Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 183 of 430.
- CVE-2023-49244 Missing authorization in EMUI
- CVE-2023-49243 Missing authorization in EMUI
- CVE-2023-49242 Information disclosure in EMUI
- CVE-2023-49241 Missing authorization in EMUI
- CVE-2023-49240 Missing authorization in EMUI
- CVE-2023-4924 BEAR <= 1.1.3.3 - Missing Authorization to Product Deletion
- CVE-2023-49239 Missing authorization in EMUI
- CVE-2023-49238 Auth bypass in gradle:enterprise
- CVE-2023-49237 Command injection in trendnet:tv-ip1314pi firmware
- CVE-2023-49236 Memory corruption in trendnet:tv-ip1314pi firmware
- CVE-2023-49235 Command injection in trendnet:tv-ip1314pi firmware
- CVE-2023-49234 An XML external entity (XXE) vulnerability was found in Stilog Visual Planning 8.
- CVE-2023-49233 Insufficient access checks in Visual Planning Admin Center 8 before v.1 Build 240207 allow attackers in possession of a non-administrative V
- CVE-2023-49232 An authentication bypass vulnerability was found in Stilog Visual Planning 8.
- CVE-2023-49231 An authentication bypass vulnerability was found in Stilog Visual Planning 8.
- CVE-2023-49230 Missing authorization in peplink:balance two firmware
- CVE-2023-4923 BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Product Deletion
- CVE-2023-49229 Missing authorization in peplink:balance two firmware
- CVE-2023-49228 Hardcoded credentials in peplink:balance two firmware
- CVE-2023-49226 Command injection in peplink:balance two firmware
- CVE-2023-49225 Cross-site scripting in AP Solo C110
- CVE-2023-49224 Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorized_keys file.
- CVE-2023-49223 Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd.
- CVE-2023-49222 Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key.
- CVE-2023-49221 Precor touchscreen console P62, P80, and P82 could allow a remote attacker (within the local network) to bypass security restrictions, and a
- CVE-2023-4922 WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion
- CVE-2023-49216 Cross-site scripting in usedesk:usedesk
- CVE-2023-49215 Cross-site scripting in usedesk:usedesk
- CVE-2023-49214 Code injection in usedesk:usedesk
- CVE-2023-49213 Command injection in ironmansoftware:powershell universal
- CVE-2023-49210 openssl npm package vulnerable to command execution
- CVE-2023-4921 Use-after-free in Linux kernel's net/sched: sch_qfq component
- CVE-2023-49208 Memory corruption in glewlwyd sso server project:glewlwyd sso server
- CVE-2023-49203 Denial of service in technitium:dnsserver
- CVE-2023-4920 BEAR <= 1.1.3.3 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2023-49198 Apache SeaTunnel Web: Arbitrary file read vulnerability
- CVE-2023-49197 WordPress DoFollow Case by Case Plugin <= 3.4.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49196 WordPress Pagelayer plugin <= 1.7.7 - Broken Access Control vulnerability
- CVE-2023-49195 WordPress Nested Pages Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49194 WordPress Importify (Dropshipping WooCommerce) plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
- CVE-2023-49193 WordPress Grow Social plugin <= 1.30.0 - Broken Access Control vulnerability
- CVE-2023-49192 WordPress Enhanced Text Widget plugin <= 1.6.3 - Broken Access Control vulnerability
- CVE-2023-49191 WordPress GDPR Cookie Consent by Supsystic Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49190 WordPress Site Offline Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4919 iframe <= 4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'iframe' Shortcode
- CVE-2023-49189 Cross-site scripting in Social Share Buttons & Analytics Plugin – GetSocial.io
- CVE-2023-49188 WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49187 WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49186 WordPress Machic Core plugin <= 1.2.6 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-49185 WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49184 WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49183 WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49182 Cross-site scripting in List all posts by Authors, nested Categories and Titles
- CVE-2023-49181 WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49180 WordPress Automatic Youtube Video Posts Plugin Plugin <= 5.2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4918 Plaintext storage of user password
- CVE-2023-49179 WordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49178 WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49177 WordPress which template file Plugin <= 4.9.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49176 WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49175 WordPress KP Fastest Tawk.to Chat Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49174 WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49173 WordPress 10to8 Online Appointment Booking System Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49172 WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49171 WordPress Innovs HR Plugin <= 1.0.3.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49170 WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4917 Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure
- CVE-2023-49169 WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49168 WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49167 WordPress Database for CF7 plugin <= 1.2.4 - Broken Access Control vulnerability
- CVE-2023-49166 WordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection
- CVE-2023-49165 WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49164 WordPress Ocean Extra Plugin <= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49163 WordPress teachPress Plugin <= 9.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49162 WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data Exposure
- CVE-2023-49161 WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection
- CVE-2023-49160 WordPress Formzu WP Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4916 Login with phone number <= 1.5.6 - Cross-Site Request Forgery to User Password Change
- CVE-2023-49159 WordPress CommentLuv Plugin <= 3.0.4 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2023-49158 WordPress LadiApp plugin <= 4.4 - Broken Access Control lead to XSS vulnerability
- CVE-2023-49157 WordPress Multiple Post Passwords Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49156 WordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability
- CVE-2023-49155 WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-49154 WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability
- CVE-2023-49153 Cross-site request forgery in Add to Cart Text Changer and Customize Button, Add Custom Icon
- CVE-2023-49152 WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49151 WordPress Google Calendar Events Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49150 WordPress Crypto Converter Widget Plugin <= 1.8.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4915 WP User Control <= 1.5.3 - Insecure Password Reset Mechanism
- CVE-2023-49149 WordPress Currency Converter Calculator Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-49148 Cross-site request forgery in Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates
- CVE-2023-49147 Privilege escalation in pdf24:pdf24 creator
- CVE-2023-49146 Cross-site Scripting in DOMSanitizer
- CVE-2023-49145 Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt
- CVE-2023-49144 Memory corruption in Intel(R) Server Platforms
- CVE-2023-49143 Denial of service in GC-A22W-CW
- CVE-2023-49142 multimedia audio has a UAF vulnerability
- CVE-2023-49141 Privilege escalation in Intel(R) Processors stream cache mechanism
- CVE-2023-49140 Denial of service in GC-A22W-CW
- CVE-2023-4914 Relative Path Traversal in cecilapp/cecil