Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 424 of 430.
- CVE-2023-0650 YAFNET Signature cross site scripting
- CVE-2023-0649 dst-admin sendBroadcast command injection
- CVE-2023-0648 dst-admin masterConsole command injection
- CVE-2023-0647 dst-admin kickPlayer command injection
- CVE-2023-0646 dst-admin cavesConsole command injection
- CVE-2023-0645 Out of Bounds read in libjxl
- CVE-2023-0644 PushAssist <= 3.0.8 - Reflected Cross-Site Scripting
- CVE-2023-0643 Improper Handling of Additional Special Element in squidex/squidex
- CVE-2023-0642 Cross-Site Request Forgery (CSRF) in squidex/squidex
- CVE-2023-0641 PHPGurukul Employee Leaves Management System changepassword.php weak password
- CVE-2023-0640 TRENDnet TEW-652BRP Web Interface ping.ccp command injection
- CVE-2023-0639 TRENDnet TEW-652BRP Web Management Interface get_set.ccp cross site scripting
- CVE-2023-0638 TRENDnet TEW-811DRU Web Interface command injection
- CVE-2023-0637 TRENDnet TEW-811DRU Web Management Interface wan.asp memory corruption
- CVE-2023-0636 Remote Code Execution via Command Injection
- CVE-2023-0635 Privilege escalation to root
- CVE-2023-0633 In Docker Desktop on Windows before 4.12.0 an argument injection to installer may result in LPE
- CVE-2023-0632 Inefficient Regular Expression Complexity in GitLab
- CVE-2023-0631 Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection
- CVE-2023-0630 Slimstat Analytics < 4.9.3.3 - Subscriber+ SQL Injection
- CVE-2023-0629 Security feature bypass in Docker Desktop
- CVE-2023-0628 Command injection in Docker Desktop
- CVE-2023-0627 Docker Desktop 4.11.x allows --no-windows-containers flag bypass
- CVE-2023-0626 Docker Desktop before 4.12.0 is vulnerable to RCE via query parameters in message-box route
- CVE-2023-0625 Docker Desktop before 4.12.0 is vulnerable to RCE via a crafted extension description or changelog
- CVE-2023-0624 Cross-site scripting in OrangeScrum
- CVE-2023-0623 CVE-2023-0623
- CVE-2023-0622 CVE-2023-0622
- CVE-2023-0621 CVE-2023-0621
- CVE-2023-0620 Vault Vulnerable to SQL Injection When Configuring the Microsoft SQL Database Storage Backend
- CVE-2023-0619 Kraken.io Image Optimizer <= 2.6.8 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update
- CVE-2023-0618 TRENDnet TEW-652BRP Web Service cfg_op.ccp memory corruption
- CVE-2023-0617 TRENDNet TEW-811DRU httpd guestnetwork.asp buffer overflow
- CVE-2023-0616 Denial of service in Thunderbird
- CVE-2023-0615 Integer overflow in Kernel
- CVE-2023-0614 Information disclosure in Samba
- CVE-2023-0613 TRENDnet TEW-811DRU httpd security.asp memory corruption
- CVE-2023-0612 TRENDnet TEW-811DRU httpd basic.asp buffer overflow
- CVE-2023-0611 TRENDnet TEW-652BRP Web Management Interface get_set.ccp command injection
- CVE-2023-0610 Improper Authorization in wallabag/wallabag
- CVE-2023-0609 Improper Authorization in wallabag/wallabag
- CVE-2023-0608 Cross-site Scripting (XSS) - DOM in microweber/microweber
- CVE-2023-0607 Cross-site Scripting (XSS) - Stored in projectsend/projectsend
- CVE-2023-0606 Cross-site Scripting (XSS) - Reflected in ampache/ampache
- CVE-2023-0605 Auto Rename Media On Upload < 1.1.0 - Admin+ Stored XSS
- CVE-2023-0604 WP Food Manager < 1.0.4 - Admin+ Stored XSS
- CVE-2023-0603 Sloth Logo Customizer <= 2.0.2 - Stored XSS via CSRF
- CVE-2023-0602 Twittee Text Tweet <= 1.0.8 - Reflected XSS
- CVE-2023-0600 WP Visitor Statistics (Real Time Traffic) < 6.9 - Unauthenticated SQLi
- CVE-2023-0599 Rapid7 Metasploit Pro Stored XSS
