Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 479/577
6.7
CVE-2023-20643

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20642

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20641

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20640

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20639

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20638

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20637

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20636

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

4.4
CVE-2023-20635

In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local informati

6.7
CVE-2023-20634

In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalati

6.7
CVE-2023-20633

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20632

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20630

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20628

In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of p

6.7
CVE-2023-20627

In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

6.7
CVE-2023-20626

In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o

6.4
CVE-2023-20625

In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with

6.7
CVE-2023-20624

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

6.4
CVE-2023-20623

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of priv

6.7
CVE-2023-20621

In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

4.1
CVE-2023-20620

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privil

5.3
CVE-2023-1003

A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown fu

4.3
CVE-2023-27485

thmmniii/fbs-core is an open source feedback system for students. In versions prior to 1.5.3 when querying `subresults`,

4.3
CVE-2023-27481

Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with

7.7
CVE-2023-27480

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

9.9
CVE-2023-27479

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected ver

6.5
CVE-2023-27478

libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could ret

8.8
CVE-2023-27475

Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsu

9.8
CVE-2023-24775

Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member

4.0
CVE-2023-25611

A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0

7.5
CVE-2023-25605

A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the admi

4.9
CVE-2023-25230

A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary req

7.2
CVE-2023-25223

CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list.

4.6
CVE-2023-23776

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 th

7.6
CVE-2023-1257

An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain ac

4.3
CVE-2022-46257

An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to

6.5
CVE-2022-45861

An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 throu

8.2
CVE-2022-42476

A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 an

7.5
CVE-2022-41333

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below

5.3
CVE-2022-41329

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2

6.7
CVE-2022-41328KEV

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet Fort

7.5
CVE-2022-40676

A improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC versions 9.4

7.8
CVE-2022-39953

A improper privilege management in Fortinet FortiNAC version 9.4.0 through 9.4.1, FortiNAC version 9.2.0 through 9.2.6,

7.2
CVE-2022-39951

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWeb versio

5.4
CVE-2022-27490

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, Forti

5.5
CVE-2022-22297

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpr

7.5
CVE-2023-27522

HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server:

9.8
CVE-2023-25690

Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack.

6.3
CVE-2020-36670

The NEX-Forms. plugin for WordPress is vulnerable to unauthorized disclosure and modification of data in versions up to,

4.8
CVE-2023-26953

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.