Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 350 of 430.
- CVE-2023-27424 WordPress Inactive User Deleter Plugin <= 1.59 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27423 WordPress Auto Prune Posts Plugin <= 1.8.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27422 WordPress NS Coupon to Become Customer Plugin <= 1.2.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27421 WordPress Everest News Theme <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27420 WordPress Arya Multipurpose Theme <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2742 AI ChatBot < 4.5.5 - Admin+ Stored Cross-Site Scripting
- CVE-2023-27419 WordPress Viable blog Theme <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27418 WordPress Side Menu Lite Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27417 WordPress Affiliate Super Assistent Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-27416 WordPress Decon WP SMS Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27415 WordPress LetterPress Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27414 WordPress Popup box Plugin <= 3.4.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27413 WordPress W4 Post List Plugin <= 2.4.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27412 WordPress Mocho Blog Theme <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-27411 SQL injection in RUGGEDCOM CROSSBOW
- CVE-2023-27410 Memory corruption in SCALANCE LPE9403
- CVE-2023-27409 Path traversal in SCALANCE LPE9403
- CVE-2023-27408 Misconfiguration in SCALANCE LPE9403
- CVE-2023-27407 Command injection in SCALANCE LPE9403
- CVE-2023-27406 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27405 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27404 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27403 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27402 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27401 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27400 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-2740 SourceCodester Guest Management System GET Parameter dateTest.php cross site scripting
- CVE-2023-27399 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27398 Memory corruption in Tecnomatix Plant Simulation
- CVE-2023-27397 File upload in MicroEngine Mailform
- CVE-2023-27396 Auth bypass in Multiple OMRON products which implement FINS protocol
- CVE-2023-27395 Memory corruption in SoftEther VPN
- CVE-2023-27394 CVE-2023-27394
- CVE-2023-27392 Misconfiguration in Intel(R) Support android application
- CVE-2023-27391 Privilege escalation in Intel(R) oneAPI Toolkit and component software installers
- CVE-2023-27390 Memory corruption in Diagon
- CVE-2023-2739 Gira HomeServer hslist cross site scripting
- CVE-2023-27389 Weak cryptography in CONPROSYS IoT Gateway products
- CVE-2023-27388 Auth bypass in T&D Corporation and ESPEC MIC CORP. data logger products
- CVE-2023-27387 Cross-site request forgery in T&D Corporation and ESPEC MIC CORP. data logger products
- CVE-2023-27386 Privilege escalation in Intel(R) Pathfinder for RISC-V software
- CVE-2023-27385 Memory corruption in CX-Drive All models
- CVE-2023-27384 Missing authorization in Cybozu Garoon
- CVE-2023-27383 Security feature bypass in Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software
- CVE-2023-27382 Misconfiguration in Intel(R) NUC P14E Laptop Element software for Windows 10
- CVE-2023-27380 Command injection in Surf SOHO HW1
- CVE-2023-2738 Tongda OA GatewayController.php actionGetdata unrestricted upload
- CVE-2023-27379 Use after free in Foxit Reader
- CVE-2023-27378 BIG-IP TMUI XSS vulnerability
- CVE-2023-27377 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27376 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27375 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-27373 Other in insyde:insydeh2o
- CVE-2023-27372 Deserialization in debian:debian linux
- CVE-2023-27371 Memory corruption in gnu:libmicrohttpd
- CVE-2023-27370 NETGEAR RAX30 Device Configuration Cleartext Storage Information Disclosure Vulnerability
- CVE-2023-2737 Improper securing of log directory may allow a denial of service
- CVE-2023-27369 NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
- CVE-2023-27368 NETGEAR RAX30 soap_serverd Stack-based Buffer Overflow Authentication Bypass Vulnerability
- CVE-2023-27367 NETGEAR RAX30 libcms_cli Command Injection Remote Code Execution Vulnerability
- CVE-2023-27366 Foxit PDF Reader Doc Object Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-27365 Foxit PDF Editor DOC File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2023-27364 Foxit PDF Editor XLS File Parsing Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2023-27363 Foxit PDF Reader exportXFAData Exposed Dangerous Method Remote Code Execution Vulnerability
- CVE-2023-27362 3CX Uncontrolled Search Path Local Privilege Escalation Vulnerability
- CVE-2023-27361 NETGEAR RAX30 rex_cgi JSON Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-27360 NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability
- CVE-2023-2736 Groundhogg <= 2.7.9.8 - Cross-Site Request Forgery to Privilege Escalation
- CVE-2023-27359 TP-Link AX1800 hotplugd Firewall Rule Race Condition Vulnerability
- CVE-2023-27358 NETGEAR RAX30 SOAP Request SQL Injection Remote Code Execution Vulnerability
- CVE-2023-27357 NETGEAR RAX30 GetInfo Missing Authentication Information Disclosure Vulnerability
- CVE-2023-27356 NETGEAR RAX30 logCtrl Command Injection Remote Code Execution Vulnerability
- CVE-2023-27355 Memory corruption in One Speaker
- CVE-2023-27354 Integer overflow in One Speaker
- CVE-2023-27353 Memory corruption in One Speaker
- CVE-2023-27352 Use after free in One Speaker
- CVE-2023-27351 PaperCut NG/MF Improper Authentication
- CVE-2023-27350 PaperCut MF/NG Improper Access Control
- CVE-2023-2735 Groundhogg <= 2.7.9.8 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-27349 BlueZ Audio Profile AVRCP Improper Validation of Array Index Remote Code Execution Vulnerability
- CVE-2023-27348 PDF-XChange Editor TIF File Parsing Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-27347 G DATA Total Security Link Following Local Privilege Escalation Vulnerability
- CVE-2023-27346 TP-Link AX1800 Firmware Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-27345 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-27344 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-27343 PDF-XChange Editor EMF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-27342 PDF-XChange Editor EMF File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability
- CVE-2023-27341 PDF-XChange Editor TIF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-27340 PDF-XChange Editor PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-2734 MStore API <= 3.9.1 - Authentication Bypass
- CVE-2023-27339 PDF-XChange Editor PNG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
- CVE-2023-27338 PDF-XChange Editor TIF File Parsing Use-After-Free Information Disclosure Vulnerability
- CVE-2023-27337 PDF-XChange Editor PDF File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability
- CVE-2023-27336 Softing edgeConnector Siemens OPC UA Server Null Pointer Dereference Denial-of-Service Vulnerability
- CVE-2023-27335 Softing edgeAggregator Client Cross-Site Scripting Remote Code Execution Vulnerability
- CVE-2023-27334 Softing edgeConnector Siemens ConditionRefresh Resource Exhaustion Denial-of-Service Vulnerability
- CVE-2023-27333 TP-Link Archer AX21 tmpServer Command 0x422 Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-27332 TP-Link Archer AX21 tdpServer Logging Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2023-27331 Foxit PDF Reader Annotation Use-After-Free Remote Code Execution Vulnerability
- CVE-2023-27330 Foxit PDF Reader XFA Annotation Use-After-Free Remote Code Execution Vulnerability