Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 339 of 430.
- CVE-2023-28622 WordPress Easy Slider Revolution Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28621 WordPress Raise Mag Theme <= 1.0.7 and Wishful Blog theme <= 2.0.1 are vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28620 WordPress Cyberus Key Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2862 SiteServer CMS search cross site scripting
- CVE-2023-28619 WordPress Resoto theme <= 1.0.8 - Broken Access Control to Arbitrary Plugin Activation
- CVE-2023-28618 WordPress Enhanced Plugin Admin Plugin <= 1.16 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-28617 Command injection in gnu:org mode
- CVE-2023-28616 Information disclosure in stormshield:stormshield network security
- CVE-2023-28614 Command injection in freewillsolutions:smart trade
- CVE-2023-28613 Integer overflow in samsung:exynos 1280 firmware
- CVE-2023-28611 Missing authorization in omicronenergy:stationguard
- CVE-2023-28610 Security feature bypass in omicronenergy:stationguard
- CVE-2023-2861 Qemu: 9pfs: improper access control on special files
- CVE-2023-28609 Ansible Semaphore mishandles authentication
- CVE-2023-28607 Cross-site scripting in misp-project:misp
- CVE-2023-28606 Cross-site scripting in misp-project:misp
- CVE-2023-28604 Fluid Components TYPO3 extension vulnerable to Cross-Site Scripting
- CVE-2023-28603 Missing authorization in Zoom VDI Windows Meeting Client
- CVE-2023-28602 Security feature bypass in Zoom for Windows Client
- CVE-2023-28601 Memory corruption in Zoom for Windows Client
- CVE-2023-28600 Missing authorization in Zoom for macOS Client
- CVE-2023-2860 Out-of-bounds read when setting hmac data
- CVE-2023-28599 Cross-site scripting in Zoom for Android
- CVE-2023-28598 Cross-site scripting in Zoom for Linux clients
- CVE-2023-28597 Improper trust boundary implementation for SMB in Zoom Clients
- CVE-2023-28596 Local Privilege Escalation in Zoom for macOS Installers
- CVE-2023-2859 Code Injection in nilsteampassnet/teampass
- CVE-2023-28588 Integer Overflow or Wraparound in Bluetooth Host
- CVE-2023-28587 Improper Restriction of Operations within the Bounds of a Memory Buffer in BT Controller
- CVE-2023-28586 Improper Restriction of Operation within the Bounds of a Memory Buffer in TZ Secure OS
- CVE-2023-28585 Integer Overflow to Buffer Overflow in TZ Secure OS
- CVE-2023-28584 Improper Authorization in WLAN Host
- CVE-2023-28583 Double Free in Data Network Stack & Connectivity
- CVE-2023-28582 Buffer Copy Without Checking Size of Input in Data Modem
- CVE-2023-28581 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Firmware
- CVE-2023-28580 Buffer Copy Without Checking Size of Input in WLAN Host
- CVE-2023-2858 Memory corruption in Wireshark
- CVE-2023-28579 Buffer Copy Without Checking Size of Input in WLAN Host
- CVE-2023-28578 Improper Input Validation in Services
- CVE-2023-28577 Multiple Dmabuf Kernel Address UAF Vulnerability
- CVE-2023-28576 Time-of-check Time-of-use (TOCTOU) Race Condition in Camera Kernel Driver
- CVE-2023-28575 Multiple Type Confusion Vulnerability
- CVE-2023-28574 Improper Input Validation in Core
- CVE-2023-28573 Improper Validation of Array Index in WLAN HAL
- CVE-2023-28572 Buffer Over-read in WLAN HOST
- CVE-2023-28571 Buffer Over-read in WLAN HOST
- CVE-2023-28570 Buffer Copy without Checking Size of Input in Audio
- CVE-2023-2857 Memory corruption in Wireshark
