Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 313 of 430.
- CVE-2023-32114 Denial of Service in SAP NetWeaver
- CVE-2023-32113 Information Disclosure vulnerability in SAP GUI for Windows
- CVE-2023-32112 Missing Authorization Check in Vendor Master Hierarchy
- CVE-2023-32111 Memory Corruption vulnerability in SAP PowerDesigner (Proxy)
- CVE-2023-32110 WordPress JupiterX theme <= 3.0.0 - Auth. Local File Inclusion vulnerability
- CVE-2023-3211 WordPress Database Administrator <= 1.0.3 - Unauthenticated SQL Injection
- CVE-2023-32109 WordPress Albo Pretorio Online Plugin <= 4.6.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32108 WordPress Albo Pretorio Online Plugin <= 4.6.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32107 WordPress Photo Gallery by Ays Plugin <= 5.1.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32106 WordPress WP Docs Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32105 WordPress WPPizza Plugin <= 3.17.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32104 WordPress MyCurator Content Curation Plugin <= 3.74 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32103 WordPress TP Education Plugin <= 4.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32102 WordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-32101 WordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Open Redirection
- CVE-2023-32100 Key duplication in GSDK
- CVE-2023-3210 Inefficient Regular Expression Complexity in GitLab
- CVE-2023-32099 Key duplication in GSDK
- CVE-2023-32098 Key duplication in GSDK
- CVE-2023-32097 Key duplication in GSDK
- CVE-2023-32096 Key duplication in GSDK
- CVE-2023-32095 WordPress Rename Media Files Plugin <= 1.0.1 is vulnerable to Remote Code Execution (RCE)
- CVE-2023-32094 WordPress Extended Post Status plugin <= 1.0.19 - Broken Access Control vulnerability
- CVE-2023-32093 WordPress TPG Redirect Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32092 WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32091 WordPress POEditor Plugin <= 0.9.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-32090 Hardcoded credentials in Pega Platform
- CVE-2023-3209 MStore API < 3.9.7 - Settings Update via CSRF
- CVE-2023-32089 Cross-site scripting in Pega Platform
- CVE-2023-32088 Cross-site scripting in Pega Platform
- CVE-2023-32087 Cross-site scripting in Pega Platform
- CVE-2023-32085 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2023-32084 HTTP.sys Denial of Service Vulnerability
- CVE-2023-32083 Microsoft Failover Cluster Information Disclosure Vulnerability
- CVE-2023-32082 etcd key name can be accessed via LeaseTimeToLive API
- CVE-2023-32081 Vert.x STOMP server process client frames that would not send initially a connect frame
- CVE-2023-32080 Wings vulnerable to escape to host from installation container
- CVE-2023-3208 RoadFlow Visual Process Engine .NET Core Mvc Login sql injection
- CVE-2023-32079 Netmaker Privilige Escalation Vulnerability
- CVE-2023-32078 Netmaker IDOR Vulnerability Allows User to Update Other User's Password
- CVE-2023-32077 Netmaker has Hardcoded DNS Secret Key
- CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory
- CVE-2023-32075 Pimcore vulnerable to Business Logic Errors in Customer automation rules
- CVE-2023-32074 Nextcloud user_oidc app is missing brute force protection
- CVE-2023-32073 AVideo command injection vulnerability
- CVE-2023-32072 Tuleap vulnerable toXSS via the triggered job URL of a Jenkins job
- CVE-2023-32071 XWiki Platform vulnerable to RXSS via editor parameter - importinline template
- CVE-2023-32070 Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers
- CVE-2023-32069 XWiki Platform privilege escalation (PR)/RCE from account through class sheet
- CVE-2023-32068 URL Redirection to Untrusted Site in XWiki
- CVE-2023-32067 0-byte UDP payload DoS in c-ares
- CVE-2023-32066 Time Tracker has Stored XSS vulnerability in Week View plugin
- CVE-2023-32065 OroCommerce get-totals-for-checkout API endpoint returns unwanted data
- CVE-2023-32064 OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility
- CVE-2023-32063 OroCRMCallBundle has incorrect call view page visibility
- CVE-2023-32062 OroCalendarBundle has incorrect system calendar events visibility
- CVE-2023-32061 Discourse Topic Creation Page Allows iFrame Tag without Restrictions
- CVE-2023-32060 Missing authorization in dhis2-core
- CVE-2023-3206 Chengdu VEC40G denial of service
- CVE-2023-32059 Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
- CVE-2023-32058 Vyper vulnerable to integer overflow in loop
- CVE-2023-32057 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
- CVE-2023-32056 Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability
- CVE-2023-32055 Active Template Library Elevation of Privilege Vulnerability
- CVE-2023-32054 Volume Shadow Copy Elevation of Privilege Vulnerability
- CVE-2023-32053 Windows Installer Elevation of Privilege Vulnerability
- CVE-2023-32052 Microsoft Power Apps (online) Spoofing Vulnerability
- CVE-2023-32051 Raw Image Extension Remote Code Execution Vulnerability
- CVE-2023-32050 Windows Installer Elevation of Privilege Vulnerability
- CVE-2023-3205 Inefficient Regular Expression Complexity in GitLab
- CVE-2023-32049 Microsoft Windows Defender SmartScreen Security Feature Bypass
- CVE-2023-32047 Paint 3D Remote Code Execution Vulnerability
- CVE-2023-32046 Microsoft Windows MSHTML Platform Privilege Escalation
- CVE-2023-32045 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2023-32044 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
- CVE-2023-32043 Windows Remote Desktop Security Feature Bypass Vulnerability
- CVE-2023-32042 OLE Automation Information Disclosure Vulnerability
- CVE-2023-32041 Windows Update Orchestrator Service Information Disclosure Vulnerability
- CVE-2023-32040 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2023-3204 Materialis <= 1.1.24 - Missing Authorization to Limited Arbitrary Options Update
- CVE-2023-32039 Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- CVE-2023-32038 Microsoft ODBC Driver Remote Code Execution Vulnerability
- CVE-2023-32037 Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability
- CVE-2023-32035 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-32034 Remote Procedure Call Runtime Denial of Service Vulnerability
- CVE-2023-32033 Microsoft Failover Cluster Remote Code Execution Vulnerability
- CVE-2023-32032 .NET and Visual Studio Elevation of Privilege Vulnerability
- CVE-2023-32031 Microsoft Exchange Server Remote Code Execution Vulnerability
- CVE-2023-32030 .NET and Visual Studio Denial of Service Vulnerability
- CVE-2023-3203 MStore API <= 3.9.6 - Cross-Site Request Forgery to Product Limit Update
- CVE-2023-32029 Microsoft Excel Remote Code Execution Vulnerability
- CVE-2023-32028 Microsoft SQL OLE DB Remote Code Execution Vulnerability
- CVE-2023-32027 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-32026 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-32025 Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- CVE-2023-32024 Microsoft Power Apps Spoofing Vulnerability
- CVE-2023-32022 Windows Server Service Security Feature Bypass Vulnerability
- CVE-2023-32021 Windows SMB Witness Service Security Feature Bypass Vulnerability
- CVE-2023-32020 Windows DNS Spoofing Vulnerability
- CVE-2023-3202 MStore API <= 3.9.6 - Cross-Site Request Forgery to Firebase Server Key Update