Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 186 of 430.
- CVE-2023-48803 Command injection in totolink:x6000r firmware
- CVE-2023-48802 Command injection in totolink:x6000r firmware
- CVE-2023-48801 Command injection in totolink:x6000r firmware
- CVE-2023-48800 Command injection in totolink:x6000r firmware
- CVE-2023-48799 Command injection in totolink:x6000r firmware
- CVE-2023-48796 Apache dolphinscheduler sensitive information disclosure
- CVE-2023-48795 Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
- CVE-2023-48793 SQL injection in zohocorp:manageengine adaudit plus
- CVE-2023-48792 SQL injection in zohocorp:manageengine adaudit plus
- CVE-2023-48791 Command injection in FortiPortal
- CVE-2023-48790 Cross-site request forgery in FortiNDR
- CVE-2023-4879 Cross-site Scripting (XSS) - Stored in instantsoft/icms2
- CVE-2023-48789 Security feature bypass in FortiPortal
- CVE-2023-48788 Fortinet FortiClient EMS SQL Injection
- CVE-2023-48786 Server-side request forgery in FortiClientEMS
- CVE-2023-48785 Security feature bypass in FortiNAC-F
- CVE-2023-48784 Memory corruption in FortiOS
- CVE-2023-48783 Missing authorization in FortiPortal
- CVE-2023-48782 Command injection in FortiWLM
- CVE-2023-48781 Cross-site request forgery in MkRapel Regiones y Ciudades de Chile para WC
- CVE-2023-48780 WordPress WP Catalogue Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4878 Server-Side Request Forgery (SSRF) in instantsoft/icms2
- CVE-2023-48779 WordPress 360 Javascript Viewer plugin <= 1.7.11 - Broken Access Control vulnerability
- CVE-2023-48778 WordPress Product Size Chart For WooCommerce Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48777 WordPress Elementor plugin 3.3.0-3.18.1 - Arbitrary File Upload vulnerability
- CVE-2023-48776 WordPress canvasio3D Light plugin <= 2.5.0 - Broken Access Control vulnerability
- CVE-2023-48775 WordPress WP CleanFix plugin <= 5.6.2 - Broken Access Control vulnerability
- CVE-2023-48774 WordPress IdeaPush plugin < 8.58 - Broken Access Control vulnerability
- CVE-2023-48773 WordPress WooCommerce Login Redirect Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48772 WordPress Prevent Landscape Rotation Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48771 WordPress File Gallery Plugin <= 1.8.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48770 WordPress Aparat Plugin <= 1.7.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4877 Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure
- CVE-2023-48769 WordPress Chat Bubble Plugin <= 2.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48768 Cross-site request forgery in Quantity Plus Minus Button for WooCommerce by CodeAstrology
- CVE-2023-48767 WordPress MyTube PlayList Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48766 WordPress SVGator – Add Animated SVG Easily Plugin <= 1.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48765 WordPress Email Address Encoder Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48764 WordPress WordPress Brute Force Protection – Stop Brute Force Attacks Plugin <= 2.2.5 is vulnerable to SQL Injection
- CVE-2023-48763 WordPress JetFormBuilder plugin <= 3.1.4 - Content Injection vulnerability
- CVE-2023-48762 WordPress JetElements For Elementor Plugin <= 2.6.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48761 WordPress JetElements For Elementor plugin <= 2.6.13 - Broken Access Control vulnerability
- CVE-2023-48760 WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-4876 Exposure of Sensitive Information to an Unauthorized Actor in hamza417/inure
- CVE-2023-48759 WordPress JetElements For Elementor plugin <= 2.6.13 - Unauthenticated Arbitrary Attachment Download vulnerability
- CVE-2023-48758 WordPress JetEngine plugin <= 3.2.4 - Broken Access Control vulnerability
- CVE-2023-48757 WordPress JetEngine plugin <= 3.2.4 - Privilege Escalation vulnerability
- CVE-2023-48756 WordPress JetBlocks For Elementor Plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48755 WordPress teachPress Plugin <= 9.0.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48754 WordPress Delete Post Revisions In WordPress Plugin <= 4.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48753 WordPress Restricted Site Access plugin <= 7.4.1 - IP Restriction Bypass vulnerability
