Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 429 of 430.
- CVE-2023-0121 Allocation of Resources Without Limits or Throttling in GitLab
- CVE-2023-0120 Incorrect Authorization in GitLab
- CVE-2023-0119 Foreman: stored cross-site scripting in host tab
- CVE-2023-0118 Foreman: arbitrary code execution through templates
- CVE-2023-0117 Auth bypass in EMUI
- CVE-2023-0116 Missing authorization in EMUI
- CVE-2023-0114 Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on disk
- CVE-2023-0113 Netis Netcore Router Backup param.file.tgz information disclosure
- CVE-2023-0112 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2023-0111 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2023-0110 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2023-0109 Stored XSS in usememos/memos
- CVE-2023-0108 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2023-0107 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2023-0106 Cross-site Scripting (XSS) - Stored in usememos/memos
- CVE-2023-0105 Keycloak: Impersonation and lockout possible through incorrect handling of email trust
- CVE-2023-0104 Path traversal in EasyBuilder Pro cMT
- CVE-2023-0103 CVE-2023-0103
- CVE-2023-0102 CVE-2023-0102
- CVE-2023-0101 Privilege escalation in Nessus
- CVE-2023-0100 Improper Input Validation In Eclipse BIRT
- CVE-2023-0099 Simple URLs < 115 - Multiple Reflected XSS
- CVE-2023-0098 Simple URLs < 115 - Subscriber+ SQLi
- CVE-2023-0097 Post Grid, Post Carousel, & List Category Posts < 2.4.19 - Contributor+ Stored XSS
- CVE-2023-0096 Happyforms < 1.22.0 - Contributor+ Stored XSS
- CVE-2023-0095 Page View Count < 2.6.1 - Contributor+ Stored XSS
- CVE-2023-0094 UpQode Google Maps <= 1.0.5 - Contributor+ Stored XSS
- CVE-2023-0093 Command injection in Advanced Server Access
- CVE-2023-0092 Juju controller - Arbitrary file reading vulnerability
- CVE-2023-0091 Keycloak has lack of validation of access token on client registrations endpoint
- CVE-2023-0090 Proofpoint Enterprise Protection webservices unauthenticated RCE
- CVE-2023-0089 Proofpoint Enterprise Protection webutils authenticated RCE
- CVE-2023-0088 Swifty Page Manager <= 3.0.1 - Cross-Site Request Forgery
- CVE-2023-0087 Swifty Page Manager <= 3.0.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-0086 JetWidgets for Elementor <= 1.0.12 - Cross-Site Request Forgery to Settings Update
- CVE-2023-0085 Metform Elementor Contact Form Builder <= 3.2.1 - reCaptcha Protection Bypass
- CVE-2023-0084 Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting
- CVE-2023-0083 The ArkUI framework subsystem doesn't check the input parameter,causing type confusion and invalid memory access.
- CVE-2023-0082 ExactMetrics < 7.12.1 - Contributor+ Stored XSS
- CVE-2023-0081 MonsterInsights < 8.12.1 - Contributor+ Stored XSS
- CVE-2023-0080 Customer Reviews for WooCommerce < 5.16.0 - Contributor+ LFI
- CVE-2023-0079 Customer Reviews for WooCommerce < 5.17.0 - Contributor+ Stored XSS
- CVE-2023-0078 Resume Builder <= 3.1.1 - Subscriber+ Stored XSS
- CVE-2023-0077 Integer overflow in Synology Router Manager (SRM)
- CVE-2023-0076 Download Attachments < 1.3 - Contributor+ Stored XSS
- CVE-2023-0075 Amazon JS <= 0.10 - Contributor+ Stored XSS
- CVE-2023-0074 WP Social Widget < 2.2.4 - Contributor+ Stored XSS
- CVE-2023-0073 Client Logo Carousel <= 3.0.0 - Contributor+ Stored XSS
- CVE-2023-0072 WC Vendors Marketplace < 2.4.5 - Contributor+ Stored XSS
- CVE-2023-0071 WP Tabs < 2.1.17 - Contributor+ Stored XSS
- CVE-2023-0070 ResponsiveVoice Text To Speech < 1.7.7 - Contributor+ Stored XSS
- CVE-2023-0069 WPaudio MP3 Player <= 4.0.2 - Contributor+ Stored XSS
