Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 415 of 430.
- CVE-2023-1611 Use after free in Kernel
- CVE-2023-1610 Rebuild list sql injection
- CVE-2023-1609 Zhong Bang CRMEB Java save cross site scripting
- CVE-2023-1608 Zhong Bang CRMEB Java list getAdminList sql injection
- CVE-2023-1607 novel-plus list sql injection
- CVE-2023-1606 novel-plus DictController.java sql injection
- CVE-2023-1605 Denial of Service in radareorg/radare2
- CVE-2023-1604 Short URL <= 1.6.8 - Cross-Site Request Forgery via configuration_page
- CVE-2023-1603 Missing authorization in Server
- CVE-2023-1602 Cross-site scripting in Short URL
- CVE-2023-1597 tagDiv Cloud Library < 2.7 - Unauthenticated Arbitrary User Metadata Update to Privilege Escalation
- CVE-2023-1596 tagDiv Composer < 4.0 - Reflected Cross-site Scripting
- CVE-2023-1595 novel-plus list sql injection
- CVE-2023-1594 novel-plus list MenuService sql injection
- CVE-2023-1593 SourceCodester Automatic Question Paper Generator System cross site scripting
- CVE-2023-1592 SourceCodester Automatic Question Paper Generator System GET Parameter view_class.php sql injection
- CVE-2023-1591 SourceCodester Automatic Question Paper Generator System sql injection
- CVE-2023-1590 SourceCodester Online Tours & Travels Management System currency.php exec sql injection
- CVE-2023-1589 SourceCodester Online Tours & Travels Management System approve_delete.php exec sql injection
- CVE-2023-1587 Null dereference in AVG Antivirus
- CVE-2023-1586 Race condition in AVG Antivirus
- CVE-2023-1585 Race condition in AVG Antivirus
- CVE-2023-1584 Quarkus-oidc: id and access tokens leak via the authorization code flow
- CVE-2023-1583 Null dereference in Linux kernel
- CVE-2023-1582 Race condition in Linux
- CVE-2023-1580 Denial of service in Gateway
- CVE-2023-1579 Memory corruption in binutils
- CVE-2023-1578 SQL Injection in pimcore/pimcore
- CVE-2023-1577 Privilege escalation in Driver Manager
- CVE-2023-1575 Mega Main Menu <= 2.2.2 - Authenticated (Administrator+) Cross-Site Scripting
- CVE-2023-1574 Information disclosure in Remote Desktop Manager
- CVE-2023-1573 DataGear Graph Dataset cross site scripting
- CVE-2023-1572 DataGear Plugin cross site scripting
- CVE-2023-1571 DataGear pagingQueryData sql injection
- CVE-2023-1570 syoyo tinydng tiny_dng_loader.h __interceptor_memcpy heap-based overflow
- CVE-2023-1569 SourceCodester E-Commerce System cross site scripting
- CVE-2023-1568 SourceCodester Student Study Center Desk Management System GET Parameter index.php cross site scripting
- CVE-2023-1567 SourceCodester Student Study Center Desk Management System assign.php cross site scripting
- CVE-2023-1566 SourceCodester Medical Certificate Generator App action.php sql injection
- CVE-2023-1565 FeiFeiCMS Extension Tool slide_add.html cross site scripting
- CVE-2023-1564 SourceCodester Air Cargo Management System GET Parameter update_status.php sql injection
- CVE-2023-1563 SourceCodester Student Study Center Desk Management System assign.php sql injection
- CVE-2023-1562 Full name revealed via /plugins/focalboard/api/v2/users
- CVE-2023-1561 code-projects Simple Online Hotel Reservation System add_room.php unrestricted upload
- CVE-2023-1560 TinyTIFF File tinytiffreader.c buffer overflow
- CVE-2023-1559 SourceCodester Storage Unit Rental Management System unrestricted upload
- CVE-2023-1558 Simple and Beautiful Shopping Cart System uploadera.php unrestricted upload
