Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 246 of 430.
- CVE-2023-40555 WordPress Flatsome Theme <= 3.17.5 is vulnerable to PHP Object Injection
- CVE-2023-40554 WordPress Blog2Social Plugin <= 7.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40553 WordPress Plausible Analytics Plugin <= 1.3.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40552 WordPress Fitness calculators plugin Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40551 Shim: out of bounds read when parsing mz binaries
- CVE-2023-40550 Shim: out-of-bound read in verify_buffer_sbat()
- CVE-2023-4055 Other in Firefox
- CVE-2023-40549 Shim: out-of-bounds read in verify_buffer_authenticode() malformed pe file
- CVE-2023-40548 Shim: interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems
- CVE-2023-40547 Shim: rce in http boot support may lead to secure boot bypass
- CVE-2023-40546 Shim: out-of-bounds read printing error messages
- CVE-2023-40545 PingFederate OAuth client_secret_jwt Authentication Bypass
- CVE-2023-40544 Westermo Lynx Cleartext Transmission of Sensitive Information
- CVE-2023-40542 BIG-IP TCP Profile vulnerability
- CVE-2023-40541 Security feature bypass in macOS
- CVE-2023-40540 Information disclosure in Intel(R) NUC BIOS firmware
- CVE-2023-4054 Security feature bypass in Firefox
- CVE-2023-40537 Multi-blade VIPRION Configuration utility session cookie vulnerability
- CVE-2023-40536 Race condition in Intel(R) PROSet/Wireless WiFi software for Windows
- CVE-2023-40535 Cross-site scripting in VI Web Client
- CVE-2023-40534 BIG-IP HTTP/2 vulnerability
- CVE-2023-40532 Path traversal in Welcart e-Commerce
- CVE-2023-40531 Command injection in Archer AX6000
- CVE-2023-40530 Missing authorization in 'Skylark' App for Android
- CVE-2023-4053 Full screen notification obscured by external program
- CVE-2023-40529 Information disclosure in iOS and iPadOS
- CVE-2023-40528 Security feature bypass in iOS and iPadOS
- CVE-2023-40520 Information disclosure in iOS and iPadOS
- CVE-2023-4052 Other in Firefox
- CVE-2023-40519 Cross-site scripting in broadpeak:centralized accounts management auth agent
- CVE-2023-40518 Other in litespeedtech:openlitespeed
- CVE-2023-40517 LG SuperSign Media Editor ContentRestController getObject Directory Traversal Information Disclosure Vulnerability
- CVE-2023-40516 LG Simple Editor Incorrect Permission Assignment Local Privilege Escalation Vulnerability
- CVE-2023-40515 LG Simple Editor joinAddUser Improper Input Validation Denial-of-Service Vulnerability
- CVE-2023-40514 LG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure Vulnerability
- CVE-2023-40513 LG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure Vulnerability
- CVE-2023-40512 LG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure Vulnerability
- CVE-2023-40511 LG Simple Editor checkServer Authentication Bypass Vulnerability
- CVE-2023-40510 LG Simple Editor getServerSetting Authentication Bypass Vulnerability
- CVE-2023-4051 Full screen notification obscured by file open dialog
- CVE-2023-40509 LG Simple Editor deleteCanvas Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2023-40508 LG Simple Editor putCanvasDB Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2023-40507 LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-40506 LG Simple Editor copyContent XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-40505 LG Simple Editor createThumbnailByMovie Command Injection Remote Code Execution Vulnerability
- CVE-2023-40504 LG Simple Editor readVideoInfo Command Injection Remote Code Execution Vulnerability
- CVE-2023-40503 LG Simple Editor saveXmlFile XML External Entity Processing Information Disclosure Vulnerability
- CVE-2023-40502 LG Simple Editor cropImage Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2023-40501 LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
- CVE-2023-40500 LG Simple Editor copyContent Exposed Dangerous Function Remote Code Execution Vulnerability
- CVE-2023-4050 Memory corruption in Firefox
- CVE-2023-40499 LG Simple Editor mkdir Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2023-40498 LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-40497 LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-40496 LG Simple Editor copyStickerContent Directory Traversal Information Disclosure Vulnerability
- CVE-2023-40495 LG Simple Editor copyTemplateAll Directory Traversal Information Disclosure Vulnerability
- CVE-2023-40494 LG Simple Editor deleteFolder Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2023-40493 LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability
- CVE-2023-40492 LG Simple Editor deleteCheckSession Directory Traversal Arbitrary File Deletion Vulnerability
- CVE-2023-40491 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-40490 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-4049 Race condition in Firefox
- CVE-2023-40489 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-40488 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-40487 Maxon Cinema 4D SKP File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-40486 Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-40485 Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-40484 Maxon Cinema 4D SKP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-40483 Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-40482 Maxon Cinema 4D SKP File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-40481 7-Zip SquashFS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-40480 NETGEAR RAX30 DHCP Server Command Injection Remote Code Execution Vulnerability
- CVE-2023-4048 Memory corruption in Firefox
- CVE-2023-40479 NETGEAR RAX30 UPnP Command Injection Remote Code Execution Vulnerability
- CVE-2023-40478 NETGEAR RAX30 Telnet CLI passwd Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-40477 RARLAB WinRAR Recovery Volume Improper Validation of Array Index Remote Code Execution Vulnerability
- CVE-2023-40476 GStreamer H265 Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-40475 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2023-40474 GStreamer MXF File Parsing Integer Overflow Remote Code Execution Vulnerability
- CVE-2023-40473 PDF-XChange Editor Doc Object Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-40472 PDF-XChange Editor JavaScript String Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-40471 PDF-XChange Editor App Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-40470 PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-4047 Security feature bypass in Firefox
- CVE-2023-40469 PDF-XChange Editor XPS File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-40468 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-40465 Improper input leads to DoS
- CVE-2023-40464 Use of hardcoded certificate and private key
- CVE-2023-40463 Use of Hard-Coded Credentials
- CVE-2023-40462 Improper input leads to DoS
- CVE-2023-40461 Cross-site scripting vulnerability in ACEManager
- CVE-2023-40460 Improper input leads to DoS
- CVE-2023-4046 Memory corruption in Firefox
- CVE-2023-40459 Improper input leads to DoS
- CVE-2023-40458 AceManager DOS Vulnerability
- CVE-2023-40457 The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not on a directly connected network) to cause a
- CVE-2023-40456 Information disclosure in iOS and iPadOS
- CVE-2023-40455 Security feature bypass in macOS
- CVE-2023-40454 Missing authorization in iOS and iPadOS
- CVE-2023-40453 Other in docker:machine