Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 421 of 430.
- CVE-2023-0965 Key duplication in GSDK
- CVE-2023-0964 SourceCodester Sales Tracker Management System view_product.php sql injection
- CVE-2023-0963 SourceCodester Music Gallery Site POST Request Users.php access control
- CVE-2023-0962 SourceCodester Music Gallery Site GET Request Master.php sql injection
- CVE-2023-0961 SourceCodester Music Gallery Site GET Request view_music_details.php sql injection
- CVE-2023-0960 SeaCMS Picture Management config.ftp.php deserialization
- CVE-2023-0959 Cross-site request forgery in Bhima
- CVE-2023-0958 Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function
- CVE-2023-0957 Cross-site request forgery in Gitpod
- CVE-2023-0956 TEL-STER TelWin SCADA WebInterface Path Traversal
- CVE-2023-0955 WP Statistics < 14.0 - Authenticated SQLi
- CVE-2023-0954 Debug feature in Sensormatic Electronics Illustra Dome and PTZ cameras
- CVE-2023-0953 SQL injection in Devolutions Server
- CVE-2023-0952 Missing authorization in Devolutions Server
- CVE-2023-0951 Missing authorization in Devolutions Server
- CVE-2023-0950 Array Index UnderFlow in Calc Formula Parsing
- CVE-2023-0949 Cross-site Scripting (XSS) - Reflected in modoboa/modoboa
- CVE-2023-0948 Japanized For WooCommerce < 2.5.8 - Reflected XSS
- CVE-2023-0947 Path Traversal in flatpressblog/flatpress
- CVE-2023-0946 SourceCodester Best POS Management System sql injection
- CVE-2023-0945 SourceCodester Best POS Management System cross site scripting
- CVE-2023-0944 Missing authorization in Bhima
- CVE-2023-0943 SourceCodester Best POS Management System Image save_settings unrestricted upload
- CVE-2023-0942 Japanized For WooCommerce <= 2.5.4 - Reflected Cross-Site Scripting
- CVE-2023-0941 Use after free in Chrome
- CVE-2023-0940 ProfileGrid < 5.3.1 - Subscriber+ Arbitrary Password Reset
- CVE-2023-0939 Multiple SQL Injection on NTN Information Technologies' Online Services software
- CVE-2023-0938 SourceCodester Music Gallery Site GET Request music_list.php sql injection
- CVE-2023-0937 VK All in One Expansion Unit < 9.87.1.0 - Reflected XSS
- CVE-2023-0936 TP-Link Archer C50 Web Management Interface denial of service
- CVE-2023-0935 DolphinPHP Incomplete Fix CVE-2021-46097 common.php os command injection
- CVE-2023-0934 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-0933 Integer overflow in Chrome
- CVE-2023-0932 Use after free in Chrome
- CVE-2023-0931 Use after free in Chrome
- CVE-2023-0930 Memory corruption in Chrome
- CVE-2023-0929 Use after free in Chrome
- CVE-2023-0928 Use after free in Chrome
- CVE-2023-0927 Use after free in Chrome
- CVE-2023-0926 Custom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site Scripting
- CVE-2023-0925 Software AG webMethods OneData Deserialization Vulnerability
- CVE-2023-0924 Zyrex Popup <= 1.0 - Admin+ Arbitrary File Upload
- CVE-2023-0923 Odh-notebook-controller-container: missing authorization allows for file contents disclosure
- CVE-2023-0922 Information disclosure in Samba
- CVE-2023-0921 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-0919 Missing Authentication for Critical Function in kareadita/kavita
- CVE-2023-0918 codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload
- CVE-2023-0917 SourceCodester Simple Customer Relationship Management System login.php sql injection
- CVE-2023-0916 SourceCodester Auto Dealer Management System Users.php access control
- CVE-2023-0915 SourceCodester Auto Dealer Management System sql injection
- CVE-2023-0914 Improper Authorization in pixelfed/pixelfed
- CVE-2023-0913 SourceCodester Auto Dealer Management System sql injection
- CVE-2023-0912 SourceCodester Auto Dealer Management System sql injection