- CVE-2023-1557 SourceCodester E-Commerce System Username access control
- CVE-2023-1556 SourceCodester Judging Management System summary_results.php sql injection
- CVE-2023-1555 Missing Authorization in GitLab
- CVE-2023-1554 Quick Paypal Payments < 5.7.26.4 - Admin+ Stored XSS
- CVE-2023-1552 ToolboxST Deserialization of Untrusted Configuration Data
- CVE-2023-1550 NGINX Agent vulnerability CVE-2023-1550
- CVE-2023-1549 Ad Inserter < 2.7.27 - Admin+ PHP Object Injection
- CVE-2023-1548 Privilege escalation in EcoStruxure Control Expert
- CVE-2023-1547 SQLi in Elra Computers Parkmatik
- CVE-2023-1546 MyCryptoCheckout < 2.124 - Reflected XSS
- CVE-2023-1545 SQL Injection in nilsteampassnet/teampass
- CVE-2023-1544 Qemu: pvrdma: out-of-bounds read in pvrdma_ring_next_elem_read()
- CVE-2023-1543 Insufficient Session Expiration in answerdev/answer
- CVE-2023-1542 Business Logic Errors in answerdev/answer
- CVE-2023-1541 Business Logic Errors in answerdev/answer
- CVE-2023-1540 Observable Response Discrepancy in answerdev/answer
- CVE-2023-1539 Improper Restriction of Excessive Authentication Attempts in answerdev/answer
- CVE-2023-1538 Observable Timing Discrepancy in answerdev/answer
- CVE-2023-1537 Authentication Bypass by Capture-replay in answerdev/answer
- CVE-2023-1536 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1535 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1534 Memory corruption in Chrome
- CVE-2023-1533 Use after free in Chrome
- CVE-2023-1532 Memory corruption in Chrome
- CVE-2023-1531 Use after free in Chrome
- CVE-2023-1530 Use after free in Chrome
- CVE-2023-1529 Memory corruption in Chrome
- CVE-2023-1528 Use after free in Chrome
- CVE-2023-1527 Cross-site Scripting (XSS) - Generic in tsolucio/corebos
- CVE-2023-1526 Information disclosure in HP DesignJet and PageWide XL
- CVE-2023-1525 Site Reviews < 6.7.1 - Admin+ Stored XSS
- CVE-2023-1524 Download Manager < 3.2.71 - Broken Access Controls
- CVE-2023-1523 Command injection in snapd
- CVE-2023-1522 SQL injection in Genetec Security Center
- CVE-2023-1521 Local Privilege Escalation in sccache
- CVE-2023-1518 Information disclosure in KVMS Pro
- CVE-2023-1517 Cross-site Scripting (XSS) - DOM in pimcore/pimcore
- CVE-2023-1516 Misconfiguration in RoboDK
- CVE-2023-1515 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1514 Security feature bypass in RTU500 Scripting Interface
- CVE-2023-1513 Information disclosure in Linux kernel (KVM)
- CVE-2023-1509 GMAce <= 1.5.2 - Cross-Site Request Forgery to Arbitrary File Modification (Creation/Overwrite/Deletion)
- CVE-2023-1508 SQLi in AdamPOS's Mobilmen Terminal Software
- CVE-2023-1507 SourceCodester E-Commerce System Category Name controller.php cross site scripting
- CVE-2023-1506 SourceCodester E-Commerce System login.php sql injection
- CVE-2023-1505 SourceCodester E-Commerce System setDiscount.php sql injection
- CVE-2023-1504 SourceCodester Alphaware Simple E-Commerce System sql injection
- CVE-2023-1503 SourceCodester Alphaware Simple E-Commerce System admin_index.php sql injection
- CVE-2023-1502 SourceCodester Alphaware Simple E-Commerce System edit_customer.php sql injection
- CVE-2023-1501 RockOA acloudCosAction.php.SQL runAction unrestricted upload
- CVE-2023-1500 code-projects Simple Art Gallery adminHome.php cross site scripting
- CVE-2023-1499 code-projects Simple Art Gallery adminHome.php sql injection
- CVE-2023-1498 code-projects Responsive Hotel Site Newsletter Log messages.php sql injection