- CVE-2023-28569 Buffer Over-read in WLAN HAL
- CVE-2023-28568 Buffer Over-read in WLAN HAL
- CVE-2023-28567 Improper Validation of Array Index in WLAN HAL
- CVE-2023-28566 Buffer Over-read in WLAN HAL
- CVE-2023-28565 Improper Validation of Array Index in WLAN HAL
- CVE-2023-28564 Use of Out-of-range Pointer Offset in WLAN HAL
- CVE-2023-28563 Buffer Over-read in IOE Firmware
- CVE-2023-28562 Buffer Copy Without Checking Size of Input in QESL
- CVE-2023-28561 Buffer Copy Without Checking Size of Input in QESL
- CVE-2023-28560 Buffer Copy Without Checking Size of Input in WLAN HAL
- CVE-2023-2856 Memory corruption in Wireshark
- CVE-2023-28559 Buffer Copy Without Checking Size of Input in WLAN HAL
- CVE-2023-28558 Improper Validation of Array Index in WLAN HAL
- CVE-2023-28557 Improper Validation of Array Index in WLAN HAL
- CVE-2023-28556 Improper Authorization in HLOS
- CVE-2023-28555 Buffer Over-read in Audio
- CVE-2023-28554 Buffer Over-read in Qualcomm IPC
- CVE-2023-28553 Buffer Over-read in WLAN Host
- CVE-2023-28551 Improper Restriction of Operations within the Bounds of a Memory Buffer in UTILS
- CVE-2023-28550 Improper Restriction of Operations within the Bounds of a Memory Buffer in MPP Performance
- CVE-2023-2855 Memory corruption in Wireshark
- CVE-2023-28549 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN HAL
- CVE-2023-28548 Improper Validation of Array Index in WLAN HAL
- CVE-2023-28547 Buffer Copy Without Checking Size of Input in SPS Applications
- CVE-2023-28546 Buffer Copy Without Checking Size of Input in SPS Applications
- CVE-2023-28545 Improper Restriction of Operations within the Bounds of a Memory Buffer in TZ Secure OS
- CVE-2023-28544 Buffer Copy without Checking the Size of Input in WLAN Firmware
- CVE-2023-28543 Out of Bounds read in SNPE Library
- CVE-2023-28542 Buffer Over-read in WLAN HOST
- CVE-2023-28541 Buffer Over-read in WLAN Host
- CVE-2023-28540 Improper Authentication in Data Modem
- CVE-2023-2854 Memory corruption in Wireshark
- CVE-2023-28539 Buffer Copy Without Checking Size of Input in WLAN Host
- CVE-2023-28538 Stack-based Buffer Overflow in WIN Product
- CVE-2023-28537 Integer Overflow or Wraparound in Audio
- CVE-2023-28536 WordPress Branded Social Images plugin <= 1.1.0 - Broken Access Control vulnerability
- CVE-2023-28535 WordPress Paytm Payment Donation Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28534 WordPress WP Job Portal Plugin <= 2.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28533 WordPress Cab Grid Plugin <= 1.5.15 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28532 WordPress Real Estate Directory theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation
- CVE-2023-28531 Security feature bypass in netapp:brocade fabric operating system
- CVE-2023-28530 IBM Cognos Analytics cross-site scripting
- CVE-2023-2853 XSS in SoftMed's SelfPatron
- CVE-2023-28529 IBM InfoSphere Information Server 11.7
- CVE-2023-28528 IBM AIX command execution
- CVE-2023-28527 IBM Informix Dynamic Server buffer overflow
- CVE-2023-28526 IBM Informix Dynamic Server buffer overflow
- CVE-2023-28525 IBM Engineering Requirements Management cross-site scripting
- CVE-2023-28523 IBM Informix Dynamic Server buffer overflow
- CVE-2023-28522 IBM API Connect improper access control
- CVE-2023-28520 IBM Planning Analytics Local cross-site scripting
- CVE-2023-2852 SQLi in SoftMed's SelfPatron