- CVE-2023-0911 Shortcodes Ultimate < 5.12.8 - Subscriber+ User Meta Disclosure
- CVE-2023-0910 SourceCodester Online Pizza Ordering System GET Parameter view_prod.php sql injection
- CVE-2023-0909 cxasm notepad-- Directory Comparison denial of service
- CVE-2023-0908 Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service
- CVE-2023-0907 Filseclab Twister Antivirus IoControlCode ffsmon.sys 0x220017 denial of service
- CVE-2023-0906 SourceCodester Online Pizza Ordering System POST Parameter ajax.php delete_category missing authentication
- CVE-2023-0905 SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication
- CVE-2023-0904 SourceCodester Employee Task Management System task-details.php sql injection
- CVE-2023-0903 SourceCodester Employee Task Management System edit-task.php sql injection
- CVE-2023-0902 SourceCodester Simple Food Ordering System process_order.php cross site scripting
- CVE-2023-0901 Exposure of Sensitive Information to an Unauthorized Actor in pixelfed/pixelfed
- CVE-2023-0900 AP Pricing Tables Lite <= 1.1.6 - Admin+ SQLi
- CVE-2023-0899 Steveas WP Live Chat Shoutbox <= 1.4.2 - Unauthenticated Stored XSS
- CVE-2023-0898 Uncontrolled Search Path Element in GE MiCOM S1 Agile
- CVE-2023-0897 Session FIxation in Sielco PolyEco1000
- CVE-2023-0896 Hardcoded credentials in Lenovo Smart Clock Essential with Alexa Built In
- CVE-2023-0895 WP Coder – add custom html, css and js code <= 2.5.3 - Authenticated (Admin+) SQL Injection
- CVE-2023-0894 Pickup | Delivery | Dine-in date time <= 1.0.9 - Admin+ Stored XSS
- CVE-2023-0893 Time Sheets < 1.29.3 - Admin+ Stored XSS
- CVE-2023-0892 BizLibrary <= 1.1 - Admin+ Stored XSS
- CVE-2023-0891 Stagtools < 2.3.7 - Contributor+ Stored XSS
- CVE-2023-0890 Shortcodes Ultimate < 5.12.8 - Subscriber+ Arbitrary Post Access
- CVE-2023-0889 TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update
- CVE-2023-0888 Authenticated eval injection in B. Braun Space Battery pack SP with Wi-Fi
- CVE-2023-0887 phjounin TFTPD64-SE tftpd64_svc.exe unquoted search path
- CVE-2023-0883 SourceCodester Online Pizza Ordering System index.php sql injection
- CVE-2023-0882 Authorization Bypass Through User-Controlled Key on Single Connect
- CVE-2023-0881 DDoS in Ubuntu package linux-bluefield
- CVE-2023-0880 Misinterpretation of Input in thorsten/phpmyfaq
- CVE-2023-0879 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
- CVE-2023-0878 Cross-site Scripting (XSS) - Generic in nuxt/framework
- CVE-2023-0877 Code Injection in froxlor/froxlor
- CVE-2023-0876 WP Meta SEO < 4.5.3 - Subscriber+ Improper Authorization causing Arbitrary Redirect
- CVE-2023-0875 WP Meta SEO < 4.5.3 - Subscriber+ SQLi
- CVE-2023-0874 Klaviyo <= 3.0.10 - Admin+ Stored XSS
- CVE-2023-0873 Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS
- CVE-2023-0872 ROLE_REST can be used to escalate to ROLE_ADMIN via /rest/users
- CVE-2023-0871 An XML External Entity injection vulnerability
- CVE-2023-0870 Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)
- CVE-2023-0869 Cross-site scripting in outage/list.htm
- CVE-2023-0868 Stealing Cookies using Reflected XSS via graph results
- CVE-2023-0867 Multiple stored and reflected Cross-site Scripting in webapp
- CVE-2023-0866 Heap-based Buffer Overflow in gpac/gpac
- CVE-2023-0865 WooCommerce Multiple Customer Addresses & Shipping < 21.7 - Arbitrary Address Creation/Deletion/Access/Update via IDOR
- CVE-2023-0864 Information disclosure in Terra AC wallbox (CE) (Terra AC MID)
- CVE-2023-0863 Authentication to access the AC wallbox via its Bluetooth Low Energy (BLE) channel can be bypassed,
- CVE-2023-0862 Path Traversal in NetModule NSRW