Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 293 of 430.
- CVE-2023-34381 WordPress Zippy plugin <= 1.6.2 - Broken Access Control vulnerability
- CVE-2023-3438 Privilege escalation in Trellix Move
- CVE-2023-34379 WordPress Cart2Cart: Magento to WooCommerce Migration Plugin <= 2.0.0 is vulnerable to Broken Access Control
- CVE-2023-34378 WordPress WP Hide Post Plugin <= 2.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-34377 WordPress My Content Management Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34376 WordPress Change WooCommerce Add To Cart Button Text plugin <= 1.3 - Broken Access Control vulnerability
- CVE-2023-34375 WordPress Seo By 10Web Plugin <= 1.2.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34374 WordPress AnsPress – Question and answer Plugin <= 4.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34373 WordPress Zephyr Project Manager Plugin <= 3.3.93 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-34372 WordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34371 WordPress Download SpamReferrerBlock Plugin <= 2.22 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-34370 Server Side Request Forgery (SSRF) vulnerability in Starter Templates plugins
- CVE-2023-34369 WordPress Login Configurator Plugin <= 2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34368 WordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-34367 Auth bypass in microsoft:windows 7
- CVE-2023-34366 Use after free in Ichitaro 2023
- CVE-2023-34365 Memory corruption in YF325
- CVE-2023-34364 Memory corruption in progress:datadirect odbc oracle wire protocol driver
- CVE-2023-34363 Weak cryptography in progress:datadirect odbc oracle wire protocol driver
- CVE-2023-34362 Progress MOVEit Transfer SQL Injection
- CVE-2023-34360 ASUS RT-AX88U - Stored XSS
- CVE-2023-3436 Deadlock in Xpdf 4.04 due to PDF object stream references
- CVE-2023-34359 ASUS RT-AX88U - Out-of-bounds Read - 2
- CVE-2023-34358 ASUS RT-AX88U - Out-of-bounds Read - 1
- CVE-2023-34357 Soar Cloud Ltd. HR Portal - Weak Password Recovery Mechanism for Forgotten Password
- CVE-2023-34356 Command injection in Surf SOHO HW1
- CVE-2023-34355 Privilege escalation in Intel(R) Server Board M10JNP2SB integrated BMC video drivers
- CVE-2023-34354 Cross-site scripting in Surf SOHO HW1
- CVE-2023-34353 Weak cryptography in OAS Platform
- CVE-2023-34352 Information disclosure in iOS and iPadOS
- CVE-2023-34351 Memory corruption in Intel(R) PCM software
- CVE-2023-34350 Privilege escalation in Intel(R) XTU software
- CVE-2023-3435 User Activity Log < 1.6.5 - Unauthenticated SQLi
- CVE-2023-34349 Race condition in Intel(R) NUC BIOS firmware
- CVE-2023-34348 Improper Check or Handling of Exceptional Conditions in Aveva PI Server
- CVE-2023-34347 Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data
- CVE-2023-34346 Memory corruption in YF325
- CVE-2023-34345 Path traversal in MegaRAC SPx
- CVE-2023-34344 A vulnerability in the IPMI handler, where an unauthorized attacker can use certain oracles to guess a valid username
- CVE-2023-34343 Command injection in MegaRAC SPx
- CVE-2023-34342 Path traversal in MegaRAC SPx
- CVE-2023-34341 Memory corruption in MegaRAC SPx
- CVE-2023-34340 Apache Accumulo: Accumulo 2.1.0 may incorrectly validate cached credentials
- CVE-2023-3434 QRC Handler without Input Validation in Jami
- CVE-2023-34339 Information disclosure in Ktor
- CVE-2023-34338 hard coded cryptographic key
- CVE-2023-34337 Inadequate Encryption Strength
- CVE-2023-34336 Memory corruption in MegaRAC SPx
- CVE-2023-34335 Auth bypass in MegaRAC SPx
- CVE-2023-34334 Command injection in MegaRAC SPx
- CVE-2023-34333 Untrusted Pointer Dereference
- CVE-2023-34332 Untrusted Pointer Dereference in BMC
- CVE-2023-34330 Code injection via Dynamic Redfish Extension interface
- CVE-2023-3433 Local Denial of Service in Jami
- CVE-2023-34329 Authentication Bypass via HTTP Header Spoofing
- CVE-2023-34328 x86/AMD: Debug Mask handling
- CVE-2023-34327 x86/AMD: Debug Mask handling
- CVE-2023-34326 x86/AMD: missing IOMMU TLB flushing
- CVE-2023-34325 Multiple vulnerabilities in libfsimage disk handling
- CVE-2023-34324 Possible deadlock in Linux kernel event handling
- CVE-2023-34323 xenstored: A transaction conflict can crash C Xenstored
- CVE-2023-34322 top-level shadow reference dropped too early for 64-bit PV guests
- CVE-2023-34321 arm32: The cache may not be properly cleaned/invalidated
- CVE-2023-34320 arm: Guests can trigger a deadlock on Cortex-A77
- CVE-2023-3432 Server-Side Request Forgery (SSRF) in plantuml/plantuml
- CVE-2023-34319 Linux: buffer overrun in netback due to unusual packet
- CVE-2023-34318 Heap-buffer-overflow in src/hcom.c
- CVE-2023-34317 Other in OAS Platform
- CVE-2023-34316 Delta Electronics InfraSuite Device Master Improper Access Control
- CVE-2023-34315 Misconfiguration in Intel(R) VROC software
- CVE-2023-34314 Privilege escalation in Intel(R) Simics Simulator software
- CVE-2023-34312 Memory corruption in tencent:qq
- CVE-2023-34311 Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-34310 Ashlar-Vellum Cobalt Uninitialized Memory Remote Code Execution Vulnerability
- CVE-2023-3431 Improper Access Control in plantuml/plantuml
- CVE-2023-34309 Ashlar-Vellum Cobalt Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-34308 Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34307 Ashlar-Vellum Graphite VC6 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34306 Ashlar-Vellum Graphite VC6 File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-34305 Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34304 Ashlar-Vellum Cobalt Out-Of-Bounds Access Remote Code Execution Vulnerability
- CVE-2023-34303 Ashlar-Vellum Cobalt Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-34302 Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-34301 Ashlar-Vellum Cobalt CO File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-34300 Ashlar-Vellum Cobalt XE File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-3430 Openimageio: heap-buffer-overflow in file src/gif.imageio/gifinput.cpp
- CVE-2023-34299 Ashlar-Vellum Cobalt CO File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-34298 Pulse Secure Client SetupService Directory Traversal Local Privilege Escalation Vulnerability
- CVE-2023-34297 Sante DICOM Viewer Pro JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34296 Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34295 Sante DICOM Viewer Pro DCM File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34294 Sante DICOM Viewer Pro DCM File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2023-34293 Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34292 Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34291 Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34290 Ashlar-Vellum Cobalt Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-34289 Ashlar-Vellum Cobalt Heap-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-34288 Ashlar-Vellum Cobalt XE File Parsing Uninitialized Pointer Remote Code Execution Vulnerability
- CVE-2023-34287 Ashlar-Vellum Cobalt CO File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-34286 Ashlar-Vellum Cobalt CO File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability