Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 196 of 430.
- CVE-2023-47573 Missing authorization in relyum:rely-pcie firmware
- CVE-2023-4757 Staff / Employee Business Directory for Active Directory < 1.2.3 - Improper escaping of LDAP entries
- CVE-2023-47568 QTS, QuTS hero, QuTScloud
- CVE-2023-47567 QTS, QuTS hero, QuTScloud
- CVE-2023-47566 QTS, QuTS hero, QuTScloud
- CVE-2023-47565 QNAP VioStor NVR OS Command Injection
- CVE-2023-47564 Qsync Central
- CVE-2023-47563 Video Station
- CVE-2023-47562 Photo Station
- CVE-2023-47561 Photo Station
- CVE-2023-47560 QuMagie
- CVE-2023-4756 Stack-based Buffer Overflow in gpac/gpac
- CVE-2023-47559 QuMagie
- CVE-2023-47558 WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to SQL Injection
- CVE-2023-47557 WordPress Visitor Traffic Real Time Statistics plugin <= 7.2 - Broken Access Control vulnerability
- CVE-2023-47556 WordPress Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47554 Cross-site scripting in Actueel Financieel Nieuws – Denk Internet Solutions
- CVE-2023-47553 WordPress UserHeat Plugin Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47552 WordPress Image Hover Effects Plugin <= 5.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47551 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47550 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4755 Use After Free in gpac/gpac
- CVE-2023-47549 WordPress EazyDocs Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47548 WordPress Integrate Google Drive Plugin <= 1.3.2 is vulnerable to Open Redirection
- CVE-2023-47547 Cross-site scripting in Products, Order & Customers Export for WooCommerce
- CVE-2023-47546 WordPress OneClick Chat to Order Plugin <= 1.0.4.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47545 WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47544 WordPress Atarim Plugin <= 3.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47543 Missing authorization in FortiPortal
- CVE-2023-47542 Code injection in FortiManager
- CVE-2023-47541 Path traversal in FortiSandbox
- CVE-2023-47540 Command injection in FortiSandbox
- CVE-2023-4754 Out-of-bounds Write in gpac/gpac
- CVE-2023-47539 Auth bypass in FortiMail
- CVE-2023-47537 Security feature bypass in FortiOS
- CVE-2023-47536 Security feature bypass in FortiOS
- CVE-2023-47534 Code injection in FortiClientEMS
- CVE-2023-47533 WordPress Countdown and CountUp, WooCommerce Sales Timer Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47532 WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47531 WordPress Droit Dark Mode Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47530 WordPress Redirect 404 Error Page to Homepage or Custom Page with Logs Plugin <= 1.8.7 is vulnerable to SQL Injection
- CVE-2023-4753 OpenHarmony v3.2.1 and prior version has a system call function usage error
- CVE-2023-47529 WordPress Cloud Templates & Patterns collection Plugin <= 1.2.2 is vulnerable to Sensitive Data Exposure
- CVE-2023-47528 WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47527 WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47526 WordPress Chartify Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47525 WordPress Event Management Tickets Booking Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47524 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47523 WordPress Auto Tag Creator plugin <= 1.0.2 - Broken Access Control vulnerability
- CVE-2023-47522 WordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47521 WordPress Q2W3 Post Order Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47520 WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4752 Use After Free in vim/vim
- CVE-2023-47519 WordPress WooCommerce Product Table Lite Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47518 WordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47517 WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47516 WordPress Category Post List Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47515 WordPress Seers | GDPR & CCPA Cookie Consent & Compliance plugin <= 8.1.1 - Broken Access Control vulnerability
- CVE-2023-47514 WordPress Star CloudPRNT for WooCommerce Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47513 WordPress ARI Stream Quiz – WordPress Quizzes Builder plugin <= 1.3.2 - Content Injection vulnerability
- CVE-2023-47512 WordPress Product Enquiry for WooCommerce Plugin <= 3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47511 WordPress Pinyin Slugs Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47510 Cross-site scripting in WPDBSpringClean
- CVE-2023-4751 Heap-based Buffer Overflow in vim/vim
- CVE-2023-47509 WordPress Edit WooCommerce Templates Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47508 WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47507 WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to PHP Object Injection
- CVE-2023-47506 WordPress Master Slider Pro Plugin <= 3.6.5 is vulnerable to SQL Injection
- CVE-2023-47505 WordPress Elementor Website Builder Plugin <= 3.16.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47504 WordPress Elementor plugin <= 3.16.4 - Auth. Arbitrary Attachment Read vulnerability
- CVE-2023-47503 Code injection in jflyfox:jfinal cms
- CVE-2023-4750 Use After Free in vim/vim
- CVE-2023-4749 SourceCodester Inventory Management System index.php file inclusion
- CVE-2023-47489 Code injection in combodo:itop
- CVE-2023-47488 Cross-site scripting in combodo:itop
- CVE-2023-47480 An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the set*id () function.
- CVE-2023-4748 Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal
- CVE-2023-47473 Path traversal in fuwushe:ifair
- CVE-2023-47471 Memory corruption in struktur:libde265
- CVE-2023-47470 Memory corruption in ffmpeg:ffmpeg
- CVE-2023-4747 DedeCMS tags.php sql injection
- CVE-2023-47467 Directory Traversal in jeecg-boot
- CVE-2023-47466 Null dereference in TagLib
- CVE-2023-47465 Denial of service in gpac:gpac
- CVE-2023-47464 Path traversal in gl-inet:gl-ax1800 firmware
- CVE-2023-47463 Code injection in gl-inet:gl-ax1800 firmware
- CVE-2023-47462 Misconfiguration in gl-inet:gl-ax1800 firmware
- CVE-2023-47460 SQL injection in knovos:discovery
- CVE-2023-4746 TOTOLINK N200RE V5 Validity_check format string
- CVE-2023-47459 Information disclosure in knovos:discovery
- CVE-2023-47458 Missing authorization in bladex:springblade
- CVE-2023-47456 Memory corruption in tenda:ax1806 firmware
- CVE-2023-47455 Memory corruption in tenda:ax1806 firmware
- CVE-2023-47454 Privilege escalation in netease:cloudmusic
- CVE-2023-47453 Privilege escalation in sohu:video player
- CVE-2023-47452 Other in notepad-plus-plus:notepad\+\+
- CVE-2023-4745 Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform importexport.php sql injection
- CVE-2023-47446 Cross-site scripting in phpgurukul:pre-school enrollment system
- CVE-2023-47445 SQL injection in phpgurukul:pre-school enrollment system
- CVE-2023-47444 Code injection in opencart:opencart