Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 307 of 430.
- CVE-2023-32686 kiwitcms vulnerable to stored XSS via unrestricted files upload
- CVE-2023-32685 Clipboard based cross-site scripting (blocked with default CSP) in Kanboard
- CVE-2023-32684 In Lima, a malicious disk image could read a single file on the host filesystem as a qcow2/vmdk backing file
- CVE-2023-32683 URL deny list bypass via oEmbed and image URLs when generating previews in Synapse
- CVE-2023-32682 Improper checks for deactivated users during login in synapse
- CVE-2023-32681 Unintended leak of Proxy-Authorization header in requests
- CVE-2023-32680 Missing SQL permissions check in metabase
- CVE-2023-3268 Memory corruption in kernel
- CVE-2023-32679 Remote Code Execution via unrestricted file extension in Craft CMS
- CVE-2023-32678 Missing authorization in zulip
- CVE-2023-32677 Users who can send invitations can erroneously add users to streams during invitation in Zulip
- CVE-2023-32676 Autolab tar slip in Install Assessment functionality (`GHSL-2023-081`)
- CVE-2023-32675 Nonpayable default functions are sometimes payable in vyper
- CVE-2023-32674 Memory corruption in HP PC Hardware Diagnostics Windows
- CVE-2023-32673 Privilege escalation in HP PC Hardware Diagnostics Windows, HP Image Assistant, and HP Thunderbolt Dock G2 Firmware
- CVE-2023-32672 Apache Superset: SQL parser edge case bypasses data access authorization
- CVE-2023-32671 BuddyBoss XSS vulnerability
- CVE-2023-32670 BuddyBoss XSS vulnerability
- CVE-2023-3267 Command injection in PowerPanel Enterprise
- CVE-2023-32669 Authorization Bypass on BuddyBoss
- CVE-2023-32668 Security feature bypass in luatex project:luatex
- CVE-2023-32666 Privilege escalation in 4th Generation Intel(R) Xeon(R) Processors when using Intel(R) SGX or Intel(R) TDX
- CVE-2023-32665 Gvariant deserialisation does not match spec for non-normal data
- CVE-2023-32664 Memory corruption in Foxit Reader
- CVE-2023-32663 Misconfiguration in Intel(R) RealSense(TM) SDKs in version 2.53.1
- CVE-2023-32662 Privilege escalation in Intel Battery Life Diagnostic Tool installation software
- CVE-2023-32661 Auth bypass in Intel(R) NUC Kits NUC7PJYH and NUC7CJYH Realtek* SD Card Reader Driver installation software
- CVE-2023-32660 Privilege escalation in Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software
- CVE-2023-3266 Auth bypass in PowerPanel Enterprise
- CVE-2023-32659 SUBNET PowerSYSTEM Center Cross-site Scripting
- CVE-2023-32658 Privilege escalation in Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software
- CVE-2023-32657 Weintek Weincloud Improper Restriction of Excessive Authentication Attempts
- CVE-2023-32656 Memory corruption in Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA
- CVE-2023-32655 Path traversal in Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software
- CVE-2023-32654 Business logic in macOS
- CVE-2023-32653 Memory corruption in ImageGear
- CVE-2023-32652 PiiGAB M-Bus Cross-site Scripting
- CVE-2023-32651 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-32650 Integer overflow in GTKWave
- CVE-2023-3265 Auth bypass in PowerPanel Enterprise
- CVE-2023-32649 DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
- CVE-2023-32647 Privilege escalation in Intel(R) XTU software
- CVE-2023-32646 Privilege escalation in Intel(R) VROC software
- CVE-2023-32645 Auth bypass in YF325
- CVE-2023-32644 Security feature bypass in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-32643 Memory corruption in glib
- CVE-2023-32642 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-32641 Other in Intel(R) QAT
- CVE-2023-3264 Hardcoded credentials in iBoot PDU
- CVE-2023-32639 XML external entity in Applicant Programme
- CVE-2023-32638 Misconfiguration in Intel Arc RGB Controller software
- CVE-2023-32637 File upload in GBrowse
- CVE-2023-32636 Denial of service in glib
- CVE-2023-32635 XML external entity in XBRL data create application
- CVE-2023-32634 Auth bypass in SoftEther VPN
- CVE-2023-32633 Privilege escalation in Intel(R) CSME installer software
- CVE-2023-32632 Command injection in YF325
- CVE-2023-3263 Auth bypass in iBoot PDU
- CVE-2023-32629 Privilege escalation in Ubuntu Kernel
- CVE-2023-32628 File upload in WebAccess/SCADA
- CVE-2023-32627 Floating point exception in src/voc.c
- CVE-2023-32626 Command injection in LAN-W300N/PR5
- CVE-2023-32625 Cross-site request forgery in TS Webfonts for SAKURA
- CVE-2023-32624 Cross-site scripting in TS Webfonts for SAKURA
- CVE-2023-32623 Path traversal in Snow Monkey Forms
- CVE-2023-32622 Command injection in WL-WN531AX2
- CVE-2023-32621 File upload in WL-WN531AX2
- CVE-2023-32620 Auth bypass in WL-WN531AX2
- CVE-2023-3262 Hardcoded credentials in iBoot PDU
- CVE-2023-32619 Hardcoded credentials in Archer C50
- CVE-2023-32618 Privilege escalation in Intel(R) oneAPI Toolkit and component software installers
- CVE-2023-32617 Privilege escalation in Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware
- CVE-2023-32616 Use after free in Foxit Reader
- CVE-2023-32615 Path traversal in OAS Platform
- CVE-2023-32614 Memory corruption in ImageGear
- CVE-2023-32613 Auth bypass in WL-WN531AX2
- CVE-2023-32612 Command injection in WL-WN531AX2
- CVE-2023-32611 G_variant_byteswap() can take a long time with some non-normal inputs
- CVE-2023-32610 Denial of service in Mailform Pro CGI
- CVE-2023-3261 Memory corruption in iBoot PDU
- CVE-2023-32609 Missing authorization in Intel Unite(R) android application
- CVE-2023-32608 Path traversal in Pleasanter (Community Edition and Enterprise Edition)
- CVE-2023-32607 Cross-site scripting in Pleasanter (Community Edition and Enterprise Edition)
- CVE-2023-32605 Cross-site scripting in Trend Micro Apex Central
- CVE-2023-32604 Cross-site scripting in Trend Micro Apex Central
- CVE-2023-32603 WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32602 WordPress CALL ME NOW Plugin <= 3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32601 WordPress Booking Ultra Pro Appointments Booking Calendar Plugin plugin <= 1.1.12 - Broken Access Control vulnerability
- CVE-2023-32600 WordPress Rank Math SEO Plugin <= 1.0.119 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3260 Command injection in iBoot PDU
- CVE-2023-32599 WordPress reCAPTCHA for all plugin <= 1.22 - Broken Access Control vulnerability
- CVE-2023-32598 WordPress Featured Image Pro Post Grid Plugin <= 5.14 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32597 WordPress Video Gallery Plugin <= 1.0.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32596 WordPress weebotLite Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32595 WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32594 WordPress Hyphenator Plugin <= 5.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32593 WordPress GS Pins for Pinterest plugin <= 1.6.7 - Broken Access Control vulnerability
- CVE-2023-32592 WordPress Sunny Search Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32591 WordPress DBargain Plugin <= 3.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32590 WordPress Subscribe to Category Plugin <= 2.7.4 is vulnerable to SQL Injection