Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 206 of 430.
- CVE-2023-46233 crypto-js PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
- CVE-2023-46232 era-compiler-vyper First Immutable Variable Initialization vulnerability
- CVE-2023-46231 Session Token Disclosure to Internal Log Files in Splunk Add-on Builder
- CVE-2023-46230 Sensitive Information Disclosure to Internal Log Files in Splunk Add-on Builder
- CVE-2023-4623 Use-after-free in Linux kernel's net/sched: sch_hfsc (HFSC qdisc traffic control) component
- CVE-2023-46229 LangChain Server Side Request Forgery vulnerability
- CVE-2023-46228 Integer overflow in zchunk:zchunk
- CVE-2023-46227 Apache inlong has an Arbitrary File Read Vulnerability
- CVE-2023-46226 Apache IoTDB: Remote Code Execution (RCE) risk via the UDF
- CVE-2023-46225 Memory corruption in Avalanche
- CVE-2023-46224 Memory corruption in Avalanche
- CVE-2023-46223 Memory corruption in Avalanche
- CVE-2023-46222 Memory corruption in Avalanche
- CVE-2023-46221 Memory corruption in Avalanche
- CVE-2023-46220 Memory corruption in Avalanche
- CVE-2023-4622 Use-after-free in Linux kernel's af_unix component
- CVE-2023-46219 Other in curl
- CVE-2023-46218 Security feature bypass in curl
- CVE-2023-46217 Memory corruption in Wavelink
- CVE-2023-46216 Memory corruption in Wavelink
- CVE-2023-46215 Apache Airflow Celery provider Insertion of Sensitive Information into Log File vulnerability
- CVE-2023-46214 Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing
- CVE-2023-46213 Cross-site Scripting (XSS) on “Show Syntax Highlighted” View in Search Page
- CVE-2023-46212 WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control
- CVE-2023-46211 WordPress Ultimate Addons for WPBakery Page Builder Plugin <= 3.19.14 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46210 WordPress WC Captcha Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46209 WordPress Grid Plus Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46208 WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46207 WordPress Motors – Car Dealer & Classified Ads Plugin <= 1.4.6 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2023-46206 WordPress MW WP Form plugin <= 4.4.5 - Broken Access Control vulnerability
- CVE-2023-46205 WordPress Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 - Local File Inclusion vulnerability
- CVE-2023-46204 WordPress Duplicate Theme Plugin <= 0.1.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46203 WordPress Just Custom Fields plugin <= 3.3.2 - Broken Access Control vulnerability
- CVE-2023-46202 WordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46201 WordPress Auto Login New User After Registration Plugin <= 1.9.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46200 WordPress Smart App Banner Plugin <= 1.1.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4620 Booking Calendar < 9.7.3.1 - Unauthenticated Stored XSS
- CVE-2023-46199 WordPress Triberr Plugin <= 4.1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46198 WordPress Appointment Calendar Plugin <= 2.9.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46197 WordPress Popup by Supsystic plugin <= 1.10.19 - Unauthenticated Subscriber Email Addresses Disclosure
- CVE-2023-46196 WordPress Social proof testimonials and reviews by Repuso plugin <= 4.97 - Broken Access Control vulnerability
- CVE-2023-46195 WordPress Headline Analyzer plugin <= 1.3.1 - Broken Access Control vulnerability
- CVE-2023-46194 WordPress Archivist – Custom Archive Templates Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46193 WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46192 WordPress Internal Link Building Plugin <= 1.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46191 WordPress Open Graph Metabox Plugin <= 1.4.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46190 Cross-site request forgery in Novo-Map : your WP posts on custom google maps
- CVE-2023-46189 WordPress Google Calendar Events Plugin <= 3.2.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46188 WordPress Freesoul Deactivate Plugins plugin <= 2.1.3 - Broken Access Control vulnerability
- CVE-2023-46187 IBM InfoSphere Master Data Management cross-site scripting
- CVE-2023-46186 IBM Jazz for Service Management information disclosure
- CVE-2023-46183 IBM PowerVM Hypervisor information disclosure
- CVE-2023-46182 IBM Secure Proxy cross-site scripting
- CVE-2023-46181 IBM Secure Proxy information disclosure
- CVE-2023-46179 IBM Secure Proxy information disclosure
- CVE-2023-46177 IBM MQ Appliance information disclosure
- CVE-2023-46176 IBM MQ privilege escalation
- CVE-2023-46175 IBM Cloud Pak for Multicloud Management information disclosure
- CVE-2023-46174 IBM InfoSphere Information Server cross-site scripting
- CVE-2023-46172 IBM DS8900F security bypass
- CVE-2023-46171 IBM DS8900F information disclosure
- CVE-2023-46170 IBM DS8900F information disclosure
- CVE-2023-4617 Gaining remote control over Govee devices
- CVE-2023-46169 IBM DS8900F file manipulation
- CVE-2023-46167 IBM Db2 denial of service
- CVE-2023-4616 thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
- CVE-2023-46159 IBM Storage Ceph denial of service
- CVE-2023-46158 IBM WebSphere Application Server session fixation
- CVE-2023-46157 Command injection in mgt-commerce:cloudpanel
- CVE-2023-46156 Use after free in SIMATIC Drive Controller CPU 1504D TF
- CVE-2023-46154 WordPress e2pdf Plugin <= 1.20.18 is vulnerable to PHP Object Injection
- CVE-2023-46153 WordPress User Feedback Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46152 WordPress WOLF Plugin <= 1.0.7.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46151 WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46150 WordPress WP Radio plugin <= 3.1.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4615 updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
- CVE-2023-46149 WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to Arbitrary File Upload
- CVE-2023-46148 WordPress Themify Ultra theme <= 7.3.5 - Authenticated Arbitrary Settings Change vulnerability
- CVE-2023-46147 WordPress Themify Ultra Theme <= 7.3.5 is vulnerable to PHP Object Injection
- CVE-2023-46146 WordPress Themify Ultra theme <= 7.3.5 - Multiple Broken Access Control vulnerability
- CVE-2023-46145 WordPress Themify Ultra theme <= 7.3.5 - Authenticated Privilege Escalation vulnerability
- CVE-2023-46144 PHOENIX CONTACT: PLCnext Control prone to download of code without integrity check
- CVE-2023-46143 Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC
- CVE-2023-46142 PHOENIX CONTACT: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control
- CVE-2023-46141 Misconfiguration in AXC 1050
- CVE-2023-4614 setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
- CVE-2023-46139 KernelSU signature validation mismatch
- CVE-2023-46138 JumpServer default admin user email leak password reset
- CVE-2023-46137 twisted.web has disordered HTTP pipeline response
- CVE-2023-46136 Werkzeug DoS: High resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning
- CVE-2023-46135 Panic in SignedPayload::from_payload
- CVE-2023-46134 D-Tale vulnerable to Remote Code Execution through the Custom Filter Input
- CVE-2023-46133 crypto-es PBKDF2 1,000 times weaker than specified in 1993 and 1.3M times weaker than current standard
- CVE-2023-46132 Crosslinking transaction attack in hyperledger/fabric
- CVE-2023-46131 Grails® data binding causes JVM crash and/or DoS
- CVE-2023-46130 Bypassing height value allowed in some theme components
- CVE-2023-4613 Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability
- CVE-2023-46129 xkeys Seal encryption used fixed key for all encryption
- CVE-2023-46128 Exposure of hashed user passwords via REST API in Nautobot
- CVE-2023-46127 Frappe vulnerable to HTML injection by any Desk user