Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 237 of 430.
- CVE-2023-41744 Privilege escalation in Acronis Agent
- CVE-2023-41743 Privilege escalation in Acronis Cyber Protect 15
- CVE-2023-41742 Misconfiguration in Acronis Agent
- CVE-2023-41741 Information disclosure in Synology Router Manager (SRM)
- CVE-2023-41740 Path traversal in Synology Router Manager (SRM)
- CVE-2023-4174 mooSocial mooStore cross site scripting
- CVE-2023-41739 Denial of service in Synology Router Manager (SRM)
- CVE-2023-41738 Command injection in Synology Router Manager (SRM)
- CVE-2023-41737 WordPress Swifty Bar, sticky bar by WPGens Plugin <= 1.2.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41736 WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41735 WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure
- CVE-2023-41734 WordPress Insert Estimated Reading Time Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41733 WordPress Back To The Top Button Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41732 WordPress CP Blocks Plugin <= 1.0.20 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41731 WordPress wordpress publish post email notification Plugin <= 1.0.2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41730 WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4173 mooSocial mooStore index cross site scripting
- CVE-2023-41729 WordPress SendPress Newsletters Plugin <= 1.22.3.31 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41728 WordPress Rescue Shortcodes Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41727 Memory corruption in Wavelink
- CVE-2023-41726 Misconfiguration in Avalanche
- CVE-2023-41725 File upload in Avalanche
- CVE-2023-41724 Command injection in Sentry
- CVE-2023-41723 Missing authorization in One
- CVE-2023-41721 Missing authorization in UniFi Network Application
- CVE-2023-41720 Privilege escalation in Connect Secure
- CVE-2023-4172 Chengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx absolute path traversal
- CVE-2023-41719 Other in Connect Secure
- CVE-2023-41718 Privilege escalation in Secure Access
- CVE-2023-41717 Security feature bypass in zscaler:zscaler proxy
- CVE-2023-41715 Privilege escalation in SonicOS
- CVE-2023-41713 Hardcoded credentials in SonicOS
- CVE-2023-41712 Memory corruption in SonicOS
- CVE-2023-41711 Memory corruption in SonicOS
- CVE-2023-41710 Cross-site scripting in OX App Suite
- CVE-2023-4171 Chengdu Flash Flood Disaster Monitoring and Warning System FileDownload.ashx path traversal
- CVE-2023-41708 Cross-site scripting in OX App Suite
- CVE-2023-41707 Denial of service in OX App Suite
- CVE-2023-41706 Denial of service in OX App Suite
- CVE-2023-41705 Denial of service in OX App Suite
- CVE-2023-41704 Cross-site scripting in OX App Suite
- CVE-2023-41703 Cross-site scripting in OX App Suite
- CVE-2023-4170 DedeBIZ Article cross site scripting
- CVE-2023-41699 Payara Platform: URL Redirection to untrusted site using FORM authentication
- CVE-2023-41697 WordPress Easy WP Cleaner Plugin <= 1.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41695 WordPress Analytify plugin <= 5.1.0 - Broken Access Control vulnerability
- CVE-2023-41694 WordPress Realbig Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41693 WordPress MyCryptoCheckout Plugin <= 2.125 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41692 WordPress Attorney Theme <= 3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41691 WordPress WooCommerce PensoPay Plugin <= 6.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41690 WordPress WiserNotify Social Proof plugin <= 2.5 - Broken Access Control vulnerability
- CVE-2023-4169 Ruijie RG-EW1200G Administrator Password set_passwd access control
- CVE-2023-41689 WordPress Post to Google My Business (Google Business Profile) plugin <= 3.1.14 - Broken Access Control vulnerability
- CVE-2023-41688 WordPress Bulk NoIndex & NoFollow Toolkit plugin <= 1.5 - Broken Access Control vulnerability
- CVE-2023-41687 WordPress Goods Catalog Plugin <= 2.4.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41686 WordPress Woocommerce Support System plugin <= 1.2.2 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-41685 WordPress Woocommerce Support System Plugin <= 1.2.1 is vulnerable to SQL Injection
- CVE-2023-41684 WordPress SIS Handball Plugin <= 1.0.45 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41683 WordPress TelSender plugin <= 1.14.11 - Broken Access Control + CSRF vulnerability
- CVE-2023-41682 Path traversal in FortiSandbox
- CVE-2023-41681 Cross-site scripting in FortiSandbox
- CVE-2023-41680 Cross-site scripting in FortiSandbox
- CVE-2023-4168 Templatecookie Adlisting Redirect ad-list information disclosure
- CVE-2023-41679 Missing authorization in FortiManager
- CVE-2023-41678 Memory corruption in FortiOS
- CVE-2023-41677 Information disclosure in FortiOS
- CVE-2023-41676 Information disclosure in FortiSIEM
- CVE-2023-41675 Use after free in FortiOS
- CVE-2023-41673 Missing authorization in FortiADC
- CVE-2023-41672 Cross-site request forgery in Hide admin notices – Admin Notification Center
- CVE-2023-41671 WordPress Abandoned Cart Lite for WooCommerce plugin <= 5.16.1 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-41670 WordPress Use Memcached Plugin <= 1.0.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-4167 Media Browser Emby Server cross site scripting
- CVE-2023-41669 WordPress Live News Plugin <= 1.06 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41668 WordPress Leadster Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41667 WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41666 WordPress Stock Quotes List Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41665 WordPress GiveWP plugin <= 2.33.0 - GiveWP Manager+ Privilege Escalation vulnerability
- CVE-2023-41664 WordPress Easy Newsletter Signups plugin <= 1.0.4 - Broken Access Control vulnerability
- CVE-2023-41663 WordPress WP Bannerize Pro Plugin <= 1.6.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41662 WordPress WP-dTree Plugin <= 4.4.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41661 WordPress Smarty for WordPress Plugin <= 3.1.35 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41660 Cross-site request forgery in WP Synchro
- CVE-2023-4166 Tongda OA delete_log.php sql injection
- CVE-2023-41659 WordPress Responsive Gallery Grid Plugin <= 2.3.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41658 WordPress Photo Gallery Slideshow & Masonry Tiled Gallery Plugin <= 1.0.13 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41657 WordPress HollerBox Plugin <= 2.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41656 WordPress Better Elementor Addons plugin <= 1.3.7 - Broken Access Control vulnerability
- CVE-2023-41655 WordPress authLdap Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41654 WordPress authLdap Plugin <= 2.5.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-41653 WordPress Sermon'e – Sermons Online Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-41652 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection
- CVE-2023-41651 WordPress Multi-column Tag Map plugin <= 17.0.26 - Broken Access Control vulnerability
- CVE-2023-41650 Cross-site request forgery in Remove/hide Author, Date, Category Like Entry-Meta
- CVE-2023-4165 Tongda OA delete_seal.php sql injection
- CVE-2023-41649 WordPress Ovic Product Bundle plugin <= 1.1.2 - Broken Access Control vulnerability
- CVE-2023-41648 WordPress Login and Logout Redirect Plugin <= 2.0.3 is vulnerable to Open Redirection
- CVE-2023-41646 Buttercup allows attackers to obtain the hash of the master password
- CVE-2023-41642 Cross-site scripting in grupposcai:realgimm
- CVE-2023-41640 SQL injection in grupposcai:realgimm