Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 236 of 430.
- CVE-2023-41855 WordPress Regpack Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41854 WordPress wpCentral Plugin <= 1.5.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41853 WordPress WP iCal Availability Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41852 WordPress MailMunch – Grow your Email List Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41851 WordPress WP Custom Post Template Plugin <= 1.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41850 WordPress Outbound Link Manager Plugin <= 1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4185 SourceCodester Online Hospital Management System patientlogin.php sql injection
- CVE-2023-41849 WordPress Posts Like Dislike plugin <= 1.1.0 - Broken Access Control vulnerability
- CVE-2023-41848 WordPress Carousel Slider plugin <= 2.2.2 - Broken Access Control vulnerability
- CVE-2023-41847 WordPress Notice Bar Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41846 Memory corruption in Tecnomatix Plant Simulation V2201
- CVE-2023-41844 Cross-site scripting in FortiSandbox
- CVE-2023-41843 Cross-site scripting in FortiSandbox
- CVE-2023-41842 Memory corruption in FortiAnalyzer
- CVE-2023-41841 Privilege escalation in FortiOS
- CVE-2023-41840 Other in FortiClientWindows
- CVE-2023-4184 SourceCodester Inventory Management System sell_return.php sql injection
- CVE-2023-41838 Command injection in FortiAnalyzer
- CVE-2023-41836 Cross-site scripting in FortiSandbox
- CVE-2023-41835 Apache Struts: excessive disk usage
- CVE-2023-41834 Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences
- CVE-2023-41833 Race condition in UEFI firmware for some Intel(R) processors
- CVE-2023-41830 Path traversal in Phones
- CVE-2023-4183 SourceCodester Inventory Management System Password edit_update.php access control
- CVE-2023-41829 Missing authorization in Phones
- CVE-2023-41828 Missing authorization in Phones
- CVE-2023-41827 Missing authorization in Phones
- CVE-2023-41826 Other in Phones
- CVE-2023-41825 Path traversal in Phones
- CVE-2023-41824 Information disclosure in Phones
- CVE-2023-41823 Missing authorization in Phones
- CVE-2023-41822 Missing authorization in Phones
- CVE-2023-41821 Information disclosure in Phones
- CVE-2023-41820 Information disclosure in Phones
- CVE-2023-4182 SourceCodester Inventory Management System edit_sell.php sql injection
- CVE-2023-41819 Missing authorization in Phones
- CVE-2023-41818 Information disclosure in Phones
- CVE-2023-41817 Information disclosure in Phones
- CVE-2023-41816 Missing authorization in Phones
- CVE-2023-41815 XSS in File manager
- CVE-2023-41814 XSS Vulnerability Messages
- CVE-2023-41813 User notification settings edition
- CVE-2023-41812 Uploading executables via the file manager
- CVE-2023-41811 Stored XSS Via Site News Page
- CVE-2023-41810 Stored XSS Via Dashboard Panel
- CVE-2023-4181 SourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow
- CVE-2023-41808 Arbitrary File Read As Root Via GoTTY Page
- CVE-2023-41807 Linux Local Privilege Escalation Via GoTTY Page
- CVE-2023-41806 Misassignment of privileges can cause DOS attack
- CVE-2023-41805 Broken Access Control vulnerability in multiple Brainstorm Force plugins
- CVE-2023-41804 WordPress Starter Templates Plugin <= 3.2.4 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2023-41803 WordPress BitPay Checkout for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability
- CVE-2023-41802 WordPress Super Socializer plugin <= 7.13.54 - Broken Access Control vulnerability
- CVE-2023-41801 WordPress AWP Classifieds Plugin <= 4.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41800 WordPress UniConsent Cookie Consent CMP for GDPR / CCPA Plugin <= 1.4.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4180 SourceCodester Free Hospital Management System for Small Practices login.php sql injection
- CVE-2023-41798 WordPress Directorist Plugin <= 7.7.1 is vulnerable to CSV Injection
- CVE-2023-41797 WordPress Locations Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41796 WordPress Sunshine Photo Cart Plugin < 3.0.0 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-41793 Path Traversal and Untrusted Upload File
- CVE-2023-41792 Lack of Authorization and Stored XSS Via SNMP Trap Editor Page
- CVE-2023-41791 Lack of Authorization and Stored XSS Via Translation Abuse
- CVE-2023-41790 Traversal Path on PHP file
- CVE-2023-4179 SourceCodester Free Hospital Management System for Small Practices sql injection
- CVE-2023-41789 Unauthenticated Admin Account Takeover Via XSS
- CVE-2023-41788 Remote Code Execution via File Uploader
- CVE-2023-41787 Arbitrary File Read
- CVE-2023-41786 Database backups availability by low-privileged users
- CVE-2023-41784 Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro
- CVE-2023-41783 Command Injection Vulnerability of ZTE's ZXCLOUD iRAI
- CVE-2023-41782 DLL Hijacking Vulnerability in ZTE ZXCLOUD iRAI
- CVE-2023-41781 XSS Vulnerability in ZTE MF258 Products
- CVE-2023-41780 Unsafe DLL Loading Vulnerability in ZTE ZXCLOUD iRAI
- CVE-2023-4178 Authentication Bypass in Neutron Smart VMS
- CVE-2023-41779 Illegal Memory Access Vulnerability of ZTE's ZXCLOUD iRAI
- CVE-2023-41776 Local Privilege Escalation Vulnerability of ZTE's ZXCLOUD iRAI
- CVE-2023-41775 Security feature bypass in 'direct' Desktop App for macOS
- CVE-2023-41774 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-41773 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-41772 Win32k Elevation of Privilege Vulnerability
- CVE-2023-41771 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-41770 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-4177 EmpowerID Multi-Factor Authentication Code information disclosure
- CVE-2023-41769 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-41768 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-41767 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-41766 Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability
- CVE-2023-41765 Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
- CVE-2023-41764 Microsoft Office Spoofing Vulnerability
- CVE-2023-41763 Microsoft Skype for Business Privilege Escalation
- CVE-2023-4176 SourceCodester Hospital Management System appointmentapproval.php sql injection
- CVE-2023-41752 Apache Traffic Server: s3_auth plugin problem with hash calculation
- CVE-2023-41751 Auth bypass in Acronis Agent
- CVE-2023-41750 Missing authorization in Acronis Agent
- CVE-2023-4175 mooSocial mooTravel cross site scripting
- CVE-2023-41749 Information disclosure in Acronis Agent
- CVE-2023-41748 Command injection in Acronis Cloud Manager
- CVE-2023-41747 Path traversal in Acronis Cloud Manager
- CVE-2023-41746 Command injection in Acronis Cloud Manager
- CVE-2023-41745 Information disclosure in Acronis Agent