Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 377/577
8.8
CVE-2023-24947

Windows Bluetooth Driver Remote Code Execution Vulnerability

7.8
CVE-2023-24946

Windows Backup Service Elevation of Privilege Vulnerability

5.5
CVE-2023-24945

Windows iSCSI Target Service Information Disclosure Vulnerability

6.5
CVE-2023-24944

Windows Bluetooth Driver Information Disclosure Vulnerability

9.8
CVE-2023-24943

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

7.5
CVE-2023-24942

Remote Procedure Call Runtime Denial of Service Vulnerability

9.8
CVE-2023-24941

Windows Network File System Remote Code Execution Vulnerability

7.5
CVE-2023-24940

Windows Pragmatic General Multicast (PGM) Denial of Service Vulnerability

7.5
CVE-2023-24939

Server for NFS Denial of Service Vulnerability

6.7
CVE-2023-24932

Secure Boot Security Feature Bypass Vulnerability

7.8
CVE-2023-24905

Remote Desktop Client Remote Code Execution Vulnerability

7.1
CVE-2023-24904

Windows Installer Elevation of Privilege Vulnerability

8.1
CVE-2023-24903

Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability

7.8
CVE-2023-24902

Win32k Elevation of Privilege Vulnerability

7.5
CVE-2023-24901

Windows NFS Portmapper Information Disclosure Vulnerability

5.9
CVE-2023-24900

Windows NTLM Security Support Provider Information Disclosure Vulnerability

7.0
CVE-2023-24899

Windows Graphics Component Elevation of Privilege Vulnerability

7.5
CVE-2023-24898

Windows SMB Denial of Service Vulnerability

4.4
CVE-2023-20098

A vulnerability in the CLI of Cisco SDWAN vManage Software could allow an authenticated, local attacker to delete arbitr

8.8
CVE-2023-20046

A vulnerability in the key-based SSH authentication feature of Cisco StarOS Software could allow an authenticated, remot

6.1
CVE-2023-25830

There is a reflected XSS vulnerability in Esri Portal for ArcGIS versions 10.9.1and before which may allow a remote, una

6.1
CVE-2023-25829

There is an unvalidated redirect vulnerability in Esri Portal for ArcGIS 11.0 and below that may allow a remote, unauthe

9.0
CVE-2023-32071

XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, a

9.9
CVE-2023-32069

XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc

5.4
CVE-2023-32066

Time Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prio

5.4
CVE-2023-31807

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

5.4
CVE-2023-31806

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

4.8
CVE-2023-31805

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local authenticated attacker to execute arbit

5.4
CVE-2023-31804

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

4.8
CVE-2023-31803

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

5.4
CVE-2023-31802

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

6.1
CVE-2023-31801

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

5.4
CVE-2023-31800

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

4.8
CVE-2023-31799

Cross Site Scripting vulnerability found in Chamilo Lms v.1.11.18 allows a local attacker to execute arbitrary code via

7.5
CVE-2023-31490

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_attr_psid_sub

5.5
CVE-2023-31489

An issue found in Frrouting bgpd v.8.4.2 allows a remote attacker to cause a denial of service via the bgp_capability_ll

7.5
CVE-2023-31476

An issue was discovered on GL.iNet devices running firmware before 3.216. There is an arbitrary file write in which an e

6.1
CVE-2023-31144

Craft CMS is a content management system. Starting in version 3.0.0 and prior to versions 3.8.4 and 4.4.4, a malformed t

5.5
CVE-2023-30088

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function i

5.5
CVE-2023-30087

Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the m

5.5
CVE-2023-30086

Buffer Overflow vulnerability found in Libtiff V.4.0.7 allows a local attacker to cause a denial of service via the tiff

5.5
CVE-2023-30085

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via

5.5
CVE-2023-30084

An issue found in libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via the stackVal functio

5.5
CVE-2023-30083

Buffer Overflow vulnerability found in Libming swftophp v.0.4.8 allows a local attacker to cause a denial of service via

5.4
CVE-2023-25834

Changes to user permissions in Portal for ArcGIS 10.9.1 and below are incompletely applied in specific use cases. This i

5.4
CVE-2021-31711

Cross Site Scripting vulnerability found in Trippo ResponsiveFilemanager v.9.14.0 and before allows a remote attacker to

7.8
CVE-2021-31240

An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWF_IMPORTASSETS functi

8.8
CVE-2020-23363

Cross Site Request Forgery (CSRF) vulnerability found in Verytops Verydows all versions that allows an attacker to execu

7.1
CVE-2020-23362

Insecure Permissons vulnerability found in Shop_CMS YerShop all versions allows a remote attacker to escalate privileges

6.1
CVE-2020-18280

Cross Site Scripting vulnerability found in Phodal CMD v.1.0 allows a local attacker to execute arbitrary code via the E

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.