Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 362 of 430.
- CVE-2023-25841 BUG-000158075 Stored XSS issue in ArcGIS Server
- CVE-2023-25840 BUG-000154070 Stored XSS issue in the ArcGIS REST Services directory
- CVE-2023-2584 PixelYourSite <= 9.3.6 and PixelYourSite Pro <= 9.6.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-25839 BUG-000157278 – ArcGIS Insights has a security vulnerability - desktop
- CVE-2023-25838 BUG-000157278 – ArcGIS Insights has a security vulnerability.
- CVE-2023-25837 BUG-000133088 - ArcGIS Enterprise site builder is subject to stored XSS.
- CVE-2023-25836 BUG-000135364 XSS in 10.8.1 sites builder iframe source
- CVE-2023-25835 BUG-000153659 ArcGIS Enterprise Sites has a stored XSS vulnerability
- CVE-2023-25834 BUG-000142922 Incomplete permission changes in specific cases.
- CVE-2023-25833 BUG-000155004 HTML injection issue in Portal for ArcGIS.
- CVE-2023-25832 BUG-000148346 There is a Cross-Site Request Forgery (CSRF) vulnerability in Portal for ArcGIS.
- CVE-2023-25831 BUG-000154236 There is a reflected cross-site scripting (XSS) vulnerability in Portal for ArcGIS.
- CVE-2023-25830 BUG-000154662 Reflected XSS vulnerability in Portal for ArcGIS
- CVE-2023-2583 Code Injection in jsreport/jsreport
- CVE-2023-25829 BUG-000155001 - Unvalidated redirect in Portal for ArcGIS.
- CVE-2023-25828 Authenticate Remote Code Execution in Pluck CMS
- CVE-2023-25827 Cross-site Scripting in OpenTSDB
- CVE-2023-25826 Remote Code Execution in OpenTSDB
- CVE-2023-25825 ZoneMinder contains Cross-site Scripting via log viewing
- CVE-2023-25824 mod_gnutls contains Infinite Loop on request read timeout
- CVE-2023-25823 Gradio contains Use of Hard-coded Credentials
- CVE-2023-25822 ReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements
- CVE-2023-25821 Nextcloud download permissions can be changed by resharer
- CVE-2023-25820 Nextcloud Server and Enterprise Server missing brute force protection on password confirmation modal
- CVE-2023-2582 Cross-site scripting in Strikingly
- CVE-2023-25819 Discourse tags with no visibility are leaking into og:article:tag
- CVE-2023-25818 Missing brute force protection on password reset token in Nextcloud Server
- CVE-2023-25817 Delete permissions are not saved when creating public share in Nextcloud server
- CVE-2023-25816 nextcloud vulnerable to Uncontrolled Resource Consumption
- CVE-2023-25815 Git looks for localized messages in the wrong place
- CVE-2023-25814 Arbitrary File Read Vulnerability in metersphere
- CVE-2023-25813 SQL Injection via replacements in sequelize
- CVE-2023-25812 Allowed DELETE on resources on object locked buckets under Governance mode in Minio
- CVE-2023-25811 Persistent Cross site scripting (XSS) in Uptime Kuma
- CVE-2023-25810 Persistent Cross site scripting (XSS) through description in status page in Uptime Kuma
- CVE-2023-25809 rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc
- CVE-2023-25807 DataEase dashboard has a stored XSS vulnerability
- CVE-2023-25806 Time discrepancy in authentication responses in OpenSearch
- CVE-2023-25805 versionn Command Injection Vulnerability
- CVE-2023-25804 Roxy-WI vulnerable to Limited Path Traversal in name parameter
- CVE-2023-25803 Path traversal in roxy-wi
- CVE-2023-25802 Roxy-WI has Path Traversal vulnerability
- CVE-2023-25801 TensorFlow has double free in Fractional(Max/Avg)Pool
- CVE-2023-25800 WordPress Tutor LMS Plugin <= 2.2.0 is vulnerable to SQL Injection
- CVE-2023-2580 AI-Engine < 1.6.83 - Admin+ Stored XSS
- CVE-2023-25799 WordPress Tutor LMS plugin <= 2.1.8 - Multiple Broken Access Control vulnerabilities
