Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 124 of 430.
- CVE-2023-7289 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'paytium_sw_save_api_keys'
- CVE-2023-7288 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'update_profile_preference'
- CVE-2023-7287 Paytium: Mollie payment forms & donations <= 4.3.7 - Missing Authorization in 'pt_cancel_subscription'
- CVE-2023-7286 ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference
- CVE-2023-7282 Other in Chrome
- CVE-2023-7281 Other in Chrome
- CVE-2023-7279 Secure Systems Engineering Connaisseur Delegation Name targets_schema.json redos
- CVE-2023-7273 Cross Site Request Forgery in Kiteworks OwnCloud
- CVE-2023-7272 Eclipse Parsson stack overflow with deeply nested objects
- CVE-2023-7271 Privilege escalation in EMUI
- CVE-2023-7270 Local Privilege Escalation via MSI installer
- CVE-2023-7269 ArtPlacer Widget < 2.21.2 - Stored XSS via CSRF
- CVE-2023-7268 ArtPlacer Widget < 2.21.2 - Subscriber+ Arbitrary Widget Deletion
- CVE-2023-7266 Other in TC7001-10
- CVE-2023-7265 Missing authorization in EMUI
- CVE-2023-7264 Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism
- CVE-2023-7263 Path traversal in HarmonyOS AILife Solution 8.0
- CVE-2023-7261 Privilege escalation in Omaha
- CVE-2023-7260 A path traversal vulnerability has been discovered in OpenText™ CX-E Voice.
- CVE-2023-7259 zzdevelop lenosp Adduser Page cross site scripting
- CVE-2023-7258 Denial-of-Service in Gvisor
- CVE-2023-7256 Double-free in libpcap before 1.10.5 with remote packet capture support.
- CVE-2023-7253 Import WP < 2.13.1 - Admin+ Server-side Request Forgery
- CVE-2023-7252 Tickera < 3.5.2.5 - Ticket leakage through IDOR
- CVE-2023-7251 WordPress User Submitted Posts plugin <= 20230901 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-7250 Iperf3: possible denial of service
- CVE-2023-7249 Path traversal in OpenText Directory Services
- CVE-2023-7248 OpenText Vertica Management console might be prone to bypass via crafted requests
- CVE-2023-7247 Login as User or Customer <= 3.8 - Admin Account Takeover
- CVE-2023-7246 System Dashboard < 2.8.10 - XSS via Header Injection
- CVE-2023-7245 Code injection in OpenVPN Connect
- CVE-2023-7244 Ethercat Zeek Plugin Out-of-bounds Write
- CVE-2023-7243 Ethercat Zeek Plugin Out-of-bounds Write
- CVE-2023-7242 Ethercat Zeek Plugin Out-of-bounds Read
- CVE-2023-7241 Webroot Antivirus COM-Hijacking LPE
- CVE-2023-7240 Broken Access Control leading to SSRF in NetIQ Identity Console
- CVE-2023-7239 wp-dashboard-notes < 1.0.11 - Contributor+ Arbitrary Private Notes Update via IDOR
- CVE-2023-7238 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in Orthanc Osimis DICOM Web Viewer
- CVE-2023-7237 Lantronix XPort Weak Encoding for Password
- CVE-2023-7236 Backup Bolt <= 1.3.0 - Sensitive Data Exposure
- CVE-2023-7235 Misconfiguration in OpenVPN
- CVE-2023-7234 Integration Objects OPC UA Server Toolkit Improper Output Neutralization for Logs
- CVE-2023-7233 GigPress <= 2.3.29 - Admin+ Stored Cross Site Scripting
- CVE-2023-7232 Backup and Restore WordPress <= 1.45 - Unauthenticated Sensitive Data Exposure
- CVE-2023-7231 illi Link Party! <= 1.0 - Unauthenticated Arbitrary Link Deletion
- CVE-2023-7230 illi Link Party! <= 1.0 - Admin+ Stored Cross-Site Scripting
- CVE-2023-7229 illi Link Party! <= 1.0 - Settings Update via CSRF
- CVE-2023-7228 illi Link Party! <= 1.0 - Unauthenticated Stored XSS
- CVE-2023-7227 Command Injection vulnerability in SystemK NVR 504/508/516
- CVE-2023-7226 meetyoucrop big-whale Admin Module all.api improper ownership management
