Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 376 of 430.
- CVE-2023-2411 SourceCodester AC Repair and Services System view_inquiry.php sql injection
- CVE-2023-24108 Supply chain in zetacomponents:mvctools
- CVE-2023-24107 Supply chain in hour of code python 2015 project:hour of code python 2015
- CVE-2023-24104 Security feature bypass in ui:unifi dream machine pro firmware
- CVE-2023-2410 SourceCodester AC Repair and Services System view_booking.php sql injection
- CVE-2023-24099 Memory corruption in trendnet:tew-820ap firmware
- CVE-2023-24098 Memory corruption in trendnet:tew-820ap firmware
- CVE-2023-24097 Memory corruption in trendnet:tew-820ap firmware
- CVE-2023-24096 Memory corruption in trendnet:tew-820ap firmware
- CVE-2023-24095 Memory corruption in trendnet:tew-820ap firmware
- CVE-2023-24094 Memory corruption in mikrotik:routeros
- CVE-2023-24093 Auth bypass in h3c:a210-g firmware
- CVE-2023-2409 SourceCodester AC Repair and Services System view_service.php sql injection
- CVE-2023-24086 Cross-site scripting in slims project:slims
- CVE-2023-24084 SQL injection in chikoi project:chikoi
- CVE-2023-24081 Cross-site scripting in go-redrock:tutortrac
- CVE-2023-24080 Auth bypass in chamberlain:myq
- CVE-2023-2408 SourceCodester AC Repair and Services System view.php sql injection
- CVE-2023-24078 Code injection in realtimelogic:fuguhub
- CVE-2023-24070 Cross-site scripting in misp-project:misp
- CVE-2023-2407 Cross-site request forgery in Event Registration Calendar By vcita
- CVE-2023-24069 Information disclosure in signal:signal-desktop
- CVE-2023-24068 Security feature bypass in signal:signal-desktop
- CVE-2023-24065 Cross-site scripting in nosh chartingsystem project:nosh chartingsystem
- CVE-2023-24064 Security feature bypass in dieboldnixdorf:vynamic security suite
- CVE-2023-24063 Security feature bypass in dieboldnixdorf:vynamic security suite
- CVE-2023-24062 Security feature bypass in dieboldnixdorf:vynamic security suite
- CVE-2023-24060 Server-side request forgery in havenweb:haven
- CVE-2023-2406 Cross-site scripting in Event Registration Calendar By vcita
- CVE-2023-24059 Code injection in rockstargames:grand theft auto v
- CVE-2023-24058 Missing authorization in twinkletoessoftware:booked
- CVE-2023-24057 MITM based Zip Slip in `ca.uhn.hapi.fhir:org.hl7.fhir.core`
- CVE-2023-24056 Denial of service in pkgconf:pkgconf
- CVE-2023-24055 Information disclosure in keepass:keepass
- CVE-2023-24052 Auth bypass in connectize:ac21000 g6 firmware
- CVE-2023-24051 Auth bypass in connectize:ac21000 g6 firmware
- CVE-2023-24050 Cross-site scripting in connectize:ac21000 g6 firmware
- CVE-2023-2405 CRM and Lead Management by vcita <= 2.7.0 - Cross-Site Request Forgery to Stored Cross-Site Scripting
- CVE-2023-24049 Privilege escalation in connectize:ac21000 g6 firmware
- CVE-2023-24048 Cross-site request forgery in connectize:ac21000 g6 firmware
- CVE-2023-24047 Weak cryptography in connectize:ac21000 g6 firmware
- CVE-2023-24046 Command injection in connectize:ac21000 g6 firmware
- CVE-2023-24045 Missing authorization in dataiku:data science studio
- CVE-2023-24044 Open redirect in plesk:obsidian
- CVE-2023-24042 Race condition in hfiref0x:lightftp
- CVE-2023-24040 Other in opengroup:common desktop environment
- CVE-2023-2404 CRM and Lead Management by vcita <= 2.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
- CVE-2023-24039 Memory corruption in opengroup:common desktop environment
- CVE-2023-24038 Denial of service in debian:debian linux
- CVE-2023-24035 Weak cryptography in Nagios XI
- CVE-2023-24034 Open redirect in Nagios XI
- CVE-2023-24033 Denial of service in samsung:exynos 1080 firmware
- CVE-2023-24032 Command injection in zimbra:collaboration
- CVE-2023-24031 Cross-site scripting in zimbra:collaboration
