Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 348 of 430.
- CVE-2023-27628 WordPress Sitekit Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27627 WordPress Woocommerce Email Report Plugin <= 2.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27626 WordPress Stock Ticker plugin <= 3.23.0 - Broken Access Control vulnerability
- CVE-2023-27625 WordPress Site Reviews plugin <= 6.5.0 - Broken Access Control vulnerability
- CVE-2023-27624 WordPress Redirect After Login Plugin <= 0.1.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27623 WordPress WP Page Numbers Plugin <= 0.5 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27622 WordPress GuruWalk Affiliates Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27621 WordPress Livestream Notice Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27620 WordPress Robo Gallery Plugin <= 3.2.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2762 Use after free in SOLIDWORKS Desktop
- CVE-2023-27619 WordPress Regina Lite Theme <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27618 WordPress Store Locator WordPress Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27617 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27616 WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27615 WordPress WP Super Minify Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27614 WordPress Motor Racing League Plugin <= 1.9.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27613 WordPress Forms Ada Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27612 WordPress Site Reviews Plugin <= 6.5.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27611 WordPress Reusable Blocks Extended Plugin <= 0.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27610 WordPress Transbank Webpay REST Plugin <= 1.6.6 is vulnerable to SQL Injection
- CVE-2023-2761 User Activity Log < 1.6.3 - Admin+ SQL Injection
- CVE-2023-27609 WordPress WP Roles at Registration plugin <= 0.23 - Cross Site Scripting (XSS) vulnerability
- CVE-2023-27608 WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Broken Access Control vulnerability
- CVE-2023-27607 WordPress Points and Rewards for WooCommerce plugin <= 1.5.0 - Settings Change vulnerability
- CVE-2023-27606 WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27605 WordPress WP Reroute Email Plugin <= 1.4.6 is vulnerable to SQL Injection
- CVE-2023-27604 Apache Airflow Sqoop Provider: Airflow Sqoop Provider RCE Vulnerability
- CVE-2023-27603 Apache Linkis Mangaer module engineConn material upload exists Zip Slip issue
- CVE-2023-27602 Apache Linkis publicsercice module unrestricted upload of file
- CVE-2023-27601 OpenSIPS has vulnerability in the codec_delete_XX() functions
- CVE-2023-27600 OpenSIPS has vulnerability in the codec_delete_XX() functions
- CVE-2023-2760 TAPHOME SQL Injection in Core Platform
- CVE-2023-27599 OpenSIPS has vulnerability in the parse_to_param() function
- CVE-2023-27598 OpenSIPS has vulnerability in the parse_via() function
- CVE-2023-27597 OpenSIPS has vulnerability in the parse_uri() function
- CVE-2023-27596 OpenSIPS has vulnerability in the codec_delete_XX() functions
- CVE-2023-27595 Cilium eBPF filters may be temporarily removed during agent restart
- CVE-2023-27594 Cilium vulnerable to potential network policy bypass when routing IPv6 traffic
- CVE-2023-27593 cilium-agent container can access the host via `hostPath` mount
- CVE-2023-27592 Stored XSS in Miniflux when opening a broken image due to unescaped ServerError in proxy handler
- CVE-2023-27591 Unauthenticated Miniflux user can bypass allowed networks check to obtain Prometheus metrics
- CVE-2023-27590 Rizin has stack-based buffer overflow when parsing GDB registers profile files
- CVE-2023-2759 TAPHOME Improper Authentication in Core Platform
- CVE-2023-27589 Minio vulnerable to denial of access by an admin privileged user for root credential
