Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

9,773 of 28,815· Page 80/196
7.3
CVE-2023-36540

Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user

7.1
CVE-2023-36535

Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable

7.1
CVE-2023-36533

Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of ser

7.8
CVE-2023-35390

.NET and Visual Studio Remote Code Execution Vulnerability

8.0
CVE-2023-35388

Microsoft Exchange Server Remote Code Execution Vulnerability

8.8
CVE-2023-35387

Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability

7.8
CVE-2023-35386

Windows Kernel Elevation of Privilege Vulnerability

7.5
CVE-2023-35383

Microsoft Message Queuing Information Disclosure Vulnerability

7.8
CVE-2023-35382

Windows Kernel Elevation of Privilege Vulnerability

8.8
CVE-2023-35381

Windows Fax Service Remote Code Execution Vulnerability

7.8
CVE-2023-35380

Windows Kernel Elevation of Privilege Vulnerability

7.8
CVE-2023-35379

Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

7.0
CVE-2023-35378

Windows Projected File System Elevation of Privilege Vulnerability

7.8
CVE-2023-35372

Microsoft Office Visio Remote Code Execution Vulnerability

7.8
CVE-2023-35371

Microsoft Office Remote Code Execution Vulnerability

8.8
CVE-2023-35368

Microsoft Exchange Remote Code Execution Vulnerability

7.8
CVE-2023-35359

Windows Kernel Elevation of Privilege Vulnerability

8.8
CVE-2023-29330

Microsoft Teams Remote Code Execution Vulnerability

8.8
CVE-2023-29328

Microsoft Teams Remote Code Execution Vulnerability

7.8
CVE-2023-20562

Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user

7.8
CVE-2023-20555

Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbi

7.8
CVE-2023-37646

An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory trave

7.5
CVE-2023-38773

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp

7.5
CVE-2023-38771

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp

7.5
CVE-2023-38770

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group

7.5
CVE-2023-38769

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the search

7.5
CVE-2023-38768

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the Proper

7.5
CVE-2023-38767

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value

7.5
CVE-2023-38765

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the member

7.5
CVE-2023-38764

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthm

7.5
CVE-2023-38762

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friend

7.5
CVE-2023-38760

SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role a

8.8
CVE-2023-38759

Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to

7.5
CVE-2023-33756

An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversa

8.6
CVE-2023-2423

A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications

7.5
CVE-2023-24698

Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perf

7.3
CVE-2023-4219

A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected b

7.1
CVE-2023-38384

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Syntactics, Inc. EaSYNC plugin <= 1.3.7 versions.

7.2
CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request

7.1
CVE-2023-27627

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in eggemplo Woocommerce Email Report plugin <= 2.4 versions.

7.1
CVE-2023-24413

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress vertical image slider pl

7.1
CVE-2023-24409

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vert

7.1
CVE-2023-32503

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.6 versions.

7.1
CVE-2023-27421

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Everest News theme <= 1.1.0 versions.

7.1
CVE-2023-27412

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Mocho Blog theme <= 1.0.4 versions.

7.8
CVE-2023-39549

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2). The affected application cont

7.8
CVE-2023-39419

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications con

7.5
CVE-2023-39269

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i80

7.8
CVE-2023-39188

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications con

7.8
CVE-2023-39187

A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications con

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.