Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 207 of 430.
- CVE-2023-46126 Fides JavaScript Injection Vulnerability in Privacy Center URL
- CVE-2023-46125 Fides Information Disclosure Vulnerability in Config API Endpoint
- CVE-2023-46124 Server-Side Request Forgery Vulnerability in Custom Integration Upload
- CVE-2023-46123 jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values
- CVE-2023-46122 Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt
- CVE-2023-46121 Generic Extractor MITM Vulnerability in yt-dlp
- CVE-2023-46120 RabbitMQ Java client's lack of message size limitation leads to remote DoS attack
- CVE-2023-4612 MFA bypass in Apereo CAS
- CVE-2023-46119 Parse Server may crash when uploading file without extension
- CVE-2023-46118 Denial of Service by publishing large messages over the HTTP API
- CVE-2023-46117 Inadequate validation of retrieved subdomains may lead to a Remote Code Execution in reconFTW
- CVE-2023-46116 Remote Code Execution via insufficiently sanitized call to shell.openExternal
- CVE-2023-46115 Updater Private Keys Possibly Leaked via Vite Environment Variables in tauri-cli
- CVE-2023-4611 Use after free race between mbind() and vma-locked page fault
- CVE-2023-46104 Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb
- CVE-2023-46103 Denial of service in Intel(R) Core(TM) Ultra Processors
- CVE-2023-46102 Hardcoded credentials in ctrlX HMI Web Panel - WR21 (WR2107)
- CVE-2023-46100 Cert manager has a use of uninitialized resource vulnerability
- CVE-2023-46099 Cross-site scripting in SIMATIC PCS neo
- CVE-2023-46098 Misconfiguration in SIMATIC PCS neo
- CVE-2023-46097 SQL injection in SIMATIC PCS neo
- CVE-2023-46096 Auth bypass in SIMATIC PCS neo
- CVE-2023-46095 WordPress Smooth Scroll Links Plugin <= 1.1.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46094 WordPress Conversios.io Plugin <= 6.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46093 WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46092 WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46091 WordPress Category SEO Meta Tags Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46090 WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46089 WordPress Userback Plugin <= 1.0.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46088 WordPress WP Full Stripe Free Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46087 WordPress Who Hit The Page – Hit Counter Plugin <= 1.4.14.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46086 WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.4.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46085 WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46084 WordPress Icons Font Loader Plugin <= 1.1.2 is vulnerable to SQL Injection
- CVE-2023-46083 WordPress Kali Forms plugin <= 2.3.27 - Broken Access Control vulnerability
- CVE-2023-46082 WordPress Broken Link Checker | Finder plugin <= 2.4.2 - Broken Access Control vulnerability
- CVE-2023-46081 WordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46080 WordPress ApplyOnline – Application Form Builder and Manager plugin <= 2.5.3 - Broken Access Control vulnerability
- CVE-2023-4608 SQL injection in Lenovo XClarity Controller (XCC)
- CVE-2023-46079 WordPress Ashe Extra plugin <= 1.2.9 - Broken Access Control + CSRF vulnerability
- CVE-2023-46078 Cross-site request forgery in WC Serial Numbers
- CVE-2023-46077 WordPress The Awesome Feed – Custom Feed Plugin <= 2.2.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46076 WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.102 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46075 WordPress Contact Form Builder, Contact Widget Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46074 WordPress FreshMail For WordPress Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46073 WordPress DX Delete Attached Media plugin <= 2.0.5.1 - Broken Access Control vulnerability + CSRF
- CVE-2023-46072 WordPress Add Shortcodes Actions And Filters Plugin <= 2.0.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46071 WordPress Protección de Datos RGPD Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46070 WordPress EG-Attachments Plugin <= 2.1.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4607 Privilege escalation in Lenovo XClarity Controller (XCC)
- CVE-2023-46069 WordPress Ajax Archive Calendar Plugin <= 2.6.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46068 WordPress Maileon Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46067 WordPress Rocket Font Plugin <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-46066 WordPress Mediabay Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-46060 Memory corruption in tenda:ac500 firmware
- CVE-2023-4606 Missing authorization in Lenovo XClarity Controller (XCC)
- CVE-2023-46059 Cross-site scripting in geeklog:geeklog
- CVE-2023-46058 Cross-site scripting in geeklog:geeklog
- CVE-2023-46055 Code injection in thingnario:photon
- CVE-2023-46054 Cross-site scripting in wbce:wbce cms
- CVE-2023-46052 Memory corruption in sane-project:sane backends
- CVE-2023-46051 TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c.
