Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 248 of 430.
- CVE-2023-4035 Simple Blog Card < 1.31 - Contributor+ Stored XSS via Shortcode
- CVE-2023-40349 Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
- CVE-2023-40348 Jenkins Gogs Plugin vulnerable to unsafe default behavior and information disclosure
- CVE-2023-40347 Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin vulnerable to exposure of system-scoped credentials
- CVE-2023-40346 Jenkins Shortcut Job Plugin stored cross-site scripting vulnerability
- CVE-2023-40345 Jenkins Delphix Plugin vulnerable to exposure of system-scoped credentials
- CVE-2023-40344 Jenkins Delphix Plugin missing permission check
- CVE-2023-40343 Jenkins Tuleap Authentication Plugin non-constant time token comparison
- CVE-2023-40342 Jenkins Flaky Test Handler Plugin stored cross-site scripting vulnerability
- CVE-2023-40341 Jenkins Blue Ocean Plugin cross-site request forgery vulnerability
- CVE-2023-40340 Jenkins NodeJS Plugin improper credential masking vulnerability
- CVE-2023-4034 SQLi in Smartrise Document Management System
- CVE-2023-40339 Jenkins Config File Provider Plugin improper credential masking vulnerability
- CVE-2023-40338 Jenkins Folders Plugin information disclosure vulnerability
- CVE-2023-40337 Jenkins Folders Plugin cross-site request forgery vulnerability
- CVE-2023-40336 Jenkins Folders Plugin cross-site request forgery vulnerability
- CVE-2023-40335 WordPress Cleverwise Daily Quotes Plugin <= 3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40334 WordPress HUSKY plugin <= 1.3.4.2 - Broken Access Control vulnerability
- CVE-2023-40333 WordPress Bridge Core Plugin <= 3.0.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40332 WordPress WP-PostRatings plugin <= 1.91 - Rating limit Bypass vulnerability
- CVE-2023-40331 WordPress Accordion Slider plugin <= 1.9.6 - Broken Access Control vulnerability
- CVE-2023-40330 WordPress GD Security Headers Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-4033 OS Command Injection in mlflow/mlflow
- CVE-2023-40329 WordPress Custom Admin Login Page | WPZest Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40328 WordPress Carrot Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-40327 WordPress Putler Connector for WooCommerce plugin <= 2.12.0 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-40315 ROLE_FILESYSTEM_EDITOR Can Be Used To Escalate To ROLE_ADMIN
- CVE-2023-40314 Cross-site scripting in bootstrap.jsp
- CVE-2023-40313 Disable BeanShell Interpreter Remote Server Mode
- CVE-2023-40312 Reflected XSS in multiple JSP files in opennms/opennms
- CVE-2023-40311 Stored XSS in multiple JSP files in opennms/opennms
- CVE-2023-40310 Missing XML Validation vulnerability in SAP PowerDesigner Client BPMN2 import
- CVE-2023-40309 Missing Authorization check in SAP CommonCryptoLib
- CVE-2023-40308 Memory Corruption vulnerability in SAP CommonCryptoLib
- CVE-2023-40307 Privileges Memory Corruption (Out-of-bound write)
- CVE-2023-40306 URL Redirection vulnerability in SAP S/4HANA (Manage Catalog Items and Cross-Catalog search)
- CVE-2023-40305 Memory corruption in gnu:indent
- CVE-2023-40303 Privilege escalation in gnu:inetutils
- CVE-2023-40302 Misconfiguration in netscout:ngeniuspulse
- CVE-2023-40301 Command injection in netscout:ngeniuspulse
- CVE-2023-40300 Hardcoded credentials in netscout:ngeniuspulse
- CVE-2023-4030 Security feature bypass in ThinkPad
- CVE-2023-40299 Code injection in konghq:insomnia
- CVE-2023-40297 Stakater Forecastle has a directory traversal vulnerability
- CVE-2023-40296 Memory corruption in eminfedar:async-sockets-cpp
- CVE-2023-40295 Memory corruption in 0branch:boron
