Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 197/577
5.5
CVE-2023-33917

In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no a

5.5
CVE-2023-33916

In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no a

7.5
CVE-2023-33915

In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no

7.5
CVE-2023-33914

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to

4.4
CVE-2022-48453

In camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-48452

In Ifaa service, there is a possible missing permission check. This could lead to local denial of service with System ex

4.4
CVE-2022-47353

In vdsp device, there is a possible system crash due to improper input validation.This could lead to local denial of ser

4.4
CVE-2022-47352

In camera driver, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial

6.3
CVE-2023-4749

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected

6.3
CVE-2023-4747

A vulnerability classified as critical was found in DedeCMS 5.7.110. This vulnerability affects unknown code of the file

8.8
CVE-2023-4746

A vulnerability classified as critical has been found in TOTOLINK N200RE V5 9.3.5u.6437_B20230519. This affects the func

6.3
CVE-2023-4745

A vulnerability was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 202308

9.8
CVE-2023-4744

A vulnerability was found in Tenda AC8 16.03.34.06_cn_TDC01. It has been declared as critical. Affected by this vulnerab

3.1
CVE-2023-4743

A vulnerability was found in Dreamer CMS up to 4.1.3. It has been classified as problematic. Affected is an unknown func

6.3
CVE-2023-4742

A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the

6.3
CVE-2023-4741

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of t

6.3
CVE-2023-4740

A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file

6.3
CVE-2023-4739

A vulnerability, which was classified as critical, has been found in Byzoro Smart S85F Management Platform up to 2023082

7.8
CVE-2023-4751

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1331.

5.9
CVE-2023-41180

Incorrect certificate validation in InvokeHTTP on Apache NiFi MiNiFi C++ versions 0.13 to 0.14 allows an intermediary to

10.0
CVE-2023-3703

Proscend Advice ICR Series routers FW version 1.76 - CWE-1392: Use of Default Credentials

7.8
CVE-2023-39374

ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element

7.4
CVE-2023-39373

 A Hyundai model (2017) - CWE-294: Authentication Bypass by Capture-replay.

8.1
CVE-2023-39372

StarTrinity Softswitch version 2023-02-16 - Multiple CSRF (CWE-352)

8.8
CVE-2023-39371

StarTrinity Softswitch version 2023-02-16 - Open Redirect (CWE-601)

8.8
CVE-2023-39370

StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

8.8
CVE-2023-39369

StarTrinity Softswitch version 2023-02-16 - Multiple Reflected XSS (CWE-79)

4.8
CVE-2023-37222

Farsight Tech Nordic AB ProVide version 14.5 - Multiple XSS vulnerabilities (CWE-79) can be exploited by a user wit

8.8
CVE-2023-37221

7Twenty BOT - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').

7.2
CVE-2023-37220

Synel Terminals - CWE-494: Download of Code Without Integrity Check

5.9
CVE-2023-38521

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Exifography plugin <= 1.3.1 versions.

5.9
CVE-2023-38518

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Visualmodo Borderless plugin <= 1.4.8 versions.

5.9
CVE-2023-38517

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Realwebcare WRC Pricing Tables plugin <= 2.3.7 version

6.5
CVE-2023-38516

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Audio Player

5.9
CVE-2023-38482

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in QualityUnit Post Affiliate Pro plugin <= 1.25.0 versio

5.9
CVE-2023-38476

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SuiteDash :: ONE Dashboard® Client Portal : SuiteDash

5.9
CVE-2023-38387

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Elastic Email Sender plugin <= 1.2.6 versions.

7.8
CVE-2023-4738

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1848.

7.8
CVE-2023-4736

Untrusted Search Path in GitHub repository vim/vim prior to 9.0.1833.

7.8
CVE-2023-4735

Out-of-bounds Write in GitHub repository vim/vim prior to 9.0.1847.

7.8
CVE-2023-4734

Integer Overflow or Wraparound in GitHub repository vim/vim prior to 9.0.1846.

5.3
CVE-2023-39983

A vulnerability that poses a potential risk of polluting the MXsecurity sqlite database and the nsm-web UI has been iden

7.5
CVE-2023-39982

A vulnerability has been identified in MXsecurity versions prior to v1.0.1. The vulnerability may put the confidentialit

7.5
CVE-2023-39981

A vulnerability that allows for unauthorized access has been discovered in MXsecurity versions prior to v1.0.1. This vul

7.1
CVE-2023-39980

A vulnerability that allows the unauthorized disclosure of authenticated information has been identified in MXsecurity v

9.8
CVE-2023-39979

There is a vulnerability in MXsecurity versions prior to 1.0.1 that can be exploited to bypass authentication. A remote

6.4
CVE-2023-4718

The Font Awesome 4 Menus plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'fa' and 'fa-stack' s

8.1
CVE-2023-3297

In Ubuntu's accountsservice an unprivileged local attacker can trigger a use-after-free vulnerability in accountsservice

4.3
CVE-2023-4714

A vulnerability was found in PlayTube 3.0.1 and classified as problematic. This issue affects some unknown processing of

5.5
CVE-2023-4713

A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function addC

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.