- CVE-2023-48752 WordPress Happyforms Plugin <= 1.25.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48751 WordPress Participants Database Plugin <= 2.5.5 is vulnerable to Broken Access Control
- CVE-2023-48750 Missing authorization in Void Elementor Post Grid Addon for Elementor Page builder
- CVE-2023-4875 Undefined Behavior for Input to API in Mutt
- CVE-2023-48749 WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48748 WordPress Salient Core Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48747 WordPress Booster for WooCommerce plugin <= 7.1.2 - Authenticated Production Creation/Modification Vulnerability
- CVE-2023-48746 WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48745 WordPress Captcha Code plugin <= 2.9 - Captcha Bypass vulnerability
- CVE-2023-48744 WordPress Availability Calendar Plugin <= 1.2.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48743 WordPress Simply Exclude Plugin <= 2.0.6.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48742 WordPress License Manager for WooCommerce Plugin <= 2.2.10 is vulnerable to SQL Injection
- CVE-2023-48741 WordPress ChatBot Plugin <= 4.7.8 is vulnerable to SQL Injection
- CVE-2023-48740 WordPress Easy Social Feed plugin <= 6.5.1 - Broken Access Control vulnerability
- CVE-2023-4874 Undefined Behavior for Input to API in Mutt
- CVE-2023-48739 WordPress Porto Theme Functionality plugin < 2.12.1 - Broken Access Control vulnerability
- CVE-2023-48738 WordPress Porto Theme - Functionality Plugin < 2.12.1 is vulnerable to SQL Injection
- CVE-2023-48737 WordPress TriPay Payment Gateway Plugin <= 3.2.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48736 Memory corruption in color:demoiccmax
- CVE-2023-48733 Misconfiguration in Ubuntu EDK II
- CVE-2023-48732 Keywords that trigger mentions are leaked to other users
- CVE-2023-48730 Cross-site scripting in AVideo
- CVE-2023-4873 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php os command injection
- CVE-2023-48728 Cross-site scripting in AVideo
- CVE-2023-48727 Null dereference in Intel(R) oneVPL software
- CVE-2023-48725 Memory corruption in RAX30
- CVE-2023-48724 Memory corruption in AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3)
- CVE-2023-48722 Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-48720 Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4872 SourceCodester Contact Manager App add.php sql injection
- CVE-2023-48718 Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-48716 Student Result Management System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-48715 Tuleap vulnerable to Cross-site Scripting on the edition page of a release
- CVE-2023-48714 Record titles for restricted records can be viewed if exposed by GridFieldAddExistingAutocompleter
- CVE-2023-48713 Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler
- CVE-2023-48712 User authorization bug leading to privilege escalation in warpgate
- CVE-2023-48711 Server-Side Request Forgery (SSRF) Vulnerability in google-translate-api-browser
- CVE-2023-48710 iTop limit pages/exec.php script to PHP files
- CVE-2023-4871 SourceCodester Contact Manager App delete.php sql injection
- CVE-2023-48709 iTop vulnerable to potential formula injection in Excel/CSV export file
- CVE-2023-48708 Insertion of Sensitive Information into Log in codeigniter4/shield
- CVE-2023-48707 Cleartext Storage of Sensitive Information in codeigniter4/shield
- CVE-2023-48706 Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite
- CVE-2023-48705 nautobot has XSS potential in custom links, job buttons, and computed fields
- CVE-2023-48704 Unauthenticated heap buffer overflow in Gorrila codec decompression
- CVE-2023-48703 SAML authentication bypass vulnerability in RobotsAndPencils/go-saml
- CVE-2023-48702 Jellyfin Possible Remote Code Execution via custom FFmpeg binary
- CVE-2023-48701 Statamic CMS vulnerable to Cross-site Scripting via uploaded assets
- CVE-2023-48700 Clear Text Credentials Exposed via Onboarding Task