- CVE-2023-40294 Memory corruption in 0branch:boron
- CVE-2023-40293 Command injection in samsung:harman infotainment
- CVE-2023-40292 Information disclosure in samsung:harman infotainment
- CVE-2023-40291 Hardcoded credentials in samsung:harman infotainment
- CVE-2023-40290 Cross-site scripting in supermicro:x11sae-f firmware
- CVE-2023-4029 Memory corruption in ThinkPad
- CVE-2023-40289 Command injection in supermicro:x11sae-f firmware
- CVE-2023-40288 Cross-site scripting in supermicro:x11sae-f firmware
- CVE-2023-40287 Cross-site scripting in supermicro:x11sae-f firmware
- CVE-2023-40286 Cross-site scripting in supermicro:x11sae-f firmware
- CVE-2023-40285 Cross-site scripting in supermicro:x11sae-f firmware
- CVE-2023-40284 Cross-site scripting in supermicro:x11sae-f firmware
- CVE-2023-40283 Use after free in canonical:ubuntu linux
- CVE-2023-40282 Auth bypass in Rakuten WiFi Pocket
- CVE-2023-40281 Cross-site scripting in EC-CUBE 2 series
- CVE-2023-40280 Path traversal in openclinic ga project:openclinic ga
- CVE-2023-4028 Memory corruption in Lenovo Notebook
- CVE-2023-40279 Path traversal in openclinic ga project:openclinic ga
- CVE-2023-40278 Information disclosure in openclinic ga project:openclinic ga
- CVE-2023-40277 Cross-site scripting in openclinic ga project:openclinic ga
- CVE-2023-40276 Missing authorization in openclinic ga project:openclinic ga
- CVE-2023-40275 Information disclosure in openclinic ga project:openclinic ga
- CVE-2023-40274 zola Path Traversal vulnerability
- CVE-2023-40273 Session fixation in Apache Airflow web interface
- CVE-2023-40272 Apache Airflow Spark Provider Arbitrary File Read via JDBC
- CVE-2023-40271 Weak cryptography in trustedfirmware:trusted firmware-m
- CVE-2023-4027 Radio Player <= 2.0.73 - Missing Authorization to Settings Update
- CVE-2023-40267 GitPython vulnerable to remote code execution due to insufficient sanitization of input arguments
- CVE-2023-40266 Path traversal in mitel:unify openscape xpressions webassistant
- CVE-2023-40265 File upload in mitel:unify openscape xpressions webassistant
- CVE-2023-40264 Path traversal in unify:openscape voice trace manager
- CVE-2023-40263 Command injection in unify:openscape voice trace manager
- CVE-2023-40262 Cross-site scripting in unify:openscape voice trace manager
- CVE-2023-40261 Security feature bypass in dieboldnixdorf:vynamic security suite
- CVE-2023-40260 Auth bypass in empowerid:empowerid
- CVE-2023-40256 Security feature bypass in veritas:netbackup snapshot manager
- CVE-2023-40254 Supply chain in Genian NAC Suite V5.0
- CVE-2023-40253 Auth bypass in Genian NAC Suite V5.0
- CVE-2023-40252 Code injection in Genian NAC Suite V5.0
- CVE-2023-40251 Weak cryptography in Genian NAC Suite V5.0
- CVE-2023-40250 Memory corruption in HCell
- CVE-2023-4025 Radio Player <= 2.0.73 - Missing Authorization to Player Update
- CVE-2023-4024 Radio Player <= 2.0.73 - Missing Authorization to Player Deletion
- CVE-2023-40239 XML external entity in lexmark:c2132 firmware
- CVE-2023-40238 Integer overflow in fujitsu:celsius c780 firmware
- CVE-2023-40236 Hardcoded credentials in pexip:virtual meeting rooms
- CVE-2023-40235 Information disclosure in opengroup:archi
- CVE-2023-4023 All Users Messenger <= 1.24 - Subscriber+ Message Deletion via IDOR
- CVE-2023-40225 Other in haproxy:haproxy
- CVE-2023-40224 Cross-site scripting in misp-project:misp
- CVE-2023-40222 Ashlar-Vellum Cobalt, Xenon, Argon, Lithium Heap-based Buffer Overflow
- CVE-2023-40221 Socomec MOD3GP-SY-120K Code Injection
- CVE-2023-40220 Memory corruption in Intel(R) NUC BIOS firmware
- CVE-2023-4022 Herd Effects < 5.2.3 - Admin+ Stored XSS