Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 178 of 430.
- CVE-2023-49964 Code injection in hyland:alfresco content services
- CVE-2023-49963 DYMO LabelWriter Print Server through 2.366 contains a backdoor hard-coded password that could allow an attacker to take control.
- CVE-2023-49961 Missing authorization in wallix:bastion
- CVE-2023-49960 Path traversal in indu-sol:profinet-inspektor nt firmware
- CVE-2023-4996 Local privilege escalation
- CVE-2023-49959 Command injection in indu-sol:profinet-inspektor nt
- CVE-2023-49958 Business logic in dallmann-consulting:open charge point protocol
- CVE-2023-49957 Business logic in dallmann-consulting:open charge point protocol
- CVE-2023-49956 Denial of service in dallmann-consulting:open charge point protocol
- CVE-2023-49955 Denial of service in dallmann-consulting:open charge point protocol
- CVE-2023-49954 SQL injection in 3cx:3cx
- CVE-2023-49952 Security feature bypass in joinmastodon:mastodon
- CVE-2023-49950 Cross-site scripting in logpoint:siem
- CVE-2023-4995 Embed Calendly <= 3.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-49949 Auth bypass in passwork:passwork
- CVE-2023-49948 Information disclosure in forgejo:forgejo
- CVE-2023-49947 Auth bypass in forgejo:forgejo
- CVE-2023-49946 Missing authorization in forgejo:forgejo
- CVE-2023-49944 Security feature bypass in beyondtrust:privilege management for windows
- CVE-2023-49943 Cross-site scripting in zohocorp:manageengine servicedesk plus msp
- CVE-2023-4994 Allow PHP in Posts and Pages <= 3.0.4 - Authenticated (Subscriber+) Remote Code Execution via Shortcode
- CVE-2023-49938 Missing authorization in schedmd:slurm
- CVE-2023-49937 Memory corruption in schedmd:slurm
- CVE-2023-49936 Null dereference in schedmd:slurm
- CVE-2023-49935 Auth bypass in schedmd:slurm
- CVE-2023-49934 SQL injection in schedmd:slurm
- CVE-2023-49933 Security feature bypass in schedmd:slurm
- CVE-2023-49932 Security feature bypass in couchbase:couchbase server
- CVE-2023-49931 Missing authorization in couchbase:couchbase server
- CVE-2023-49930 Missing authorization in couchbase:couchbase server
- CVE-2023-4993 Sensetive Data Exposure in Utarit's Soliclub
- CVE-2023-49928 Information disclosure in samsung:exynos 1080 firmware
- CVE-2023-49927 Weak cryptography in samsung:exynos 1080 firmware
- CVE-2023-49926 Cross-site scripting in misp-project:misp
- CVE-2023-49923 Enterprise Search Insertion of Sensitive Information into Log File
- CVE-2023-49922 Beats Insertion of Sensitive Information into Log File
- CVE-2023-49921 Elasticsearch Insertion of Sensitive Information into Log File
- CVE-2023-49920 Apache Airflow: Missing CSRF protection on DAG/trigger
- CVE-2023-49914 Other in choosemuse:muse 2 firmware
- CVE-2023-49913 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49912 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49911 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49910 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-4991 NextBX QWAlerter QWAlerter.exe unquoted search path
- CVE-2023-49909 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49908 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49907 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49906 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-49900 Origin Validation Error in X-Rite MA-T6
- CVE-2023-4990 Path traversal in MCL-Net
- CVE-2023-49899 Origin Validation Error in X-Rite MA-T6
- CVE-2023-49898 Apache StreamPark (incubating): Authenticated system users could trigger remote command execution
- CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection
- CVE-2023-49886 IBM Transformation Extender Advanced code execution
- CVE-2023-49883 IBM Transformation Extender Advanced information disclosure
- CVE-2023-49881 IBM Transformation Extender Advanced session fixation
