Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 137 of 430.
- CVE-2023-5823 WordPress TK Google Fonts GDPR Compliant Plugin <= 2.2.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-5822 Drag and Drop Multiple File Upload - Contact Form 7 <= 1.3.7.3 - Unauthenticated Arbitrary File Upload
- CVE-2023-5821 Cross-site request forgery in Thumbnail carousel slider
- CVE-2023-5820 Cross-site request forgery in Thumbnail Slider With Lightbox
- CVE-2023-5819 Amazonify <= 0.8.1 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2023-5818 Amazonify <= 0.8.1 - Cross-Site Request Forgery to Amazon Tracking ID Update
- CVE-2023-5817 Neon text <= 1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-5816 Code Explorer <= 1.4.5 - Authenticated (Admin+) External File Reading
- CVE-2023-5815 Code injection in Blog Designer Pack – Blog, Post Grid, Post Slider, Post Carousel, Category Post, News
- CVE-2023-5814 SourceCodester Task Reminder System sql injection
- CVE-2023-5813 SourceCodester Task Reminder System sql injection
- CVE-2023-5812 flusity CMS upload.php handleFileUpload unrestricted upload
- CVE-2023-5811 flusity CMS posts.php loadPostAddForm cross site scripting
- CVE-2023-5810 flusity CMS posts.php loadPostAddForm cross site scripting
- CVE-2023-5809 Popup box < 3.8.6 - Admin+ Stored XSS in Categories
- CVE-2023-5808 Missing authorization in System Management Unit (SMU)
- CVE-2023-5807 SQLi in TRtek Software's Education Portal
- CVE-2023-5806 SQLi in Mergen Soft Quality Management System
- CVE-2023-5805 SourceCodester Simple Real Estate Portal System view_estate.php sql injection
- CVE-2023-5804 PHPGurukul Nipah Virus Testing Management System login.php sql injection
- CVE-2023-5803 WordPress Business Directory Plugin Plugin <= 6.3.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-5802 WordPress WP Knowledgebase Plugin <= 1.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-5801 Auth bypass in EMUI
- CVE-2023-5800 Insufficient input validation in VAPIX API create_overlay.cgi
- CVE-2023-5799 WP Hotel Booking < 2.0.9 - Contributor+ Arbitrary Post Deletion
- CVE-2023-5798 Assistant < 1.4.4 - Editor+ SSRF
- CVE-2023-5797 Privilege escalation in ATP series firmware
- CVE-2023-5796 CodeAstro POS System Logo setting unrestricted upload
- CVE-2023-5795 CodeAstro POS System Profile Picture profil unrestricted upload
- CVE-2023-5794 PHPGurukul Online Railway Catering System Login index.php sql injection
- CVE-2023-5793 flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross site scripting
- CVE-2023-5792 SourceCodester Sticky Notes App delete-note.php sql injection
- CVE-2023-5791 SourceCodester Sticky Notes App add-note.php cross site scripting
- CVE-2023-5790 SourceCodester File Manager App add-file.php unrestricted upload
- CVE-2023-5789 Dragon Path 707GR1 Ping Diagnostics cross site scripting
- CVE-2023-5787 Shaanxi Chanming Education Technology Score Query System sql injection
- CVE-2023-5786 GeoServer GeoWebCache rest.html direct request
- CVE-2023-5785 Netentsec NS-ASG Application Security Gateway addaddress_interpret.php sql injection
- CVE-2023-5784 Netentsec NS-ASG Application Security Gateway uploadfirewall.php sql injection
- CVE-2023-5783 Tongda OA 2017 delete.php sql injection
- CVE-2023-5782 Tongda OA 2017 General News delete_query.php sql injection
- CVE-2023-5781 Tongda OA 2017 delete_webmail.php DELETE_STR sql injection
- CVE-2023-5780 Tongda OA 2017 delete.php sql injection
- CVE-2023-5779 can: out of bounds in remove_rx_filter function
- CVE-2023-5778 Missing Length Check
- CVE-2023-5777 Weintek EasyBuilder Pro Use of Hard-coded Credentials
