Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 278 of 430.
- CVE-2023-36683 WordPress Schema Pro plugin <= 2.7.8 - Broken Access Control vulnerability
- CVE-2023-36682 WordPress Schema Pro Plugin <= 2.7.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-36681 WordPress Cryptocurrency Widgets – Price Ticker & Coins List plugin <= 2.6.2 - Broken Access Control vulnerability
- CVE-2023-36680 WordPress Image Regenerate & Select Crop plugin <= 7.1.0 - Broken Access Control vulnerability
- CVE-2023-3668 Improper Encoding or Escaping of Output in froxlor/froxlor
- CVE-2023-36679 WordPress Spectra plugin <= 2.6.6 - Server Side Request Forgery (SSRF) vulnerability
- CVE-2023-36678 WordPress WP Content Copy Protection & No Right Click Plugin <= 3.5.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-36677 WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to SQL Injection
- CVE-2023-36676 WordPress Spectra plugin <= 2.6.6 - Broken Access Control vulnerability
- CVE-2023-36675 Cross-site scripting in mediawiki:mediawiki
- CVE-2023-36674 Security feature bypass in mediawiki:mediawiki
- CVE-2023-36673 Information disclosure in avira:phantom vpn
- CVE-2023-36672 Information disclosure in clario:vpn
- CVE-2023-36671 Information disclosure in clario:vpn
- CVE-2023-36670 Command injection in kratosdefense:ngc indoor unit firmware
- CVE-2023-3667 Bit Assist < 1.1.9 - Admin+ Stored Cross-Site Scripting
- CVE-2023-36669 Auth bypass in kratosdefense:ngc indoor unit firmware
- CVE-2023-36667 Path traversal in couchbase:couchbase server
- CVE-2023-36666 Cross-site scripting in inex:ixp manager
- CVE-2023-36665 protobufjs Prototype Pollution vulnerability
- CVE-2023-36664 Security feature bypass in artifex:ghostscript
- CVE-2023-36663 SQL injection in it-novum:openitcockpit
- CVE-2023-36662 Cross-site scripting in techtime:user management
- CVE-2023-36661 Server-side request forgery in debian:debian linux
- CVE-2023-36660 Memory corruption in nettle project:nettle
- CVE-2023-3666 Sticky Side Buttons < 2.0.0 - Admin+ Stored XSS
- CVE-2023-36659 Memory corruption in opswat:metadefender kiosk
- CVE-2023-36658 Privilege escalation in opswat:media validation agent
- CVE-2023-36657 Privilege escalation in opswat:metadefender kiosk
- CVE-2023-36656 Cross-site scripting in jaegertracing:jaeger ui
- CVE-2023-36655 Auth bypass in prolion:cryptospike
- CVE-2023-36654 Path traversal in prolion:cryptospike
- CVE-2023-36652 SQL injection in prolion:cryptospike
- CVE-2023-36651 Hardcoded credentials in prolion:cryptospike
- CVE-2023-36650 Security feature bypass in prolion:cryptospike
- CVE-2023-3665 Code injection in Trellix Endpoint Security
- CVE-2023-36649 Information disclosure in prolion:cryptospike
- CVE-2023-36648 Auth bypass in prolion:cryptospike
- CVE-2023-36647 Hardcoded credentials in prolion:cryptospike
- CVE-2023-36646 Privilege escalation in prolion:cryptospike
- CVE-2023-36645 SQL injection in itb-pim:tradepro
- CVE-2023-36644 Missing authorization in itb-pim:tradepro
- CVE-2023-36643 Missing authorization in itb-pim:tradepro
- CVE-2023-36642 Command injection in FortiTester
- CVE-2023-36641 Integer overflow in FortiOS
- CVE-2023-36640 Memory corruption in FortiOS
- CVE-2023-3664 FileOrganizer <= 1.0.2 - Admin+ Arbitrary File Access
- CVE-2023-36639 Memory corruption in FortiOS
- CVE-2023-36638 Privilege escalation in FortiAnalyzer
- CVE-2023-36637 Cross-site scripting in FortiMail
- CVE-2023-36635 Missing authorization in FortiSwitchManager
- CVE-2023-36634 Path traversal in FortiAP-U
- CVE-2023-36633 Missing authorization in FortiMail
- CVE-2023-36632 Denial of service in python:python
- CVE-2023-36631 Missing authorization in malwarebytes:binisoft windows firewall control
- CVE-2023-36630 File upload in mgt-commerce:cloudpanel
- CVE-2023-3663 CODESYS: Missing integrity check in CODESYS Development System
- CVE-2023-36629 Memory corruption in st:st54-android-packages-apps-nfc
- CVE-2023-36628 Privilege Escalation in VASA
- CVE-2023-36627 FlashBlade Snapshot Scheduler
- CVE-2023-36624 Privilege escalation in loxone:miniserver go gen 2 firmware
- CVE-2023-36623 Hardcoded credentials in loxone:miniserver go gen 2 firmware
- CVE-2023-36622 Command injection in loxone:miniserver go gen 2 firmware
- CVE-2023-36621 Missing authorization in nationaledtech:boomerang
- CVE-2023-36620 Information disclosure in nationaledtech:boomerang
- CVE-2023-3662 CODESYS: Vulnerability in CODESYS Development System allows for execution of binaries
- CVE-2023-36619 Missing authorization in unify:session border controller
- CVE-2023-36618 Command injection in unify:session border controller
- CVE-2023-36617 URI gem has ReDoS vulnerability
- CVE-2023-36612 Path traversal in basecamp:basecamp
- CVE-2023-36611 Privilege escalation in TBox LT2
- CVE-2023-36610 Weak cryptography in TBox LT2
- CVE-2023-3661 SourceCodester AC Repair and Services System sql injection
- CVE-2023-36609 Privilege escalation in TBox LT2
- CVE-2023-36608 Weak cryptography in TBox LT2
- CVE-2023-36607 CVE-2023-36607
- CVE-2023-36606 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2023-36605 Windows Named Pipe Filesystem Elevation of Privilege Vulnerability
- CVE-2023-36603 Windows TCP/IP Denial of Service Vulnerability
- CVE-2023-36602 Windows TCP/IP Denial of Service Vulnerability
- CVE-2023-3660 Campcodes Retro Cellphone Online Store add_user_modal.php cross site scripting
- CVE-2023-36598 Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability
- CVE-2023-36596 Remote Procedure Call Information Disclosure Vulnerability
- CVE-2023-36594 Windows Graphics Component Elevation of Privilege Vulnerability
- CVE-2023-36593 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36592 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36591 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36590 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-3659 SourceCodester AC Repair and Services System cross site scripting
- CVE-2023-36589 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36585 Windows upnphost.dll Denial of Service Vulnerability
- CVE-2023-36584 Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass
- CVE-2023-36583 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36582 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36581 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2023-3658 SourceCodester AC Repair and Services System HTTP POST Request sql injection
- CVE-2023-36579 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2023-36578 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36577 Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- CVE-2023-36576 Windows Kernel Information Disclosure Vulnerability