- CVE-2023-49880 IBM Financial Transaction Manager for SWIFT Services data manipulation
- CVE-2023-4988 Bettershop LaikeTui unrestricted upload
- CVE-2023-49878 IBM System Storage Virtualization Engine information disclosure
- CVE-2023-49877 IBM System Storage Virtualization Engine information disclosure
- CVE-2023-49874 IDOR when updating the tasks of a private playbook run
- CVE-2023-4987 infinitietech taskhub GET Parameter get_tasks_list sql injection
- CVE-2023-49867 Memory corruption in WBR-6013
- CVE-2023-49864 Path traversal in AVideo
- CVE-2023-49863 Path traversal in AVideo
- CVE-2023-49862 Path traversal in AVideo
- CVE-2023-49861 WordPress Social Media Feather plugin <= 2.1.3 - Broken Access Control vulnerability
- CVE-2023-49860 WordPress WP Project Manager Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4986 Supcon InPlant SCADA Project.xml unknown vulnerability
- CVE-2023-49859 WordPress Login With Ajax plugin <= 4.1 - Broken Access Control vulnerability
- CVE-2023-49858 WordPress Custom Login plugin <= 4.1.0 - Broken Access Control vulnerability
- CVE-2023-49857 WordPress Awesome Support plugin <= 6.1.7 - Broken Access Control vulnerability
- CVE-2023-49856 WordPress Smart Forms plugin <= 2.6.84 - Authenticated Arbitrary Options Change Vulnerability
- CVE-2023-49855 Cross-site request forgery in Menu Bar Cart Icon For WooCommerce By Binary Carpenter
- CVE-2023-49854 WordPress Caddy Plugin <= 1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49853 WordPress PayTR Taksit Tablosu Plugin <= 1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49852 WordPress Responsive Slick Slider WordPress plugin <= 1.4 - Content Injection vulnerability
- CVE-2023-49851 WordPress Square Thumbnails plugin <= 1.1.1 - Broken Access Control + CSRF vulnerability
- CVE-2023-49850 WordPress WP Simple HTML Sitemap plugin <= 2.7 - Broken Access Control vulnerability
- CVE-2023-4985 Supcon InPlant SCADA Project.xml improper authentication
- CVE-2023-49849 WordPress Shortcoder plugin <= 6.3 - Broken Access Control vulnerability
- CVE-2023-49848 Missing authorization in Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy
- CVE-2023-49847 WordPress Annual Archive Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49846 WordPress Author Avatars List/Block Plugin <= 2.1.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49845 WordPress Redirects plugin <= 1.2.1 - Broken Access Control vulnerability
- CVE-2023-49844 WordPress WPPerformanceTester Plugin <= 2.0.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49843 WordPress First Order Discount Woocommerce Plugin <= 1.21 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49842 WordPress Rocket Maintenance Mode & Coming Soon Page Plugin <= 4.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49841 WordPress Optin Forms Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49840 WordPress Multi Currency For WooCommerce Plugin <= 1.5.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4984 didi KnowSearch 1 credentials storage
- CVE-2023-49839 Reflected Cross-Site Scripting vulnerability in multiple WordPress components by KlbTheme
- CVE-2023-49838 Cross-Site Request Forgery (CSRF) vulnerability in multiple themes by KlbTheme
- CVE-2023-49837 WordPress embed-code plugin <= 2.3.6 - Denial of Service Attack vulnerability
- CVE-2023-49836 WordPress Cookie Bar Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49835 WordPress Post Duplicator plugin <= 2.31 - Broken Access Control vulnerability
- CVE-2023-49834 WordPress WOOCS – WooCommerce Currency Switcher Plugin <= 1.4.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49833 WordPress Spectra Plugin <= 2.7.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49832 WordPress Site Reviews plugin <= 6.10.2 - Broken Access Control vulnerability
- CVE-2023-49831 WordPress RegistrationMagic plugin <= 5.2.3.0 - Broken Access Control vulnerability