Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 279 of 430.
- CVE-2023-36575 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36574 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36573 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36572 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36571 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-36570 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-3657 SourceCodester AC Repair and Services System HTTP POST Request sql injection
- CVE-2023-36569 Microsoft Office Elevation of Privilege Vulnerability
- CVE-2023-36568 Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
- CVE-2023-36567 Windows Deployment Services Information Disclosure Vulnerability
- CVE-2023-36566 Microsoft Common Data Model SDK Denial of Service Vulnerability
- CVE-2023-36565 Microsoft Office Graphics Elevation of Privilege Vulnerability
- CVE-2023-36564 Windows Search Security Feature Bypass Vulnerability
- CVE-2023-36563 Microsoft WordPad Information Disclosure
- CVE-2023-36562 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
- CVE-2023-36561 Azure DevOps Server Elevation of Privilege Vulnerability
- CVE-2023-36560 ASP.NET Security Feature Bypass Vulnerability
- CVE-2023-3656 Unauthenticated Remote Code Execution
- CVE-2023-36559 Microsoft Edge (Chromium-based) Spoofing Vulnerability
- CVE-2023-36558 ASP.NET Core Security Feature Bypass Vulnerability
- CVE-2023-36557 PrintHTML API Remote Code Execution Vulnerability
- CVE-2023-36556 Auth bypass in FortiMail
- CVE-2023-36555 Cross-site scripting in FortiOS
- CVE-2023-36554 Missing authorization in FortiManager
- CVE-2023-36553 Command injection in FortiSIEM
- CVE-2023-36551 Information disclosure in FortiSIEM
- CVE-2023-36550 Command injection in FortiWLM
- CVE-2023-3655 Unauthenticated Remote Database Exfiltration
- CVE-2023-36549 Command injection in FortiWLM
- CVE-2023-36548 Command injection in FortiWLM
- CVE-2023-36547 Command injection in FortiWLM
- CVE-2023-36543 Apache Airflow: ReDoS via dags function
- CVE-2023-36542 Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources
- CVE-2023-36541 Privilege escalation in Zoom Desktop Client for Windows
- CVE-2023-36540 Privilege escalation in Zoom Desktop Client for Windows
- CVE-2023-3654 Origin Check Bypass
- CVE-2023-36539 Weak cryptography in Zoom clients
- CVE-2023-36538 Privilege escalation in Zoom Rooms for Windows
- CVE-2023-36537 Privilege escalation in Zoom Rooms for Windows
- CVE-2023-36536 Privilege escalation in Zoom Rooms for Windows
- CVE-2023-36535 Security feature bypass in Zoom Clients
- CVE-2023-36534 Path traversal in Zoom Desktop Client for Windows
- CVE-2023-36533 Denial of service in Zoom SDK's
- CVE-2023-36532 Memory corruption in Zoom Clients
- CVE-2023-36531 WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability
- CVE-2023-36530 WordPress SP Project & Document Manager Plugin <= 4.67 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3653 Stored XSS in Digital Ant E-Commerce Software
- CVE-2023-36529 WordPress Houzez CRM Plugin <= 1.3.4 is vulnerable to SQL Injection
- CVE-2023-36528 WordPress kk Star Ratings plugin <= 5.4.3 - Rate Manipulation due to IP Spoofing Vulnerability
- CVE-2023-36527 WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection
- CVE-2023-36526 WordPress Duplicate Post Page Menu & Custom Post Type plugin <= 2.4.1 - Broken Access Control vulnerability
- CVE-2023-36525 WordPress WPJobBoard plugin <= 5.9.0 - Unauth. Blind SQL Injection (SQLi) vulnerability
- CVE-2023-36523 WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure
- CVE-2023-36522 Cross-site request forgery in Quiz Expert
- CVE-2023-36521 Denial of service in SIMATIC MV540 H
- CVE-2023-36520 WordPress Editorial Calendar Plugin <= 3.7.12 is vulnerable to Insecure Direct Object References (IDOR)
- CVE-2023-3652 Reflected XSS in Digital Ant E-Commerce Software
- CVE-2023-36519 WordPress SW Product Bundles plugin <= 2.0.15 - Broken Access Control vulnerability
- CVE-2023-36518 WordPress Post Hit Counter plugin <= 1.3.2 - Broken Access Control
- CVE-2023-36517 WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-36516 WordPress LearnPress plugin <= 4.2.3 - Authenticated Broken Access Control vulnerability
- CVE-2023-36515 WordPress LearnPress plugin <= 4.2.3 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-36514 WordPress WooCommerce Ship to Multiple Addresses Plugin <= 3.8.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-36513 WordPress AutomateWoo Plugin <= 5.7.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-36512 WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability
- CVE-2023-36511 WordPress WooCommerce Order Barcodes Plugin <= 1.6.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-36510 WordPress ReDi Restaurant Reservation plugin <= 23.0211 - Broken Access Control vulnerability
- CVE-2023-3651 SQLi in Digital Ant E-Commerce Software
- CVE-2023-36509 WordPress CHP Ads Block Detector plugin <= 3.9.5 - Broken Access Control vulnerability
- CVE-2023-36508 WordPress Contact Form to DB by BestWebSoft Plugin <= 1.7.1 is vulnerable to SQL Injection
- CVE-2023-36507 WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure
- CVE-2023-36506 WordPress YITH WooCommerce Waitlist plugin <= 2.13.0 - Broken Access Control vulnerability
- CVE-2023-36505 WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion
- CVE-2023-36504 WordPress BBS e-Popup plugin <= 2.4.5 - Broken Access Control vulnerability
- CVE-2023-36503 WordPress MaxButtons Plugin <= 9.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-36502 WordPress Balkon Theme <= 1.3.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-36501 WordPress teachPress Plugin <= 9.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3650 Bubble Menu < 3.0.5 - Admin+ Stored XSS
- CVE-2023-36499 Memory corruption in netgear:xr300 firmware
- CVE-2023-36498 Command injection in ER7206 Omada Gigabit VPN Router
- CVE-2023-36497 Dover Fueling Solutions MAGLINK LX Web Console Authentication Bypass by Primary Weakness
- CVE-2023-36496 Delegated Admin Virtual Attribute Provider Privilege Escalation
- CVE-2023-36495 Integer overflow in iOS and iPadOS
- CVE-2023-36494 F5OS-A vulnerability
- CVE-2023-36493 Privilege escalation in Intel(R) SDK for OpenCL(TM) Applications software
- CVE-2023-36492 Cross-site scripting in SHIRASAGI
- CVE-2023-36490 Denial of service in Intel(R) MAS software
- CVE-2023-3649 Buffer Over-read in Wireshark
- CVE-2023-36489 Command injection in TL-WR802N
- CVE-2023-36488 Cross-site scripting in ilias:ilias
- CVE-2023-36487 Auth bypass in ilias:ilias
- CVE-2023-36486 Command injection in ilias:ilias
- CVE-2023-36485 Command injection in ilias:ilias
- CVE-2023-36484 Cross-site scripting in ilias:ilias
- CVE-2023-36483 MAS (a Carrier brand) MASmobile Classic Authorization Bypass
- CVE-2023-36482 Memory corruption in samsung:s3nrn4v firmware
- CVE-2023-36481 Denial of service in samsung:exynos 1080 firmware
- CVE-2023-36480 Aerospike Java Client vulnerable to unsafe deserialization of server responses
- CVE-2023-3648 Mismatched Memory Management Routines in Wireshark
- CVE-2023-36479 Jetty vulnerable to errant command quoting in CGI Servlet