Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 201 of 430.
- CVE-2023-46847 Squid: denial of service in http digest authentication
- CVE-2023-46846 Squid: request/response smuggling in http/1.1 and icap
- CVE-2023-46845 Code injection in EC-CUBE 3 series
- CVE-2023-46842 x86 HVM hypercalls may trigger Xen bug check
- CVE-2023-46841 x86: shadow stack vs exceptions from emulation stubs
- CVE-2023-46840 VT-d: Failure to quarantine devices in !HVM builds
- CVE-2023-46839 pci: phantom functions assigned to incorrect contexts
- CVE-2023-46838 Linux: netback processing of zero-length transmit fragment
- CVE-2023-46837 arm32: The cache may not be properly cleaned/invalidated (take two)
- CVE-2023-46836 x86: BTC/SRSO fixes not fully effective
- CVE-2023-46835 x86/AMD: mismatch in IOMMU quarantine page table levels
- CVE-2023-4683 NULL Pointer Dereference in gpac/gpac
- CVE-2023-46824 WordPress Slick Popup Plugin <= 1.7.14 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46823 WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection
- CVE-2023-46822 WordPress WooCommerce – Store Exporter Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46821 WordPress GD Security Headers Plugin <= 1.7 is vulnerable to SQL Injection
- CVE-2023-46820 WordPress Image Regenerate & Select Crop Plugin <= 7.3.0 is vulnerable to Sensitive Data Exposure
- CVE-2023-4682 Heap-based Buffer Overflow in gpac/gpac
- CVE-2023-46819 Apache OFBiz: Execution of Solr plugin queries without authentication
- CVE-2023-46818 Code injection in ispconfig:ispconfig
- CVE-2023-46817 Deserialization in phpfox:phpfox
- CVE-2023-46816 Code injection in sugarcrm:sugarcrm
- CVE-2023-46815 File upload in sugarcrm:sugarcrm
- CVE-2023-46814 Privilege escalation in videolan:vlc media player
- CVE-2023-46813 Race condition in linux:linux kernel
- CVE-2023-46810 Privilege escalation in Secure Access Linux
- CVE-2023-4681 NULL Pointer Dereference in gpac/gpac
- CVE-2023-46809 Weak cryptography in Node
- CVE-2023-46808 File upload in ITSM
- CVE-2023-46807 SQL injection in EPMM
- CVE-2023-46806 SQL injection in EPMM
- CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass
- CVE-2023-46804 Memory corruption in Avalanche
- CVE-2023-46803 Memory corruption in Avalanche
- CVE-2023-46802 XML external entity in e-Tax software
- CVE-2023-46801 Apache Linkis DataSource: DataSource Remote code execution vulnerability
- CVE-2023-46800 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4680 Vault's Transit Secrets Engine Allowed Nonce Specified without Convergent Encryption
- CVE-2023-46793 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-4679 Use After Free in gpac/gpac
- CVE-2023-46789 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-46788 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-46787 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-46785 Online Matrimonial Project v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-46784 WordPress ICS Calendar plugin <= 10.12.0.3 - SSRF and Arbitrary File Read vulnerability
- CVE-2023-46783 WordPress Pre-Orders for WooCommerce Plugin <= 1.2.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46782 WordPress MomentoPress for Momento360 Plugin <= 1.0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46781 WordPress Current Menu Item for Custom Post Types Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46780 WordPress Alter Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4678 Divide By Zero in gpac/gpac
- CVE-2023-46779 WordPress EasyRecipe Plugin <= 3.5.3251 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46778 WordPress Auto Limit Posts Reloaded Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46777 WordPress Feather Login Page Plugin <= 1.1.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46776 WordPress Auto Excerpt everywhere Plugin <= 1.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46775 WordPress Original texts Yandex WebMaster Plugin <= 1.18 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46774 Denial of service in EMUI
- CVE-2023-46773 Privilege escalation in EMUI
- CVE-2023-46772 Memory corruption in EMUI
- CVE-2023-46771 Privilege escalation in EMUI
- CVE-2023-46770 Memory corruption in EMUI
- CVE-2023-4677 Unauthenticated Admin Account Takeover Via Cron Log File Backups
- CVE-2023-46769 Use after free in EMUI
- CVE-2023-46768 Use after free in EMUI
- CVE-2023-46767 Memory corruption in EMUI
- CVE-2023-46766 Memory corruption in EMUI
- CVE-2023-46765 Denial of service in EMUI
- CVE-2023-46764 Other in EMUI
- CVE-2023-46763 Missing authorization in EMUI
- CVE-2023-46762 Memory corruption in EMUI
- CVE-2023-46761 Memory corruption in EMUI
- CVE-2023-46760 Memory corruption in EMUI
- CVE-2023-4676 XSS in Yordams MedasPro
- CVE-2023-46759 Missing authorization in EMUI
- CVE-2023-46758 Privilege escalation in EMUI
- CVE-2023-46757 Information disclosure in HarmonyOS
- CVE-2023-46756 Privilege escalation in EMUI
- CVE-2023-46755 Denial of service in EMUI
- CVE-2023-46754 Auth bypass in obl.ong:admin
- CVE-2023-46753 Denial of service in frrouting:frrouting
- CVE-2023-46752 Denial of service in frrouting:frrouting
- CVE-2023-46751 Use after free in artifex:ghostscript
- CVE-2023-46750 Open redirect in Apache Shiro
- CVE-2023-4675 SQLi i GM Informatics MDO
- CVE-2023-46749 Apache Shiro vulnerable to path traversal
- CVE-2023-46748 F5 BIG-IP Configuration Utility SQL Injection
- CVE-2023-46747 F5 BIG-IP Configuration Utility Authentication Bypass
- CVE-2023-46746 Authenticated PostHog users vulnerable to SSRF
- CVE-2023-46745 Rate limiting Bypass on login page in libreNMS
- CVE-2023-46744 Stored Cross-site Scripting in Squidex
- CVE-2023-46743 The same file cannot be opened with different rights
- CVE-2023-46742 CubeFS leaks users key in logs
- CVE-2023-46741 CubeFS leaks magic secret key when starting Blobstore access service
- CVE-2023-46740 Insecure random string generator used for sensitive data
- CVE-2023-4674 SQLi in Yazteks E-Commerce Software
- CVE-2023-46739 Timing attack can leak user passwords
- CVE-2023-46738 Authenticated users can crash the CubeFS servers with maliciously crafted requests
- CVE-2023-46737 Possible endless data attack from attacker-controlled registry in cosign
- CVE-2023-46736 Server-Side Request Forgery in espocrm
- CVE-2023-46735 Symfony potential Cross-site Scripting in WebhookController
- CVE-2023-46734 Symfony potential Cross-site Scripting vulnerabilities in CodeExtension filters