Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 193 of 430.
- CVE-2023-48023 Server-side request forgery in anyscale:ray
- CVE-2023-48022 Ray has arbitrary code execution via jobs submission API
- CVE-2023-48021 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-48020 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-4802 ITM Server Cross-site Scripting in UpdateInstalledSoftware Endpoint
- CVE-2023-48017 Cross-site request forgery in iteachyou:dreamer cms
- CVE-2023-48016 SQL injection in phpgurukul:restaurant table booking system
- CVE-2023-48014 Memory corruption in gpac:gpac
- CVE-2023-48013 Memory corruption in gpac:gpac
- CVE-2023-48011 Use after free in gpac:gpac
- CVE-2023-48010 STMicroelectronics SPC58 is vulnerable to Missing Protection Mechanism for Alternate Hardware Interface.
- CVE-2023-4801 ITM MacOS Agent Improper Certificate Validation
- CVE-2023-48003 Open redirect in aspnetzero:asp.net zero
- CVE-2023-4800 DoLogin Security < 3.7.1 - Subscriber+ IP Address leak
- CVE-2023-47997 Denial of service in freeimage project:freeimage
- CVE-2023-47996 Integer overflow in freeimage project:freeimage
- CVE-2023-47995 Denial of service in freeimage project:freeimage
- CVE-2023-47994 Integer overflow in freeimage project:freeimage
- CVE-2023-47993 Memory corruption in freeimage project:freeimage
- CVE-2023-47992 Integer overflow in freeimage project:freeimage
- CVE-2023-47990 SQL injection in cuppacms:cuppacms
- CVE-2023-4799 Magic Embeds < 3.1.2 - Contributor+ Stored XSS via shortcode
- CVE-2023-4798 User Avatar - Reloaded < 1.2.2 - Contributor+ Stored XSS
- CVE-2023-4797 Newsletter Lite < 4.9.3 - Admin+ Command Injection
- CVE-2023-4796 Booster for WooCommerce <= 7.1.0 - Authenticated (Subscriber+) Information Disclosure via Shortcode
- CVE-2023-4795 Testimonial Slider Shortcode < 1.1.9 - Contributor+ Stored XSS
- CVE-2023-4792 Duplicate Post Page Menu & Custom Post Type <= 2.3.1 - Missing Authorization to Post Duplication
- CVE-2023-47890 Download to arbitrary folder can lead to RCE
- CVE-2023-47889 Missing authorization in binhdrm26:super reboot
- CVE-2023-47883 Code injection in vladymix:tv browser
- CVE-2023-47882 Code injection in kamivision:yi iot
- CVE-2023-47877 WordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47876 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47875 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47874 WordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access Control
- CVE-2023-47873 WordPress WP Child Theme Generator plugin <= 1.0.9 - Arbitrary File Upload vulnerability
- CVE-2023-47872 WordPress wpForo Forum Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47871 WordPress Contact Form to Any API plugin <= 1.1.6 - Broken Access Control vulnerability
- CVE-2023-47870 WordPress wpForo Forum Plugin <= 2.2.6 is vulnerable to Broken Access Control and Cross Site Request Forgery (CSRF)
- CVE-2023-47869 WordPress wpForo plugin <= 2.2.5 - Broken Access Control + CSRF vulnerability
- CVE-2023-47868 WordPress wpForo plugin <= 2.2.3 - Privilege Escalation vulnerability
- CVE-2023-47867 MachineSense FeverWarn Improper Access Control
- CVE-2023-47865 Username and Icon override can be used by members when Hardened Mode is enabled
- CVE-2023-47862 Path traversal in AVideo
- CVE-2023-47861 Cross-site scripting in AVideo
- CVE-2023-47859 Missing authorization in Intel(R) Wireless Bluetooth products for Windows
- CVE-2023-47858 Details of archived public channels are leaked to members of another team
- CVE-2023-47857 multimedia camera has a UAF vulnerability
- CVE-2023-47856 Memory corruption in WBR-6013
- CVE-2023-47855 Privilege escalation in Intel(R) TDX module software
- CVE-2023-47854 WordPress Parallax Image Plugin <= 1.7.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47853 WordPress myCred Plugin <= 2.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47852 WordPress Link Whisper Free Plugin <= 0.6.5 is vulnerable to SQL Injection
- CVE-2023-47851 WordPress Bootstrap Shortcodes Ultimate Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47850 WordPress Community by PeepSo Plugin <= 6.2.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4785 Denial of Service in gRPC Core
