Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 209 of 430.
- CVE-2023-45835 WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45834 WordPress Libsyn Publisher Hub Plugin <= 1.4.4 is vulnerable to Sensitive Data Exposure
- CVE-2023-45833 WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45832 WordPress WP GoToWebinar Plugin <= 14.45 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45831 WordPress AMP WP Plugin <= 1.5.15 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45830 WordPress Accessibility Suite by Online ADA Plugin <= 4.12 is vulnerable to SQL Injection
- CVE-2023-4583 Browsing Context potentially not cleared when closing Private Window
- CVE-2023-45829 WordPress Newsletter & Bulk Email Sender Plugin <= 2.0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45828 WordPress RumbleTalk Live Group Chat plugin <= 6.2.5 - Broken Access Control vulnerability
- CVE-2023-45827 Prototype Pollution vulnerability in @clickbar/dot-diver
- CVE-2023-45826 Authenticated SQL Injection in leantime
- CVE-2023-45825 Token in custom credentials object can leak through logs in ydb-go-sdk
- CVE-2023-45824 OroPlatform's pinned entity creation form shows pages of other users
- CVE-2023-45823 Arbitrary file read in Artifact Hub
- CVE-2023-45822 Unsafe rego built-in allowed in Artifact Hub
- CVE-2023-45821 Incorrect Docker Hub registry check in Artifact Hub
- CVE-2023-45820 Directus crashes on invalid WebSocket message
- CVE-2023-4582 Buffer Overflow in WebGL glGetProgramiv
- CVE-2023-45819 Cross-site Scripting vulnerability in TinyMCE notificationManager.open API
- CVE-2023-45818 Cross-site Scripting vulnerability in TinyMCE undo/redo, getContent API, resetContent API, and Autosave plugin
- CVE-2023-45816 Unread bookmark reminder notifications that the user cannot access can be seen
- CVE-2023-45815 Viewing wget extractor output while logged in as an admin allows archived JS to execute in the admins context
- CVE-2023-45814 Tokens cached in the AuthenticationService are susceptible to reuse in Bunkum
- CVE-2023-45813 Inefficient Regular Expression Complexity in TorBot
- CVE-2023-45812 Improper Check or Handling of Exceptional Conditions in apollo-router
- CVE-2023-45811 Prototype pollution vulnerability leading to arbitrary code execution in synchrony deobfuscator
- CVE-2023-45810 OpenFGA denial of service
- CVE-2023-4581 XLL file extensions were downloadable without warnings
- CVE-2023-45809 Disclosure of user names via admin bulk action views in wagtail
- CVE-2023-45808 iTop missing silo check on extkey in console and portal
- CVE-2023-45807 OpenSearch Issue with tenant read-only permissions
- CVE-2023-45806 Discourse vulnerable to DoS via Regexp Injection in Full Name
- CVE-2023-45805 Trojan Lockfilein pdm
- CVE-2023-45803 Request body not stripped after redirect in urllib3
- CVE-2023-45802 Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST
- CVE-2023-45801 Auth bypass in DVR
- CVE-2023-45800 SQL injection in Hanbiro groupware
- CVE-2023-4580 Push notifications saved to disk unencrypted
- CVE-2023-45799 MLSoft TCO!stream Remote Code Execution Vulnerability
- CVE-2023-45798 Yettiesoft VestCert Remote Code Execution Vulnerability
- CVE-2023-45797 DreamSecurity MagicLine Buffer Overflow Vulnerability
- CVE-2023-45796 XSS vulnerability in Pilz PASvisu and PMI v8xx
- CVE-2023-45795 Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx
- CVE-2023-45794 Auth bypass in Mendix Applications using Mendix 10
- CVE-2023-45793 Missing authorization in Siveillance Control
- CVE-2023-4579 Persisted search terms were formatted as URLs
- CVE-2023-45781 Memory corruption in Android
- CVE-2023-45780 Privilege escalation in Android
- CVE-2023-4578 Error reporting methods in SpiderMonkey could have triggered an Out of Memory Exception
- CVE-2023-45779 Weak cryptography in Android
- CVE-2023-45777 Privilege escalation in Android
- CVE-2023-45776 Memory corruption in Android
- CVE-2023-45775 Memory corruption in Android
- CVE-2023-45774 Missing authorization in Android
- CVE-2023-45773 Memory corruption in Android
- CVE-2023-45772 WordPress Proofreading Plugin <= 1.0.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45771 WordPress Contact Form With Captcha plugin <= 1.6.8 - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-45770 WordPress Fast WP Speed Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4577 Memory corruption in JIT UpdateRegExpStatics
- CVE-2023-45769 WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45768 WordPress Next Page Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45767 WordPress Simple Tweet Plugin <= 1.4.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45766 WordPress Poll Maker plugin <= 4.7.1 - Broken Access Control vulnerability
- CVE-2023-45765 WordPress WP ERP plugin <= 1.12.6 - Broken Access Control vulnerability
- CVE-2023-45764 WordPress Scroll post excerpt Plugin <= 8.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45763 WordPress Taggbox Plugin <= 2.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45762 WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Open Redirection
- CVE-2023-45761 WordPress Sendle Shipping Plugin <= 5.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45760 WordPress wpDiscuz plugin <= 7.6.3 - Broken Access Control vulnerability
- CVE-2023-4576 Integer Overflow in RecordedSourceSurfaceCreation
- CVE-2023-45759 WordPress Peter’s Custom Anti-Spam Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45758 WordPress Amministrazione Trasparente Plugin <= 8.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45757 Apache bRPC: The builtin service rpcz page has an XSS attack vulnerability
- CVE-2023-45756 Cross-site scripting in ApplyOnline – Application Form Builder and Manager
- CVE-2023-45755 WordPress BuddyPress Global Search Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45754 WordPress Easy Testimonial Slider and Form Plugin <= 1.0.18 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45753 WordPress which template file Plugin <= 4.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45752 WordPress Post Gallery Plugin <= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45751 WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Remote Code Execution (RCE)
- CVE-2023-45750 WordPress Nexter Extension Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4575 Memory corruption in IPC FilePickerShownCallback
- CVE-2023-45749 WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45748 WordPress MailChimp Forms by MailMunch Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45747 WordPress WP Lightbox 2 Plugin <= 3.0.6.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45746 Cross-site scripting in Movable Type 7 (Movable Type 7 Series)
- CVE-2023-45745 Privilege escalation in Intel(R) TDX module software
- CVE-2023-45744 Missing authorization in Smart Reader
- CVE-2023-45743 Privilege escalation in Intel(R) DSA software uninstallers
- CVE-2023-45742 Integer overflow in WBR-6013
- CVE-2023-45741 Command injection in VR-S1000
- CVE-2023-45740 Cross-site scripting in GROWI
- CVE-2023-4574 Memory corruption in IPC ColorPickerShownCallback
- CVE-2023-45737 Cross-site scripting in GROWI
- CVE-2023-45736 Privilege escalation in Intel(R) Power Gadget software for Windows
- CVE-2023-45735 Westermo Lynx Code Injection
- CVE-2023-45734 Dsoftbus has an out-of-bounds write vulnerability
- CVE-2023-45733 Race condition in Intel(R) Processors
- CVE-2023-4573 Memory corruption in IPC CanvasTranslator
- CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XXE) Reference
- CVE-2023-45725 Apache CouchDB, IBM Cloudant: Privilege Escalation Using _design Documents