Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 355 of 430.
- CVE-2023-26604 Privilege escalation in debian:debian linux
- CVE-2023-26603 JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions.
- CVE-2023-26602 Command injection in asus:asmb8-ikvm firmware
- CVE-2023-26601 Denial of service in zohocorp:manageengine assetexplorer
- CVE-2023-26600 Privilege escalation in zohocorp:manageengine assetexplorer
- CVE-2023-2660 SourceCodester Online Computer and Laptop Store view_categories.php sql injection
- CVE-2023-26599 Cross-site scripting in uniguest:tripleplay
- CVE-2023-26597 Controller DOS on sending error response
- CVE-2023-26596 Missing authorization in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-26595 Denial of service in Cybozu Garoon
- CVE-2023-26593 Information disclosure in CENTUM series
- CVE-2023-26592 Deserialization in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-26591 Denial of service in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-26590 Floating point exception in src/aiff.c
- CVE-2023-2659 SourceCodester Online Computer and Laptop Store view_product.php sql injection
- CVE-2023-26589 Use after free in Intel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-26588 Hardcoded credentials in BS-GSL and BS-GS series
- CVE-2023-26587 Privilege escalation in Intel(R) Easy Streaming Wizard software
- CVE-2023-26586 Denial of service in Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software
- CVE-2023-26585 Missing authorization in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-26584 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-26583 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-26582 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-26581 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-26580 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-2658 SourceCodester Online Computer and Laptop Store products.php sql injection
- CVE-2023-26579 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-26578 Arbitrary File Upload to Web Root In IDAttend’s IDWeb Application
- CVE-2023-26577 Stored Cross-site Scripting In IDAttend’s IDWeb Application
- CVE-2023-26576 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-26575 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-26574 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-26573 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-26572 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-26571 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-26570 Missing Authentication In IDAttend’s IDWeb Application
- CVE-2023-2657 SourceCodester Online Computer and Laptop Store products.php cross site scripting
- CVE-2023-26569 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-26568 Unauthenticated SQL Injection In IDAttend’s IDWeb Application
- CVE-2023-26567 Information disclosure in sangoma:freepbx linux 7
- CVE-2023-26566 Sangoma FreePBX 1805 through 2203 on Linux contains hardcoded credentials for the Asterisk REST Interface (ARI), which allows remote attacke
- CVE-2023-26564 Path traversal in syncfusion:ej2 aspcore file provider
- CVE-2023-26563 Path traversal in syncfusion:nodejs file system provider
- CVE-2023-26562 Missing authorization in zimbra:collaboration
- CVE-2023-26560 Information disclosure in northern.tech:cfengine
- CVE-2023-2656 SourceCodester AC Repair and Services System sql injection
- CVE-2023-26559 Path traversal in sync:oxygen content fusion
- CVE-2023-26557 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar arithmetic
- CVE-2023-26556 IO FinNet tss-lib vulnerable to timing attack from non-constant time scalar multiplication
- CVE-2023-26555 Memory corruption in ntp:ntp
- CVE-2023-26554 Memory corruption in ntp:ntp
- CVE-2023-26553 Memory corruption in ntp:ntp
- CVE-2023-26552 Memory corruption in ntp:ntp
- CVE-2023-26551 Memory corruption in ntp:ntp
- CVE-2023-26550 SQL injection in bmc:control-m
- CVE-2023-2655 Contact Form by WD <= 1.13.23 - Admin+ SQLi
- CVE-2023-26549 Other in EMUI
- CVE-2023-26548 Deserialization in EMUI
- CVE-2023-26547 Deserialization in EMUI
- CVE-2023-26546 Code injection in echa.europa:iuclid
- CVE-2023-26545 Memory corruption in debian:debian linux
- CVE-2023-26544 Use after free in linux:linux kernel
- CVE-2023-26543 WordPress WP Meteor Page Speed Optimization Topping Plugin <= 3.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26542 WordPress phpinfo() WP Plugin <= 4.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26541 WordPress asMember Plugin <= 1.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26540 WordPress Houzez theme <= 2.7.1 - Privilege Escalation
- CVE-2023-2654 Conditional Menus < 1.2.1 - Reflected XSS
- CVE-2023-26539 WordPress Advanced Text Widget Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26538 WordPress Chat Bee Plugin <= 1.1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26537 WordPress WP No External Links Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26536 WordPress Sp*tify Play Button for WordPress Plugin <= 2.05 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26535 WordPress Sheets To WP Table Live Sync Plugin <= 2.12.15 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26534 WordPress WP Repost Plugin <= 0.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26533 WordPress Zippy Plugin <= 1.6.1 is vulnerable to Sensitive Data Exposure
- CVE-2023-26532 WordPress Social Auto Poster Plugin <= 2.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26531 Cross-site request forgery in 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条
- CVE-2023-26530 WordPress Updraft Plugin <= 0.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2653 SourceCodester Lost and Found Information System index.php sql injection
- CVE-2023-26529 WordPress DupeOff Plugin <= 1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26528 WordPress Shipyaari Shipping Management Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26527 WordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26526 WordPress Bookly plugin <= 21.7.1 - Authenticated Arbitrary File Deletion vulnerability
- CVE-2023-26525 WordPress Dokan Plugin <= 3.7.12 is vulnerable to SQL Injection
- CVE-2023-26524 WordPress Quiz And Survey Master Plugin <= 8.0.10 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26523 WordPress Calculated Fields Form plugin <= 1.1.120 - Missing Authorization Leading To Feedback Submission Vulnerability
- CVE-2023-26522 WordPress WP Repost plugin <= 0.1 - Broken Access Control vulnerability
- CVE-2023-26521 WordPress Search in Place plugin <= 1.0.104 - Missing Authorization Leading To Feedback Submission vulnerability
- CVE-2023-26520 WordPress Advanced Text Widget plugin <= 2.1.2 - Broken Access Control vulnerability
- CVE-2023-2652 SourceCodester Lost and Found Information System sql injection
- CVE-2023-26519 WordPress Publish to Schedule Plugin <= 4.5.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26518 WordPress WP TFeed Plugin <= 1.6.9 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26517 WordPress Dashboard Widgets Suite Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26516 WordPress Debug Assistant Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26515 WordPress Simple Slug Translate Plugin <= 2.7.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-26514 WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-26513 Apache Sling Resource Merger: Requests to certain paths managed by the Apache Sling Resource Merger can lead to DoS
- CVE-2023-26512 Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data
- CVE-2023-26511 Hardcoded credentials in propius:machineselector
- CVE-2023-26510 Missing authorization in ghost:ghost
- CVE-2023-26509 Denial of service in anydesk:anydesk