Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 190 of 430.
- CVE-2023-48411 Memory corruption in Android
- CVE-2023-48410 Memory corruption in Android
- CVE-2023-4841 Feeds for YouTube <= 2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-48409 Integer overflow in Android
- CVE-2023-48408 Memory corruption in Android
- CVE-2023-48407 Business logic in Android
- CVE-2023-48406 Privilege escalation in Android
- CVE-2023-48405 Privilege escalation in Android
- CVE-2023-48404 Memory corruption in Android
- CVE-2023-48403 Memory corruption in Android
- CVE-2023-48402 Missing authorization in Android
- CVE-2023-48401 Memory corruption in Android
- CVE-2023-4840 MapPress Maps for WordPress <= 2.88.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-48399 Memory corruption in Android
- CVE-2023-48398 Memory corruption in Android
- CVE-2023-48397 Memory corruption in Android
- CVE-2023-48396 Apache SeaTunnel Web: Authentication bypass
- CVE-2023-48395 Kaifa Technology WebITR - SQL Injection
- CVE-2023-48394 Kaifa Technology WebITR - Arbitrary File Upload
- CVE-2023-48393 Kaifa Technology WebITR - Error Message Leakage
- CVE-2023-48392 Kaifa Technology WebITR - Hard-coded Cryptographic Key
- CVE-2023-48390 Multisuns EasyLog web+ - Command Injection
- CVE-2023-4839 WP Go Maps <= 9.0.32 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-48389 Multisuns EasyLog web+ - Path Traversal
- CVE-2023-48388 Multisuns EasyLog web+ - Use of Hard-coded Password
- CVE-2023-48387 TAIWAN-CA(TWCA) JCICSecurityTool - Improper Input Validation
- CVE-2023-48384 ArmorX Global Technology Corporation ArmorX Spam - SQL Injectoin
- CVE-2023-48383 NetVision Information airPASS - Path Traversal
- CVE-2023-48382 Softnext Mail SQR Expert - Local File Inclusion-2
- CVE-2023-48381 Softnext Mail SQR Expert - Local File Inclusion-1
- CVE-2023-48380 Softnext Mail SQR Expert - Command Injection
- CVE-2023-4838 Cross-site scripting in Simple Download Counter
- CVE-2023-48379 Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)
- CVE-2023-48378 Softnext Mail SQR Expert - Path Traversal
- CVE-2023-48376 SmartStar Software CWS Web-Base - Arbitrary File Upload
- CVE-2023-48375 SmartStar Software CWS Web-Base - Broken Access Control
- CVE-2023-48374 SmartStar Software CWS Web-Base - Use of Hard-coded Credentials
- CVE-2023-48373 ITPison OMICARD EDM 's SMS - Path Traversal
- CVE-2023-48372 ITPison OMICARD EDM 's SMS - SQL Injection
- CVE-2023-48371 ITPison OMICARD EDM 's SMS - Arbitrary File Upload
- CVE-2023-4837 Cross-site request forgery (CSRF) in SmodBIP
- CVE-2023-48369 Log Flooding due to specially crafted requests in different endpoints
- CVE-2023-48368 Memory corruption in Intel(R) Media SDK software
- CVE-2023-48366 Race condition in Intel(R) System Security Report and System Resources Defense firmware
- CVE-2023-48365 Qlik Sense HTTP Tunneling
- CVE-2023-48364 Null dereference in OpenPCS 7 V9.1
- CVE-2023-48363 Null dereference in OpenPCS 7 V9.1
- CVE-2023-48362 Apache Drill: XXE Vulnerability in XML Format Reader
- CVE-2023-48361 Information disclosure in Intel(R) CSME
- CVE-2023-48360 multimedia player has a UAF vulnerability
- CVE-2023-4836 WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR
- CVE-2023-48359 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48358 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48357 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48356 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48355 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48354 Information disclosure in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48353 Use after free in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48352 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48351 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48350 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-4835 SQLi in CF's Oil Management Software
- CVE-2023-48349 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48348 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48347 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48346 Denial of service in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48345 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48344 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48343 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48342 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48341 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48340 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-4834 Missing authorization in mbCONNECT24
- CVE-2023-48339 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-48336 WordPress Easy Social Icons Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48335 WordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability
- CVE-2023-48334 WordPress League Table Plugin <= 1.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48333 WordPress Booster for WooCommerce Plugin <= 7.1.1 is vulnerable to Sensitive Data Exposure
- CVE-2023-48332 WordPress Mail Bank – #1 Mail SMTP Plugin for WordPress plugin <= 4.0.14 - Broken Access Control vulnerability
- CVE-2023-48331 WordPress MyBookTable Bookstore Plugin <= 3.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48330 WordPress Bulk Comment Remove Plugin <= 2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4833 SQLi in Besttem's Network Marketing Software
- CVE-2023-48329 WordPress Fast Custom Social Share by CodeBard Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48328 WordPress NextGEN Gallery Plugin <= 3.37 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48327 WordPress WC Vendors Marketplace Plugin <= 2.4.7 is vulnerable to SQL Injection
- CVE-2023-48326 WordPress Events Manager Plugin <= 6.4.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48325 WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection
- CVE-2023-48324 WordPress Awesome Support HelpDesk plugin <= 6.1.4 - Broken Access control vulnerability
- CVE-2023-48323 WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-48322 WordPress eDoc Employee Job Application Plugin <= 1.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48321 WordPress Accelerated Mobile Pages Plugin <= 1.0.88.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48320 WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4832 SQLi in Aceka Holdings Company Management
- CVE-2023-48319 WordPress Salon booking system plugin < 8.7 - Editor+ Privilege Escalation vulnerability
- CVE-2023-48318 WordPress Contact Form Email plugin <= 1.3.41 - Captcha Bypass vulnerability
- CVE-2023-48317 WordPress Display Custom Post Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-48316 Azure RTOS NetX Duo Remote Code Execution Vulnerability
- CVE-2023-48315 Azure RTOS NetX Duo Remote Code Execution Vulnerability
- CVE-2023-48314 Unescaped passing of the request URL in Collabora Online
- CVE-2023-48313 Umbraco contains a DOM-XSS