Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 318 of 430.
- CVE-2023-31315 Privilege escalation in 1st Gen AMD EPYC™ Processors
- CVE-2023-31313 Other in AMD Instinct™ MI210
- CVE-2023-31310 Other in AMD Radeon™ PRO W6000 Series Graphics Cards
- CVE-2023-3131 MStore API < 3.9.7 - Subscriber+ Unauthorized Settings Update
- CVE-2023-31309 Other in AMD Radeon™ PRO V520
- CVE-2023-31308 Memory corruption in AMD Radeon™ PRO V620 Graphics Products
- CVE-2023-31307 Memory corruption in AMD Radeon™ PRO W6000 Series Graphics Cards
- CVE-2023-31306 Memory corruption in AMD Radeon™ PRO V520 Graphics Products
- CVE-2023-31305 Weak cryptography in AMD Radeon™ PRO W6000 Series Graphics Cards
- CVE-2023-31304 Other in AMD Radeon™ PRO W6000 Series Graphics Cards
- CVE-2023-31302 Cross-site scripting in sesami:cash point \& transport optimizer
- CVE-2023-31301 Cross-site scripting in sesami:cash point \& transport optimizer
- CVE-2023-31300 Information disclosure in sesami:cash point \& transport optimizer
- CVE-2023-3130 Short URL < 1.6.5 - Admin+ Cross Site Scripting
- CVE-2023-31299 Cross-site scripting in sesami:cash point \& transport optimizer
- CVE-2023-31298 Cross-site scripting in sesami:cash point \& transport optimizer
- CVE-2023-31297 Cross-site scripting in sesami:cash point \& transport optimizer
- CVE-2023-31296 Code injection in sesami:cash point \& transport optimizer
- CVE-2023-31295 Code injection in sesami:cash point \& transport optimizer
- CVE-2023-31294 Code injection in sesami:cash point \& transport optimizer
- CVE-2023-31293 Missing authorization in sesami:cash point \& transport optimizer
- CVE-2023-31292 Auth bypass in sesami:cash point \& transport optimizer
- CVE-2023-31290 Weak cryptography in trustwallet:trust wallet browser extension
- CVE-2023-3129 URL Shortify < 1.7.0 - Admin+ Cross Site Scripting
- CVE-2023-31289 Denial of service in pexip:pexip infinity
- CVE-2023-31287 Insufficient token expiration in Serenity
- CVE-2023-31286 User account enumeration in Serenity
- CVE-2023-31285 Cross Site Scripting (XSS) in Serenity
- CVE-2023-31284 Memory corruption in illumos:illumos-gate
- CVE-2023-31280 Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2023-3128 Grafana vulnerable to Authentication Bypass by Spoofing
- CVE-2023-31279 Improper Authentication
- CVE-2023-31278 Horner Automation Cscape Out-of-bounds Read
- CVE-2023-31277 PiiGAB M-Bus Unprotected Transport of Credentials
- CVE-2023-31276 Memory corruption in Intel(R) Server Board S2600WF, Intel(R) Server Board S2600ST, Intel(R) Server Board S2600BP, Intel(R) Server Board M50CYP and Intel(R) Server Board D50TNP
- CVE-2023-31275 Memory corruption in WPS Office
- CVE-2023-31274 Missing Release of Resource after Effective Lifetime vulnerability in Aveva PI Server
- CVE-2023-31273 Privilege escalation in Intel DCM software
- CVE-2023-31272 Memory corruption in YF325
- CVE-2023-31271 Privilege escalation in Intel(R) VROC software
- CVE-2023-3127 Improper Authentication in iSTAR
- CVE-2023-3126 B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Information Disclosure
- CVE-2023-31250 Drupal core - Moderately critical - Access bypass - SA-CORE-2023-005
- CVE-2023-3125 B2BKing <= 4.6.00 - Missing Authorization to Authenticated(Subscriber+) Price Modification
- CVE-2023-31248 Linux Kernel nftables Use-After-Free Local Privilege Escalation Vulnerability
- CVE-2023-31247 Memory corruption in Cesium NET
- CVE-2023-31246 Misconfiguration in Intel(R) SDP Tool software
- CVE-2023-31245 Open redirect in OvrC Cloud
- CVE-2023-31244 Memory corruption in Cscape
- CVE-2023-31242 Auth bypass in OAS Platform
- CVE-2023-31241 Auth bypass in OvrC Cloud
- CVE-2023-31240 Hardcoded credentials in OvrC Cloud