- CVE-2023-4605 Information disclosure in XClarity Administrator
- CVE-2023-46049 LLVM 15.0.0 has a NULL pointer dereference in the parseOneMetadata() function via a crafted pdflatex.fmt file (or perhaps a crafted .o file) to llvm-lto.
- CVE-2023-46048 Tex Live 944e257 has a NULL pointer dereference in texk/web2c/pdftexdir/writet1.c.
- CVE-2023-46047 Code injection in sane-project:sane backends
- CVE-2023-46046 An issue in MiniZinc before 2.8.0 allows a NULL pointer dereference via ti_expr in a crafted .mzn file.
- CVE-2023-46045 Memory corruption in graphviz:graphviz
- CVE-2023-46042 Code injection in get-simple:getsimplecms
- CVE-2023-46040 Cross-site scripting in get-simple:getsimplecms
- CVE-2023-4604 Slideshow, Image Slider by 2J <= 1.3.54 - Reflected Cross-Site Scripting via 'post'
- CVE-2023-46035 svg_optimizer rubygem external XML entity (XXE) vulnerability
- CVE-2023-46033 Auth bypass in dlink:dsl-2730u firmware
- CVE-2023-4603 Star CloudPRNT for WooCommerce <= 2.0.3 - Reflected Cross-Site Scripting
- CVE-2023-46026 Cross-site scripting in phpgurukul:teacher subject allocation management system
- CVE-2023-46025 SQL injection in phpgurukul:teacher subject allocation management system
- CVE-2023-46024 SQL injection in phpgurukul:teacher subject allocation management system
- CVE-2023-46023 SQL injection in code-projects:simple task list
- CVE-2023-46022 SQL injection in code-projects:blood bank
- CVE-2023-46021 SQL injection in code-projects:blood bank
- CVE-2023-46020 Cross-site scripting in code-projects:blood bank
- CVE-2023-4602 Namaste! LMS <= 2.6.1.1 - Reflected Cross-Site Scripting
- CVE-2023-46019 Cross-site scripting in code-projects:blood bank
- CVE-2023-46018 SQL injection in code-projects:blood bank
- CVE-2023-46017 SQL injection in code-projects:blood bank
- CVE-2023-46016 Cross-site scripting in code-projects:blood bank
- CVE-2023-46015 Cross-site scripting in code-projects:blood bank
- CVE-2023-46014 SQL injection in code-projects:blood bank
- CVE-2023-46012 Memory corruption in linksys:ea7500 firmware
- CVE-2023-46010 Code injection in seacms:seacms
- CVE-2023-4601 Stack-based Buffer Overflow in NI System Configuration Software
- CVE-2023-46009 Denial of service in lcdf:gifsicle
- CVE-2023-46007 SQL injection in mayurik:best courier management system
- CVE-2023-46006 SQL injection in mayurik:best courier management system
- CVE-2023-46005 SQL injection in mayurik:best courier management system
- CVE-2023-46004 File upload in mayurik:best courier management system
- CVE-2023-46003 Cross-site scripting in i-doit:i-doit
- CVE-2023-46001 Memory corruption in gpac:gpac
- CVE-2023-4600 Missing authorization in AffiliateWP
- CVE-2023-45998 Cross-site scripting in kodcloud:kodbox