Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 422 of 430.
- CVE-2023-0861 Authenticated Command Injection in NetModule NSRW
- CVE-2023-0860 Improper Restriction of Excessive Authentication Attempts in modoboa/modoboa-installer
- CVE-2023-0859 Other in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0858 Auth bypass in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0857 Auth bypass in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0856 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0855 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0854 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0853 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0852 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0851 Memory corruption in Canon Office/Small Office Multifunction Printers and Laser Printers
- CVE-2023-0850 Netgear WNDR3700v2 Web Interface denial of service
- CVE-2023-0849 Netgear WNDR3700v2 Web Interface command injection
- CVE-2023-0848 Netgear WNDR3700v2 Web Management Interface denial of service
- CVE-2023-0847 Memory corruption in DASH 7 Alliance Protocol stack implementation
- CVE-2023-0846 Unauthenticated, stored XSS in display of alarm reduction-key
- CVE-2023-0845 Consul Server Panic when Ingress and API Gateways Configured with Peering
- CVE-2023-0844 Namaste! LMS < 2.6 - Admin+ Stored XSS
- CVE-2023-0842 xml2js 0.4.23 - Prototype Pollution
- CVE-2023-0841 GPAC reframe_mp3.c mp3_dmx_process heap-based overflow
- CVE-2023-0840 PHPCrazy cross site scripting
- CVE-2023-0839 Improper Error Handling in inSCADA
- CVE-2023-0838 Information disclosure in GitLab
- CVE-2023-0837 Missing authorization in Remote
- CVE-2023-0836 Information disclosure in HAProxy
- CVE-2023-0835 markdown-pdf 11.0.0 - Local File Read via Server Side XSS
- CVE-2023-0834 Privilege escalation in Workforce Access
- CVE-2023-0833 Red hat a-mq streams: component version with information disclosure flaw
- CVE-2023-0832 Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_install_weglot
- CVE-2023-0831 Under Construction <= 3.96 - Cross-Site Request Forgery via admin_action_ucp_dismiss_notice
- CVE-2023-0830 EasyNAS backup.pl system os command injection
- CVE-2023-0829 Cross-Site Scripting (XSS) vulnerability in Plesk
- CVE-2023-0828 Stored Cross Site Scripting in syslog section
- CVE-2023-0827 Cross-site Scripting (XSS) - Stored in pimcore/pimcore
- CVE-2023-0824 UserPlus <= 2.0 - Stored XSS via CSRF
- CVE-2023-0823 Cookie Notice & Compliance for GDPR / CCPA < 2.4.7 - Contributor+ Stored XSS
- CVE-2023-0822 Improper Authorization
- CVE-2023-0821 Nomad Client Vulnerable to Decompression Bombs in Artifact Block
- CVE-2023-0820 User Role by BestWebSoft < 1.6.7 - Privilege Escalation via CSRF
- CVE-2023-0819 Heap-based Buffer Overflow in gpac/gpac
- CVE-2023-0818 Off-by-one Error in gpac/gpac
- CVE-2023-0817 Buffer Over-read in gpac/gpac
- CVE-2023-0816 Formidable Forms < 6.1 - IP Spoofing
- CVE-2023-0815 Plaintext Password Present in the Web logs
- CVE-2023-0814 Profile Builder – User Profile & User Registration Forms <= 3.9.0 - Sensitive Information Disclosure via Shortcode
- CVE-2023-0813 Auth bypass in NETWORK-OBSERVABILITY-1.1.0-RHEL-8
- CVE-2023-0812 Active Directory Integration / LDAP Integration < 4.1.1 - Unauthenticated Data Disclosure
- CVE-2023-0811 Missing authorization in CJ1M SYSMAC CJ-series
- CVE-2023-0810 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
- CVE-2023-0809 Denial of service in Mosquitto
- CVE-2023-0808 Deye/Revolt/Bosswerk Inverter Access Point Setting hard-coded password
- CVE-2023-0805 Missing authorization in GitLab
- CVE-2023-0804 Memory corruption in libtiff
- CVE-2023-0803 Memory corruption in libtiff
- CVE-2023-0802 Memory corruption in libtiff
- CVE-2023-0801 Memory corruption in libtiff
- CVE-2023-0800 Memory corruption in libtiff
- CVE-2023-0799 Memory corruption in libtiff
- CVE-2023-0798 Memory corruption in libtiff
- CVE-2023-0797 Memory corruption in libtiff
- CVE-2023-0796 Memory corruption in libtiff
- CVE-2023-0795 Memory corruption in libtiff
- CVE-2023-0794 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-0793 Weak Password Requirements in thorsten/phpmyfaq
- CVE-2023-0792 Code Injection in thorsten/phpmyfaq
- CVE-2023-0791 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-0790 Uncaught Exception in thorsten/phpmyfaq
- CVE-2023-0789 Command Injection in thorsten/phpmyfaq
- CVE-2023-0788 Code Injection in thorsten/phpmyfaq
- CVE-2023-0787 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
- CVE-2023-0786 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
- CVE-2023-0785 SourceCodester Best Online News Portal check_availability.php information exposure
- CVE-2023-0784 SourceCodester Best Online News Portal Login Page sql injection
- CVE-2023-0783 EcShop PHP File template.php unrestricted upload
- CVE-2023-0782 Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write
- CVE-2023-0781 SourceCodester Canteen Management System removeOrder.php query sql injection
- CVE-2023-0780 Improper Restriction of Rendered UI Layers or Frames in cockpit-hq/cockpit
- CVE-2023-0779 net: shell: Improper input validation
- CVE-2023-0778 Podman Time-of-check Time-of-use (TOCTOU) Race Condition
- CVE-2023-0777 Authentication Bypass by Primary Weakness in modoboa/modoboa
- CVE-2023-0776 Remote Code Execution in Baicells QRTB Platform
- CVE-2023-0775 Bluetooth LE Invalid prepare write request command leads to denial of service
- CVE-2023-0774 SourceCodester Medical Certificate Generator App action.php sql injection
- CVE-2023-0773 Unauthorized Access Control Vulnerability in Uniview IP Camera
- CVE-2023-0772 Popup Builder by OptinMonster < 2.12.2 - Subscriber+ Arbitrary Post Content Disclosure
- CVE-2023-0771 SQL Injection in ampache/ampache
- CVE-2023-0770 Stack-based Buffer Overflow in gpac/gpac
- CVE-2023-0769 hiWeb Migration Simple <= 2.0.0.1 Reflected Cross-Site Scripting
- CVE-2023-0768 Avirato hotels online booking engine <= 5.0.5 - Subscriber+ SQLi
- CVE-2023-0767 Memory corruption in Firefox
- CVE-2023-0766 Newsletter Popup <= 1.2 - Record Deletion via CSRF
- CVE-2023-0765 Gallery by BestWebSoft < 4.7.0 - Author+ SQL Injection
- CVE-2023-0764 Gallery by BestWebSoft < 4.7.0 - Author+ Stored Cross-Site Scripting
- CVE-2023-0763 Clock In Portal <= 2.1 - Holidays Deletion via CSRF
- CVE-2023-0762 Clock In Portal <= 2.1 - Designation Deletion via CSRF
- CVE-2023-0761 Clock In Portal <= 2.1 - Staff Deletion via CSRF
- CVE-2023-0760 Heap-based Buffer Overflow in gpac/gpac
- CVE-2023-0759 Privilege Chaining in cockpit-hq/cockpit
- CVE-2023-0758 glorylion JFinalOA SysOrg.java sql injection
- CVE-2023-0757 Phoenix Contact ProConOS prone to Incorrect Permission Assignment for Critical Resource