Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 341 of 430.
- CVE-2023-28417 WordPress Dynamics 365 Integration plugin <= 1.3.12 - Broken Access Control vulnerability
- CVE-2023-28416 WordPress Chankhe theme <= 1.0.5 - Authenticated Arbitrary Plugin Activation vulnerability
- CVE-2023-28415 WordPress Side Cart Woocommerce (Ajax) Plugin <= 2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28414 WordPress ApexChat Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-28413 Path traversal in Snow Monkey Forms
- CVE-2023-28412 Information disclosure in OvrC Cloud
- CVE-2023-28411 Memory corruption in Intel(R) Server Board BMC firmware
- CVE-2023-28410 Memory corruption in Intel(R) i915 Graphics drivers for linux
- CVE-2023-2841 Advanced Local Pickup for WooCommerce <= 1.5.5 - Authenticated (Administrator+) SQL Injection
- CVE-2023-28409 File upload in MW WP Form
- CVE-2023-28408 Path traversal in MW WP Form
- CVE-2023-28407 Privilege escalation in Intel(R) XTU software
- CVE-2023-28406 BIG-IP Configuration utility vulnerability
- CVE-2023-28405 Privilege escalation in Intel(R) Distribution of OpenVINO(TM) Toolkit
- CVE-2023-28404 Memory corruption in Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers
- CVE-2023-28402 Privilege escalation in Intel(R) BIOS Guard firmware
- CVE-2023-28401 Memory corruption in Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers
- CVE-2023-28400 CVE-2023-28400
- CVE-2023-2840 NULL Pointer Dereference in gpac/gpac
- CVE-2023-28399 Misconfiguration in CONPROSYS HMI System (CHS)
- CVE-2023-28398 CVE-2023-28398
- CVE-2023-28397 Privilege escalation in Intel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-28396 Missing authorization in Intel(R) Thunderbol(TM) Controllers versions
- CVE-2023-28395 CVE-2023-28395
- CVE-2023-28394 Command injection in Beekeeper Studio
- CVE-2023-28393 Memory corruption in ImageGear
- CVE-2023-28392 Command injection in Wi-Fi AP UNIT
- CVE-2023-28391 Memory corruption in Cesium NET
- CVE-2023-28390 Privilege escalation in SR-7100VN
- CVE-2023-2839 Divide By Zero in gpac/gpac
- CVE-2023-28389 Misconfiguration in Intel(R) CSME installer software
- CVE-2023-28388 Privilege escalation in Intel(R) Chipset Device Software
- CVE-2023-28387 Hardcoded credentials in "NewsPicks" App for Android
- CVE-2023-28386 Security feature bypass in OvrC Cloud
- CVE-2023-28385 Privilege escalation in Intel(R) NUC Pro Software Suite for Windows
- CVE-2023-28384 CVE-2023-28384
- CVE-2023-28383 Privilege escalation in Intel(R) BIOS PPAM firmware
- CVE-2023-28382 Path traversal in ESS REC Agent Server Edition series
- CVE-2023-28381 Command injection in Surf SOHO HW1
- CVE-2023-28380 Privilege escalation in Intel(R) AI Hackathon software
- CVE-2023-2838 Out-of-bounds Read in gpac/gpac
- CVE-2023-28379 Memory corruption in Cesium NET
- CVE-2023-28378 Privilege escalation in Intel(R) QAT drivers for Windows - HW Version 2.0
- CVE-2023-28377 Auth bypass in Intel(R) NUC Kit NUC11PH USB firmware installation software
- CVE-2023-28376 Memory corruption in Intel(R) E810 Ethernet Controllers and Adapters
- CVE-2023-28375 CVE-2023-28375
- CVE-2023-28374 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-28373 FlashArray SafeMode Immutable Vulnerability
- CVE-2023-28372 FlashBlade Object Store Privileged Access
- CVE-2023-28371 Path traversal in stellarium:stellarium