- CVE-2023-24030 Open redirect in zimbra:collaboration
- CVE-2023-24029 Privilege escalation in progress:ws ftp server
- CVE-2023-24028 Missing authorization in misp-project:misp
- CVE-2023-24027 Cross-site scripting in misp-project:misp
- CVE-2023-24026 Cross-site scripting in misp-project:misp
- CVE-2023-24025 Weak cryptography in pqclean project:pqclean
- CVE-2023-24023 Weak cryptography in bluetooth:bluetooth core specification
- CVE-2023-24022 Hard Coded Credential Crypt Vulnerability
- CVE-2023-24021 Security feature bypass in debian:debian linux
- CVE-2023-24020 Security feature bypass in Wattbox WB-300-IP-3
- CVE-2023-2402 Photo Gallery Slideshow & Masonry Tiled Gallery <= 1.0.13 - Reflected Cross-Site Scripting
- CVE-2023-24019 Memory corruption in UR32L
- CVE-2023-24018 Memory corruption in UR32L
- CVE-2023-24016 Privilege escalation in Intel(R) Quartus(R) Prime Pro and Standard edition software for linux
- CVE-2023-24015 Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
- CVE-2023-24014 Delta Electronics CNCSoft-B DOPSoft Heap-based buffer overflow
- CVE-2023-24012 Data Distribution Service (DDS) Chain of Trust (CoT) violation vulnerability in Open DDS
- CVE-2023-24011 Data Distribution Service (DDS) Chain of Trust (CoT) violation vulnerability in Cyclone DDS
- CVE-2023-24010 Data Distribution Service (DDS) Chain of Trust (CoT) violation in Fast DDS
- CVE-2023-2401 Qubotchat < 1.1.6 – Admin+ Stored XSS
- CVE-2023-24009 WordPress Upfrontwp Theme <= 1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-24008 WordPress Maspik – Spam blacklist Plugin <= 0.7.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-24007 WordPress Admin Block Country Plugin <= 7.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-24006 Cross-site scripting in WP Terms Popup
- CVE-2023-24005 WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-24004 WordPress Image and Video Lightbox, Image PopUp Plugin <= 2.1.5 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-24003 WordPress WP Popups Plugin <= 2.1.4.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-24002 WordPress YouTube Embed, Playlist and Popup by WpDevArt Plugin <= 2.6.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-24001 WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-24000 WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection
- CVE-2023-2400 Information disclosure in Server
- CVE-2023-23999 WordPress Google Analytics by Monster Insights Plugin <= 8.14.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23998 WordPress VikRentCar Plugin <= 1.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23997 WordPress Database Collation Fix Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23996 WordPress ProfilePress Plugin <= 4.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23995 WordPress TinyMCE Custom Styles Plugin <= 1.1.2 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23994 WordPress Auto Hide Admin Bar Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23993 WordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23992 WordPress AutomatorWP Plugin <= 2.5.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23991 WordPress Booking Calendar plugin <= 9.4.3 - SQL Injection
- CVE-2023-23990 WordPress Redirection for Contact Form 7 plugin <= 2.7.0 - Privilege Escalation vulnerability
- CVE-2023-2399 qubotchat < 1.1.6 - Unauthenticated Stored XSS
- CVE-2023-23989 WordPress RegistrationMagic plugin <= 5.1.9.2 - Content Injection
- CVE-2023-23988 WordPress My Tickets plugin <= 1.9.11 - Payment Bypass Vulnerability
- CVE-2023-23987 WordPress User Registration Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23986 WordPress Reviews and Rating – Google My Business plugin <= 4.14 - Broken Access Control vulnerability