Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 203 of 430.
- CVE-2023-46625 WordPress Autolinks Manager Plugin <= 1.10.04 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46624 WordPress Parcel Pro Plugin <= 1.6.11 is vulnerable to Open Redirection
- CVE-2023-46623 WordPress WP EXtra Plugin <= 6.2 is vulnerable to Remote Code Execution (RCE)
- CVE-2023-46622 WordPress WPPizza Plugin <= 3.18.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46621 WordPress User Avatar Plugin <= 1.4.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46620 WordPress DeepL Pro API translation Plugin <= 2.3.9.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4662 RCE in Saphira Connect
- CVE-2023-46619 WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46618 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46617 Cross-site request forgery in AdFoxly – Ad Manager, AdSense Ads & Ads.txt
- CVE-2023-46616 WordPress Draw Attention plugin <= 2.0.15 - Broken Access Control vulnerability
- CVE-2023-46615 WordPress KD Coming Soon Plugin <= 1.7 is vulnerable to PHP Object Injection
- CVE-2023-46614 WordPress WP Helper Premium Plugin <= 4.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46613 WordPress Add to Calendar Button Plugin < 1.5.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46612 WordPress Mediabay plugin <= 1.6 - Broken Access Control vulnerability
- CVE-2023-46611 WordPress YOP Poll plugin <= 6.5.28 - Vote Manipulation Due to Broken Captcha Control Vulnerability
- CVE-2023-46610 WordPress Quill Forms plugin <= 3.3.0 - Broken Access Control + CSRF vulnerability
- CVE-2023-4661 SQLi in Saphira Connect
- CVE-2023-46609 WordPress FeedFocal plugin <= 1.2.2 - Broken Access Control vulnerability
- CVE-2023-46608 WordPress DoLogin Security plugin <= 3.7.1 - Multiple Broken Access Control vulnerability
- CVE-2023-46607 WordPress WP iCal Availability plugin <= 1.0.3 - Broken Access Control vulnerability
- CVE-2023-46606 WordPress AtomChat plugin <= 1.1.4 - Broken Access Control vulnerability
- CVE-2023-46605 WordPress Convertful – Your Ultimate On-Site Conversion Tool plugin <= 2.5 - Broken Access Control vulnerability
- CVE-2023-46604 Apache ActiveMQ Deserialization of Untrusted Data
- CVE-2023-46603 Memory corruption in color:demoiccmax
- CVE-2023-46602 Memory corruption in color:demoiccmax
- CVE-2023-46601 Missing authorization in COMOS
- CVE-2023-46596 Improper input validation in FireFlow’s VisualFlow workflow editor
- CVE-2023-46595 Net-NTLM leak via HTML injection in FireFlow VisualFlow workflow editor
- CVE-2023-46590 XML external entity in Siemens OPC UA Modelling Editor (SiOME)
- CVE-2023-4659 Cross-Site Request Forgery in Free5Gc
- CVE-2023-46589 Apache Tomcat: HTTP request smuggling via malformed trailer headers
- CVE-2023-46587 Memory corruption in xnview:xnview
- CVE-2023-46586 cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused.
- CVE-2023-46584 SQL injection in phpgurukul:nipah virus testing management system
- CVE-2023-46583 Cross-site scripting in phpgurukul:nipah virus testing management system
- CVE-2023-46582 SQL injection in code-projects:inventory management
- CVE-2023-46581 SQL injection in code-projects:inventory management
- CVE-2023-46580 Cross-site scripting in code-projects:inventory management
- CVE-2023-4658 Incorrect Authorization in GitLab
- CVE-2023-46575 SQL injection vulnerability in Meshery
- CVE-2023-46574 Command injection in totolink:a3700r firmware
- CVE-2023-46570 Memory corruption in radare:radare2
- CVE-2023-46569 Memory corruption in radare:radare2
- CVE-2023-46566 Buffer Overflow vulnerability in msoulier tftpy commit 467017b844bf6e31745138a30e2509145b0c529c allows a remote attacker to cause a denial o
- CVE-2023-46565 Buffer Overflow vulnerability in osrg gobgp
- CVE-2023-46564 Memory corruption in totolink:x2000r firmware
- CVE-2023-46563 Memory corruption in totolink:x2000r firmware
- CVE-2023-46562 Memory corruption in totolink:x2000r firmware
- CVE-2023-46560 Memory corruption in totolink:x2000r firmware
- CVE-2023-46559 Memory corruption in totolink:x2000r firmware
- CVE-2023-46558 Memory corruption in totolink:x2000r firmware
- CVE-2023-46557 Memory corruption in totolink:x2000r firmware
- CVE-2023-46556 Memory corruption in totolink:x2000r firmware
- CVE-2023-46555 Memory corruption in totolink:x2000r firmware
- CVE-2023-46554 Memory corruption in totolink:x2000r firmware
- CVE-2023-46553 Memory corruption in totolink:x2000r firmware
- CVE-2023-46552 Memory corruption in totolink:x2000r firmware
- CVE-2023-46551 Memory corruption in totolink:x2000r firmware
- CVE-2023-46550 Memory corruption in totolink:x2000r firmware
- CVE-2023-4655 Cross-site Scripting (XSS) - Reflected in instantsoft/icms2
- CVE-2023-46549 Memory corruption in totolink:x2000r firmware
- CVE-2023-46548 Memory corruption in totolink:x2000r firmware
- CVE-2023-46547 Memory corruption in totolink:x2000r firmware
- CVE-2023-46546 Memory corruption in totolink:x2000r firmware
- CVE-2023-46545 Memory corruption in totolink:x2000r firmware
- CVE-2023-46544 Memory corruption in totolink:x2000r firmware
- CVE-2023-46543 Memory corruption in totolink:x2000r firmware
- CVE-2023-46542 Memory corruption in totolink:x2000r firmware
- CVE-2023-46541 Memory corruption in totolink:x2000r firmware
- CVE-2023-46540 Memory corruption in totolink:x2000r firmware
- CVE-2023-4654 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in instantsoft/icms2
- CVE-2023-46539 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46538 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46537 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46536 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46535 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46534 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-4653 Cross-site Scripting (XSS) - Stored in instantsoft/icms2
- CVE-2023-46527 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46526 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46525 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46523 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46522 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46521 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-46520 Memory corruption in tp-link:tl-wr886n firmware
- CVE-2023-4652 Cross-site Scripting (XSS) - Stored in instantsoft/icms2
- CVE-2023-46518 Memory corruption in mercurycom:a15 firmware
- CVE-2023-46510 Command injection in zioncom:a7000r firmware
- CVE-2023-4651 Server-Side Request Forgery (SSRF) in instantsoft/icms2
- CVE-2023-46509 Code injection in contec:solarview compact firmware
- CVE-2023-46505 Cross-site scripting in pwncyn:fancms
- CVE-2023-46504 Cross-site scripting in pwncyn:yxbookcms
- CVE-2023-46503 Cross-site scripting in pwncyn:yxbookcms
- CVE-2023-46502 OpenCRX allows a remote attacker to execute arbitrary code via a crafted request
- CVE-2023-46501 Missing authorization in boltwire:boltwire
- CVE-2023-4650 Improper Access Control in instantsoft/icms2
- CVE-2023-46499 Cross-site Scripting in evershop
- CVE-2023-46498 Code execution in evershop
- CVE-2023-46497 Directory Traversal in evershop