Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 414 of 430.
- CVE-2023-1722 Yoga Class Registration System 1.0 - ATO
- CVE-2023-1721 Yoga Class Registration System 1.0 - RCE
- CVE-2023-1720 Bitrix24 Stored Cross-Site Scripting (XSS) via File Upload
- CVE-2023-1719 Bitrix24 Insecure Global Variable Extraction
- CVE-2023-1718 Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access
- CVE-2023-1717 Bitrix24 Cross-Site Scripting (XSS) via Client-side Prototype Pollution
- CVE-2023-1716 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (2 of 2)
- CVE-2023-1715 Bitrix24 Stored Cross-Site Scripting (XSS) via Improper Input Neutralization on Invoice Edit Page (1 of 2)
- CVE-2023-1714 Bitrix24 Remote Command Execution (RCE) via Unsafe Variable Extraction
- CVE-2023-1713 Bitrix24 Remote Command Execution (RCE) via Insecure Temporary File Creation
- CVE-2023-1712 Use of Hard-coded, Security-relevant Constants in deepset-ai/haystack
- CVE-2023-1711 Information disclosure in FOXMAN-UN
- CVE-2023-1710 Information disclosure in GitLab
- CVE-2023-1709 Datalogics Library APDFL Stack-based Buffer Overflow
- CVE-2023-1708 Command injection in GitLab
- CVE-2023-1707 Information disclosure in HP Enterprise LaserJet and HP LaserJet Managed Printers
- CVE-2023-1705 Missing authorization in F|One SmartEdge Agent
- CVE-2023-1704 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1703 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-1702 Cross-site Scripting (XSS) - Generic in pimcore/pimcore
- CVE-2023-1701 Cross-site Scripting (XSS) - Reflected in pimcore/pimcore
- CVE-2023-1699 Rapid7 Nexpose Forced Browsing
- CVE-2023-1698 WAGO: WBM Command Injection in multiple products
- CVE-2023-1697 Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received
- CVE-2023-1696 Other in EMUI
- CVE-2023-1695 Other in EMUI
- CVE-2023-1694 Privilege escalation in EMUI
- CVE-2023-1693 Privilege escalation in EMUI
- CVE-2023-1692 Missing authorization in EMUI
- CVE-2023-1691 Other in EMUI
- CVE-2023-1690 SourceCodester Earnings and Expense Tracker App cross site scripting
- CVE-2023-1689 SourceCodester Earnings and Expense Tracker App cross site scripting
- CVE-2023-1688 SourceCodester Earnings and Expense Tracker App cross site scripting
- CVE-2023-1687 SourceCodester Simple Task Allocation System cross site scripting
- CVE-2023-1686 SourceCodester Young Entrepreneur E-Negosyo System GET Parameter index.php cross site scripting
- CVE-2023-1685 HadSky Installation Interface index.php command injection
- CVE-2023-1684 HadSky unrestricted upload
- CVE-2023-1683 Xunrui CMS system_log.html information disclosure
- CVE-2023-1682 Xunrui CMS Install.txt direct request
- CVE-2023-1681 Xunrui CMS test.php information disclosure
- CVE-2023-1680 Xunrui CMS main.html information disclosure
- CVE-2023-1679 DriverGenius IOCTL mydrivers64.sys 0x9C40A108 memory corruption
- CVE-2023-1678 DriverGenius IOCTL mydrivers64.sys 0x9C40A0E0 memory corruption
- CVE-2023-1677 DriverGenius IOCTL mydrivers64.sys 0x9c402084 denial of service
- CVE-2023-1676 DriverGenius IOCTL mydrivers64.sys 0x9C402088 memory corruption
- CVE-2023-1675 SourceCodester School Registration and Fee System GET Parameter edit_stud.php sql injection
- CVE-2023-1674 SourceCodester School Registration and Fee System POST Parameter login.php sql injection
- CVE-2023-1672 Race condition exists in the key generation and rotation functionality
- CVE-2023-1671 Sophos Web Appliance Command Injection
- CVE-2023-1670 Use after free in Kernel
- CVE-2023-1669 SEOPress < 6.5.0.3 - Admin+ PHP Object Injection