- CVE-2023-7225 MapPress <= 2.88.16 - Authenticated (Contributor+) Stored Cross-Site Scripting via Map Settings
- CVE-2023-7224 Code injection in OpenVPN Connect
- CVE-2023-7223 Totolink T6 cstecgi.cgi access control
- CVE-2023-7222 Totolink X2000R HTTP POST Request boa formTmultiAP buffer overflow
- CVE-2023-7221 Totolink T6 HTTP POST Request main buffer overflow
- CVE-2023-7220 Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow
- CVE-2023-7219 Totolink N350RT cstecgi.cgi loginAuth stack-based overflow
- CVE-2023-7218 Totolink N350RT cstecgi.cgi loginAuth stack-based overflow
- CVE-2023-7216 Cpio: extraction allows symlinks which enables remote command execution
- CVE-2023-7215 Chanzhaoyu chatgpt-web cross site scripting
- CVE-2023-7214 Totolink N350RT HTTP POST Request main stack-based overflow
- CVE-2023-7213 Totolink N350RT HTTP POST Request main stack-based overflow
- CVE-2023-7212 DeDeCMS Backend file_class.php unrestricted upload
- CVE-2023-7211 Uniway Router Administrative Web Interface reliance on ip address for authentication
- CVE-2023-7210 OneNav API improper authentication
- CVE-2023-7209 Uniway Router Device Reset device_reset.cgi denial of service
- CVE-2023-7208 Totolink X2000R_V2 boa formTmultiAP buffer overflow
- CVE-2023-7207 Path traversal in Debian cpio
- CVE-2023-7206 Horner Automation Cscape Stack-Based Buffer Overflow
- CVE-2023-7204 WP STAGING WordPress Backup Plugin < 3.2.0 - Unauthorized Sensitive Data Exposure
- CVE-2023-7203 Smart Forms < 2.6.87 - Subscriber+ Arbitrary Entry Deletion
- CVE-2023-7202 Fatal Error Notify < 1.5.3 - Subscriber+ Test Error Email Sending
- CVE-2023-7201 Everest Backup < 2.2.5 - Admin+ Arbitrary File Upload
- CVE-2023-7200 EventON < 4.4.1 - Reflected Cross-Site Scripting
- CVE-2023-7199 Relevanssi (Free < 4.22.0, Premium < 2.25.0) - Unauthenticated Private/Draft Post Disclosure
- CVE-2023-7198 WPDashboardNotes < 1.0.11 - Unauthorised Deletion of Private Notes
- CVE-2023-7197 Marketing Twitter Bot <= 1.11 - Settings Update to Stored XSS via CSRF
- CVE-2023-7196 Ultimate Noindex Nofollow Tool <= 1.1.2 - Settings Update via CSRF
- CVE-2023-7195 WP-Reply Notify <= 1.1 - Settings Update via CSRF
- CVE-2023-7194 Meris <= 1.1.2 - Reflected XSS
- CVE-2023-7193 MTab Bookmark Installation install.php access control
- CVE-2023-7192 Kernel: refcount leak in ctnetlink_create_conntrack()
- CVE-2023-7191 S-CMS reg.php sql injection
- CVE-2023-7190 S-CMS sql injection
- CVE-2023-7189 S-CMS sql injection
- CVE-2023-7188 Shipping 100 Fahuo100 login.php sql injection
- CVE-2023-7187 Totolink N350RT HTTP POST Request stack-based overflow
- CVE-2023-7186 7-card Fakabao notify.php sql injection
- CVE-2023-7185 7-card Fakabao wxpay_notify.php sql injection
- CVE-2023-7184 7-card Fakabao notify.php sql injection
- CVE-2023-7183 7-card Fakabao alipay_notify.php sql injection
- CVE-2023-7181 Muyun DedeBIZ Add Attachment unrestricted upload
- CVE-2023-7180 Tongda OA 2017 delete.php sql injection
- CVE-2023-7179 Campcodes Online College Library System HTTP POST Request category_row.php sql injection
- CVE-2023-7178 Campcodes Online College Library System HTTP POST Request book_row.php sql injection
- CVE-2023-7177 Campcodes Online College Library System HTTP POST Request book_add.php sql injection
- CVE-2023-7176 Campcodes Online College Library System HTTP POST Request return_add.php sql injection
- CVE-2023-7175 Campcodes Online College Library System HTTP POST Request borrow_add.php sql injection
- CVE-2023-7174 aBitGone CommentSafe <= 1.0.0 - Settings Update to Stored XSS via CSRF
- CVE-2023-7173 PHPGurukul Hospital Management System registration.php cross site scripting