Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 419 of 430.
- CVE-2023-1180 SourceCodester Health Center Patient Record Management System hematology_print.php cross site scripting
- CVE-2023-1179 SourceCodester Computer Parts Sales and Inventory System Add Supplier cross site scripting
- CVE-2023-1178 Code injection in GitLab
- CVE-2023-1177 Path Traversal: '\..\filename' in mlflow/mlflow
- CVE-2023-1176 Absolute Path Traversal in mlflow/mlflow
- CVE-2023-1175 Incorrect Calculation of Buffer Size in vim/vim
- CVE-2023-1174 [minikube] Network Port exposure in minikube running on macOS using Docker driver
- CVE-2023-1172 Cross-site scripting in WordPress Online Booking and Scheduling Plugin – Bookly
- CVE-2023-1170 Heap-based Buffer Overflow in vim/vim
- CVE-2023-1169 OoohBoi Steroids for Elementor <= 2.1.4 - Missing Authorization leading to Authenticated (Subscriber+) Image Upload
- CVE-2023-1168 Authenticated Remote Code Execution in Aruba CX Switches
- CVE-2023-1167 Missing authorization in GitLab
- CVE-2023-1166 USM Premium < 16.3 - Admin+ Stored XSS
- CVE-2023-1165 Zhong Bang CRMEB Java list sql injection
- CVE-2023-1164 KylinSoft kylin-activation File Import improper authorization
- CVE-2023-1163 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi getSyslogFile path traversal
- CVE-2023-1162 DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection
- CVE-2023-1161 Memory corruption in Wireshark
- CVE-2023-1160 Use of Platform-Dependent Third Party Components in cockpit-hq/cockpit
- CVE-2023-1159 Cross-site scripting in WordPress Online Booking and Scheduling Plugin – Bookly
- CVE-2023-1158 Hitachi Vantara Pentaho Business Analytics Server - Incorrect Authorization
- CVE-2023-1157 finixbit elf-parser elf_parser.cpp get_segments denial of service
- CVE-2023-1156 SourceCodester Health Center Patient Record Management System fecalysis_form.php cross site scripting
- CVE-2023-1155 Cost Calculator <= 1.8 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-1154 XSS in Pacsrapor
- CVE-2023-1153 SQLi in Pacsrapor
- CVE-2023-1152 SQLi in Utarit Persolus
- CVE-2023-1151 SourceCodester Electronic Medical Records System Cookie administrator.php sql injection
- CVE-2023-1150 WAGO: Series 750-3x/-8x prone to MODBUS server DoS
- CVE-2023-1149 Improper Neutralization of Equivalent Special Elements in btcpayserver/btcpayserver
- CVE-2023-1148 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- CVE-2023-1147 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- CVE-2023-1146 Cross-site Scripting (XSS) - Generic in flatpressblog/flatpress
- CVE-2023-1145 Deserialization in InfraSuite Device Master
- CVE-2023-1144 CVE-2023-1144
- CVE-2023-1143 CVE-2023-1143
- CVE-2023-1142 CVE-2023-1142
- CVE-2023-1141 CVE-2023-1141
- CVE-2023-1140 CVE-2023-1140
- CVE-2023-1139 CVE-2023-1139
- CVE-2023-1138 CVE-2023-1138
- CVE-2023-1137 CVE-2023-1137
- CVE-2023-1136 CVE-2023-1136
- CVE-2023-1135 Misconfiguration in InfraSuite Device Master
- CVE-2023-1134 CVE-2023-1134
- CVE-2023-1133 CVE-2023-1133
- CVE-2023-1132 Key duplication in GSDK
- CVE-2023-1131 SourceCodester Computer Parts Sales and Inventory System customer.php cross site scripting
- CVE-2023-1130 SourceCodester Computer Parts Sales and Inventory System processlogin sql injection
- CVE-2023-1129 WP FEvents Book <= 0.46 - Subscriber+ Arbitrary Booking Manipulation via IDOR