- CVE-2023-25798 WordPress Olevmedia Shortcodes Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25797 WordPress vSlider Multi Image Slider for WordPress Plugin <= 4.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25796 WordPress WP BaiDu Submit Plugin <= 1.2.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25795 WordPress Feed Changer Plugin <= 0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25794 WordPress Nooz Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25793 WordPress Link Juice Keeper Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25792 WordPress WP Open Social Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25791 WordPress Fontiran plugin <= 2.1 - Broken Access Control vulnerability
- CVE-2023-25790 WordPress WoodMart theme <= 7.0.4 - Unauth Arbitrary Shortcodes Injection
- CVE-2023-2579 InventoryPress <= 1.7 - Author+ Stored XSS
- CVE-2023-25789 WordPress Tapfiliate Plugin <= 3.0.12 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25788 WordPress Saphali Woocommerce Lite Plugin <= 1.8.13 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-25787 WordPress WP资源下载管理 Plugin <= 1.3.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25786 WordPress Eyes Only: User Access Shortcode Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25785 WordPress WP Post Rating plugin <= 2.5 - Vote Manipulation Vulnerability
- CVE-2023-25784 WordPress Sticky Ad Bar Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25783 WordPress FireCask Like & Share Button Plugin <= 1.1.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25782 WordPress Service Area Postcode Checker Plugin <= 2.0.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25781 WordPress Upload File Type Settings Plugin Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-25780 Status Internet Co.,Ltd. PowerBPM - Broken Access Control
- CVE-2023-2578 Buy Me a Coffee < 3.7 - Admin+ Stored XSS
- CVE-2023-25779 Privilege escalation in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-25777 Privilege escalation in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-25776 Information disclosure in Intel(R) Server Board BMC firmware
- CVE-2023-25775 Missing authorization in Intel(R) Ethernet Controller RDMA driver for linux
- CVE-2023-25774 Denial of service in SoftEther VPN
- CVE-2023-25773 Privilege escalation in Intel(R) Unite(R) Hub software installer for Windows
- CVE-2023-25772 Denial of service in Intel(R) Retail Edge Mobile Android application
- CVE-2023-25771 Missing authorization in Intel(R) NUC BIOS firmware
- CVE-2023-25770 Controller stack overflow on decoding messages from the server
- CVE-2023-25769 Denial of service in Intel(R) Thunderbolt(TM) DCH drivers for Windows
- CVE-2023-25768 Missing Authorization in Jenkins Azure Credentials Plugin
- CVE-2023-25767 Cross-Site Request Forgery in Jenkins Azure Credentials Plugin
- CVE-2023-25766 Missing Authorization in Jenkins Azure Credentials Plugin
- CVE-2023-25765 Sandbox escape in Jenkins Email Extension Plugin
- CVE-2023-25764 Cross-site Scripting in Jenkins Email Extension Plugin
- CVE-2023-25763 Cross-site Scripting in Jenkins Email Extension Plugin
- CVE-2023-25762 Cross-site Scripting in Jenkins Pipeline: Build Step Plugin
- CVE-2023-25761 Cross-site Scripting in Jenkins JUnit Plugin
- CVE-2023-25760 Missing authorization in uniguest:tripleplay
- CVE-2023-2576 Incorrect Authorization in GitLab
- CVE-2023-25759 Command injection in uniguest:tripleplay
- CVE-2023-25758 Weak cryptography in onekey:onekey mini firmware
- CVE-2023-25757 Privilege escalation in Intel(R) Unison(TM) software
- CVE-2023-25756 Memory corruption in Intel(R) Processors
- CVE-2023-25755 Memory corruption in Screen Creator Advance 2
- CVE-2023-25754 Apache Airflow: Privilege escalation using airflow logs
- CVE-2023-25753 Server-Side Request Forgery in Apache ShenYu
- CVE-2023-25752 Memory corruption in Firefox
- CVE-2023-25751 Memory corruption in Firefox
- CVE-2023-25750 Information disclosure in Firefox
- CVE-2023-2575 Authenticated Buffer Overflow
- CVE-2023-25749 Security feature bypass in Firefox
- CVE-2023-25748 Other in Firefox