Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 377 of 430.
- CVE-2023-23985 WordPress Quiz Maker plugin <= 6.3.9.4 - Content Spoofing
- CVE-2023-23984 WordPress Bubble Menu – circle floating menu Plugin <= 3.0.1 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23983 WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23982 WordPress WPFrom Email Plugin <= 1.8.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23981 WordPress Conversational Forms for ChatBot Plugin <= 1.1.6 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23980 WordPress MailOptin Plugin <= 1.2.54.0 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2398 Icegram Engage < 3.1.12 - Reflected XSS
- CVE-2023-23979 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23978 WordPress WP Client Reports Plugin <= 1.0.16 is vulnerable to Sensitive Data Exposure
- CVE-2023-23977 WordPress Heateor Social Comments Plugin <= 1.6.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23976 WordPress RegistrationMagic plugin <= 5.1.9.2 - Arbitrary Price Change
- CVE-2023-23975 WordPress Quick Event Manager plugin <= 9.7.4 - Broken Access Control vulnerability
- CVE-2023-23974 WordPress Quick Event Manager Plugin <= 9.7.4 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23973 WordPress Contact Us page - Contact people LITE Plugin <= 3.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23972 WordPress Social Like Box and Page by WpDevArt Plugin <= 0.8.39 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23971 WordPress WP Time Slots Booking Form Plugin <= 1.1.81 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23970 WordPress Corsa Theme <= 1.5 is vulnerable to Arbitrary File Upload
- CVE-2023-2397 SourceCodester Simple Mobile Comparison Website cross site scripting
- CVE-2023-23969 Django contains Uncontrolled Resource Consumption via cached header
- CVE-2023-2396 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23958 Symantec Protection Engine Hash Leak Vulnerability
- CVE-2023-23957 Open Redirection Vulnerability in Symantec Identity Portal 14.4
- CVE-2023-23956 Cross-site scripting in Symantec SiteMinder WebAgent
- CVE-2023-23955 Server-side request forgery in Advanced Secure Gateway, Content Analysis
- CVE-2023-23954 Cross-site scripting in Advanced Secure Gateway, Content Analysis
- CVE-2023-23953 Privilege escalation in Advanced Secure Gateway, Content Analysis
- CVE-2023-23952 Command injection in Advanced Secure Gateway, Content Analysis
- CVE-2023-23951 Information disclosure in Symantec Identity Management And Governance
- CVE-2023-23950 Other in Symantec Identity Management And Governance
- CVE-2023-2395 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23949 Cross-site scripting in Symantec Identity Management And Governance
- CVE-2023-23948 ownCloud Android app vulnerable to SQL Injection
- CVE-2023-23947 Argo CD users with any cluster secret update access may update out-of-bounds cluster secrets
- CVE-2023-23946 Git's `git apply` overwriting paths outside the working tree
- CVE-2023-23944 Nexcloud Mail app temporarily stores cleartext password in database
- CVE-2023-23943 Blind SSRF via server URL input in the Nextcloud Mail app
- CVE-2023-23942 Self reflected HTML injection in Desktop client
- CVE-2023-23941 SwagPayPal payment not sent to PayPal correctly
- CVE-2023-23940 OpenZeppelin Contracts for Cairo is vulnerable to signature validation bypass
- CVE-2023-2394 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23939 Azure/setup-kubectl: Escalation of privilege vulnerability for v3 and lower
- CVE-2023-23938 Cross-site Scripting (XSS) through the name of a color of select box values in tuleap
- CVE-2023-23937 Missing file upload type validation in pimcore/pimcore
- CVE-2023-23936 CRLF Injection in Nodejs ‘undici’ via host
- CVE-2023-23935 Presence of restricted personal Discourse messages may be leaked if tagged with a tag
- CVE-2023-23934 Wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass
- CVE-2023-23933 Issue in Anomaly Detection with document and field level rules in numerical feature aggregations
- CVE-2023-23932 Specially crafted RTPS message may cause an OpenDDS application to crash
