Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 162 of 430.
- CVE-2023-52328 Cross-site scripting in Trend Micro Apex Central
- CVE-2023-52327 Cross-site scripting in Trend Micro Apex Central
- CVE-2023-52326 Cross-site scripting in Trend Micro Apex Central
- CVE-2023-52325 Code injection in Trend Micro Apex Central
- CVE-2023-52324 File upload in Trend Micro Apex Central
- CVE-2023-52323 PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
- CVE-2023-52322 Cross-site scripting in spip:spip
- CVE-2023-5232 Font Awesome More Icons <= 3.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-52314 Command injection in convert_shape_compare
- CVE-2023-52313 FPE in paddle.argmin and paddle.argmax
- CVE-2023-52312 Null pointer dereference in paddle.crop
- CVE-2023-52311 Command injection in _wget_download
- CVE-2023-52310 Command injection in get_online_pass_interval
- CVE-2023-5231 Magic Action Box <= 2.17.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-52309 Heap buffer overflow in paddle.repeat_interleave
- CVE-2023-52308 FPE in paddle.amin
- CVE-2023-52307 Stack overflow in paddle.linalg.lu_unpack
- CVE-2023-52306 FPE in paddle.lerp
- CVE-2023-52305 FPE in paddle.topk
- CVE-2023-52304 Stack overflow in paddle.searchsorted
- CVE-2023-52303 Segfault in paddle.put_along_axis
- CVE-2023-52302 Segfault in paddle.nextafter
- CVE-2023-5230 TM WooCommerce Compare & Wishlist <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-52296 IBM Db2 for Linux, UNIX and Windows denial of service
- CVE-2023-52292 IBM Sterling File Gateway cross-site scripting
- CVE-2023-52291 Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution
- CVE-2023-52290 Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection vulnerability
- CVE-2023-5229 E2Pdf < 1.20.20 - Admin+ Stored Cross-Site Scriping
- CVE-2023-52289 Path traversal in flaskcode
- CVE-2023-52288 Path traversal in flaskcode
- CVE-2023-52286 Information disclosure in tencent:tencent distributed sql
- CVE-2023-52285 SQL injection in lrx0014:examsys
- CVE-2023-52284 Memory corruption in bytecodealliance:webassembly micro runtime
- CVE-2023-5228 User Registration < 3.0.4.2 - Admin+ Stored XSS
- CVE-2023-52277 Memory corruption in royalapps:royaltsx
- CVE-2023-52275 Missing authorization in tecno-mobile:camon x firmware
- CVE-2023-52274 Cross-site scripting in yzmcms:yzmcms
- CVE-2023-52271 Missing authorization in topazevolution:antifraud
- CVE-2023-5227 Unrestricted Upload of File with Dangerous Type in thorsten/phpmyfaq
- CVE-2023-52269 Cross-site scripting in mdaemon:securitygateway
- CVE-2023-52268 The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session t
- CVE-2023-52267 Memory corruption in hongliuliao:ehttp
- CVE-2023-52266 Use after free in hongliuliao:ehttp
- CVE-2023-52265 Cross-site scripting in idurarapp:idurar
- CVE-2023-52264 Cross-site scripting in thirtybees:bees blog
- CVE-2023-52263 Open redirect in brave:browser
- CVE-2023-52262 Code injection in outdoorbits:little backup box
- CVE-2023-5226 Improper Control of Generation of Code ('Code Injection') in GitLab
- CVE-2023-52257 LogoBee 0.2 allows updates.php?id= XSS.
