Side Request Forgery)
- CVE-2023-22492 RefreshToken invalidation vulnerability
- CVE-2023-22491 gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection
- CVE-2023-22490 Git vulnerable to local clone-based data exfiltration with non-local transports
- CVE-2023-2249 Path traversal in wpForo Forum
- CVE-2023-22489 Flarum is missing authorization in discussion replies
- CVE-2023-22488 Missing authorization in Flarum
- CVE-2023-22487 Post mentions can be used to read any post on the forum without access control
- CVE-2023-22486 cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service
- CVE-2023-22485 cmark-gfm out-of-bounds read in validate_protocol
- CVE-2023-22484 Inefficient Quadratic complexity bug in handle_pointy_brace may lead to a denial of service
- CVE-2023-22483 cmark-gfm Quadratic complexity bugs may lead to a denial of service
- CVE-2023-22482 JWT audience claim is not verified
- CVE-2023-22481 Sensitive information exposure in the logs of greader API in FreshRSS
- CVE-2023-22480 KubeOperator is vulnerable to unauthorized access to system API
- CVE-2023-22479 KubePi vulnerable to session fixation attack
- CVE-2023-22478 KubePi is vulnerable to missing authorization
- CVE-2023-22477 Mercurius is vulnerable to denial of service (DoS) when using subscriptions
- CVE-2023-22476 MantisBT: Exposure of Private issues' summary to unauthorized users
- CVE-2023-22475 Cross-Site Scripting in Canarytoken history
- CVE-2023-22474 Parse Server is vulnerable to authentication bypass via spoofing
- CVE-2023-22473 Passcode bypass on Talk-Android app
- CVE-2023-22472 Nextcloud Deck Desktop Client is vulnerable to Cross-Site Request Forgery (CSRF) via malicious link
- CVE-2023-22471 Nextcloud Deck vulnerable to authorization bypass