Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 337 of 430.
- CVE-2023-28814 File upload in iSecure Center
- CVE-2023-28813 Other in LocalServiceComponents
- CVE-2023-28812 Memory corruption in LocalServiceComponents
- CVE-2023-28811 Memory corruption in DS-71XXHGH-K(S)
- CVE-2023-28810 Missing authorization in DS-K1T320XXX
- CVE-2023-2881 Storing Passwords in a Recoverable Format in pimcore/customer-data-framework
- CVE-2023-28809 Auth bypass in DS-K1T320XXX
- CVE-2023-28808 Missing authorization in DS-A71024/48/72R,DS-A80624S,DS-A81016S,DS-A72024/72R,DS-A80316S,DS-A82024D
- CVE-2023-28807 Bypass of ZIA domain fronting detection module through evasion technique
- CVE-2023-28806 Signature validation error in DLL allows disabling anti-tampering protection
- CVE-2023-28805 ZCC on Linux privilege escalation
- CVE-2023-28804 Linux ZCC allows unsigned updates, allowing elevated Code Execution
- CVE-2023-28803 Traffic being bypassed by ZCC by configuring synthetic IP range as local network
- CVE-2023-28802 Disable Zscaler using machine tunnel restart
- CVE-2023-28801 Improper SAML signature verification
- CVE-2023-28800 Output encoding missing in redrurl parameter
- CVE-2023-2880 Frauscher Sensortechnik Diagnostic System FDS001 for FAdC/FAdCi Path Traversal vulnerability
- CVE-2023-28799 Open redirect in Client Connector
- CVE-2023-28798 Out-of-bounds write to heap in pacparser
- CVE-2023-28797 LPE using arbitrary file delete with Symlinks
- CVE-2023-28796 IPC Bypass Through PLT Section in ELF
- CVE-2023-28795 Client IPC validation bypass
- CVE-2023-28794 PAC Files Exposed to Internet Websites
- CVE-2023-28793 Heap Based Buffer Overflow in Library
- CVE-2023-28792 WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28791 WordPress Simple Org Chart Plugin <= 2.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-28790 WordPress Simple Staff List Plugin <= 2.2.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2879 Denial of service in Wireshark
- CVE-2023-28789 WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28788 WordPress Advanced Page Visit Counter Plugin <= 6.4.2 is vulnerable to SQL Injection
- CVE-2023-28787 WordPress Quiz And Survey Master plugin <= 8.1.4 - Unauthenticated SQL Injection vulnerability
- CVE-2023-28786 WordPress Solid Security Plugin <= 8.1.4 is vulnerable to Open Redirection
- CVE-2023-28785 WordPress Yoast SEO: Local Plugin <= 14.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28784 WordPress Contest Gallery Plugin <= 21.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28783 WordPress Woocommerce Tip/Donation Plugin <= 1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28782 WordPress Gravity Forms Plugin <= 2.7.3 is vulnerable to PHP Object Injection
- CVE-2023-28781 WordPress Contact Forms by Cimatti Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28780 WordPress Yoast SEO: Local Plugin <= 14.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-2878 Kubernetes secrets-store-csi-driver discloses service account tokens in logs
- CVE-2023-28779 WordPress Terms descriptions Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28778 WordPress Pagination by BestWebSoft Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28777 WordPress LearnDash LMS Plugin <= 4.5.3 is vulnerable to SQL Injection
- CVE-2023-28776 WordPress Continuous Image Carousel With Lightbox Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28775 WordPress Yoast SEO Premium plugin <= 20.4 - Unauthenticated Zapier API Key Reset vulnerability
- CVE-2023-28774 WordPress Review Stream Plugin <= 1.6.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28773 WordPress Secondary Title Plugin <= 2.0.9.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28772 Memory corruption in linux:linux kernel
- CVE-2023-28771 Zyxel Multiple Firewalls OS Command Injection