- CVE-2023-52252 Misconfiguration in unifiedremote:unified remote
- CVE-2023-52251 Code injection in provectus:ui
- CVE-2023-52240 Cross-site scripting in kantega-sso:kantega saml sso oidc kerberos single sign-on
- CVE-2023-52239 XML external entity in magicsoftware:magic xpi integration platform
- CVE-2023-52238 Information disclosure in RUGGEDCOM RST2228
- CVE-2023-52237 Information disclosure in RUGGEDCOM M2100
- CVE-2023-52236 Weak cryptography in RUGGEDCOM M2100
- CVE-2023-52235 SpaceX Starlink Wi-Fi router GEN 2 before 2023.53.0 and Starlink Dish before 07dd2798-ff15-4722-a9ee-de28928aed34 allow CSRF (e.g., for a re
- CVE-2023-52234 WordPress Booster Elite for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability
- CVE-2023-52233 WordPress POST SMTP Mailer plugin <= 2.8.6 - Broken Access Control on API vulnerability
- CVE-2023-52232 WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Authenticated Arbitrary Post/Page Deletion Vulnerability
- CVE-2023-52231 WordPress Booster Plus for WooCommerce plugin < 7.1.2 - Auth. Sensitive Data Exposure vulnerability
- CVE-2023-52230 Missing authorization in Booster Plus for WooCommerce
- CVE-2023-5223 HimitZH HOJ Topic sandbox
- CVE-2023-52229 WordPress Word Replacer Pro plugin <= 1.0 - Broken Access Control vulnerability
- CVE-2023-52228 WordPress Beds24 Online Booking plugin <= 2.0.24 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-52227 WordPress MailerLite – WooCommerce integration plugin <= 2.0.8 - Broken Access Control vulnerability
- CVE-2023-52226 WordPress Advanced Flamingo plugin <= 1.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-52225 WordPress Taggbox Plugin <= 3.1 is vulnerable to PHP Object Injection
- CVE-2023-52224 WordPress Revolut Gateway for WooCommerce plugin <= 4.9.7 - Broken Access Control vulnerability
- CVE-2023-52223 WordPress MailerLite – WooCommerce integration Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52222 WordPress WooCommerce Plugin <= 8.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52221 WordPress Barcode Scanner with Inventory & Order Manager Plugin <= 1.5.1 is vulnerable to Arbitrary File Upload
- CVE-2023-52220 WordPress MonsterInsights plugin <= 8.21.0 - Broken Access Control vulnerability
- CVE-2023-5222 Viessmann Vitogate 300 Web Management Interface vitogate.cgi isValidUser hard-coded password
- CVE-2023-52219 WordPress Gecka Terms Thumbnails Plugin <= 1.1 is vulnerable to PHP Object Injection
- CVE-2023-52218 WordPress WooCommerce Tranzila Gateway Plugin <= 1.0.8 is vulnerable to PHP Object Injection
- CVE-2023-52217 WordPress WooCommerce Conversion Tracking plugin <= 2.0.11 - Broken Access Control vulnerability
- CVE-2023-52216 WordPress JS & CSS Script Optimizer Plugin <= 0.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-52215 WordPress Barcode Scanner with Inventory & Order Manager Plugin <=1.5.1 is vulnerable to SQL Injection
- CVE-2023-52214 WordPress Void Contact Form 7 Widget For Elementor Page Builder plugin <= 2.3 - Broken Access Control vulnerability
- CVE-2023-52213 WordPress Rate Star Review Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52212 WordPress WP Job Manager plugin <= 2.0.0 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-52211 WordPress WP Job Manager plugin <= 2.0.0 - Broken Access Control vulnerability
- CVE-2023-52210 WordPress Product Delivery Date for WooCommerce – Lite plugin <= 2.7.0 - Broken Access Control vulnerability
- CVE-2023-5221 ForU CMS index.php code injection
- CVE-2023-52209 WordPress WPForms User Registration plugin <= 2.1.0 - Authenticated Privilege Escalation vulnerability
- CVE-2023-52208 WordPress Constant Contact Forms Plugin <= 2.4.2 is vulnerable to Sensitive Data Exposure
- CVE-2023-52207 WordPress HTML5 MP3 Player with Playlist Free Plugin <= 3.0.0 is vulnerable to PHP Object Injection
- CVE-2023-52206 WordPress Page Builder: Live Composer Plugin <= 1.5.25 is vulnerable to PHP Object Injection
- CVE-2023-52205 WordPress HTML5 SoundCloud Player Plugin <= 2.8.0 is vulnerable to PHP Object Injection
- CVE-2023-52204 WordPress Randomize Plugin <= 1.4.3 is vulnerable to SQL Injection
- CVE-2023-52203 WordPress CformsII Plugin <= 15.0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52202 WordPress HTML5 MP3 Player with Folder Feedburner Plugin <= 2.8.0 is vulnerable to PHP Object Injection
- CVE-2023-52201 WordPress pTypeConverter Plugin <= 0.2.8.1 is vulnerable to SQL Injection
- CVE-2023-52200 WordPress ARMember Plugin <= 4.0.22 is vulnerable to Cross Site Request Forgery (CSRF) leading to PHP Object Injection
- CVE-2023-52199 WordPress ActivityPub plugin <= 1.0.5 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-52198 WordPress Private Google Calendars Plugin <= 20231125 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52197 WordPress Ads Invalid Click Protection Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52196 WordPress CPT Bootstrap Carousel Plugin <= 1.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-52195 WordPress Posts to Page Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)