Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 423 of 430.
- CVE-2023-0756 Code injection in GitLab
- CVE-2023-0755 Memory corruption in .NET-SDK
- CVE-2023-0754 Integer overflow in .NET-SDK
- CVE-2023-0751 GELI silently omits the keyfile if read from stdin
- CVE-2023-0750 Yellowbrik PEC-1864 authentication bypass
- CVE-2023-0749 Ocean Extra < 2.1.3 - Subscriber+ Arbitrary Post Content Disclosure
- CVE-2023-0748 Open Redirect in btcpayserver/btcpayserver
- CVE-2023-0747 Cross-site Scripting (XSS) - Stored in btcpayserver/btcpayserver
- CVE-2023-0746 XSS Vulnerability in GigaVue-FM
- CVE-2023-0745 Arbitrary File Write in High Availability Backup Upload
- CVE-2023-0744 Improper Access Control in answerdev/answer
- CVE-2023-0743 Cross-site Scripting (XSS) - Generic in answerdev/answer
- CVE-2023-0742 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-0741 Cross-site Scripting (XSS) - DOM in answerdev/answer
- CVE-2023-0740 Cross-site Scripting (XSS) - Stored in answerdev/answer
- CVE-2023-0739 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') in answerdev/answer
- CVE-2023-0738 Cross-site scripting in OrangeScrum
- CVE-2023-0737 CSRF in wallabag/wallabag
- CVE-2023-0736 Cross-site Scripting (XSS) - Stored in wallabag/wallabag
- CVE-2023-0735 Cross-Site Request Forgery (CSRF) in wallabag/wallabag
- CVE-2023-0734 Improper Authorization in wallabag/wallabag
- CVE-2023-0733 Newsletter Popup <= 1.2 - Unauthenticated Stored XSS
- CVE-2023-0732 SourceCodester Online Eyewear Shop POST Request Users.php registration cross site scripting
- CVE-2023-0731 Interactive Geo Maps <= 1.5.9 - Authenticated (Editor+) Stored Cross-Site Scripting
- CVE-2023-0730 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_folder_order
- CVE-2023-0729 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_sort_order
- CVE-2023-0728 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_save_folder
- CVE-2023-0727 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_delete_folder
- CVE-2023-0726 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_edit_folder
- CVE-2023-0725 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_clone_folder
- CVE-2023-0724 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_add_folder
- CVE-2023-0723 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery on ajax_move_object
- CVE-2023-0722 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_save_state
- CVE-2023-0721 Metform Elementor Contact Form Builder <= 3.3.0 - Unauthenticated CSV Injection
- CVE-2023-0720 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder_order
- CVE-2023-0719 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_sort_order
- CVE-2023-0718 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_save_folder
- CVE-2023-0717 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_delete_folder
- CVE-2023-0716 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_edit_folder
- CVE-2023-0715 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_clone_folder
- CVE-2023-0714 Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload
- CVE-2023-0713 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_add_folder
- CVE-2023-0712 Wicked Folders <= 2.18.16 - Missing Authorization on ajax_move_object
- CVE-2023-0711 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_save_state
- CVE-2023-0710 Cross-site scripting in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0709 Cross-site scripting in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0708 Cross-site scripting in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0707 SourceCodester Medical Certificate Generator App function.php delete_record sql injection
- CVE-2023-0706 SourceCodester Medical Certificate Generator App manage_record.php sql injection
- CVE-2023-0705 Integer overflow in Chrome
- CVE-2023-0704 Security feature bypass in Chrome
- CVE-2023-0703 Memory corruption in Chrome
- CVE-2023-0702 Memory corruption in Chrome
- CVE-2023-0701 Memory corruption in Chrome
- CVE-2023-0700 Other in Chrome
- CVE-2023-0699 Use after free in Chrome
- CVE-2023-0698 Memory corruption in Chrome
- CVE-2023-0697 Security feature bypass in Chrome
- CVE-2023-0696 Memory corruption in Chrome
- CVE-2023-0695 Cross-site scripting in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0694 Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via mf shortcode
- CVE-2023-0693 Information disclosure in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0692 Information disclosure in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0691 Information disclosure in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0690 Boundary Workers Store Rotated Credentials in Plaintext Even When a Key Management Service Configured
- CVE-2023-0689 Information disclosure in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0688 Information disclosure in MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor
- CVE-2023-0687 Memory corruption in C Library
- CVE-2023-0686 SourceCodester Online Eyewear Shop HTTP POST Request update_cart sql injection
- CVE-2023-0685 Wicked Folders <= 2.18.16 - Cross-Site Request Forgery via ajax_unassign_folders
- CVE-2023-0684 Wicked Folders <= 2.18.16 - Missing Authorization via ajax_unassign_folders
- CVE-2023-0683 Privilege escalation in XClarity Controller
- CVE-2023-0681 Rapid7 Nexpose Uncontrolled URL Redirect
- CVE-2023-0679 SourceCodester Canteen Management System removeUser.php sql injection
- CVE-2023-0678 Missing Authorization in phpipam/phpipam
- CVE-2023-0677 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
- CVE-2023-0676 Cross-site Scripting (XSS) - Reflected in phpipam/phpipam
- CVE-2023-0675 Calendar Event Management System sql injection
- CVE-2023-0674 XXL-JOB New Password updatePwd cross-site request forgery
- CVE-2023-0673 SourceCodester Online Eyewear Shop sql injection
- CVE-2023-0671 Code Injection in froxlor/froxlor
- CVE-2023-0670 File upload in Ulearn
- CVE-2023-0669 Fortra GoAnywhere MFT Remote Code Execution
- CVE-2023-0668 Wireshark IEEE-C37.118 parsing buffer overflow
- CVE-2023-0667 Wireshark MSMMS parsing buffer overflow
- CVE-2023-0666 Wireshark RTPS Parsing Buffer Overflow
- CVE-2023-0665 Vault PKI Issuer Endpoint Did Not Correctly Authorize Access to Issuer Metadata
- CVE-2023-0664 Privilege escalation in QEMU
- CVE-2023-0663 Calendar Event Management System Login Page sql injection
- CVE-2023-0662 DoS vulnerability when parsing multipart request body
- CVE-2023-0661 Missing authorization in Devolutions Server
- CVE-2023-0660 Smart Slider 3 < 3.5.1.14 - Contributor+ Stored XSS
- CVE-2023-0659 BDCOM 1704-WGL Backup File param.file.tgz information disclosure
- CVE-2023-0658 Multilaser RE057/RE170 Backup File param.file.tgz information disclosure
- CVE-2023-0657 Keycloak: impersonation via logout token exchange
- CVE-2023-0656 Memory corruption in SonicOS
- CVE-2023-0655 Information disclosure in SonicWall Email Security
- CVE-2023-0654 Spoofing User's Activity Loads in WARP Mobile Client (Android)
- CVE-2023-0652 Local Privilege Escalation in Cloudflare WARP Installer (Windows)
- CVE-2023-0651 FastCMS Template Management unrestricted upload