Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

9,773 of 28,815· Page 64/196
7.1
CVE-2023-29441

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Robert Heller WebLibrarian plugin <= 3.5.8.1 versions.

8.6
CVE-2023-3472

Use after free vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrary

8.6
CVE-2023-3471

Buffer overflow vulnerability in Panasonic KW Watcher versions 1.00 through 2.82 may allow attackers to execute arbitrar

7.8
CVE-2023-32163

Wacom Drivers for Windows Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attac

7.8
CVE-2023-32162

Wacom Drivers for Windows Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability a

8.1
CVE-2023-30729

Improper Certificate Validation in Samsung Email prior to version 6.1.82.0 allows remote attacker to intercept the netwo

8.5
CVE-2023-30710

Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch priv

7.9
CVE-2023-30709

Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with sy

7.5
CVE-2023-30706

Improper authorization in Samsung Keyboard prior to SMR Sep-2023 Release 1 allows attacker to read arbitrary file with s

7.2
CVE-2023-4719

The Simple Membership plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `list_type` parameter

7.8
CVE-2023-32428

This issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and

7.8
CVE-2023-32426

A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to gain

7.8
CVE-2023-32425

The issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5. An

7.8
CVE-2023-32379

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.4. An app m

7.8
CVE-2023-32356

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

8.8
CVE-2023-29166

A logic issue was addressed with improved state management. This issue is fixed in Pro Video Formats 2.2.5. A user may b

7.8
CVE-2023-28215

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-28214

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-28213

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-28212

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-28211

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-28210

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-28209

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app m

7.8
CVE-2023-4487

GE CIMPLICITY 2023 is by a process control vulnerability, which could allow a local attacker to insert malicious config

8.8
CVE-2023-4763

Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit hea

8.8
CVE-2023-4762KEV

Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a

8.1
CVE-2023-4761

Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remote attacker who had compromi

7.2
CVE-2023-39362

Cacti is an open source operational monitoring and fault management framework. In Cacti 1.2.24, under certain conditions

8.8
CVE-2023-39358

Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerabil

8.8
CVE-2023-39357

Cacti is an open source operational monitoring and fault management framework. A defect in the sql_save function was dis

7.8
CVE-2023-31132

Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a privil

8.8
CVE-2023-39359

Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerabil

7.8
CVE-2023-4781

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 9.0.1873.

7.5
CVE-2023-41317

The Apollo Router is a configurable, high-performance graph router written in Rust to run a federated supergraph that us

7.8
CVE-2020-35593

BMC PATROL Agent through 20.08.00 allows local privilege escalation via vectors involving pconfig +RESTART -host.

8.8
CVE-2023-40918

KnowStreaming 3.3.0 is vulnerable to Escalation of Privileges. Unauthorized users can create a new user with an admin ro

7.2
CVE-2015-2202

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the und

7.2
CVE-2015-2201

Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by ad

8.8
CVE-2015-1391

Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.

7.2
CVE-2023-3375

Unrestricted Upload of File with Dangerous Type vulnerability in Unisign Bookreen allows OS Command Injection. This iss

8.1
CVE-2023-34998

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v

7.5
CVE-2023-34353

An authentication bypass vulnerability exists in the OAS Engine authentication functionality of Open Automation Software

8.1
CVE-2023-31242

An authentication bypass vulnerability exists in the OAS Engine functionality of Open Automation Software OAS Platform v

8.8
CVE-2023-41108

TEF portal 2023-07-17 is vulnerable to authenticated remote code execution.

8.8
CVE-2023-2453

There is insufficient sanitization of tainted file names that are directly concatenated with a path that is subsequently

8.8
CVE-2022-41763

An issue was discovered in NOKIA AMS 9.7.05. Remote Code Execution exists via the debugger of the ipAddress variable. A

8.8
CVE-2023-39448

Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create ar

7.5
CVE-2023-4540

Improper Handling of Exceptional Conditions vulnerability in Daurnimator lua-http library allows Excessive Allocation an

7.5
CVE-2023-41909

An issue was discovered in FRRouting FRR through 9.0. bgp_nlri_parse_flowspec in bgpd/bgp_flowspec.c processes malformed

8.4
CVE-2023-33021

Memory corruption in Graphics while processing user packets for command submission.

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.