Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 134 of 430.
- CVE-2023-6154 Local privilege escalation in Bitdefender Total Security (VA-11168)
- CVE-2023-6153 Authentication Bypass in TeoSOFT Software TeoBASE
- CVE-2023-6152 Email Validation Bypass And Preventing Sign Up From Email's Owner
- CVE-2023-6151 Information Disclosure in Eskom E-municipality
- CVE-2023-6150 Information Disclosure in Eskom E-municipality
- CVE-2023-6149 Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security
- CVE-2023-6148 Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance
- CVE-2023-6147 Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance
- CVE-2023-6146 Stored XSS Vulnerability in QualysGuard VM/PC
- CVE-2023-6145 SQLi in Softomi E-commerce Software
- CVE-2023-6144 Dev Blog v1.0 - ATO
- CVE-2023-6143 Mali GPU Kernel Driver allows improper GPU memory processing operations
- CVE-2023-6142 Dev Blog v1.0 - Stored XSS
- CVE-2023-6141 Essential Real Estate < 4.4.0 - Subscriber+ Stored XSS
- CVE-2023-6140 Essential Real Estate < 4.4 - Subscriber+ Arbitrary File Upload
- CVE-2023-6139 Essential Real Estate < 4.4.0 - Subscriber+ Denial of Service via Arbitrary Option Update
- CVE-2023-6138 Other in Certain HP Workstation PCs
- CVE-2023-6137 WordPress Frontier Post Plugin <= 6.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-6136 WordPress Debug Log Manager Plugin <= 2.3.0 is vulnerable to Sensitive Data Exposure
- CVE-2023-6135 Weak cryptography in Firefox
- CVE-2023-6134 Keycloak: reflected xss via wildcard in oidc redirect_uri
- CVE-2023-6133 Forminator <= 1.27.0 - Authenticated (Administrator+) Arbitrary File Upload
- CVE-2023-6132 AVEVA Edge products Uncontrolled Search Path Element
- CVE-2023-6131 Code Injection in salesagility/suitecrm
- CVE-2023-6130 Path Traversal: '\..\filename' in salesagility/suitecrm
- CVE-2023-6129 POLY1305 MAC implementation corrupts vector registers on PowerPC
- CVE-2023-6128 Cross-site Scripting (XSS) - Reflected in salesagility/suitecrm
- CVE-2023-6127 Unrestricted Upload of File with Dangerous Type in salesagility/suitecrm
- CVE-2023-6126 Code Injection in salesagility/suitecrm
- CVE-2023-6125 Code Injection in salesagility/suitecrm
- CVE-2023-6124 Server-Side Request Forgery (SSRF) in salesagility/suitecrm
- CVE-2023-6123 Improper Neutralization vulnerability affects OpenText ALM Octane.
- CVE-2023-6122 Reflected XSS in Softomi E-commerce Software
- CVE-2023-6121 Kernel: nvme: info leak due to out-of-bounds read in nvmet_ctrl_find_get
- CVE-2023-6120 Welcart e-Commerce <= 2.9.6 - Authenticated (Administrator+) Directory Traversal
- CVE-2023-6119 Privilege escalation in GetSusp
- CVE-2023-6118 Path Traversal in Neutron IP Camera
- CVE-2023-6117 M-Files REST API allows Denial of Service
- CVE-2023-6116 Remote Code Execution without authentication using stack overflow
- CVE-2023-6114 Duplicator < 1.5.7.1; Duplicator Pro < 4.5.14.2 - Unauthenticated Sensitive Data Exposure
- CVE-2023-6113 WP Staging (Free < 3.1.3, Pro < 5.1.3) - Unauthenticated Backup Download
- CVE-2023-6112 Use after free in Chrome
- CVE-2023-6111 Use-after-free in Linux kernel's netfilter: nf_tables component
- CVE-2023-6110 Openstack: deleting a non existing access rule deletes another existing access rule in it's scope
- CVE-2023-6109 YOP Poll <= 6.5.26 - Race Condition to Vote Manipulation
- CVE-2023-6105 ManageEngine Information Disclosure in Multiple Products
- CVE-2023-6103 Intelbras RX 1500 SSID WiFi.html cross site scripting
- CVE-2023-6102 Maiwei Safety Production Control Platform unrestricted upload
- CVE-2023-6101 Maiwei Safety Production Control Platform Intelligent Monitoring ha.html information disclosure
- CVE-2023-6100 Maiwei Safety Production Control Platform GetItemList information disclosure