- CVE-2023-1668 Security feature bypass in openvswitch
- CVE-2023-1667 Null dereference in libssh
- CVE-2023-1666 SourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection
- CVE-2023-1665 Improper Restriction of Excessive Authentication Attempts in linagora/twake
- CVE-2023-1664 Keycloak Untrusted Certificate Validation vulnerability
- CVE-2023-1663 Authenticated Resources Accessible via Forced Browsing
- CVE-2023-1661 Cross-site scripting in Display post meta, term meta, comment meta, and user meta
- CVE-2023-1660 ChatBot < 4.4.9 - Unauthenticated Stored XSS
- CVE-2023-1656 Information disclosure in OpenIDM and Java Remote Connector Server (RCS)
- CVE-2023-1655 Heap-based Buffer Overflow in gpac/gpac
- CVE-2023-1654 Denial of Service in gpac/gpac
- CVE-2023-1652 Use after free in Linux Kernel
- CVE-2023-1651 ChatBot < 4.4.9 - Subscriber+ OpenAI Settings Update to Stored XSS
- CVE-2023-1650 ChatBot < 4.4.7 - Unauthenticated PHP Object Injection
- CVE-2023-1649 ChatBot < 4.5.1 - Admin+ Stored XSS
- CVE-2023-1647 Improper Access Control in calcom/cal.com
- CVE-2023-1646 IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E004 stack-based overflow
- CVE-2023-1645 IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E008 denial of service
- CVE-2023-1644 IObit Malware Fighter IOCTL IMFCameraProtect.sys 0x8018E010 denial of service
- CVE-2023-1643 IObit Malware Fighter IOCTL ImfHpRegFilter.sys 0x8001E040 denial of service
- CVE-2023-1642 IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222040 denial of service
- CVE-2023-1641 IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222018 denial of service
- CVE-2023-1640 IObit Malware Fighter IOCTL ObCallbackProcess.sys 0x222010 denial of service
- CVE-2023-1639 IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E04C denial of service
- CVE-2023-1638 IObit Malware Fighter IOCTL ImfRegistryFilter.sys 0x8001E040 denial of service
- CVE-2023-1637 Information disclosure in Kernel
- CVE-2023-1636 Incomplete container isolation
- CVE-2023-1635 OTCMS apiRun.php AutoRun cross site scripting
- CVE-2023-1634 OTCMS URL Parameter info_deal.php UseCurl server-side request forgery
- CVE-2023-1633 Insecure barbican configuration file leaking credential
- CVE-2023-1631 JiangMin Antivirus IOCTL kvcore.sys 0x222010 null pointer dereference
- CVE-2023-1630 JiangMin Antivirus IOCTL kvcore.sys 0x222000 denial of service
- CVE-2023-1629 JiangMin Antivirus IOCTL kvcore.sys 0x222010 memory corruption
- CVE-2023-1628 Jianming Antivirus IoControlCode kvcore.sys null pointer dereference
- CVE-2023-1627 Jianming Antivirus IoControlCode kvcore.sys denial of service
- CVE-2023-1626 Jianming Antivirus IoControlCode kvcore.sys memory corruption
- CVE-2023-1625 Information leak in api
- CVE-2023-1624 WPCode Lite < 2.0.9 - Arbitrary Log File Deletion via CSRF
- CVE-2023-1623 Custom Post Type UI < 1.13.5 - Debug Info Sending via CSRF
- CVE-2023-1621 Security feature bypass in GitLab
- CVE-2023-1620 WAGO: DoS in multiple products in multiple versions using Codesys
- CVE-2023-1619 WAGO: DoS in multiple versions of multiple products
- CVE-2023-1618 Authentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface Module
- CVE-2023-1617 Improper Authentication Mechanism in B&R VC4 Visualization
- CVE-2023-1616 XiaoBingBy TeaCMS Article Title cross site scripting
- CVE-2023-1615 SQL injection in Ultimate Addons for Contact Form 7
- CVE-2023-1614 WP Custom Author URL < 1.0.5 - Admin+ Stored XSS
- CVE-2023-1613 Rebuild publish cross site scripting
- CVE-2023-1612 Rebuild list-file sql injection