Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 263 of 430.
- CVE-2023-38449 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38448 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38447 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38446 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38445 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38444 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38443 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38442 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38441 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38440 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-3844 mooSocial mooDating URL friends cross site scripting
- CVE-2023-38439 Missing authorization in SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38438 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38437 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38436 Missing authorization in SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
- CVE-2023-38435 Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin
- CVE-2023-38434 Memory corruption in xhttp project:xhttp
- CVE-2023-38433 Hardcoded credentials in IP-90
- CVE-2023-38432 Memory corruption in linux:linux kernel
- CVE-2023-38431 Memory corruption in linux:linux kernel
- CVE-2023-38430 Memory corruption in linux:linux kernel
- CVE-2023-3843 mooSocial mooDating URL question cross site scripting
- CVE-2023-38429 Memory corruption in linux:linux kernel
- CVE-2023-38428 Memory corruption in linux:linux kernel
- CVE-2023-38427 Integer overflow in linux:linux kernel
- CVE-2023-38426 Memory corruption in linux:linux kernel
- CVE-2023-38425 Memory corruption in iOS and iPadOS
- CVE-2023-38424 Memory corruption in iOS and iPadOS
- CVE-2023-38423 BIG-IP Configuration utility vulnerability
- CVE-2023-38422 Walchem Intuition Missing Authentication for Critical Function
- CVE-2023-38421 Information disclosure in macOS
- CVE-2023-38420 Information disclosure in Intel(R) Power Gadget software for macOS
- CVE-2023-3842 Pointware EasyInventory Easy2W.exe unquoted search path
- CVE-2023-38419 BIG-IP and BIG-IQ iControl SOAP vulnerability
- CVE-2023-38418 BIG-IP Edge Client for macOS vulnerability
- CVE-2023-38417 Denial of service in Intel(R) PROSet/Wireless WiFi software
- CVE-2023-38412 Memory corruption in netgear:r6900p firmware
- CVE-2023-38411 Privilege escalation in Intel Smart Campus android application
- CVE-2023-38410 Privilege escalation in iOS and iPadOS
- CVE-2023-3841 NxFilter user.jsp cross-site request forgery
- CVE-2023-38409 Race condition in linux:linux kernel
- CVE-2023-38408 Code injection in fedoraproject:fedora
- CVE-2023-38407 Memory corruption in frrouting:frrouting
- CVE-2023-38406 Memory corruption in frrouting:frrouting
- CVE-2023-38405 Denial of service in crestron:cp3-gv 6506034 firmware
- CVE-2023-38404 File upload in veritas:infoscale operations manager
- CVE-2023-38403 Integer overflow in apple:macos
- CVE-2023-38402 Arbitrary File Overwrite in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client
- CVE-2023-38401 Local Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client
- CVE-2023-38400 WordPress Enfold Theme <= 5.6.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3840 NxFilter cross site scripting
- CVE-2023-38399 WordPress Phlox Portfolio plugin <= 2.3.1 - Unauthenticated Local File Inclusion vulnerability
- CVE-2023-38398 WordPress Taboola Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-38397 WordPress Gestion-Pymes Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38396 WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-38395 WordPress WP Clone Menu plugin <= 1.0.1 - Broken Access Control vulnerability
- CVE-2023-38394 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
- CVE-2023-38393 WordPress Ninja Forms plugin <= 3.6.25 - Subscriber+ Broken Access Control vulnerability
- CVE-2023-38392 WordPress Custom Field Template Plugin <= 2.5.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38391 WordPress Onepage Builder – Easiest Landing Page Builder For WordPress Plugin <= 2.4.1 is vulnerable to SQL Injection
- CVE-2023-38390 WordPress Mobile Address Bar Changer Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-3839 DedeBIZ sys_sql_query.php sql injection
- CVE-2023-38389 WordPress Jupiter X Core plugin <= 3.3.8 - Unauthenticated Account Takeover vulnerability
- CVE-2023-38388 WordPress Jupiter X Core plugin <= 3.3.5 - Unauth. Arbitrary File Upload vulnerability
- CVE-2023-38387 WordPress Elastic Email Sender Plugin <= 1.2.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38386 WordPress Ninja Forms plugin <= 3.6.25 - Contributor+ Broken Access Control vulnerability
- CVE-2023-38385 WordPress Jupiter X Core plugin <= 3.3.0 - Multiple Auth. Broken Access Control vulnerability
- CVE-2023-38384 WordPress eaSYNC Plugin <= 1.3.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-38383 WordPress Language plugin <= 1.2.1 - Broken Access Control vulnerability
- CVE-2023-38382 WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection
- CVE-2023-38381 WordPress WP-FlyBox Plugin <= 6.46 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-38380 Denial of service in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants)
- CVE-2023-3838 DedeBIZ vote_edit.php cross site scripting
- CVE-2023-38379 Auth bypass in rigol:mso5000 firmware
- CVE-2023-38378 Command injection in rigol:mso5000 firmware
- CVE-2023-38375 IBM Cloud Pak System Cross-Site Scripting
- CVE-2023-38372 IBM Watson IoT Platform information disclosure
- CVE-2023-38371 IBM Security Access Manager Docker information disclosure
- CVE-2023-38370 IBM Security Access Manager Docker information disclosure
- CVE-2023-3837 DedeBIZ sys_sql_query.php cross site scripting
- CVE-2023-38369 IBM Security Access Manager Container information disclosure
- CVE-2023-38368 IBM Security Access Manager Docker information disclosure
- CVE-2023-38367 IBM Cloud Pak for Automation authentication bypass
- CVE-2023-38366 IBM FileNet Content Manager directory traversal
- CVE-2023-38364 IBM CICS TX Advanced cross-site scripting
- CVE-2023-38363 IBM CICS TX information disclosure
- CVE-2023-38362 IBM CICS TX information disclosure
- CVE-2023-38361 IBM CICS TX Advanced information disclosure
- CVE-2023-38360 IBM CICS TX cross-site scripting
- CVE-2023-3836 Dahua Smart Park Management unrestricted upload
- CVE-2023-38359 IBM Cognos Analytics cross-site scripting
- CVE-2023-38357 Weak cryptography in rws:worldserver
- CVE-2023-38356 Supply chain in minitool:power data recovery
- CVE-2023-38355 Supply chain in minitool:movie maker
- CVE-2023-38354 Weak cryptography in minitool:shadowmaker
- CVE-2023-38353 Weak cryptography in minitool:power data recovery
- CVE-2023-38352 Security feature bypass in minitool:partition wizard
- CVE-2023-38351 Weak cryptography in minitool:partition wizard
- CVE-2023-38350 Cross-site scripting in pnp4nagios:pnp4nagios
- CVE-2023-3835 Bug Finder MineStack Ticket create cross site scripting