- CVE-2023-1127 Divide By Zero in vim/vim
- CVE-2023-1126 WP FEvents Book <= 0.46 - Subscriber+ Stored XSS
- CVE-2023-1125 Ruby Help Desk < 1.3.4 - Subscriber+ Ticket Update via IDOR
- CVE-2023-1124 Shopping Cart & eCommerce Store < 5.4.3 - Admin+ LFI
- CVE-2023-1122 Simple Giveaways < 2.45.1 - Editor+ Stored Cross-Site Scripting
- CVE-2023-1121 Simple Giveaways < 2.45.1 - Admin+ Stored Cross-Site Scripting
- CVE-2023-1120 Simple Giveaways < 2.45.1 - Admin+ Stored XSS
- CVE-2023-1119 Multiple Plugins - Cross-Site Scripting From Third-party Library
- CVE-2023-1118 Use after free in Kernel
- CVE-2023-1117 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1116 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1115 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-1114 Improper Input Validation on e-Belediye
- CVE-2023-1113 SourceCodester Simple Payroll System POST Parameter cross site scripting
- CVE-2023-1112 Drag and Drop Multiple File Upload Contact Form 7 admin-ajax.php path traversal
- CVE-2023-1111 FastCMS New Article Tab cross site scripting
- CVE-2023-1110 Yellow Yard < 2.8.12 - Contributor+ Stored XSS
- CVE-2023-1109 PHOENIX CONTACT: Directory Traversal Vulnerability in ENERGY AXC PU Web service
- CVE-2023-1108 Undertow: infinite loop in sslconduit during close
- CVE-2023-1107 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- CVE-2023-1106 Cross-site Scripting (XSS) - Reflected in flatpressblog/flatpress
- CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress
- CVE-2023-1104 Cross-site Scripting (XSS) - Stored in flatpressblog/flatpress
- CVE-2023-1101 Security feature bypass in SonicOS
- CVE-2023-1100 SourceCodester Online Catering Reservation System POST Parameter add_message.php sql injection
- CVE-2023-1099 SourceCodester Online Student Management System edit-class-detail.php sql injection
- CVE-2023-1098 Information disclosure in GitLab
- CVE-2023-1097 Unauthenticated Command Injection EG7035-M11 Series
- CVE-2023-1096 Auth bypass in SnapCenter
- CVE-2023-1095 Null dereference in Linux kernel netfilter subsystem.
- CVE-2023-1094 Cross-site scripting in MonicaHQ
- CVE-2023-1093 OAuth Single Sign On - SSO (OAuth Client) < 6.24.2 - IdP Discard via CSRF
- CVE-2023-1092 OAuth Single Sign On - SSO (OAuth Client) - IdP Deletion via CSRF
- CVE-2023-1091 SQL Injection found in ALPATA's Licensed Warehousing Automation System
- CVE-2023-1090 WP SMTP Mailing Queue < 2.0.1 - Admin+ Stored XSS
- CVE-2023-1089 Coupon Zen < 1.0.6 - Arbitrary Plugin Activation via CSRF
- CVE-2023-1088 WP Plugin Manager < 1.1.8 - Arbitrary Plugin Activation via CSRF
- CVE-2023-1087 WC Sales Notification < 1.2.3 - Arbitrary Plugin Activation via CSRF
- CVE-2023-1086 Preview Link Generator < 1.0.4 - Arbitrary Plugin Activation via CSRF
- CVE-2023-1084 Privilege escalation in GitLab
- CVE-2023-1083 Welotec: improper access control in TK500v1 router series
- CVE-2023-1082 Welotec: Command injection vulnerability in TK500v1 router series
- CVE-2023-1081 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2023-1080 GN Publisher <= 1.5.5 - Reflected Cross-Site Scripting
- CVE-2023-1079 Use after free in Linux kernel
- CVE-2023-1078 Memory corruption in Linux kernel
- CVE-2023-1077 Memory corruption in Linux kernel
- CVE-2023-1076 Security feature bypass in Linux kernel
- CVE-2023-1075 Information disclosure in Linus kernel
- CVE-2023-1074 Denial of service in kernel