- CVE-2023-5776 Post Meta Data Manager <= 1.2.1 - Cross-Site Request Forgery to Post, Term, and User Meta Deletion
- CVE-2023-5775 BackWPup <= 4.0.2 - Plaintext Storage of Backup Destination Password
- CVE-2023-5774 Animated Counters <= 1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5772 Debug Log Manager <= 2.2.0 - Cross-Site Request Forgery
- CVE-2023-5771 HTML injection in AdminUI through email subject
- CVE-2023-5770 HTML injection in email body through email subject
- CVE-2023-5769 Cross-site scripting in RTU500
- CVE-2023-5768 Denial of service in RTU500 series
- CVE-2023-5767 Cross-site scripting in RTU500
- CVE-2023-5766 Other in Remote Desktop Manager
- CVE-2023-5765 Missing authorization in Remote Desktop Manager
- CVE-2023-5764 Ansible: template injection
- CVE-2023-5763 Glassfish remote code execution
- CVE-2023-5762 Filr – Secure document library < 1.2.3.6 - Author+ RCE via file upload with phar ext
- CVE-2023-5761 SQL injection in Burst Statistics Pro
- CVE-2023-5760 Time-of-check to time-of-use (TOCTOU) bug leads to full local privilege escalation.
- CVE-2023-5759 Unauthenticated Remote Denial-of-Service via Buffer in Helix Core
- CVE-2023-5758 Cross-site scripting in Firefox for iOS
- CVE-2023-5757 WP Crowdfunding < 2.1.8 - Admin+ Stored XSS
- CVE-2023-5756 Digital Publications by Supsystic <= 1.7.6 - Cross-Site Request Forgery via AJAX action
- CVE-2023-5754 Improper Restriction of Excessive Authentication Attempts in Sielco PolyEco1000
- CVE-2023-5753 Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem
- CVE-2023-5752 Mercurial configuration injectable in repo revision when installing via pip
- CVE-2023-5751 CODESYS: Development system prone to DoS through exposure of resource to wrong sphere
- CVE-2023-5750 EmbedPress < 3.9.2 - Reflected XSS
- CVE-2023-5749 EmbedPress < 3.9.2 - Reflected XSS
- CVE-2023-5748 Memory corruption in Synology SSL VPN Client
- CVE-2023-5747 Command injection via wave install file
- CVE-2023-5746 Memory corruption in Camera Firmware
- CVE-2023-5745 Reusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5744 Very Simple Google Maps <= 2.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5743 Telephone Number Linker <= 1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5742 EasyRotator for WordPress <= 1.0.14 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5741 POWR <= 2.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5740 Live Chat with Facebook Messenger <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-5739 Privilege escalation in HP PC Hardware Diagnostics Windows
- CVE-2023-5738 WordPress Backup & Migration < 1.4.5 - Subscriber+ Stored XSS
- CVE-2023-5737 WordPress Backup & Migration < 1.4.4 - Subscriber+ Plugin Settings Update
- CVE-2023-5732 Address bar spoofing via bidirectional characters
- CVE-2023-5731 Memory corruption in Firefox
- CVE-2023-5730 Memory corruption in Firefox
- CVE-2023-5729 Security feature bypass in Firefox
- CVE-2023-5728 Use after free in Firefox
- CVE-2023-5727 Security feature bypass in Firefox
- CVE-2023-5726 Security feature bypass in Firefox
- CVE-2023-5725 Security feature bypass in Firefox
- CVE-2023-5724 Denial of service in Firefox
- CVE-2023-5723 Other in Firefox
- CVE-2023-5722 Information disclosure in Firefox
- CVE-2023-5721 Security feature bypass in Firefox
- CVE-2023-5720 Quarkus: build env information disclosure via gradle plugin
- CVE-2023-5719 Red Lion Crimson Improper Neutralization of Null Byte or NUL Character
- CVE-2023-5718 Information disclosure in Vue.js devtools
- CVE-2023-5717 Out-of-bounds write in Linux kernel's Linux Kernel Performance Events (perf) component