Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 301 of 430.
- CVE-2023-33364 Command injection in supremainc:biostar 2
- CVE-2023-33363 Auth bypass in supremainc:biostar 2
- CVE-2023-33362 SQL injection in piwigo:piwigo
- CVE-2023-33361 SQL injection in piwigo:piwigo
- CVE-2023-3336 TN-5900 Series User Enumeration Vulnerability
- CVE-2023-33359 Cross-site request forgery in piwigo:piwigo
- CVE-2023-33356 Cross-site scripting in thecosy:icecms
- CVE-2023-33355 Missing authorization in thecosy:icecms
- CVE-2023-3335 Information Exposure Vulnerability in Hitachi Ops Center Administrator
- CVE-2023-33338 SQL injection in phpgurukul:old age home management system
- CVE-2023-33336 Cross-site scripting in sophos:web appliance
- CVE-2023-33335 Cross-site scripting in sophos:iview
- CVE-2023-33333 Cross-site request forgery in Complianz
- CVE-2023-33332 WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33331 WordPress WooCommerce Product Vendors Plugin <= 2.1.76 is vulnerable to SQL Injection
- CVE-2023-33330 WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.50 is vulnerable to SQL Injection
- CVE-2023-3333 Command injection in Aterm WF300HP
- CVE-2023-33329 WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33328 WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33327 WordPress Leyka plugin <= 3.30.2 - Privilege Escalation vulnerability
- CVE-2023-33326 WordPress EventPrime Plugin <= 2.8.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33325 WordPress Leyka Plugin <= 3.30.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33324 WordPress Easy Captcha plugin <= 1.0 - Broken Access Control vulnerability
- CVE-2023-33323 WordPress ARMember Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33322 WordPress Front End Users plugin < 3.2.25 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-33321 WordPress EventPrime plugin <= 2.8.6 - Sensitive Data Exposure
- CVE-2023-33320 WordPress WP-Hijri Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3332 Cross-site scripting in Aterm WF300HP
- CVE-2023-33319 WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33318 WordPress WooCommerce Follow-Up Emails Plugin <= 4.9.40 is vulnerable to Arbitrary File Upload
- CVE-2023-33317 WordPress WooCommerce Warranty Requests Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33316 Cross-site request forgery in WooCommerce Follow-Up Emails (AutomateWoo)
- CVE-2023-33315 WordPress Smart App Banner Plugin <= 1.1.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-33314 WordPress BEAR Plugin <= 1.1.3.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-33313 WordPress WIP Custom Login Plugin <= 1.2.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-33312 WordPress Easy Captcha Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33311 WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33310 WordPress Unite Gallery Lite plugin <= 1.7.59 - Local File Inclusion vulnerability
- CVE-2023-3331 Path traversal in Aterm WF300HP
- CVE-2023-33309 WordPress Duplicator Pro Plugin <= 4.5.11 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-33308 Memory corruption in FortiOS
- CVE-2023-33307 Null dereference in FortiOS
- CVE-2023-33306 Null dereference in FortiOS
- CVE-2023-33305 Denial of service in FortiOS
- CVE-2023-33304 Hardcoded credentials in FortiClientWindows
- CVE-2023-33303 Auth bypass in FortiEDR
- CVE-2023-33302 Memory corruption in FortiMail
- CVE-2023-33301 Missing authorization in FortiOS
- CVE-2023-33300 Command injection in FortiNAC
- CVE-2023-3330 Path traversal in Aterm WF300HP
- CVE-2023-33299 Deserialization in FortiNAC
- CVE-2023-33298 Command injection in perimeter81:xpc helpertool
- CVE-2023-33297 Denial of service in bitcoin:bitcoin core
- CVE-2023-33295 Security feature bypass in cohesity:cohesity dataplatform
- CVE-2023-33294 Command injection in kaiostech:kaios
- CVE-2023-33293 Information disclosure in kaiostech:kaios
- CVE-2023-33291 Business logic in ebankit:ebankit
- CVE-2023-33290 git-url-parse crate vulnerable to Regular Expression Denial of Service
- CVE-2023-3329 CVE-2023-3329
- CVE-2023-33289 Denial of service in urlnorm project:urlnorm
- CVE-2023-33288 Use after free in linux:linux kernel
- CVE-2023-33287 Cross-site scripting in actonic:inline table editing
- CVE-2023-33285 Memory corruption in qt:qt
- CVE-2023-33284 Deserialization in marvalglobal:msm
- CVE-2023-33283 Hardcoded credentials in marvalglobal:msm
- CVE-2023-33282 Hardcoded credentials in marvalglobal:msm
- CVE-2023-33281 Auth bypass in nissan:sylphy classic 2021 firmware
- CVE-2023-33280 SQL injection in storecommander:quickaccounting
- CVE-2023-3328 Custom Field For WP Job Manager < 1.2 - Admin+ Stored XSS
- CVE-2023-33279 SQL injection in scfixmyprestashop project:scfixmyprestashop
- CVE-2023-33278 SQL injection in storecommander:customers export
- CVE-2023-33277 Path traversal in gira:knx ip router firmware
- CVE-2023-33276 Cross-site scripting in gira:knx ip router firmware
- CVE-2023-33274 Auth bypass in voltronicpower:snmp web pro
- CVE-2023-33273 Command injection in dts:monitoring
- CVE-2023-33272 Command injection in dts:monitoring
- CVE-2023-33271 Command injection in dts:monitoring
- CVE-2023-33270 Command injection in dts:monitoring
- CVE-2023-33269 Command injection in dts:monitoring
- CVE-2023-33268 Command injection in dts:monitoring
- CVE-2023-33265 Hazelcast Executor Services don't check client permissions properly
- CVE-2023-33264 Hazelcast vulnerable to unmasked password exposure
- CVE-2023-33263 Information disclosure in wftpd project:wftpd
- CVE-2023-3326 Network authentication attack via pam_krb5
- CVE-2023-33257 Cross-site scripting in verint:engagement management
- CVE-2023-33255 Cross-site scripting in uthscsa:papaya viewer
- CVE-2023-33254 Information disclosure in quest:kace systems deployment appliance
- CVE-2023-33253 File upload in agilebio:labcollector
- CVE-2023-33252 Double spend in snarkjs
- CVE-2023-33251 Information disclosure in lightbend:akka http
- CVE-2023-33250 Use after free in linux:linux kernel
- CVE-2023-3325 CMS Commander <= 2.287 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature
- CVE-2023-33248 Security feature bypass in amazon:alexa
- CVE-2023-33247 Missing authorization in talend:data catalog
- CVE-2023-33246 Apache RocketMQ Command Execution
- CVE-2023-33245 Path traversal in minecraft:minecraft
- CVE-2023-33244 Security feature bypass in obsidian:obsidian
- CVE-2023-33243 Auth bypass in starface:starface
- CVE-2023-33242 Lindell17 TSS Abort Mishandling
- CVE-2023-33241 GG18 / GG20 TSS Beta Parameter Vulnerability