- CVE-2023-28770 Information disclosure in DX5401-B0 firmware
- CVE-2023-2877 Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution
- CVE-2023-28769 Memory corruption in DX5401-B0 firmware
- CVE-2023-28768 Denial of service in XGS2220-30 firmware
- CVE-2023-28767 Command injection in ATP series firmware
- CVE-2023-28766 Null dereference in SIPROTEC 5 6MD85 (CP300)
- CVE-2023-28765 Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Promotion Management )
- CVE-2023-28764 Information Disclosure vulnerability in SAP BusinessObjects Platform
- CVE-2023-28763 Denial of Service in SAP NetWeaver AS for ABAP and ABAP Platform
- CVE-2023-28762 Information Disclosure in SAP BusinessObjects Intelligence Platform
- CVE-2023-28761 Missing Authentication check in SAP NetWeaver Enterprise Portal
- CVE-2023-28760 TP-Link AX1800 WiFi 6 Router (Archer AX21) devices allow unauthenticated attackers (on the LAN) to execute arbitrary code as root via the db
- CVE-2023-2876 Session cookie exposure for client side script
- CVE-2023-28759 Privilege escalation in veritas:netbackup
- CVE-2023-28758 Privilege escalation in veritas:netbackup
- CVE-2023-28756 Ruby Time component ReDoS issue
- CVE-2023-28755 Ruby URI component ReDoS issue
- CVE-2023-28754 ShardingSphere-Agent: Deserialization vulnerability in ShardingSphere Agent
- CVE-2023-28753 Integer overflow in netconsd
- CVE-2023-28751 WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28750 WordPress Albo Pretorio Online Plugin <= 4.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2875 eScan Antivirus IoControlCode PROCOBSRVESX.SYS 0x22E008u null pointer dereference
- CVE-2023-28749 WordPress CM On Demand Search And Replace Plugin <= 1.3.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-28748 WordPress Copy Or Move Comments Plugin <= 5.0.4 is vulnerable to SQL Injection
- CVE-2023-28747 WordPress CBX Currency Converter Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-28746 Information disclosure in Intel(R) Atom(R) Processors
- CVE-2023-28745 Privilege escalation in Intel(R) QSFP+ Configuration Utility software
- CVE-2023-28744 Use after free in Foxit Reader
- CVE-2023-28743 Privilege escalation in Intel NUC BIOS firmware
- CVE-2023-28742 BIG-IP iQuery mesh vulnerability
- CVE-2023-28741 Memory corruption in Intel(R) QAT drivers for Windows - HW Version 1.0
- CVE-2023-28740 Privilege escalation in Intel(R) QAT drivers for Windows - HW Version 2.0
- CVE-2023-2874 Twister Antivirus IoControlCode filppd.sys 0x804f2140 denial of service
- CVE-2023-28739 Misconfiguration in Intel(R) Chipset Driver Software
- CVE-2023-28738 Privilege escalation in Intel NUC BIOS firmware
- CVE-2023-28737 Privilege escalation in Intel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-28736 Memory corruption in Intel(R) SSD Tools software
- CVE-2023-28733 Stored XSS affecting the AcyMailing plugin for Joomla
- CVE-2023-28732 Missing access control affecting the AcyMailing plugin for Joomla
- CVE-2023-28731 Unauthenticated RCE affecting the AcyMailing plugin for Joomla
- CVE-2023-28730 Memory corruption in Control FPWIN Pro
- CVE-2023-2873 Twister Antivirus IoControlCode filppd.sys 0x80800043 memory corruption
- CVE-2023-28729 Memory corruption in Control FPWIN Pro
- CVE-2023-28728 Memory corruption in Control FPWIN Pro
- CVE-2023-28727 Auth bypass in AiSEG2
- CVE-2023-28726 Command injection in AiSEG2
- CVE-2023-28725 File upload in generalbytes:crypto application server
- CVE-2023-28724 NGINX Management Suite vulnerability
- CVE-2023-28723 Information disclosure in Intel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-28722 Memory corruption in Intel NUC BIOS firmware
- CVE-2023-28720 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-2872 FlexiHub IoControlCode fusbhub.sys 0x220088 null pointer dereference