Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 198 of 430.
- CVE-2023-47251 Path traversal in m-privacy:mprivacy-tools
- CVE-2023-47250 Missing authorization in m-privacy:mprivacy-tools
- CVE-2023-4725 Simple Posts Ticker < 1.1.6 - Admin+ Stored XSS
- CVE-2023-47249 Memory corruption in color:demoiccmax
- CVE-2023-47248 PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file
- CVE-2023-47247 Missing authorization in sysaid:sysaid
- CVE-2023-47246 SysAid Server Path Traversal
- CVE-2023-47245 WordPress ANAC XML Viewer Plugin <= 1.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47244 WordPress Email Marketing for WooCommerce by Omnisend Plugin <= 1.13.8 is vulnerable to Sensitive Data Exposure
- CVE-2023-47243 WordPress MSHOP MY SITE Plugin <= 1.1.6 is vulnerable to Broken Access Control
- CVE-2023-47242 WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47241 WordPress CoCart – Headless ecommerce plugin <= 3.11.2 - Broken Access Control vulnerability
- CVE-2023-47240 WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4724 WP All Export (Free < 1.4.0, Pro < 1.8.6) - Admin+ RCE
- CVE-2023-47239 WordPress Easy PayPal Shopping Cart Plugin <= 1.1.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47238 WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47237 WordPress WP Google My Business Auto Publish Plugin <= 3.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47236 WordPress iPages Flipbook Plugin <= 1.4.8 is vulnerable to SQL Injection
- CVE-2023-47235 Denial of service in frrouting:frrouting
- CVE-2023-47234 Denial of service in frrouting:frrouting
- CVE-2023-47233 Use after free in linux:linux kernel
- CVE-2023-47232 WordPress WP Affiliate Disclosure plugin <= 1.2.6 - Broken Access Control + CSRF vulnerability
- CVE-2023-47231 WordPress ShortCodes UI Plugin <= 1.9.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47230 WordPress Contact Forms by Cimatti Plugin <= 1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4723 Elementor Addon Elements <= 1.12.7 - Missing Authorization to Sensitive Information Exposure
- CVE-2023-47229 WordPress Download Top 25 Social Icons Plugin <= 3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47228 WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47227 WordPress Social Feed | All social media in one place Plugin <= 1.5.4.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47226 WordPress Post Sliders & Post Grids Plugin <= 1.0.20 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47225 WordPress Short URL plugin <= 1.6.8 - Broken Access Control vulnerability
- CVE-2023-47224 WordPress WP Travel plugin <= 7.8.0 - Broken Access Control vulnerability
- CVE-2023-47223 WordPress Basic Interactive World Map Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47222 Media Streaming add-on
- CVE-2023-47221 Photo Station
- CVE-2023-47220 Media Streaming add-on
- CVE-2023-4722 Integer Overflow or Wraparound in gpac/gpac
- CVE-2023-47219 QuMagie
- CVE-2023-47218 QTS, QuTS hero, QuTScloud
- CVE-2023-47217 Arkruntime has a buffer overflow vulnerability
- CVE-2023-47216 Liteos-A has a missing release of resource vulnerability
- CVE-2023-47215 Cross-site scripting in GROWI
- CVE-2023-47213 Hardcoded credentials in CFR-1004EA, CFR-1008EA, CFR-1016EA
- CVE-2023-47212 Memory corruption in stb vorbis.c
- CVE-2023-47211 Path traversal in OpManager
- CVE-2023-47210 Denial of service in Intel(R) PROSet/Wireless WiFi software for linux
- CVE-2023-4721 Out-of-bounds Read in gpac/gpac
- CVE-2023-47209 Command injection in ER7206 Omada Gigabit VPN Router
- CVE-2023-47207 Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data
- CVE-2023-47204 transmute-core unsafe YAML deserialization vulnerability
