Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 413 of 430.
- CVE-2023-1826 SourceCodester Online Computer and Laptop Store index.php unrestricted upload
- CVE-2023-1825 Insertion of Sensitive Information Into Sent Data in GitLab
- CVE-2023-1823 Security feature bypass in Chrome
- CVE-2023-1822 Security feature bypass in Chrome
- CVE-2023-1821 Security feature bypass in Chrome
- CVE-2023-1820 Memory corruption in Chrome
- CVE-2023-1819 Memory corruption in Chrome
- CVE-2023-1818 Use after free in Chrome
- CVE-2023-1817 Security feature bypass in Chrome
- CVE-2023-1816 Other in Chrome
- CVE-2023-1815 Use after free in Chrome
- CVE-2023-1814 Security feature bypass in Chrome
- CVE-2023-1813 Security feature bypass in Chrome
- CVE-2023-1812 Memory corruption in Chrome
- CVE-2023-1811 Use after free in Chrome
- CVE-2023-1810 Memory corruption in Chrome
- CVE-2023-1809 Download Manager Pro < 6.3.0 - Unauthenticated Sensitive Information Disclosure
- CVE-2023-1807 Elementor Addons, Widgets and Enhancements – Stax <= 1.4.3 - Cross-Site Request Forgery via toggle_widget
- CVE-2023-1806 WP Inventory Manager < 2.1.0.12 - Reflected XSS
- CVE-2023-1805 Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS
- CVE-2023-1804 Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS
- CVE-2023-1803 Authentication Bypass in Redline Router
- CVE-2023-1802 Information disclosure in Docker Desktop
- CVE-2023-1801 Memory corruption in tcpdump
- CVE-2023-1800 sjqzhang go-fastdfs File Upload uploa upload path traversal
- CVE-2023-1799 EyouCMS login.php cross site scripting
- CVE-2023-1798 EyouCMS login.php cross site scripting
- CVE-2023-1797 OTCMS unrestricted upload
- CVE-2023-1796 SourceCodester Employee Payslip Generator Create News cross site scripting
- CVE-2023-1795 SourceCodester Gadget Works Online Ordering System GET Parameter index.php cross site scripting
- CVE-2023-1794 SourceCodester Police Crime Record Management System GET Parameter casedetails.php cross site scripting
- CVE-2023-1793 SourceCodester Police Crime Record Management System GET Parameter assigncase.php sql injection
- CVE-2023-1792 SourceCodester Simple Mobile Comparison Website GET Parameter manage_field.php sql injection
- CVE-2023-1791 SourceCodester Simple Task Allocation System manage_user.php sql injection
- CVE-2023-1790 SourceCodester Simple Task Allocation System index.php information disclosure
- CVE-2023-1789 Improper Input Validation in firefly-iii/firefly-iii
- CVE-2023-1788 Insufficient Session Expiration in firefly-iii/firefly-iii
- CVE-2023-1787 Denial of service in GitLab
- CVE-2023-1786 sensitive data exposure in cloud-init logs
- CVE-2023-1785 SourceCodester Earnings and Expense Tracker App manage_user.php sql injection
- CVE-2023-1784 jeecg-boot API Documentation improper authentication
- CVE-2023-1783 OrangeScrum 2.0.11 - AWS Credentials Leak via PDF Rendering
- CVE-2023-1782 Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation
- CVE-2023-1780 Companion Sitemap Generator < 4.5.3 - Reflected XSS
- CVE-2023-1779 Helmholz and MB Connect Line: Account takeover via password reset in multiple products
- CVE-2023-1778 Default Credential Vulnerability in GajShield Data Security Firewall
- CVE-2023-1777 Information disclosure in linked message previews
- CVE-2023-1776 Stored XSS via SVG attachment on Boards
- CVE-2023-1775 Unsanitized events sent over Websocket to regular users in a High Availability environment
- CVE-2023-1774 Unauthorized email invite to a private channel
- CVE-2023-1773 Rockoa Configuration File webmainConfig.php code injection
- CVE-2023-1772 DataGear Diagram Type cross site scripting
- CVE-2023-1771 SourceCodester Grade Point Average GPA Calculator Master.php get_scale cross site scripting
- CVE-2023-1770 SourceCodester Grade Point Average GPA Calculator Master.php get_scale sql injection
- CVE-2023-1769 SourceCodester Grade Point Average GPA Calculator index.php information disclosure
- CVE-2023-1768 Symmetric agent data encryption fails silently
- CVE-2023-1767 Cross-site scripting in Snyk Advisor
- CVE-2023-1766 XSS in Panon
- CVE-2023-1765 SQLi in Panon
- CVE-2023-1764 Information disclosure in Canon IJ NW Tool
- CVE-2023-1763 Information disclosure in Canon IJ NW Tool
- CVE-2023-1762 Improper Privilege Management in thorsten/phpmyfaq
- CVE-2023-1761 Cross-site Scripting in thorsten/phpmyfaq
- CVE-2023-1760 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1759 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1758 Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in thorsten/phpmyfaq
- CVE-2023-1757 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1756 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1755 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
- CVE-2023-1754 Improper Neutralization of Input During Web Page Generation in thorsten/phpmyfaq
- CVE-2023-1753 Weak Password Requirements in thorsten/phpmyfaq
- CVE-2023-1752 CVE-2023-1752
- CVE-2023-1751 CVE-2023-1751
- CVE-2023-1750 CVE-2023-1750
- CVE-2023-1749 CVE-2023-1749
- CVE-2023-1748 CVE-2023-1748
- CVE-2023-1747 IBOS mark&op=delFromSend sql injection
- CVE-2023-1746 Dreamer CMS File Upload cross site scripting
- CVE-2023-1745 KMPlayer SHFOLDER.dll uncontrolled search path
- CVE-2023-1744 IBOS htaccess unrestricted upload
- CVE-2023-1743 SourceCodester Grade Point Average GPA Calculator index.php cross site scripting
- CVE-2023-1742 IBOS Report Search getlist sql injection
- CVE-2023-1741 jeecg-boot Sleep Command SysDictMapper.java sql injection
- CVE-2023-1740 SourceCodester Air Cargo Management System GET Parameter manage_user.php sql injection
- CVE-2023-1739 SourceCodester Simple and Beautiful Shopping Cart System upload.php unrestricted upload
- CVE-2023-1738 SourceCodester Young Entrepreneur E-Negosyo System sql injection
- CVE-2023-1737 SourceCodester Young Entrepreneur E-Negosyo System login.php sql injection
- CVE-2023-1736 SourceCodester Young Entrepreneur E-Negosyo System sql injection
- CVE-2023-1735 SourceCodester Young Entrepreneur E-Negosyo System passwordrecover.php sql injection
- CVE-2023-1734 SourceCodester Young Entrepreneur E-Negosyo System unrestricted upload
- CVE-2023-1733 Denial of service in GitLab
- CVE-2023-1732 Improper random reading in CIRCL
- CVE-2023-1731 Improper Input Validation in Meinberg LTOS
- CVE-2023-1730 SupportCandy < 3.1.5 - Unauthenticated SQLi
- CVE-2023-1729 Memory corruption in LibRaw
- CVE-2023-1728 Unrestricted Upload of File with Dangerous Type in Fernus LMS
- CVE-2023-1726 XSS in Proliz OBS
- CVE-2023-1725 SSRF in Infoline Project Management System
- CVE-2023-1724 Faveo Helpdesk Enterprise 6.0.1 - Privilege Escalation via Stored XSS
- CVE-2023-1723 SQLi in Veragroup Mobile Assistant