- CVE-2023-23931 Cipher.update_into can corrupt memory in pyca cryptography
- CVE-2023-23930 vantage6's Pickle serialization is insecure
- CVE-2023-2393 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23929 Refresh tokens do not expire in Vantage6
- CVE-2023-23928 reason-jose ignores signature checks
- CVE-2023-23927 Craft CMS stored cross-site scripting vulnerability
- CVE-2023-23926 XML External Entity (XXE) vulnerability in apoc.import.graphml
- CVE-2023-23925 Switcher Client contains Regular Expression Denial of Service (ReDoS)
- CVE-2023-23924 URI validation failure on SVG parsing in Dompdf
- CVE-2023-23923 Moodle: possible to set the preferred "start page" of other users
- CVE-2023-23922 Moodle: reflected xss risk in blog search
- CVE-2023-23921 Moodle: reflected xss risk in some returnurl parameters
- CVE-2023-23920 Other in Node
- CVE-2023-2392 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23919 Other in Node
- CVE-2023-23918 Security feature bypass in Node
- CVE-2023-23917 Code injection in Rocket.chat
- CVE-2023-23916 Denial of service in https://github.com/curl/curl
- CVE-2023-23915 Race condition in https://github.com/curl/curl
- CVE-2023-23914 Security feature bypass in https://github.com/curl/curl
- CVE-2023-23913 rails-ujs vulnerable to DOM Based Cross-site Scripting contenteditable HTML Elements
- CVE-2023-23912 Code injection in Ubiquiti EdgeRouter(s) and USG(s)
- CVE-2023-23911 Missing authorization in Rocket.Chat
- CVE-2023-23910 Memory corruption in Intel(R) Trace Analyzer and Collector software
- CVE-2023-2391 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23909 Memory corruption in Intel(R) Trace Analyzer and Collector software
- CVE-2023-23908 Missing authorization in 3rd Generation Intel(R) Xeon(R) Scalable processors
- CVE-2023-23907 Path traversal in MilesightVPN
- CVE-2023-23906 Missing authorization in SkyBridge MB-A100/110
- CVE-2023-23904 Null dereference in UEFI firmware for some Intel(R) Processors
- CVE-2023-23903 DoS via SAML configuration in Guardian/CMC before 22.6.2
- CVE-2023-23902 Memory corruption in UR32L
- CVE-2023-23901 Security feature bypass in SkyBridge MB-A200 and SkyBridge BASIC MB-A130
- CVE-2023-23900 WordPress Easy Forms for Mailchimp Plugin <= 6.8.8 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-2390 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23899 WordPress Extensions For CF7 Plugin <= 2.0.8 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23898 WordPress Blocksy Companion Plugin <= 1.8.67 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23897 WordPress Simple Mobile URL Redirect Plugin <= 1.7.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-23896 WordPress URL Shortener by MyThemeShop Plugin <= 1.0.17 is vulnerable to Broken Access Control
- CVE-2023-23895 WordPress WP Time Slots Booking Form plugin <= 1.1.82 - Broken Access Control vulnerability
- CVE-2023-23894 WordPress Surbma | GDPR Proof Cookie Consent & Notice Bar Plugin <= 17.5.3 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23893 WordPress Simple Giveaways plugin <= 2.48.0 - Broken Access Control vulnerability
- CVE-2023-23892 WordPress M Chart Plugin <= 1.9.4 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23891 WordPress Ocean Extra Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23890 WordPress WP Airbnb Review Slider Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)
- CVE-2023-2389 Netgear SRX5308 Web Management Interface cross site scripting
- CVE-2023-23889 WordPress Quick Paypal Payments Plugin <= 5.7.25 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23888 WordPress Rank Math SEO plugin <= 1.0.107.2 - Local File Inclusion vulnerability
- CVE-2023-23887 WordPress Easy Google Analytics for WordPress plugin <= 1.6.0 - Broken Access Control vulnerability
- CVE-2023-23886 WordPress WP-RecentComments plugin <= 2.2.7 - Broken Access Control vulnerability
- CVE-2023-23885 WordPress Quick Contact Form Plugin <= 8.0.3.1 is vulnerable to Cross Site Scripting (XSS)
- CVE-2023-23884 WordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)