- CVE-2023-0068 Product GTIN (EAN, UPC, ISBN) for WooCommerce <= 1.1.1 - Contributor+ Stored XSS
- CVE-2023-0067 Timed Content < 2.73 - Contributor+ Stored XSS
- CVE-2023-0066 Companion Sitemap Generator <= 4.5.1.1 - Contributor+ Stored XSS
- CVE-2023-0065 i2 Pros & Cons <= 1.3.1 - Contributor+ Stored XSS
- CVE-2023-0064 eVision Responsive Column Layout Shortcodes <= 2.3 - Contributor+ Stored XSS
- CVE-2023-0063 Synved Shortcodes <= 1.6.36 - Contributor+ Stored XSS
- CVE-2023-0062 EAN for WooCommerce < 4.4.3 - Contributor+ Stored XSS
- CVE-2023-0061 Judge.me Product Reviews for WooCommerce < 1.3.21 - Contributor+ Stored XSS
- CVE-2023-0060 Responsive Gallery Grid < 2.3.9 - Contributor+ Stored XSS
- CVE-2023-0059 Youzify < 1.2.2 - Contributor+ Stored XSS
- CVE-2023-0058 Tiempo.com <= 0.1.2 - Stored XSS via CSRF
- CVE-2023-0057 Improper Restriction of Rendered UI Layers or Frames in pyload/pyload
- CVE-2023-0056 Denial of service in haproxy
- CVE-2023-0055 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in pyload/pyload
- CVE-2023-0054 Out-of-bounds Write in vim/vim
- CVE-2023-0053 SAUTER Controls Nova 200–220 Series Cleartext Transmission of Sensitive Information
- CVE-2023-0052 SAUTER Controls Nova 200–220 Series Missing Authentication for Critical Function
- CVE-2023-0051 Heap-based Buffer Overflow in vim/vim
- CVE-2023-0050 Cross-site scripting in GitLab
- CVE-2023-0049 Out-of-bounds Read in vim/vim
- CVE-2023-0048 Code Injection in lirantal/daloradius
- CVE-2023-0046 Improper Restriction of Names for Files and Other Resources in lirantal/daloradius
- CVE-2023-0045 Incorrect indirect branch prediction barrier in the Linux Kernel
- CVE-2023-0044 Cross-site Scripting in Quarkus
- CVE-2023-0043 Custom Add User <= 2.0.2 - Reflected Cross-Site Scripting
- CVE-2023-0042 Open redirect in GitLab
- CVE-2023-0041 IBM Security Guardium session fixation
- CVE-2023-0040 Async HTTP Client has CRLF Injection vulnerability in HTTP request headers
- CVE-2023-0038 Survey Maker – Best WordPress Survey Plugin <= 3.1.3 - Unauthenticated Stored Cross-Site Scripting
- CVE-2023-0037 10WebMapBuilder < 1.0.73 - Unauthenticated SQLi
- CVE-2023-0036 platform_callback_stub in misc subsystem has an authentication bypass vulnerability which allows an "SA relay attack".
- CVE-2023-0035 Auth bypass in OpenHarmony
- CVE-2023-0034 JetWidgets For Elementor < 1.0.14 - Contributor+ Stored XSS via Shortcode
- CVE-2023-0033 PDF Viewer < 1.0.0 - Contributor+ Stored XSS via Shortcode
- CVE-2023-0030 Use after free in kernel
- CVE-2023-0029 Multilaser RE708 Telnet Service denial of service
- CVE-2023-0028 Cross-site Scripting (XSS) - Stored in linagora/twake
- CVE-2023-0027 Rockwell Automation Modbus TCP AOI Server Could Leak Sensitive Information
- CVE-2023-0026 Denial of service in Junos OS
- CVE-2023-0025 Cross-site scripting in Solution Manager (BSP Application)
- CVE-2023-0024 Cross-site scripting in Solution Manager (BSP Application)
- CVE-2023-0023 Information Disclosure in SAP Bank Account Management (Manage Banks)
- CVE-2023-0022 Code Injection vulnerability in SAP BusinessObjects Business Intelligence platform (Analysis edition for OLAP)
- CVE-2023-0021 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver
- CVE-2023-0020 Information disclosure in SAP BusinessObjects Business Intelligence Platform
- CVE-2023-0019 Missing authorization in SAP GRC (Process Control)
- CVE-2023-0018 Cross-site scripting in BusinessObjects Business Intelligence Platform (Central management console)
- CVE-2023-0017 Improper access control in SAP NetWeaver AS for Java