- CVE-2023-0598 GE Digital Proficy Code Injection
- CVE-2023-0597 Information disclosure in Kernel
- CVE-2023-0595 Other in ClearSCADA
- CVE-2023-0594 Grafana vulnerable to Cross-site Scripting
- CVE-2023-0593 Path traversal in yaffshiv
- CVE-2023-0592 Path traversal in jefferson
- CVE-2023-0591 Path Traversal in ubi_reader
- CVE-2023-0590 Use after free in Kernel
- CVE-2023-0589 WP Image Carousel <= 1.0.2 - Contributor+ Stored XSS
- CVE-2023-0588 Catalyst Connect Zoho CRM Client Portal < 2.1.0 - Reflected XSS
- CVE-2023-0587 File upload in Trend Micro Apex One
- CVE-2023-0586 All in One SEO Pack <= 4.2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-0585 All in One SEO Pack <= 4.2.9 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-0584 VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update
- CVE-2023-0583 VK Blocks <= 1.57.0.5 - Authenticated(Contributor+) Settings Update
- CVE-2023-0582 Path Traversal in ForgeRock Access Managment
- CVE-2023-0581 PrivateContent <= 8.4.3 - Protection Mechanism Bypass
- CVE-2023-0580 Information Disclosure vulnerability in My Control System (on-premise)
- CVE-2023-0579 YARPP - Yet Another Related Posts Plugin < 5.30.3 - Subscriber+ SQLi
- CVE-2023-0578 Multiple XSS in ASOS Information Technologies' Book Cites
- CVE-2023-0577 Multiple XSS in ASOS Information Technologies' Sobiad
- CVE-2023-0575 Remote Code Execution
- CVE-2023-0574 Server-Side Request Forgery
- CVE-2023-0572 Unchecked Error Condition in froxlor/froxlor
- CVE-2023-0571 SourceCodester Canteen Management System Add Customer createcustomer.php cross site scripting
- CVE-2023-0570 SourceCodester Online Tours & Travels Management System payment_operation.php sql injection
- CVE-2023-0569 Weak Password Requirements in publify/publify
- CVE-2023-0568 Array overrun in common path resolve code
- CVE-2023-0567 password_verify() always returns true for some invalid hashes
- CVE-2023-0566 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in froxlor/froxlor
- CVE-2023-0565 Business Logic Errors in froxlor/froxlor
- CVE-2023-0564 Weak Password Requirements in froxlor/froxlor
- CVE-2023-0563 PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross site scripting
- CVE-2023-0562 PHPGurukul Bank Locker Management System Login index.php sql injection
- CVE-2023-0561 SourceCodester Online Tours & Travels Management System s.php sql injection
- CVE-2023-0560 SourceCodester Online Tours & Travels Management System practice_pdf.php sql injection
- CVE-2023-0559 GS Portfolio for Envato < 1.4.0 - Contributor+ Stored XSS
- CVE-2023-0558 ContentStudio <= 1.2.5 - Authorization Bypass
- CVE-2023-0557 ContentStudio <= 1.2.5 - Information Exposure
- CVE-2023-0556 ContentStudio <= 1.2.5 - Missing Authorization
- CVE-2023-0555 Quick Restaurant Menu <= 2.0.2 - Missing Authorization
- CVE-2023-0554 Quick Restaurant Menu <= 2.0.2 - Cross-Site Request Forgery
- CVE-2023-0553 Quick Restaurant Menu <= 2.0.2 - Authenticated (Administrator+) Cross-Site Scripting
- CVE-2023-0552 Pie Register < 3.8.2.3 - Open Redirect
- CVE-2023-0551 REST API TO MiniProgram <= 4.6.1 - Subscriber+ Attachment Deletion
- CVE-2023-0550 Quick Restaurant Menu <= 2.0.2 - Insecure Direct Object Reference
- CVE-2023-0549 YAFNET Private Message PostPrivateMessage cross site scripting
- CVE-2023-0548 Namaste! LMS < 2.5.9.4 - Admin+ Stored XSS
- CVE-2023-0547 Security feature bypass in Thunderbird
- CVE-2023-0546 FluentForms < 4.3.25 - Contributor+ Stored XSS via Custom HTML Form Field