- CVE-2023-28370 Open redirect in Tornado
- CVE-2023-2837 Stack-based Buffer Overflow in gpac/gpac
- CVE-2023-28369 Missing authorization in Brother iPrint&Scan
- CVE-2023-28368 Hardcoded credentials in T2600G-28SQ
- CVE-2023-28367 Cross-site scripting in VK All in One Expansion Unit
- CVE-2023-28366 Denial of service in eclipse:mosquitto
- CVE-2023-28365 Command injection in UniFi Network application
- CVE-2023-28364 Open redirect in Brave Browser Android
- CVE-2023-28362 Actionpack has possible cross-site scripting vulnerability via User Supplied Values to redirect_to
- CVE-2023-28361 Cross-site request forgery in UniFi OS
- CVE-2023-28360 Security feature bypass in https://laptop-updates.brave.com/latest/winx64
- CVE-2023-2836 CRM Perks Forms <= 1.1.1 - Authenticated (Admin+) Stored Cross-Site Scripting
- CVE-2023-28359 SQL injection in Rocket.Chat
- CVE-2023-28358 Cross-site scripting in Rocket.Chat
- CVE-2023-28357 Information disclosure in Rocket.Chat
- CVE-2023-28356 Denial of service in Rocket.Chat
- CVE-2023-28354 An issue was discovered in Opsview Monitor Agent 6.8.
- CVE-2023-28353 File upload in faronics:insight
- CVE-2023-28352 Auth bypass in faronics:insight
- CVE-2023-28351 Information disclosure in faronics:insight
- CVE-2023-28350 Cross-site scripting in faronics:insight
- CVE-2023-2835 WP Directory Kit <= 1.2.3 - Reflected Cross-Site Scripting via 'search'
- CVE-2023-28349 Privilege escalation in faronics:insight
- CVE-2023-28348 Weak cryptography in faronics:insight
- CVE-2023-28347 Cross-site scripting in faronics:insight
- CVE-2023-28346 Security feature bypass in faronics:insight
- CVE-2023-28345 Information disclosure in faronics:insight
- CVE-2023-28344 Missing authorization in faronics:insight
- CVE-2023-28343 Command injection in apsystems:energy communication unit firmware
- CVE-2023-28342 Denial of service in zohocorp:manageengine adselfservice plus
- CVE-2023-28341 Cross-site scripting in zohocorp:manageengine applications manager
- CVE-2023-28340 XML external entity in zohocorp:manageengine applications manager
- CVE-2023-2834 BookIt <= 2.3.7 - Authentication Bypass
- CVE-2023-28339 Privilege escalation in opendoas project:opendoas
- CVE-2023-28338 Denial of service in NETGEAR Nighthawk WiFi6 Router (RAX30)
- CVE-2023-28337 File upload in NETGEAR Nighthawk WiFi6 Router (RAX30)
- CVE-2023-28336 Moodle: teacher can access names of users they do not have permission to access
- CVE-2023-28335 Moodle: csrf risk in resetting all templates of a database activity
- CVE-2023-28334 Moodle: users' name enumeration possible via idor on learning plans page
- CVE-2023-28333 Moodle: pix helper potential mustache code injection risk
- CVE-2023-28332 Moodle: algebra filter xss when filter is misconfigured
- CVE-2023-28331 Moodle: xss risk when outputting database activity filter data
- CVE-2023-28330 Moodle: authenticated arbitrary file read through malformed backup file
- CVE-2023-2833 ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation
- CVE-2023-28329 Moodle: authenticated sql injection via availability check
- CVE-2023-28328 Null dereference in Linux
- CVE-2023-28327 Null dereference in Linux
- CVE-2023-28326 Apache OpenMeetings: allows user impersonation
- CVE-2023-28325 Missing authorization in Rocket.Chat
- CVE-2023-28324 Other in Ivanti Endpoint Manager