Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 325 of 430.
- CVE-2023-3053 Page Builder by AZEXO <= 1.27.133 - Missing Authorization to Post Creation
- CVE-2023-30529 Jenkins Lucene-Search Plugin vulnerable to Cross-Site Request Forgery
- CVE-2023-30528 Jenkins WSO2 Oauth Plugin does not mask the WSO2 Oauth client secret on the global configuration form
- CVE-2023-30527 Jenkins WSO2 Oauth Plugin stores WSO2 Oauth client secret unencrypted in global config.xml file on Jenkins controller
- CVE-2023-30526 Jenkins Report Portal Plugin missing permissions check
- CVE-2023-30525 Jenkins Report Portal Plugin Cross-Site Request Forgery vulnerability
- CVE-2023-30524 Jenkins Report Portal Plugin configuration form does not mask tokens
- CVE-2023-30523 Jenkins Report Portal Plugin allows users with Item/Extended Read permission to view tokens on Jenkins controller
- CVE-2023-30522 Jenkins Fogbugz Plugin has missing permissions check
- CVE-2023-30521 Jenkins Assembla merge request builder Plugin missing authentication to access endpoint
- CVE-2023-30520 Jenkins Quay.io trigger Plugin Cross-site Scripting vulnerability
- CVE-2023-3052 Page Builder by AZEXO <= 1.27.133 - Cross-Site Request Forgery to Post Creation/Modification/Deletion
- CVE-2023-30519 Jenkins Quay.io trigger Plugin webhook endpoint can be accessed without authentication
- CVE-2023-30518 Jenkins Thycotic Secret Server Plugin missing permissions check
- CVE-2023-30517 Jenkins NeuVector Vulnerability Scanner Plugin disables SSL/TLS certificate and hostname validation
- CVE-2023-30516 Jenkins Image Tag Parameter Plugin improperly introduces option to opt out of SSL/TLS certificate validation
- CVE-2023-30515 Jenkins Thycotic DevOps Secrets Vault Plugin does not properly mask credentials
- CVE-2023-30514 Jenkins Azure Key Vault Plugin does not properly mask credentials
- CVE-2023-30513 Jenkins Kubernetes Plugin does not properly mask credentials
- CVE-2023-30512 CubeFS allows Kubernetes cluster-level privilege escalation
- CVE-2023-30510 Authenticated Server-side Request Forgery in Aruba EdgeConnect Enterprise Web Management Interface
- CVE-2023-3051 Page Builder by AZEXO <= 1.27.133 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-30509 Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30508 Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30507 Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30506 Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30505 Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30504 Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30503 Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30502 Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30501 Authenticated Remote Code Execution in Aruba EdgeConnect Enterprise Command Line Interface
- CVE-2023-30500 WordPress WPForms plugins - Reflected Cross Site Scripting (XSS) vulnerability
- CVE-2023-3050 Authentication Bypass in TMT's Lockcell
- CVE-2023-30499 WordPress FV Flowplayer Video Player Plugin <= 7.5.32.7212 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30498 WordPress Vimeotheque Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30497 WordPress LINE Notify Plugin <= 1.4.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30496 WordPress Bus Ticket Booking with Seat Reservation Plugin <= 5.2.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30495 WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.1.23 is vulnerable to SQL Injection
- CVE-2023-30494 WordPress ImageRecycle pdf & image compression Plugin <= 3.1.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30493 WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30492 WordPress Minimum Purchase for WooCommerce Plugin <= 2.0.0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30491 WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30490 WordPress Easing Slider plugin <= 3.0.8 - Plugin Settings Reset Vulnerability
- CVE-2023-3049 File Upload in TMT's Lockcell
