Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

14,070 of 28,815· Page 232/282
6.3
CVE-2023-1350

A vulnerability was found in liferea. It has been rated as critical. Affected by this issue is the function update_job_r

4.4
CVE-2023-24999

HashiCorp Vault and Vault Enterprise’s approle auth method allowed any authenticated user with access to an approle dest

4.9
CVE-2023-23327

An Information Disclosure vulnerability exists in AvantFAX 3.3.7. Backups of the AvantFAX sent/received faxes, and datab

5.4
CVE-2023-23326

A Stored Cross-Site Scripting (XSS) vulnerability exists in AvantFAX 3.3.7. An authenticated low privilege user can inje

5.3
CVE-2023-27904

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier prints an error stack trace on agent-related pages when agent connect

4.4
CVE-2023-27903

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier creates a temporary file in the default temporary directory with the

4.3
CVE-2023-27902

Jenkins 2.393 and earlier, LTS 2.375.3 and earlier shows temporary directories related to job workspaces, which allows a

6.6
CVE-2023-27577

flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has alrea

6.7
CVE-2023-25147

An issue in the Trend Micro Apex One agent could allow an attacker who has previously acquired administrative rights via

5.4
CVE-2023-24975

IBM Spectrum Symphony 7.3 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST he

6.5
CVE-2023-1203

Improper removal of sensitive data in the entry edit feature of Hub Business submodule in Devolutions Remote Desktop Man

6.5
CVE-2023-1201

Improper access control in the secure messages feature in Devolutions Server 2022.3.12 and below allows an authenticated

4.4
CVE-2023-0193

NVIDIA CUDA Toolkit SDK contains a vulnerability in cuobjdump, where a local user running the tool against a malicious

5.5
CVE-2022-47484

In telephony service, there is a missing permission check. This could lead to local denial of service in telephone servi

5.5
CVE-2022-47483

In telephony service, there is a missing permission check. This could lead to local denial of service in telephone servi

5.5
CVE-2022-47482

In telephony service, there is a missing permission check. This could lead to local denial of service in telephone servi

5.5
CVE-2022-47481

In telephony service, there is a missing permission check. This could lead to local denial of service in telephone servi

5.5
CVE-2022-47480

In telephony service, there is a missing permission check. This could lead to local denial of service in telephone servi

5.5
CVE-2022-47479

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47478

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47477

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47476

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47475

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47474

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47473

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47472

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

5.5
CVE-2022-47471

In telephony service, there is a missing permission check. This could lead to local information disclosure with no addit

6.7
CVE-2022-47462

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system

6.7
CVE-2022-47461

In telephone service, there is a missing permission check. This could lead to local escalation of privilege with system

5.5
CVE-2022-47460

In gpu device, there is a memory corruption due to a use after free. This could lead to local denial of service in kerne

5.5
CVE-2022-47459

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

5.5
CVE-2022-47458

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

5.5
CVE-2022-47457

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

5.5
CVE-2022-47456

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

5.5
CVE-2022-47455

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

5.5
CVE-2022-47454

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.

5.5
CVE-2022-47453

In wcn service, there is a possible missing params check. This could lead to local denial of service in wcn service.

6.5
CVE-2022-43902

IBM MQ 9.2 CD, 9.2 LTS, 9.3 CD, and 9.3 LTS is vulnerable to a denial of service attack caused by specially crafted PCF

5.9
CVE-2022-33260

Memory corruption due to stack based buffer overflow in core while sending command from USB of large size.

6.7
CVE-2022-33245

Memory corruption in WLAN due to use after free

6.2
CVE-2022-22075

Information Disclosure in Graphics during GPU context switch.

4.3
CVE-2020-5002

IBM Financial Transaction Manager 3.2.0 through 3.2.10 could allow an authenticated user to perform unauthorized actions

4.3
CVE-2023-1346

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

4.3
CVE-2023-1345

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

4.3
CVE-2023-1344

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

4.3
CVE-2023-1343

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

4.3
CVE-2023-1342

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

4.3
CVE-2023-1341

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

4.3
CVE-2023-1340

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up t

4.3
CVE-2023-1339

The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to unauthorized settings update due to a missi

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.