Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 245 of 430.
- CVE-2023-40659 Extension - joomboost.com - Reflected XSS in Easy Quick Contact module for Joomla 1.0.0-1.3.0
- CVE-2023-40658 Extension - deconf.net - Reflected XSS in Clicky Analytics Dashboard module for Joomla 1.0.0-1.3.1
- CVE-2023-40657 Extension - artio.net - Reflected XSS in Joomdoc component for Joomla 1.0.0-4.0.5
- CVE-2023-40656 Extension - plasma-web.ru - Reflected XSS in Quickform component for Joomla 1.0.0-3.3.01
- CVE-2023-40655 Extension - mooj.org - Reflected XSS in Proforms Basic component for Joomla <= 1.6.0
- CVE-2023-40654 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40653 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40652 Memory corruption in T606/T612/T616
- CVE-2023-40651 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40650 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-4065 Operator: plaintext password in operator log
- CVE-2023-40649 Missing authorization in SC9863A
- CVE-2023-40648 Missing authorization in SC9863A
- CVE-2023-40647 Missing authorization in SC9863A
- CVE-2023-40646 Missing authorization in SC9863A
- CVE-2023-40645 Missing authorization in SC9863A
- CVE-2023-40644 Missing authorization in SC9863A
- CVE-2023-40643 Missing authorization in SC9863A
- CVE-2023-40642 Missing authorization in SC9863A
- CVE-2023-40641 Missing authorization in SC9863A
- CVE-2023-40640 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40639 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40638 Missing authorization in T760/T770/T820/S8000
- CVE-2023-40637 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40636 Missing authorization in T760/T770/T820/S8000
- CVE-2023-40635 Missing authorization in SC9863A/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40634 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40633 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40632 Use after free in T606/T612/T616
- CVE-2023-40631 Missing authorization in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-40630 Extension - joomcode.com - Unauthenticated LFI/SSRF in JCDashboards component for Joomla 1.0.0-1.1.30
- CVE-2023-4063 Denial of service in Certain HP OfficeJet Pro Printers
- CVE-2023-40629 Extension - king-products.net - SQLi vulnerability in LMS Lite component for Joomla 1.0.0-3.3.0.1
- CVE-2023-40628 Extension - Extplorer.net - Reflected XSS in Extplorer component for Joomla 1.0.0-2.1.15
- CVE-2023-40627 Extension - MLWebTechnologies - Reflected XSS in LivingWord component for Joomla 1.0.0-3.0.0
- CVE-2023-40626 [20231101] - Core - Exposure of environment variables
- CVE-2023-40625 Missing Authorization check in SAP Manage Purchase Contracts App
- CVE-2023-40624 Code Injection vulnerability in SAP NetWeaver AS ABAP (applications based on Unified Rendering)
- CVE-2023-40623 Arbitrary File Delete via Directory Junction in SAP BusinessObjects Suite(installer)
- CVE-2023-40622 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management)
- CVE-2023-40621 Code Injection vulnerability in SAP PowerDesigner Client
- CVE-2023-40619 Deserialization in phppgadmin project:phppgadmin
- CVE-2023-40618 Cross-site scripting in openknowledgemaps:head start
- CVE-2023-40617 Cross-site scripting in openknowledgemaps:head start
- CVE-2023-40612 Authenticated XXE Injection Via The File Editor
- CVE-2023-40611 Apache Airflow Dag Runs Broken Access Control Vulnerability
- CVE-2023-40610 Apache Superset: Privilege escalation with default examples database
- CVE-2023-4061 Wildfly-core: management user rbac permission allows unexpected reading of system-properties to an unauthorized actor
- CVE-2023-40609 WordPress Contact form 7 Custom validation Plugin <= 1.1.3 is vulnerable to SQL Injection