- CVE-2023-30489 WordPress Email Subscription Popup Plugin <= 1.2.16 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30488 WordPress Featured Post Creative plugin <= 1.2.7 - Broken Access Control vulnerability
- CVE-2023-30487 WordPress LearnPress Export Import Plugin <= 4.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30486 WordPress Square theme <= 2.0.0 - Broken Access Control
- CVE-2023-30485 WordPress Avartan Slider Lite Plugin <= 1.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30484 WordPress Enable Accessibility Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-30483 WordPress Watu Quiz Plugin <= 3.3.9.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30482 WordPress WPBulky Plugin < 1.0.10 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30481 WordPress AGP Font Awesome Collection Plugin <= 3.2.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30480 WordPress Educenter theme <= 1.5.5 - Broken Access Control
- CVE-2023-3048 IDOR in TMT's Lockcell
- CVE-2023-30479 WordPress Stamped.io Product Reviews & UGC for WooCommerce plugin <= 2.3.2 - Broken Access Control vulnerability
- CVE-2023-30478 WordPress Newsletters Plugin <= 4.8.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-30477 WordPress AFFILIATE Solution Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30476 WordPress Blogger Buzz theme <= 1.2.2 - Broken Access Control vulnerability
- CVE-2023-30475 WordPress Coupon Affiliates Plugin <= 5.4.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30474 WordPress Ultimate Noindex Nofollow Tool II Plugin <= 1.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-30473 WordPress YML for Yandex Market Plugin <= 3.10.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30472 WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30471 WordPress WP Search Analytics Plugin <= 1.4.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-30470 Use after free in Hermes
- CVE-2023-3047 SQLi in TMT's Lockcell
- CVE-2023-30469 Reflrected Cross Site Scripting Vulnerability in Hitachi Ops Center Analyzer
- CVE-2023-30467 Improper Authorization Vulnerability in Milesight Network Video Recorder (NVR)
- CVE-2023-30466 Authentication Bypass Vulnerability in Milesight Network Video Recorder (NVR)
- CVE-2023-30465 Apache InLong: SQL injection in apache inLong 1.5.0
- CVE-2023-30464 CoreDNS Cache Poisoning via a birthday attack
- CVE-2023-30463 Integer overflow in altran:picotcp
- CVE-2023-3046 SQLi in Biltay Technlogys Scienta
- CVE-2023-30459 Code injection in smartptt:smartptt scada
- CVE-2023-30458 Information disclosure in medicine tracker system project:medicine tracker system
- CVE-2023-30456 Other in linux:linux kernel
- CVE-2023-30455 Denial of service in ebankit:ebankit
- CVE-2023-30454 Cross-site scripting in ebankit:ebankit
- CVE-2023-30453 Cross-site scripting in teamlead:reminder
- CVE-2023-30452 Cross-site scripting in morosystems:easymind
- CVE-2023-30451 Path Traversal in TYPO3 File Abstraction Layer Storages
- CVE-2023-30450 Misconfiguration in redpanda:redpanda
- CVE-2023-3045 SQLi in Tise Technology's Parking Web Report
- CVE-2023-30449 IBM Db2 denial of service
- CVE-2023-30448 IBM Db2 denial of service
- CVE-2023-30447 IBM Db2 denial of service
- CVE-2023-30446 IBM Db2 denial of service
- CVE-2023-30445 IBM Db2 denial of service
- CVE-2023-30444 IBM Watson Machine Learning on Cloud Pak for Data server-side request forgery
- CVE-2023-30443 IBM Db2 denial of service
- CVE-2023-30442 IBM Db2 denial of service
- CVE-2023-30441 IBM Java information disclosure
- CVE-2023-30440 IBM PowerVM Hypervisor denial of service
- CVE-2023-3044 Divide-by-zero in Xpdf 4.04 due to very large page size
- CVE-2023-30438 IBM PowerVM gain access
- CVE-2023-30437 IBM Security Guardium information disclosure
- CVE-2023-30436 IBM Security Guardium cross-site scripting
- CVE-2023-30435 IBM Security Guardium cross-site scripting
- CVE-2023-30434 IBM Storage Scale denial of service
- CVE-2023-30433 IBM Security Verify Access HTTP open redirect