- CVE-2023-3124 Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option
- CVE-2023-31239 Memory corruption in V-Server and V-Server Lite
- CVE-2023-31238 Misconfiguration in SICAM P850
- CVE-2023-31237 WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection
- CVE-2023-31236 WordPress Scripts n Styles Plugin <= 3.5.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31235 WordPress Participants Database Plugin <= 2.4.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31234 WordPress Tilda Publishing plugin <= 0.3.23 - Broken Access Control vulnerability
- CVE-2023-31233 WordPress Baidu Tongji generator Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31232 WordPress Plugins List Plugin <= 2.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31231 File upload in Unlimited Elements For Elementor (Free Widgets, Addons, Templates)
- CVE-2023-31230 WordPress Baidu Tongji generator Plugin <= 1.0.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31229 WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection
- CVE-2023-31228 WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31227 Missing authorization in EMUI
- CVE-2023-31226 Missing authorization in EMUI
- CVE-2023-31225 Race condition in EMUI
- CVE-2023-31224 Auth bypass in jamf:jamf
- CVE-2023-31223 Cross-site scripting in dradisframework:dradis
- CVE-2023-31222 Medtronic Paceart MSMQ Deserialization of Untrusted Data
- CVE-2023-31221 WordPress PDQ CSV Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31220 WordPress WP Categories Widget Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-3122 GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email
- CVE-2023-31219 WordPress Download Monitor Plugin <= 4.8.1 is vulnerable to Server Side Request Forgery (SSRF)
- CVE-2023-31218 WordPress WOLF Plugin <= 1.0.6 is vulnerable to CSRF leading to Stored Cross Site Scripting (XSS) vulnerability
- CVE-2023-31217 WordPress User Location and IP Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31216 WordPress Ultimate Member Plugin <= 2.6.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-31215 WordPress Dropshipping & Affiliation with Amazon Plugin <= 2.1.2 is vulnerable to Arbitrary File Upload
- CVE-2023-31214 WordPress WP Quick Post Duplicator plugin <= 2.0 - Broken Access Control vulnerability
- CVE-2023-31213 WordPress WPBakery Page Builder Plugin < 6.13.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-31212 WordPress Contact Form Entries Plugin <= 1.3.0 is vulnerable to SQL Injection
- CVE-2023-31211 Disabled automation users could still authenticate
- CVE-2023-31210 Privilege escalation in agent via LD_LIBRARY_PATH
- CVE-2023-3121 Dahua Smart Parking Management image server-side request forgery
- CVE-2023-31209 Command injection via active checks and REST API
- CVE-2023-31208 Livestatus command injection in RestAPI
- CVE-2023-31207 Automation user secret logged to Apache access log
- CVE-2023-31206 Apache InLong: Attackers can change the immutable name and type of nodes
- CVE-2023-31203 Denial of service in OpenVINO Model Server software
- CVE-2023-31200 PTC Vuforia Studio Cross-Site Request Forgery
- CVE-2023-3120 SourceCodester Service Provider Management System view_service.php sql injection
- CVE-2023-31199 Privilege escalation in Intel(R) Solid State Drive Toolbox(TM)
- CVE-2023-31198 Command injection in Wi-Fi AP UNIT
- CVE-2023-31197 Privilege escalation in Intel(R) Trace Analyzer and Collector
- CVE-2023-31196 Missing authorization in Wi-Fi AP UNIT
- CVE-2023-31195 Information disclosure in ASUS Router RT-AX3000
- CVE-2023-31194 Memory corruption in Diagon
- CVE-2023-31193 Weak cryptography in OvrC Cloud
- CVE-2023-31192 Information disclosure in SoftEther VPN