Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 214 of 430.
- CVE-2023-45136 XWiki Platform web templates vulnerable to reflected XSS in the create document form if name validation is enabled
- CVE-2023-45135 XWiki users can be tricked to execute scripts as the create page action doesn't display the page's title
- CVE-2023-45134 XWiki Platform XSS vulnerability from account in the create page form via template provider
- CVE-2023-45133 Babel vulnerable to arbitrary code execution when compiling specifically crafted malicious code
- CVE-2023-45132 IgnoreIP/IgnoreCIDR should not trust X-Forwarded-For
- CVE-2023-45131 Unauthenticated access to new private chat messages in Discourse
- CVE-2023-45130 Frontier opcode SUICIDE touches too many storage values on large contracts
- CVE-2023-4513 Missing Release of Memory after Effective Lifetime in Wireshark
- CVE-2023-45129 matrix-synapse vulnerable to denial of service due to malicious server ACL events
- CVE-2023-45128 CSRF Token Reuse Vulnerability in fiber
- CVE-2023-45121 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-45120 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-4512 Uncontrolled Recursion in Wireshark
- CVE-2023-45119 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-45118 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-45117 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-45116 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-45115 Online Examination System v1.0 - Multiple Authenticated SQL Injections (SQLi)
- CVE-2023-45111 Online Examination System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45110 WordPress Bold Timeline Lite plugin <= 1.1.9 - Broken Access Control vulnerability
- CVE-2023-4511 Loop with Unreachable Exit Condition ('Infinite Loop') in Wireshark
- CVE-2023-45109 WordPress WhitePage Plugin <= 1.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45108 WordPress Mailrelay Plugin <= 2.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45107 WordPress GoodBarber Plugin <= 1.0.22 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45106 WordPress Urvanov Syntax Highlighter Plugin <= 2.8.33 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45105 WordPress affiliate-toolkit – WordPress Affiliate Plugin Plugin <= 3.3.9 is vulnerable to Open Redirection
- CVE-2023-45104 WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability
- CVE-2023-45103 WordPress Permalinks Customizer Plugin <= 2.8.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45102 WordPress Blog Manager Light Plugin <= 1.20 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45101 WordPress Customer Reviews for WooCommerce plugin <= 5.36.0 - Broken Access Control vulnerability
- CVE-2023-4509 Information disclosure in Octopus Server
- CVE-2023-45085 When compute hosts are disabled and reenabled, they immediately transition to "ON", not "INIT"
- CVE-2023-45084 Media caddy removal and reinsertion without reboot may cause data loss
- CVE-2023-45083 HyperCloud: "admin" and "serveradmin" users can be deleted
- CVE-2023-4508 Denial of Service in Gerbv
- CVE-2023-45079 Memory corruption in BIOS
- CVE-2023-45078 Memory corruption in BIOS
- CVE-2023-45077 Memory corruption in BIOS
- CVE-2023-45076 Memory corruption in BIOS
- CVE-2023-45075 Memory corruption in BIOS
- CVE-2023-45074 WordPress Advanced Page Visit Counter Plugin <= 7.1.1 is vulnerable to SQL Injection
- CVE-2023-45073 WordPress Mendeley Plugin <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45072 WordPress Order auto complete for WooCommerce Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45071 WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45070 WordPress Form Maker by 10Web Plugin <= 1.15.18 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4507 Admission AppManager <= 1.0.0 - Reflected Cross-Site Scripting
- CVE-2023-45069 WordPress Video Gallery – YouTube Gallery Plugin <= 2.1.3 is vulnerable to SQL Injection
- CVE-2023-45068 WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45067 WordPress WP Simple HTML Sitemap Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45066 WordPress WP Ultimate Exporter Plugin <= 2.4.1 is vulnerable to Sensitive Data Exposure
- CVE-2023-45065 WordPress Bulk NoIndex & NoFollow Toolkit Plugin <= 1.42 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45064 WordPress OPcache Dashboard Plugin <= 0.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45063 Cross-site request forgery in AI Content Writing Assistant (Content Writer, GPT 3 & 4, ChatGPT, Image Generator) All in One
- CVE-2023-45062 WordPress Download canvasio3D Light Plugin <= 2.4.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45061 WordPress WP Job Openings plugin <= 3.4.1 - Broken Access Control vulnerability
- CVE-2023-45060 WordPress Interactive World Map Plugin <= 3.2.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4506 Active Directory Integration / LDAP Integration <= 4.1.10 - LDAP Passback
- CVE-2023-45059 WordPress Gumroad Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45058 WordPress Short URL Plugin <= 1.6.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45057 WordPress Hitsteps Web Analytics Plugin <= 5.86 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45056 WordPress Open User Map | Everybody can add locations Plugin <= 1.3.26 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45055 WordPress MStore API Plugin <= 4.0.6 is vulnerable to SQL Injection
- CVE-2023-45054 WordPress Product Category Tree Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45053 WordPress WP Content Pilot plugin <= 1.3.3 - HTML Injection vulnerability
- CVE-2023-45052 WordPress WP Bing Map Pro Plugin < 5.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45051 WordPress Image vertical reel scroll slideshow Plugin <= 9.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45050 WordPress Jetpack Plugin <= 12.8-a.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4505 Staff / Employee Business Directory for Active Directory <= 1.2.3 - Authenticated (Admin+) LDAP Passback
- CVE-2023-45049 WordPress YouTube Playlist Player Plugin <= 4.6.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-45048 Cross-site request forgery in Social proof testimonials and reviews by Repuso
- CVE-2023-45047 WordPress LeadSquared Suite Plugin <= 0.7.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45046 WordPress Pressference Exporter Plugin <= 1.0.3 is vulnerable to SQL Injection
- CVE-2023-45045 WordPress WP Custom Widget area plugin <= 1.2.5 - Broken Access Control vulnerability
- CVE-2023-45044 QTS, QuTS hero
- CVE-2023-45043 QTS, QuTS hero
- CVE-2023-45042 QTS, QuTS hero
- CVE-2023-45041 QTS, QuTS hero
- CVE-2023-45040 QTS, QuTS hero
- CVE-2023-4504 OpenPrinting CUPS/libppd Postscript Parsing Heap Overflow
- CVE-2023-45039 QTS, QuTS hero
- CVE-2023-45038 Music Station
- CVE-2023-45037 QTS, QuTS hero, QuTScloud
- CVE-2023-45036 QTS, QuTS hero, QuTScloud
- CVE-2023-45035 QTS, QuTS hero, QuTScloud
- CVE-2023-4503 Eap-galleon: custom provisioning creates unsecured http-invoker
- CVE-2023-45028 QTS, QuTS hero, QuTScloud
- CVE-2023-45027 QTS, QuTS hero, QuTScloud
- CVE-2023-45026 QTS, QuTS hero, QuTScloud
- CVE-2023-45025 QTS, QuTS hero, QuTScloud
- CVE-2023-45024 Information disclosure in bestpractical:request tracker
- CVE-2023-45023 TYPO3 extension femanager Broken Access Control vulnerability
- CVE-2023-4502 Translate WordPress with GTranslate < 3.0.4 - Admin+ Stored XSS
- CVE-2023-45019 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45018 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45015 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45012 Online Bus Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)
- CVE-2023-45011 WordPress WP Power Stats Plugin <= 2.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-45010 WordPress Complete Open Graph Plugin <= 3.4.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4501 Authentication bypass in OpenText (Micro Focus) Enterprise Server
- CVE-2023-45009 WordPress Captcha for Contact Form 7 plugin <= 1.11.3 - Capcha Bypass vulnerability