Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 289 of 430.
- CVE-2023-3508 WooCommerce Pre-Orders < 2.0.3 - Unauthorised Actions via CSRF
- CVE-2023-35078 Ivanti Endpoint Manager Mobile Authentication Bypass
- CVE-2023-35077 Memory corruption in Endpoint Manager
- CVE-2023-35075 HTML injection via channel autocomplete
- CVE-2023-35074 Memory corruption in Safari
- CVE-2023-35072 SQLi in Coyav Travels Proagent
- CVE-2023-35071 SQLi in MRV Tech's Logging Administration Panel
- CVE-2023-35070 SQL in VegaGroup Web Collection
- CVE-2023-3507 WooCommerce Pre-Orders < 2.0.3 - Arbitrary Pre-Order Canceling via CSRF
- CVE-2023-35069 Path Traversal in Bullwark
- CVE-2023-35068 SQLi in BMAs Personnel Tracking System
- CVE-2023-35067 Plaintext Storage of a Password in Infodrom Sofwares E-Invoice Approval System
- CVE-2023-35066 SQLi in Infodrom Sofwares E-Invoice Approval System
- CVE-2023-35065 SQLi in Osofts Paint Production Management
- CVE-2023-35064 SQLi in Satos Mobile
- CVE-2023-35062 Privilege escalation in Intel(R) DSA software
- CVE-2023-35061 Information disclosure in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-35060 Privilege escalation in Intel(R) Battery Life Diagnostic Tool software
- CVE-2023-3506 Active It Zone Active eCommerce CMS Create Ticket Page support_ticket cross site scripting
- CVE-2023-35057 Integer overflow in GTKWave
- CVE-2023-35056 Memory corruption in YF325
- CVE-2023-35055 Memory corruption in YF325
- CVE-2023-35054 Cross-site scripting in YouTrack
- CVE-2023-35053 Denial of service in YouTrack
- CVE-2023-35052 WordPress Directorist plugin <= 7.5.4 - Arbitrary Content Deletion vulnerability
- CVE-2023-35051 WordPress Contact Forms by Cimatti plugin <= 1.5.7 - Broken Access Control vulnerability
- CVE-2023-35050 WordPress Elementor Pro plugin <= 3.13.0 - Auth. Broken Access Control vulnerability
- CVE-2023-3505 Onest CRM Project List 2 cross site scripting
- CVE-2023-35049 WordPress WooCommerce Stripe Payment Gateway plugin <= 7.4.0 - Unauthenticated Broken Access Control vulnerability
- CVE-2023-35048 WordPress Booking and Rental Manager Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35047 WordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35046 WordPress Dynamic Visibility for Elementor plugin <= 5.0.5 - Broken Access Control vulnerability
- CVE-2023-35045 WordPress Fat Rat Collect plugin <= 2.6.7 - Broken Access Control vulnerability
- CVE-2023-35044 WordPress Securimage-WP Plugin <= 3.6.16 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35043 WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-35042 GeoServer RCE due to improper control of generation of code in jai-ext`Jiffle` map algebra language
- CVE-2023-35041 WordPress Webpushr Plugin <= 4.34.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35040 WordPress SendPress Newsletters plugin <= 1.23.11.6 - Broken Access Control vulnerability
- CVE-2023-3504 SmartWeb Infotech Job Board My Profile Page account unrestricted upload
- CVE-2023-35039 WordPress Password Reset with Code for WordPress REST API Plugin <= 0.0.15 is vulnerable to Broken Authentication
- CVE-2023-35038 WordPress WP PDF Generator Plugin <= 1.2.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-35037 WordPress Surfer plugin <= 1.3.2.357 - Broken Access Control vulnerability
- CVE-2023-35036 SQL injection in progress:moveit transfer
- CVE-2023-35035 Command injection in atos:unify openscape 4000 assistant
- CVE-2023-35034 Code injection in atos:unify openscape 4000 assistant
- CVE-2023-35033 Command injection in atos:unify openscape 4000 assistant
- CVE-2023-35032 Command injection in atos:unify openscape 4000 assistant
- CVE-2023-35031 Command injection in atos:unify openscape 4000 assistant
- CVE-2023-35030 Liferay Portal and Liferay DXP Vulnerable to CSRF via the Layout Module
- CVE-2023-3503 SourceCodester Shopping Website insert-product.php unrestricted upload
- CVE-2023-35029 Liferay Portal and Liferay DXP Vulnerable to Open Redirect via the Layout Module
- CVE-2023-35024 IBM Cloud Pak for Business Automation cross-site scripting
- CVE-2023-35022 IBM InfoSphere Information Server improper authentication
- CVE-2023-35020 IBM Sterling Control Center directory traversal
- CVE-2023-3502 SourceCodester Shopping Website search-result.php sql injection
- CVE-2023-35019 IBM Security Verify Governance command execution
- CVE-2023-35018 IBM Security Verify Governance file upload
- CVE-2023-35017 IBM Security Verify Governance information
- CVE-2023-35016 IBM Security Verify Governance path traversal
- CVE-2023-35013 IBM Security Verify Governance information disclosure
- CVE-2023-35012 IBM Db2 code execution
- CVE-2023-35011 IBM Cognos Analytics server-side request forgey
- CVE-2023-3501 FormCraft < 1.2.7 - Admin+ Stored XSS
- CVE-2023-35009 IBM Cognos Analytics information disclosure
- CVE-2023-35006 IBM Security ReaQta HTML injection
- CVE-2023-35005 Apache Airflow: Information disclosure on configuration view
- CVE-2023-35004 Integer overflow in GTKWave
- CVE-2023-35003 Path traversal in Intel(R) VROC software
- CVE-2023-35002 Memory corruption in ImageGear
- CVE-2023-35001 Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability
- CVE-2023-3500 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
- CVE-2023-34999 Command injection in VLink Virtual Matrix Software
- CVE-2023-34998 Auth bypass in OAS Platform
- CVE-2023-34997 Privilege escalation in Intel Server Configuration Utility software
- CVE-2023-34995 PiiGAB M-Bus Weak Password Requirements
- CVE-2023-34994 Denial of service in OAS Platform
- CVE-2023-34993 Command injection in FortiWLM
- CVE-2023-34992 Command injection in FortiSIEM
- CVE-2023-34991 SQL injection in FortiWLM
- CVE-2023-34990 Path traversal in FortiWLM
- CVE-2023-3499 Robo Gallery < 3.2.16 - Admin+ Stored XSS
- CVE-2023-34989 Command injection in FortiWLM
- CVE-2023-34988 Command injection in FortiWLM
- CVE-2023-34987 Command injection in FortiWLM
- CVE-2023-34986 Command injection in FortiWLM
- CVE-2023-34985 Command injection in FortiWLM
- CVE-2023-34984 Security feature bypass in FortiWeb
- CVE-2023-34983 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-34982 AVEVA Operations Control Logger External Control of File Name or Path
- CVE-2023-34981 Apache Tomcat: AJP response header mix-up
- CVE-2023-34980 QTS, QuTS hero
- CVE-2023-34979 QTS, QuTS hero
- CVE-2023-34977 Video Station
- CVE-2023-34976 Video Station
- CVE-2023-34975 QTS, QuTS hero, QuTScloud
- CVE-2023-34974 QTS, QuTS hero, QuTScloud, QVR, QES
- CVE-2023-34973 QTS, QuTS hero
- CVE-2023-34972 QTS, QuTS hero and QuTScloud
- CVE-2023-34971 QTS, QuTS hero
- CVE-2023-34970 Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations