Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

9,773 of 28,815· Page 65/196
7.5
CVE-2023-33020

Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.

7.5
CVE-2023-33019

Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel

7.5
CVE-2023-33016

Transient DOS in WLAN firmware while parsing MLO (multi-link operation).

7.5
CVE-2023-33015

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame.

7.5
CVE-2023-28584

Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcem

7.8
CVE-2023-28573

Memory corruption in WLAN HAL while parsing WMI command parameters.

7.8
CVE-2023-28567

Memory corruption in WLAN HAL while handling command through WMI interfaces.

7.8
CVE-2023-28565

Memory corruption in WLAN HAL while handling command streams through WMI interfaces.

7.8
CVE-2023-28564

Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.

7.8
CVE-2023-28560

Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload.

7.8
CVE-2023-28559

Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload.

7.8
CVE-2023-28558

Memory corruption in WLAN handler while processing PhyID in Tx status handler.

7.8
CVE-2023-28557

Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload.

7.8
CVE-2023-28549

Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload.

7.8
CVE-2023-28548

Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART.

7.8
CVE-2023-28544

Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers.

8.1
CVE-2023-28543

A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted

8.4
CVE-2023-28538

Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region.

7.8
CVE-2023-21664

Memory Corruption in Core Platform while printing the response buffer in log.

7.8
CVE-2023-21662

Memory corruption in Core Platform while printing the response buffer in log.

7.5
CVE-2023-21653

Transient DOS in Modem while processing RRC reconfiguration message.

7.5
CVE-2023-21646

Transient DOS in Modem while processing invalid System Information Block 1.

8.4
CVE-2022-40534

Memory corruption due to improper validation of array index in Audio.

8.4
CVE-2022-33275

Memory corruption due to improper validation of array index in WLAN HAL when received lm_itemNum is out of range.

7.1
CVE-2023-35892

IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attac

7.5
CVE-2023-41058

Parse Server is an open source backend server. In affected versions the Parse Cloud trigger `beforeFind` is not invoked

7.5
CVE-2023-41055

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subjec

8.2
CVE-2023-41054

LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subjec

7.8
CVE-2023-28072

Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A

7.8
CVE-2023-4752

Use After Free in GitHub repository vim/vim prior to 9.0.1858.

7.8
CVE-2023-4750

Use After Free in GitHub repository vim/vim prior to 9.0.1857.

7.8
CVE-2023-4733

Use After Free in GitHub repository vim/vim prior to 9.0.1840.

7.5
CVE-2023-3222

Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which co

8.3
CVE-2023-4587

An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local

7.5
CVE-2023-4279

This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, a

8.8
CVE-2023-4019

The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users w

7.1
CVE-2023-40214

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Vathemes Business Pro theme <= 1.10.4 versions.

7.1
CVE-2023-40205

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pixelgrade PixTypes plugin <= 1.4.15 versions.

7.1
CVE-2023-40196

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <

7.1
CVE-2023-32296

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kangu para WooCommerce plugin <= 2.2.9 versions.

7.1
CVE-2023-30485

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Solwin Infotech Responsive WordPress Slider – Avartan Slid

7.5
CVE-2023-4616

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assista

7.5
CVE-2023-4615

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assista

7.1
CVE-2023-40208

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aleksandar Urošević Stock Ticker plugin <= 3.23.3 versions

7.1
CVE-2023-39992

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in vCita.Com Online Booking & Scheduling Calendar for WordPre

7.1
CVE-2023-39991

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blindside Networks BigBlueButton plugin <= 3.0.0-beta.4 ve

7.1
CVE-2023-39918

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <= 1.6.

7.1
CVE-2023-37393

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Projec

7.1
CVE-2023-31220

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 vers

7.1
CVE-2023-30494

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.