Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 418 of 430.
- CVE-2023-1289 ImageMagick: Specially crafted SVG leads to segmentation fault and generate trash files in "/tmp", possible to leverage DoS
- CVE-2023-1288 ENOVIA Live Collaboration V6R2013xE is affected by an XML External Entity injection (XXE) vulnerability
- CVE-2023-1287 ENOVIA Live Collaboration V6R2013xE is affected by an XSL template injection vulnerability
- CVE-2023-1286 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1285 Race condition in GC-ENET-COM
- CVE-2023-1283 Code Injection in builderio/qwik
- CVE-2023-1282 Drag and Drop Multiple File Upload PRO - Reflected Cross-Site Scripting
- CVE-2023-1281 UAF in Linux kernel's tcindex (traffic control index filter) implementation
- CVE-2023-1279 URL Redirection to Untrusted Site in GitLab
- CVE-2023-1278 IBOS index.php cross site scripting
- CVE-2023-1277 kylin-system-updater Update InstallSnap command injection
- CVE-2023-1276 SUL1SS_shop Order.php sql injection
- CVE-2023-1275 SourceCodester Phone Shop Sales Managements System CAPTCHA index.php cross site scripting
- CVE-2023-1274 Pricing Tables For WPBakery Page Builder < 3.0 - Subscriber+ LFI
- CVE-2023-1273 ND Shortcodes < 7.0 - Subscriber+ LFI
- CVE-2023-1270 Cross-site Scripting in btcpayserver/btcpayserver
- CVE-2023-1269 Use of Hard-coded Credentials in alextselegidis/easyappointments
- CVE-2023-1267 SQLi in Ulkem Company's PtteM Kart
- CVE-2023-1265 Information disclosure in GitLab
- CVE-2023-1264 NULL Pointer Dereference in vim/vim
- CVE-2023-1263 CMP – Coming Soon & Maintenance Plugin by NiteoThemes <= 4.1.6 - Information Exposure
- CVE-2023-1262 Missing MAC layer security in Wi-SUN Linux Border Router
- CVE-2023-1261 Missing MAC layer security in Wi-SUN SDK
- CVE-2023-1260 Kube-apiserver: privesc
- CVE-2023-1259 Hotjar <= 1.0.15 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-1258 Flow-X disclosure of sensitive information to unauthenticated users
- CVE-2023-1257 CVE-2023-1257
- CVE-2023-1256 CVE-2023-1256
- CVE-2023-1255 Input buffer over-read in AES-XTS implementation on 64 bit ARM
- CVE-2023-1254 SourceCodester Health Center Patient Record Management System birthing_print.php cross site scripting
- CVE-2023-1253 SourceCodester Health Center Patient Record Management System login.php sql injection
- CVE-2023-1252 Use after free in Kernel
- CVE-2023-1251 SQLi in Wolvox
- CVE-2023-1250 Code execution through ACL creation
- CVE-2023-1249 Use after free in Kernel
- CVE-2023-1248 Possible XSS in Ticket Actions
- CVE-2023-1246 Files or Directories Accessible to External Parties in Saysis Starcities
- CVE-2023-1245 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1244 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1243 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1242 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1241 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1240 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1239 Cross-site Scripting (XSS) - Reflected in answerdev/answer
- CVE-2023-1238 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1237 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-1236 Security feature bypass in Chrome
- CVE-2023-1235 Memory corruption in Chrome
- CVE-2023-1234 Other in Chrome
- CVE-2023-1233 Security feature bypass in Chrome
- CVE-2023-1232 Information disclosure in Chrome
- CVE-2023-1231 Other in Chrome
- CVE-2023-1230 Other in Chrome
- CVE-2023-1229 Security feature bypass in Chrome
- CVE-2023-1228 Security feature bypass in Chrome
- CVE-2023-1227 Use after free in Chrome
- CVE-2023-1226 Security feature bypass in Chrome
- CVE-2023-1225 Security feature bypass in Chrome
- CVE-2023-1224 Security feature bypass in Chrome
- CVE-2023-1223 Security feature bypass in Chrome
- CVE-2023-1222 Memory corruption in Chrome
- CVE-2023-1221 Security feature bypass in Chrome
- CVE-2023-1220 Memory corruption in Chrome
- CVE-2023-1219 Memory corruption in Chrome
- CVE-2023-1218 Use after free in Chrome
- CVE-2023-1217 Memory corruption in Chrome
- CVE-2023-1216 Use after free in Chrome
- CVE-2023-1215 Memory corruption in Chrome
- CVE-2023-1214 Memory corruption in Chrome
- CVE-2023-1213 Use after free in Chrome
- CVE-2023-1212 Cross-site Scripting (XSS) - Stored in phpipam/phpipam
- CVE-2023-1211 SQL Injection in phpipam/phpipam
- CVE-2023-1210 Generation of Error Message Containing Sensitive Information in GitLab
- CVE-2023-1209 Cross-site scripting in ServiceNow Records
- CVE-2023-1208 HTTP Headers < 1.18.11 - Admin+ Remote Code Execution
- CVE-2023-1207 HTTP Headers < 1.18.8 - Admin+ SQL Injection
- CVE-2023-1206 Denial of service in Kernel
- CVE-2023-1205 Cross-site request forgery in NETGEAR Nighthawk WiFi6 Router
- CVE-2023-1204 Security feature bypass in GitLab
- CVE-2023-1203 Information disclosure in Remote Desktop Manager PowerShell Module
- CVE-2023-1202 Missing authorization in Remote Desktop Manager
- CVE-2023-1201 Missing authorization in Devolutions Server
- CVE-2023-1200 ehuacui bbs cross site scripting
- CVE-2023-1198 SQLi in Saysis Starcities
- CVE-2023-1197 Cross-site Scripting (XSS) - Stored in uvdesk/community-skeleton
- CVE-2023-1196 Advanced Custom Fields - Contributor+ PHP Object Injection
- CVE-2023-1195 Use after free in Kernel
- CVE-2023-1194 Use-after-free in parse_lease_state()
- CVE-2023-1193 Use-after-free in setup_async_work()
- CVE-2023-1192 Use-after-free in smb2_is_status_io_timeout()
- CVE-2023-1191 fastcms ZIP File TemplateController.java path traversal
- CVE-2023-1190 xiaozhuai imageinfo imageinfo.hpp buffer overflow
- CVE-2023-1189 WiseCleaner Wise Folder Hider IoControlCode WiseFs64.sys 0x222410 denial of service
- CVE-2023-1188 FabulaTech Webcam for Remote Desktop IoControlCode ftwebcam.sys 0x222018 denial of service
- CVE-2023-1187 FabulaTech Webcam for Remote Desktop Global Variable ftwebcam.sys denial of service
- CVE-2023-1186 FabulaTech Webcam for Remote Desktop IOCTL ftwebcam.sys 0x222018 null pointer dereference
- CVE-2023-1185 ECshop New Product unrestricted upload
- CVE-2023-1184 ECshop Backup Database database.php unrestricted upload
- CVE-2023-1183 Arbitrary file write
- CVE-2023-1181 Cross-site Scripting (XSS) - Stored in icret/easyimages2.0