- CVE-2023-40608 WordPress Paid Memberships Pro CCBill Gateway plugin <= 0.3 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-40607 WordPress CLUEVO LMS, E-Learning Platform Plugin <= 1.10.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-40606 WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution
- CVE-2023-40605 WordPress Typing Effect Plugin <= 1.3.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40604 WordPress Cookies by JM Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40603 WordPress Simple Org Chart plugin <= 2.3.4 - Broken Access Control vulnerability
- CVE-2023-40602 WordPress Doofinder for WooCommerce Plugin <= 1.5.49 is vulnerable to Open Redirection
- CVE-2023-40601 WordPress Mortgage Calculator Estatik Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40600 WordPress EWWW Image Optimizer Plugin <= 7.2.0 is vulnerable to Sensitive Data Exposure
- CVE-2023-4060 WP Adminify < 3.1.6 - Admin+ Stored XSS
- CVE-2023-40599 Denial of service in Mailform Pro CGI
- CVE-2023-40598 Command Injection in Splunk Enterprise Using External Lookups
- CVE-2023-40597 Absolute Path Traversal in Splunk Enterprise Using runshellscript.py
- CVE-2023-40596 Splunk Enterprise on Windows Privilege Escalation due to Insecure OPENSSLDIR Build Definition Reference in DLL
- CVE-2023-40595 Remote Code Execution via Serialized Session Payload
- CVE-2023-40594 Denial of Service (DoS) via the ‘printf’ Search Function
- CVE-2023-40593 Denial of Service (DoS) in Splunk Enterprise Using a Malformed SAML Request
- CVE-2023-40592 Reflected Cross-site Scripting (XSS) on "/app/search/table" web endpoint
- CVE-2023-40591 Denial of service via malicious p2p message in go-ethereum
- CVE-2023-40590 Untrusted search path on Windows systems leading to arbitrary code execution
- CVE-2023-4059 Profile Builder < 3.9.8 - Unauthenticated Plugin's Pages Creation
- CVE-2023-40589 FreeRDP Global-Buffer-Overflow in ncrush_decompress
- CVE-2023-40588 Discourse DoS via 2FA and Security Key Names
- CVE-2023-40587 Pyramid static view path traversal up one directory
- CVE-2023-40586 go package github.com/corazawaf/coraza is vulnerable to denial of service
- CVE-2023-40585 Unauthenticated access to Ironic API
- CVE-2023-40584 Denial of Service to Argo CD repo-server
- CVE-2023-40583 libp2p nodes vulnerable to OOM attack
- CVE-2023-40582 Command Injection Vulnerability in find-exec
- CVE-2023-40581 yt-dlp command injection when using `%q` in `--exec` on Windows
- CVE-2023-40580 Freighter mnemonic phrase may be accessed by Javascript through a private API
- CVE-2023-4058 Memory corruption in Firefox
- CVE-2023-40579 OpenFGA Authorization Bypass
- CVE-2023-40577 Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint
- CVE-2023-40576 Out-Of-Bounds Read in FreeRDP
- CVE-2023-40575 Out-Of-Bounds Read in FreeRDP
- CVE-2023-40574 Out-Of-Bounds Write in FreeRDP
- CVE-2023-40573 XWiki Platform's Groovy jobs check the wrong author, allowing remote code execution
- CVE-2023-40572 XWiki Platform vulnerable to CSRF privilege escalation/RCE via the create action
- CVE-2023-40571 weblogic-framework Deserialization of Untrusted Data vulnerability
- CVE-2023-40570 Datasette 1.0 alpha series leaks names of databases and tables to unauthenticated users
- CVE-2023-4057 Memory corruption in Firefox
- CVE-2023-40569 Out-Of-Bounds Write in FreeRDP
- CVE-2023-40567 Out-Of-Bounds Write in FreeRDP
- CVE-2023-40561 Enhanced Ecommerce Google Analytics for WooCommerce
- CVE-2023-40560 WordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4056 Memory corruption in Firefox
- CVE-2023-40559 Cross-site request forgery in Dynamic Pricing and Discount Rules for WooCommerce
- CVE-2023-40558 WordPress Video Gallery & Management Plugin <= 3.3.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-40557 WordPress Tabs & Accordion plugin <= 1.3.10 - Content Injection vulnerability
- CVE-2023-40556 WordPress Schedule Posts Calendar Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF)