Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 262 of 430.
- CVE-2023-38543 Denial of service in Secure Access Client Windows
- CVE-2023-38541 Privilege escalation in Intel HID Event Filter drivers for Windows 10 for some Intel NUC laptop software installers
- CVE-2023-3854 phpscriptpoint BloodBank POST Parameter search sql injection
- CVE-2023-38538 Use after free in WhatsApp Business for Android
- CVE-2023-38537 Use after free in WhatsApp Business for Android
- CVE-2023-38536 Cross-site scripting in Exceed Turbo X
- CVE-2023-38535 Hardcoded credentials in Exceed Turbo X
- CVE-2023-38534 Auth bypass in Exceed Turbo X
- CVE-2023-38533 Misconfiguration in TIA Administrator
- CVE-2023-38532 Denial of service in Parasolid V34.1
- CVE-2023-38531 Memory corruption in Parasolid V34.1
- CVE-2023-38530 Memory corruption in Parasolid V34.1
- CVE-2023-3853 phpscriptpoint BloodBank page.php cross site scripting
- CVE-2023-38529 Memory corruption in Parasolid V34.1
- CVE-2023-38528 Memory corruption in Parasolid V34.1
- CVE-2023-38527 Memory corruption in Parasolid V34.1
- CVE-2023-38526 Memory corruption in Parasolid V34.1
- CVE-2023-38525 Memory corruption in Parasolid V34.1
- CVE-2023-38524 Null dereference in Parasolid V34.1
- CVE-2023-38523 Information disclosure in samsung:fgn1115-wp-wh firmware
- CVE-2023-38522 Apache Traffic Server: Incomplete field name check allows request smuggling
- CVE-2023-38521 WordPress Exifography Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38520 WordPress Pinpoint Booking System plugin <= 2.9.9.3.4 - Parameter Tampering
- CVE-2023-3852 OpenRapid RapidCMS upload.php unrestricted upload
- CVE-2023-38519 WordPress MainWP Plugin <= 4.4.3.3 is vulnerable to SQL Injection
- CVE-2023-38518 WordPress Borderless Plugin <= 1.4.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38517 WordPress WRC Pricing Tables Plugin <= 2.3.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38516 WordPress Audio Player with Playlist Ultimate Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38515 WordPress Church Admin Plugin <= 3.7.56 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2023-38514 WordPress Social Share Icons & Social Share Buttons plugin <= 3.5.7 - Broken Access Control vulnerability
- CVE-2023-38513 WordPress Photo Engine Plugin <= 6.2.5 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-38512 WordPress WpStream plugin <= 4.5.4 - Cross Site Request Forgery (CSRF) vulnerability
- CVE-2023-38511 iTop Dashboard editor vulnerable dashboard config file parameter
- CVE-2023-38510 Tolgee Lacks Permission Check for API Key for some endpoints
- CVE-2023-38509 XWiki Platform's obfuscated email addresses should not be sorted
- CVE-2023-38508 Tuleap allows preview of a linked artifact with a type does not respect permissions
- CVE-2023-38507 Strapi Improper Rate Limiting vulnerability
- CVE-2023-38506 Cross-site Scripting (XSS) when pasting HTML into the rich text editor in Joplin
- CVE-2023-38505 DietPi-Dashboard Insufficient TLS Handshake Pool
- CVE-2023-38504 Sails DoS vulnerability for apps with sockets enabled
- CVE-2023-38503 Directus has Incorrect Permission Checking for GraphQL Subscriptions
- CVE-2023-38502 TDengine Database Denial-of-Service
- CVE-2023-38501 copyparty vulnerable to reflected cross-site scripting via k304 parameter
- CVE-2023-38500 By-passing Cross-Site Scripting Protection in HTML Sanitizer
- CVE-2023-3850 SourceCodester Lost and Found Information System HTTP POST Request sql injection
- CVE-2023-38499 typo3/cms-core Information Disclosure due to Out-of-scope Site Resolution
- CVE-2023-38498 Discourse vulnerable to DoS via defer queue
- CVE-2023-38497 Cargo not respecting umask when extracting crate archives
- CVE-2023-38496 Apptainer's ineffective privileges drop when requesting container network
- CVE-2023-38495 Crossplane vulnerable to possible image tampering from missing image validation for Packages
- CVE-2023-38494 The cloud version of the MeterSphere interface leaks some sensitive data without authentication
- CVE-2023-38493 Paths contain matrix variables bypass decorators
- CVE-2023-38492 Kirby vulnerable to denial of service from unlimited password lengths
- CVE-2023-38491 Kirby vulnerable to Cross-site scripting (XSS) from MIME type auto-detection of uploaded files
- CVE-2023-38490 Kirby XML External Entity (XXE) vulnerability in the XML data handler
- CVE-2023-3849 mooSocial mooDating URL find-a-match cross site scripting
- CVE-2023-38489 Kirby vulnerable to Insufficient Session Expiration after a password change
- CVE-2023-38488 Kirby vulnerable to field injection in the KirbyData text storage handler
- CVE-2023-38487 HedgeDoc API allows to hide existing notes
- CVE-2023-38486 Hardware Root of Trust Bypass in 9200 and 9000 Series Controllers and Gateways
- CVE-2023-38485 Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways
- CVE-2023-38484 Multiple Buffer Overflow Vulnerabilities in BIOS Implementation of 9200 and 9000 Series Controllers and Gateways
- CVE-2023-38483 WordPress Instant CSS plugin <= 1.1.4 - Broken Access Control vulnerability
- CVE-2023-38482 WordPress Post Affiliate Pro Plugin <= 1.25.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38481 WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open Redirection
- CVE-2023-38480 WordPress Booster Elementor Addons plugin <= 1.4.9 - Broken Access Control vulnerability
- CVE-2023-3848 mooSocial mooDating URL view cross site scripting
- CVE-2023-38479 WordPress Simple Googlebot Visit plugin <= 1.2.4 - Broken Access Control vulnerability
- CVE-2023-38478 WordPress Integration for WooCommerce and QuickBooks Plugin <= 1.2.3 is vulnerable to Open Redirection
- CVE-2023-38477 WordPress QR code MeCard/vCard generator plugin <= 1.6.0 - Broken Access Control vulnerability
- CVE-2023-38476 WordPress Client Portal : SuiteDash Direct Login Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38475 WordPress Donations Made Easy – Smart Donations plugin <= 4.0.12 - Broken Access Control vulnerability
- CVE-2023-38474 WordPress Campaign Monitor for WordPress Plugin <= 2.8.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38473 Reachable assertion in avahi_alternative_host_name
- CVE-2023-38472 Reachable assertion in avahi_rdata_parse
- CVE-2023-38471 Reachable assertion in dbus_set_host_name
- CVE-2023-38470 Reachable assertion in avahi_escape_label
- CVE-2023-3847 mooSocial mooDating URL users cross site scripting
- CVE-2023-38469 Reachable assertion in avahi_dns_packet_append_record
- CVE-2023-38468 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-38467 Memory corruption in SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-38466 Missing authorization in SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-38465 Missing authorization in SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000
- CVE-2023-38464 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38463 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38462 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38461 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38460 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-3846 mooSocial mooDating URL pages cross site scripting
- CVE-2023-38459 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38458 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38457 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38456 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38455 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38454 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38453 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38452 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38451 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38450 Missing authorization in SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-3845 mooSocial mooDating URL ajax_invite cross site scripting