- CVE-2023-47849 WordPress BlossomThemes Email Newsletter plugin <= 2.2.4 - Broken Access Control vulnerability
- CVE-2023-47848 WordPress Tainacan Plugin <= 0.20.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47847 WordPress PayTR Taksit Tablosu plugin <= 1.3.1 - Broken Access Control vulnerability
- CVE-2023-47846 WordPress WP Githuber MD plugin <= 1.16.2 - Arbitrary File Upload vulnerability
- CVE-2023-47845 WordPress Grab & Save plugin <= 1.0.4 - Cross-Site Request Forgery (CSRF) vulnerability
- CVE-2023-47844 WordPress Grab & Save Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47843 WordPress CataBlog Plugin <= 1.7.0 is vulnerable to Arbitrary File Deletion
- CVE-2023-47842 WordPress CataBlog plugin <= 1.7.0 - Arbitrary File Upload vulnerability
- CVE-2023-47841 WordPress Analytify plugin <= 5.1.1 - Broken Access Control vulnerability
- CVE-2023-47840 WordPress Qode Essential Addons Plugin <= 1.5.2 is vulnerable to Remote Code Execution (RCE)
- CVE-2023-47839 WordPress eCommerce Product Catalog Plugin <= 3.3.26 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47838 WordPress Conditional Fields for Contact Form 7 plugin <= 2.4.1 - Broken Access Control vulnerability
- CVE-2023-47837 WordPress ARMember plugin <= 4.0.10 - Membership Plan Bypass vulnerability
- CVE-2023-47836 WordPress WP Meta and Date Remover plugin <= 2.3.0 - Broken Access Control vulnerability
- CVE-2023-47835 WordPress ARI Stream Quiz Plugin <= 1.2.32 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47834 WordPress Quiz And Survey Master Plugin <= 8.1.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47833 WordPress Theater for WordPress Plugin <= 0.18.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47832 WordPress SearchIQ plugin <= 4.4 - Broken Access Control vulnerability
- CVE-2023-47831 WordPress DrawIt (draw.io) Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47830 WordPress Live Preview for Contact Form 7 plugin <= 1.2.0 - Broken Access Control vulnerability
- CVE-2023-4783 Magee Shortcodes <= 2.1.1 - Contributor+ Stored XSS via shortcode
- CVE-2023-47829 WordPress Quick Call Button Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47828 WordPress wpMandrill plugin <= 1.33 - Broken Access Control vulnerability
- CVE-2023-47827 WordPress Events Addon for Elementor Plugin <= 2.1.3 is vulnerable to Broken Access Control
- CVE-2023-47826 WordPress Restaurant & Cafe Addon for Elementor plugin <= 1.5.3 - Broken Access Control vulnerability
- CVE-2023-47825 WordPress WP EXtra Plugin <= 6.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47824 WordPress Legal Pages Plugin <= 1.3.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47823 WordPress FormCraft – Contact Form Builder for WordPress plugin <= 1.2.7 - Broken Access Control vulnerability
- CVE-2023-47822 WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 4.10 - Broken Access Control vulnerability
- CVE-2023-47821 WordPress Email Encoder Bundle Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47820 WordPress WP Like Button plugin <= 1.7.0 - Broken Access Control vulnerability
- CVE-2023-4782 Terraform Allows Arbitrary File Write During Init Operation
- CVE-2023-47819 WordPress Easy Call Now by ThikShare Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47818 WordPress LWS Hide Login plugin <= 2.1.8 - Secret Login Page Location Disclosure on Multisites vulnerability
- CVE-2023-47817 WordPress Daily Prayer Time Plugin <= 2023.10.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47816 WordPress Charitable Plugin <= 1.7.0.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47815 WordPress BP Profile Shortcodes Extra Plugin <= 2.5.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47814 WordPress BMI Calculator Plugin Plugin <= 1.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47813 WordPress Better RSS Widget Plugin <= 2.8.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47812 WordPress Bamboo Columns Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47811 WordPress Anywhere Flash Embed Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47810 WordPress Ajax Domain Checker Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4781 Heap-based Buffer Overflow in vim/vim
- CVE-2023-47809 WordPress Accordion Plugin <= 2.6 is vulnerable to Cross Site Scripting (XSS)