- CVE-2023-47202 Path traversal in Trend Micro Apex One
- CVE-2023-47201 Privilege escalation in Trend Micro Apex One
- CVE-2023-47200 Privilege escalation in Trend Micro Apex One
- CVE-2023-4720 Floating Point Comparison with Incorrect Operator in gpac/gpac
- CVE-2023-47199 Privilege escalation in Trend Micro Apex One
- CVE-2023-47198 Privilege escalation in Trend Micro Apex One
- CVE-2023-47197 Privilege escalation in Trend Micro Apex One
- CVE-2023-47196 Privilege escalation in Trend Micro Apex One
- CVE-2023-47195 Privilege escalation in Trend Micro Apex One
- CVE-2023-47194 Privilege escalation in Trend Micro Apex One
- CVE-2023-47193 Privilege escalation in Trend Micro Apex One
- CVE-2023-47192 Privilege escalation in Trend Micro Apex One
- CVE-2023-47191 WordPress Youzify Plugin <= 1.2.2 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-47190 WordPress Apollo13 Framework Extensions Plugin <= 1.9.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4719 Simple Membership <= 4.3.5 - Reflected Cross-Site Scripting
- CVE-2023-47189 WordPress Defender Security plugin <= 4.2.0 - Masked Login Area View Bypass vulnerability
- CVE-2023-47188 WordPress Simple Job Board plugin <= 2.10.5 - Broken Access Control vulnerability
- CVE-2023-47187 WordPress Animated Rotating Words plugin <= 5.4 - Broken Access Control vulnerability
- CVE-2023-47186 WordPress Kadence WooCommerce Email Designer Plugin <= 1.5.11 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-47185 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47184 WordPress Admin Bar & Dashboard Access Control Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47183 WordPress GiveWP plugin <= 2.33.1 - Broken Access Control vulnerability
- CVE-2023-47182 WordPress Login Screen Manager Plugin <= 3.5.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47181 WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47180 Missing authorization in Finale Lite
- CVE-2023-4718 Font Awesome 4 Menus <= 4.7.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-47179 WordPress WooODT Lite plugin <= 2.4.6 - Arbitrary Site Option Update vulnerability
- CVE-2023-47178 WordPress The Plus Addons for Elementor Pro plugin <= 5.2.8 - Unauthenticated Local File Inclusion vulnerability
- CVE-2023-47177 WordPress Linker Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-47175 Cross-site scripting in LuxCal Web Calendar
- CVE-2023-47174 Deserialization in thorntech:sftp gateway firmware
- CVE-2023-47172 Privilege escalation in withsecure:client security
- CVE-2023-47171 Path traversal in AVideo
- CVE-2023-47169 Memory corruption in Intel(R) Media SDK software
- CVE-2023-47168 Open redirect in /oauth/<service>/mobile_login?redirect_to=
- CVE-2023-47167 Command injection in ER7206 Omada Gigabit VPN Router
- CVE-2023-47166 Missing authorization in UR32L
- CVE-2023-47165 Denial of service in Intel(R) Data Center GPU Max Series 1100 and 1550 products
- CVE-2023-47164 Cross-site scripting in HOTELDRUID
- CVE-2023-47163 Remarshal expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack
- CVE-2023-47162 IBM Secure Proxy cross-site scripting
- CVE-2023-47161 IBM UrbanCode Deploy denial of service
- CVE-2023-47160 IBM Cognos Controller XML external entity injection
- CVE-2023-4716 Media Library Assistant <= 3.10 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-47159 IBM Sterling File Gateway information disclosure
- CVE-2023-47158 IBM Db2 denial of service
- CVE-2023-47152 IBM Db2 information disclosure
- CVE-2023-47150 IBM Common Cryptographic Architecture denial of service
- CVE-2023-47148 IBM Storage Protect Plus Server information disclosure
- CVE-2023-47147 IBM Secure Proxy file manipulation
- CVE-2023-47146 IBM QRadar SIEM information disclosure