Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 244 of 430.
- CVE-2023-40771 DataEase vulnerable to SQL injection
- CVE-2023-4077 Cross-site scripting in Chrome
- CVE-2023-40767 Information disclosure in phpjabbers:make an offer widget
- CVE-2023-40766 Information disclosure in phpjabbers:ticket support script
- CVE-2023-40765 Information disclosure in phpjabbers:event booking calendar
- CVE-2023-40764 Information disclosure in phpjabbers:car rental script
- CVE-2023-40763 Information disclosure in phpjabbers:taxi booking script
- CVE-2023-40762 Information disclosure in phpjabbers:fundraising script
- CVE-2023-40761 Information disclosure in phpjabbers:yacht listing script
- CVE-2023-40760 Information disclosure in phpjabbers:hotel booking system
- CVE-2023-4076 Use after free in Chrome
- CVE-2023-40759 Information disclosure in phpjabbers:restaurant booking script
- CVE-2023-40758 Information disclosure in phpjabbers:document creator
- CVE-2023-40757 Information disclosure in phpjabbers:food delivery script
- CVE-2023-40756 Information disclosure in phpjabbers:callback widget
- CVE-2023-40755 Cross-site scripting in phpjabbers:callback widget
- CVE-2023-40754 Business logic in phpjabbers:car rental script
- CVE-2023-40753 Cross-site scripting in phpjabbers:ticket support script
- CVE-2023-40752 Cross-site scripting in phpjabbers:make an offer widget
- CVE-2023-40751 Cross-site scripting in phpjabbers:fundraising script
- CVE-2023-40750 Cross-site scripting in phpjabbers:yacht listing script
- CVE-2023-4075 Use after free in Chrome
- CVE-2023-40749 SQL injection in phpjabbers:food delivery script
- CVE-2023-40748 SQL injection in phpjabbers:food delivery script
- CVE-2023-40747 Path traversal in pmman.exe (Enterprise edition)
- CVE-2023-40745 Libtiff: integer overflow in tiffcp.c
- CVE-2023-40743 Apache Axis 1.x (EOL) may allow RCE when untrusted input is passed to getService
- CVE-2023-4074 Use after free in Chrome
- CVE-2023-40735 Butterfly Button Project - Sensitive Information Disclosure
- CVE-2023-40732 Auth bypass in QMS Automotive
- CVE-2023-40731 File upload in QMS Automotive
- CVE-2023-40730 Missing authorization in QMS Automotive
- CVE-2023-4073 Memory corruption in Chrome
- CVE-2023-40729 Weak cryptography in QMS Automotive
- CVE-2023-40728 Information disclosure in QMS Automotive
- CVE-2023-40727 Weak cryptography in QMS Automotive
- CVE-2023-40726 Information disclosure in QMS Automotive
- CVE-2023-40725 Information disclosure in QMS Automotive
- CVE-2023-40724 Information disclosure in QMS Automotive
- CVE-2023-40723 Information disclosure in FortiSIEM
- CVE-2023-40721 Memory corruption in FortiOS
- CVE-2023-40720 Missing authorization in FortiVoice
- CVE-2023-4072 Memory corruption in Chrome
- CVE-2023-40719 Hardcoded credentials in FortiAnalyzer
- CVE-2023-40718 Security feature bypass in IPS Engine
- CVE-2023-40717 Hardcoded credentials in FortiTester
- CVE-2023-40716 Command injection in FortiTester
- CVE-2023-40715 Information disclosure in FortiTester
- CVE-2023-40714 Path traversal in FortiSIEM
- CVE-2023-40712 Apache Airflow: Secrets can be unmasked in the "Rendered Template"
- CVE-2023-40711 Denial of service in veilid:veilid
- CVE-2023-40710 Denial of service in SNAP PAC S1
- CVE-2023-4071 Memory corruption in Chrome
- CVE-2023-40709 Uncontrolled Resource Consumption in OPTO 22 SNAP PAC S1 Built-In Web Server
- CVE-2023-40708 Improper Access Control in OPTO 22 SNAP PAC S1
- CVE-2023-40707 Weak password requirements in OPTO 22 SNAP PAC S1 Built-in Web Server
- CVE-2023-40706 Improper Restriction of Excessive Authentication Attempts in OPTO 22 SNAP PAC S1 Built-in Web Server
- CVE-2023-40705 Cross-site scripting in VI Web Client
- CVE-2023-40704 Philips Vue PACS Use of Default Credentials
- CVE-2023-40703 Denial of Service via specially crafted block fields in Mattermost Boards
- CVE-2023-40702 PingOne MFA Integration Kit MFA bypass
- CVE-2023-4070 Memory corruption in Chrome
- CVE-2023-40699 IBM InfoSphere Information Server denial of service
- CVE-2023-40696 IBM Cognos Controller information disclosure
- CVE-2023-40695 IBM Cognos Controller session fixation
- CVE-2023-40694 IBM Watson CP4D Data Stores information disclosure
- CVE-2023-40693 IBM Sterling B2B Integrator and IBM Sterling File Gateway Cross-Site Scripting
- CVE-2023-40692 IBM Db2 denial of service
- CVE-2023-40691 IBM Cloud Pak for Business Automation information disclosure
- CVE-2023-4069 Memory corruption in Chrome
- CVE-2023-40687 IBM Db2 denial of service
- CVE-2023-40686 IBM i privilege escalation
- CVE-2023-40685 IBM i privilege escalation
- CVE-2023-40684 IBM Content Navigator cross-site scripting
- CVE-2023-40683 IBM OpenPages with Watson privilege escalation
- CVE-2023-40682 IBM App Connect Enterprise information disclosure
- CVE-2023-40681 WordPress Groundhogg Plugin <= 2.7.11.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40680 WordPress Yoast SEO Plugin <= 21.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4068 Memory corruption in Chrome
- CVE-2023-40679 WordPress Master Elementor Addons plugin <= 2.0.5.3 - Broken Access Control vulnerability
- CVE-2023-40678 WordPress Simple URLs plugin <= 117 - Broken Access Control vulnerability
- CVE-2023-40677 WordPress Vertical Marquee Plugin Plugin <= 7.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40676 WordPress Slimstat Analytics Plugin <= 5.0.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40675 WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40674 WordPress Simple URLs Plugin <= 118 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40673 WordPress Cartpauj Register Captcha plugin <= 1.0.02 - Captcha Bypass vulnerability
- CVE-2023-40672 WordPress Sticky Social Media Icons plugin <= 2.1 - Broken Access Control vulnerability
- CVE-2023-40671 WordPress DX-auto-save-images Plugin <= 1.4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-40670 WordPress ReviewX plugin <= 1.6.17 - Broken Access Control vulnerability
- CVE-2023-4067 Bus Ticket Booking with Seat Reservation <= 5.2.3 - Reflected Cross-Site Scripting
- CVE-2023-40669 WordPress Collapse-O-Matic Plugin <= 1.8.5.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40668 WordPress Save as PDF plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40667 WordPress Simple URLs Plugin <= 117 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40665 WordPress Save as Image plugin by Pdfcrowd Plugin <= 2.16.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40664 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40663 WordPress WP VR Plugin <= 8.3.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40662 WordPress Cookies and Content Security Policy Plugin <= 2.15 is vulnerable to Sensitive Data Exposure
- CVE-2023-40661 Opensc: multiple memory issues with pkcs15-init (enrollment tool)
- CVE-2023-40660 Opensc: potential pin bypass when card tracks its own login state
- CVE-2023-4066 Operator: passwords defined in secrets shown in statefulset yaml