- CVE-2023-6099 Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges management
- CVE-2023-6098 Cross-site Scripting on ICSSolution ICS Business Manager
- CVE-2023-6097 SQL Injection on ICSSolution ICS Business Manager
- CVE-2023-6096 using a inappropriate encryption logic
- CVE-2023-6095 Remote Code Execution without authentication using memory overflow
- CVE-2023-6094 OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials
- CVE-2023-6093 OnCell G3150A-LTE Series: Clickjacking Vulnerability
- CVE-2023-6091 WordPress Theme Editor plugin <= 2.7.1 - Arbitrary File Upload vulnerability
- CVE-2023-6090 WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload
- CVE-2023-6084 Tongda OA 2017 delete.php sql injection
- CVE-2023-6082 Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting
- CVE-2023-6081 Chart.js for WordPress <= 2023.2 - Editor+ Stored Cross-Site Scripting in New Chart
- CVE-2023-6080 Privilege Escalation to SYSTEM in Lakeside Software Installer
- CVE-2023-6078 Command injection in BIOVIA Materials Studio products
- CVE-2023-6077 Slider - Ultimate Responsive Image Slider < 3.5.12 - Subscriber+ Arbitrary Post Access
- CVE-2023-6076 PHPGurukul Restaurant Table Booking System Reservation Status booking-details.php information disclosure
- CVE-2023-6075 PHPGurukul Restaurant Table Booking System Reservation Request index.php cross site scripting
- CVE-2023-6074 PHPGurukul Restaurant Table Booking System Booking Reservation check-status.php sql injection
- CVE-2023-6073 DoS and Control of Volume Settings for VW ID.3 ICAS3 IVI ECU
- CVE-2023-6072 Cross-site scripting in Trellix Central Management (CM)
- CVE-2023-6071 Command injection in ESM
- CVE-2023-6070 Server-side request forgery in Trellix Enterprise Security Manager (ESM)
- CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor
- CVE-2023-6068 Security feature bypass in MOS
- CVE-2023-6067 WP User Profile Avatar <= 1.0.1 - Contributor+ Stored XSS
- CVE-2023-6066 WP Custom Widget Area <= 1.2.5 - Subscriber+ Menus Creation/Deletion/Update
- CVE-2023-6065 Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure
- CVE-2023-6064 PayHere Payment Gateway < 2.2.12 - Unauthenticated Log Data Disclosure
- CVE-2023-6063 WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection
- CVE-2023-6062 Arbitrary File Write
- CVE-2023-6058 HTTPS Certificate Validation Issue in Bitdefender Safepay (VA-11167)
- CVE-2023-6057 Insecure Trust of DSA-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11166)
- CVE-2023-6056 Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)
- CVE-2023-6055 Improper Certificate Validation in Bitdefender Total Security HTTPS Scanning (VA-11158)
- CVE-2023-6054 Tongda OA 2017 lock.php sql injection
- CVE-2023-6053 Tongda OA 2017 delete.php sql injection
- CVE-2023-6052 Tongda OA 2017 delete.php sql injection
- CVE-2023-6051 Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2023-6050 Estatik Real Estate Plugin < 4.1.1 - Reflected XSS
- CVE-2023-6049 Estatik Real Estate Plugin < 4.1.1 - Unauthenticated PHP Object Injection
- CVE-2023-6048 Estatik Real Estate Plugin < 4.1.1 - Subscriber+ Arbitrary Option Update
- CVE-2023-6047 Reflected XSS in Algoritim E-commerce Software
- CVE-2023-6046 EventON < 2.2 - Admin+ Stored HTML Injection
- CVE-2023-6045 Arkruntime has a type confusion vulnerability
- CVE-2023-6044 Privilege escalation in Vantage
- CVE-2023-6043 Privilege escalation in Vantage
- CVE-2023-6042 Getwid < 2.0.3 - Unauthenticated Arbitrary Email Sending to Admin
- CVE-2023-6040 Memory corruption in linux
- CVE-2023-6039 Kernel: use-after-free in drivers/net/usb/lan78xx.c in lan78xx_disconnect
- CVE-2023-6038 Local File Inclusion in h2oai/h2o-3