- CVE-2023-27588 Unauthenticated path traversal vulnerability in Hasura GraphQL Engine
- CVE-2023-27587 Information disclosure in readtomyshoe
- CVE-2023-27586 CairoSVG improperly processes SVG files loaded from external resources
- CVE-2023-27585 Memory corruption in pjproject
- CVE-2023-27584 Dragonfly2 vulnerable to hard coded cyptographic key
- CVE-2023-27583 Panindex uses hard coded cyptographic key
- CVE-2023-27582 Full authentication bypass if SASL authorization username is specified
- CVE-2023-27581 github-slug-action vulnerable to arbitrary code execution
- CVE-2023-27580 CodeIgniter Shield Password Shucking Vulnerability
- CVE-2023-2758 Contec CONPROSYS HMI System (CHS) v3.5.2 Denial of Service
- CVE-2023-27579 TensorFlow has Floating Point Exception in TFLite in conv kernel
- CVE-2023-27578 Galaxy vulnerable to unauthorized modification of pages/visualizations due to insufficient permission check
- CVE-2023-27577 Path Traversal Vulnerability in `LESS` Parser allows reading of sensitive server files in flarum
- CVE-2023-27576 Missing authorization in phplist:phplist
- CVE-2023-27574 Security feature bypass in shadowsocks:shadowsocksx-ng
- CVE-2023-27573 Hardcoded credentials in netbox-docker
- CVE-2023-27572 Cross-site scripting in commscope:dg3450 firmware
- CVE-2023-27571 Missing authorization in commscope:dg3450 firmware
- CVE-2023-27570 SQL injection in prestashop:eo tags
- CVE-2023-2757 Missing authorization in Waiting: One-click countdowns
- CVE-2023-27569 SQL injection in prestashop:eo tags
- CVE-2023-27568 SQL injection in spryker:commerce os
- CVE-2023-27567 Denial of service in openbsd:openbsd
- CVE-2023-27566 Memory corruption in live2d:cubism editor
- CVE-2023-27564 n8n Information Disclosure vulnerability
- CVE-2023-27563 n8n Privilege Escalation vulnerability
- CVE-2023-27562 n8n Directory Traversal vulnerability
- CVE-2023-27561 Opencontainers runc Incorrect Authorization vulnerability
- CVE-2023-27560 phpseclib Infinite Loop vulnerability
- CVE-2023-2756 SQL Injection in pimcore/customer-data-framework
- CVE-2023-27559 IBM Db2 denial of service
- CVE-2023-27558 IBM Db2 privilege escalation
- CVE-2023-27557 IBM Safter Payments information disclosure
- CVE-2023-27556 IBM Safer Payments denial of service
- CVE-2023-27555 IBM Db2 denial of service
- CVE-2023-27554 IBM WebSphere Application Server XML external entity injection
- CVE-2023-27545 IBM Watson CloudPak for Data Data Stores information disclosure
- CVE-2023-27540 IBM Watson CP4D Data Stores denial of service
- CVE-2023-2754 Plaintext transmission of DNS requests in Windows 1.1.1.1 WARP client
- CVE-2023-27539 Possible Denial of Service Vulnerability in Rack's header parsing
- CVE-2023-27538 Auth bypass in https://github.com/curl/curl
- CVE-2023-27537 Memory corruption in https://github.com/curl/curl
- CVE-2023-27536 Auth bypass in https://github.com/curl/curl
- CVE-2023-27535 Auth bypass in https://github.com/curl/curl
- CVE-2023-27534 Path traversal in https://github.com/curl/curl
- CVE-2023-27533 Command injection in https://github.com/curl/curl
- CVE-2023-27532 Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function
- CVE-2023-27531 Kredis JSON Possible Deserialization of Untrusted Data Vulnerability
- CVE-2023-27530 Rack has possible DoS Vulnerability in Multipart MIME parsing
- CVE-2023-2753 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-27529 Privilege escalation in Wacom Tablet Driver installer
- CVE-2023-27527 XML external entity in Shinseiyo Sogo Soft
- CVE-2023-27526 Apache Superset: Improper Authorization check on import charts
- CVE-2023-27525 Apache Superset: Incorrect default permissions for Gamma role
- CVE-2023-27524 Apache Superset Insecure Default Initialization of Resource
- CVE-2023-27523 Apache Superset: Improper data permission validation on Jinja templated queries