Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 404 of 430.
- CVE-2023-20943 Path traversal in Android
- CVE-2023-20942 Business logic in Android
- CVE-2023-20941 Memory corruption in Android
- CVE-2023-20940 Weak cryptography in Android
- CVE-2023-2094 SourceCodester Vehicle Service Management System manage_mechanic.php sql injection
- CVE-2023-20939 Race condition in Android
- CVE-2023-20938 Use after free in Android
- CVE-2023-20937 Use after free in Android
- CVE-2023-20936 Memory corruption in Android
- CVE-2023-20935 Memory corruption in Android
- CVE-2023-20934 Security feature bypass in Android
- CVE-2023-20933 Use after free in Android
- CVE-2023-20932 Information disclosure in Android
- CVE-2023-20931 Memory corruption in Android
- CVE-2023-20930 Denial of service in Android
- CVE-2023-2093 SourceCodester Vehicle Service Management System Login.php sql injection
- CVE-2023-20929 Information disclosure in Android
- CVE-2023-20928 Use after free in Android
- CVE-2023-20927 Privilege escalation in Android
- CVE-2023-20926 Missing authorization in Android
- CVE-2023-20925 Use after free in Android
- CVE-2023-20924 Auth bypass in Android
- CVE-2023-20923 Information disclosure in Android
- CVE-2023-20922 Denial of service in Android
- CVE-2023-20921 Business logic in Android
- CVE-2023-20920 Use after free in Android
- CVE-2023-2092 SourceCodester Vehicle Service Management System view_service.php sql injection
- CVE-2023-20919 Business logic in Android
- CVE-2023-20918 Privilege escalation in Android
- CVE-2023-20917 Business logic in Android
- CVE-2023-20916 Missing authorization in Android
- CVE-2023-20915 Business logic in Android
- CVE-2023-20914 Security feature bypass in Android
- CVE-2023-20913 Other in Android
- CVE-2023-20912 Missing authorization in Android
- CVE-2023-20911 Denial of service in Android
- CVE-2023-20910 Denial of service in Android
- CVE-2023-2091 KylinSoft youker-assistant adjust_cpufreq_scaling_governer os command injection
- CVE-2023-20909 Missing authorization in Android
- CVE-2023-20908 Denial of service in Android
- CVE-2023-20906 Privilege escalation in Android
- CVE-2023-20905 Memory corruption in Android
- CVE-2023-20904 Privilege escalation in Android
- CVE-2023-20903 Auth bypass in Cloud Foundry
- CVE-2023-20902 Timing attack risk in Harbor
- CVE-2023-20900 Privilege escalation in VMware Tools
- CVE-2023-2090 SourceCodester Employee and Visitor Gate Pass Logging System GET Parameter view_designation.php sql injection
- CVE-2023-20899 Missing authorization in VMware SD-WAN (Edge)
- CVE-2023-20898 Salt can cause Git Providers to get wrong data
- CVE-2023-20897 Salt vulnerable to denial of service
- CVE-2023-20896 Memory corruption in VMware Cloud Foundation (vCenter Server)
- CVE-2023-20895 Memory corruption in VMware Cloud Foundation (vCenter Server)
- CVE-2023-20894 Memory corruption in VMware Cloud Foundation (vCenter Server)
- CVE-2023-20893 Use after free in VMware Cloud Foundation (vCenter Server)
- CVE-2023-20892 VMware vCenter Server heap-overflow vulnerability
- CVE-2023-20891 VMware Tanzu Application Service for VMs and Isolation Segment information disclosure vulnerability
- CVE-2023-20890 Path traversal in Aria Operations for Networks
- CVE-2023-2089 SourceCodester Complaint Management System GET Parameter userprofile.php sql injection
- CVE-2023-20889 Command injection in Aria Operations for Networks (Formerly vRealize Network Insight)
- CVE-2023-20888 Deserialization in Aria Operations for Networks (Formerly vRealize Network Insight)
- CVE-2023-20887 Vmware Aria Operations for Networks Command Injection
- CVE-2023-20886 Open redirect in VMware Workspace ONE UEM Console
- CVE-2023-20885 CF workflows leak credentials in system audit logs
- CVE-2023-20884 Open redirect in VMware Workspace ONE Access (Access), VMware Identity Manager (vIDM), VMware Cloud Foundation (Cloud Foundation)
- CVE-2023-20883 Spring Boot Welcome Page Denial of Service
- CVE-2023-20882 Denial of service in Cloud Foundry Routing release
- CVE-2023-20881 Missing authorization in Cloud Controller API
- CVE-2023-20880 Privilege escalation in VMware Aria Operations (formerly vRealize Operations)
- CVE-2023-2088 Other in OpenStack
- CVE-2023-20879 Privilege escalation in VMware Aria Operations (formerly vRealize Operations)
- CVE-2023-20878 Deserialization in VMware Aria Operations (formerly vRealize Operations)
- CVE-2023-20877 Privilege escalation in VMware Aria Operations (formerly vRealize Operations)
- CVE-2023-20873 Spring Boot Security Bypass with Wildcard Pattern Matching on Cloud Foundry
- CVE-2023-20872 Memory corruption in VMware Workstation Pro / Player (Workstation) and VMware Fusion
- CVE-2023-20871 Privilege escalation in VMware Fusion
- CVE-2023-20870 Memory corruption in VMware Workstation Pro / Player (Workstation) and VMware Fusion
- CVE-2023-2087 Essential Blocks <= 4.0.6 - Cross-Site Request Forgery via save
- CVE-2023-20869 Memory corruption in VMware Workstation Pro / Player (Workstation) and VMware Fusion
- CVE-2023-20868 Cross-site scripting in NSX-T
- CVE-2023-20867 VMware Tools Authentication Bypass
- CVE-2023-20866 Spring Session session ID can be logged to the standard output stream
- CVE-2023-20865 Command injection in VMware Aria Operations for Logs (formerly vRealize Log Insight)
- CVE-2023-20864 Deserialization in VMware Aria Operations for Logs (formerly vRealize Log Insight)
- CVE-2023-20863 Spring Framework vulnerable to denial of service
- CVE-2023-20862 Spring Security logout not clearing security context
- CVE-2023-20861 Spring Framework vulnerable to denial of service via specially crafted SpEL expression
- CVE-2023-20860 Spring Framework is vulnerable to security bypass via mvcRequestMatcher pattern mismatch
- CVE-2023-2086 Essential Blocks <= 4.0.6 - Missing Authorization via template_count
- CVE-2023-20859 Spring Vault vulnerable to insertion of sensitive information into a log file
- CVE-2023-20858 Code injection in VMware Carbon Black App Control
- CVE-2023-20857 Auth bypass in VMware Workspace ONE Content
- CVE-2023-20856 Cross-site request forgery in VMware vRealize Operations (vROps)
- CVE-2023-20855 XML external entity in VMware vRealize Orchestrator, VMware vRealize Automation, VMware Cloud Foundation
- CVE-2023-20854 Privilege escalation in VMware Workstation
- CVE-2023-20853 aEnrich a+HRD - Deserialization of Untrusted Data
- CVE-2023-20852 aEnrich a+HRD - Deserialization of Untrusted Data
- CVE-2023-20851 Race condition in MT8188
- CVE-2023-20850 Memory corruption in MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781
- CVE-2023-2085 Essential Blocks <= 4.0.6 - Missing Authorization via templates
- CVE-2023-20849 Use after free in MT2713, MT6895, MT6897, MT6983, MT8188, MT8195, MT8395, MT8781