Vulnerabilities published in 2023
42,916 vulnerabilities were published in 2023: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 412 of 430.
- CVE-2023-1932 Hibernate-validator: rendering of invalid html with safehtml leads to html injection and xss
- CVE-2023-1931 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'deleteCssAndJsCacheToolbar'
- CVE-2023-1930 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_clear_cache_of_allsites_callback'
- CVE-2023-1929 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_purgecache_varnish_callback'
- CVE-2023-1928 WP Fastest Cache <= 1.1.2 - Missing Authorization in 'wpfc_preload_single_callback'
- CVE-2023-1927 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCssAndJsCacheToolbar'
- CVE-2023-1926 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'deleteCacheToolbar'
- CVE-2023-1925 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_clear_cache_of_allsites_callback'
- CVE-2023-1924 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_toolbar_save_settings_callback'
- CVE-2023-1923 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_remove_cdn_integration_ajax_request_callback'
- CVE-2023-1922 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_pause_cdn_integration_ajax_request_callback'
- CVE-2023-1921 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_start_cdn_integration_ajax_request_callback'
- CVE-2023-1920 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_purgecache_varnish_callback'
- CVE-2023-1919 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_save_settings_callback'
- CVE-2023-1918 WP Fastest Cache <= 1.1.2 - Cross-Site Request Forgery via 'wpfc_preload_single_callback'
- CVE-2023-1917 PowerPress <= 10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
- CVE-2023-1916 Memory corruption in libtiff
- CVE-2023-1915 Thumbnail carousel slider < 1.1.10 - Reflected XSS
- CVE-2023-1913 Maps Widget for Google Maps <= 4.24 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-1912 Limit Login Attempts <= 1.7.1 - Unauthenticated Stored Cross-Site Scripting
- CVE-2023-1911 Blocksy Companion < 1.8.82 - Subscriber+ Draft Post Access
- CVE-2023-1910 Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint
- CVE-2023-1909 PHPGurukul BP Monitoring Management System User Profile Update profile.php sql injection
- CVE-2023-1908 SourceCodester Simple Mobile Comparison Website GET Parameter view_category.php sql injection
- CVE-2023-1907 Pgadmin: users authenticated simultaneously via ldap may be attached to the wrong session
- CVE-2023-1906 Memory corruption in ImageMagick
- CVE-2023-1905 WP Popups < 2.1.5.1 - Contributor+ Stored XSS
- CVE-2023-1904 Information disclosure in Octopus Server
- CVE-2023-1903 Missing Authorization check in SAP HCM Fiori App My Forms (Fiori 2.0)
- CVE-2023-1902 HCI Connection Creation Dangling State Reference Re-use
- CVE-2023-1901 HCI send_sync Dangling Semaphore Reference Re-use
- CVE-2023-1900 Integer overflow in Avira Antivirus
- CVE-2023-1899 CVE-2023-1899
- CVE-2023-1898 CVE-2023-1898
- CVE-2023-1897 CVE-2023-1897
- CVE-2023-1895 Getwid – Gutenberg Blocks <= 1.8.3 - Authenticated(Subscriber+) Server Side Request Forgery
- CVE-2023-1894 Denial of service in Puppet Enterprise
- CVE-2023-1893 Login Configurator <= 2.1 - Reflected Cross-Site Scripting
- CVE-2023-1892 Cross-site Scripting (XSS) - Reflected in sidekiq/sidekiq
- CVE-2023-1891 Accordion & FAQ < 1.9.9 - Reflected XSS
- CVE-2023-1890 Tablesome < 1.0.9 - Reflected XSS
- CVE-2023-1889 Missing authorization in Directorist: AI-Powered Business Directory, Listings & Classified Ads
- CVE-2023-1888 Directorist <= 7.5.4 - Authenticated (Subscriber+) Arbitrary User Password Reset to Privilege Escalation
- CVE-2023-1887 Business Logic Errors in thorsten/phpmyfaq
- CVE-2023-1886 Authentication Bypass by Capture-replay in thorsten/phpmyfaq
- CVE-2023-1885 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1884 Cross-site Scripting (XSS) - Generic in thorsten/phpmyfaq
- CVE-2023-1883 Improper Access Control in thorsten/phpmyfaq
- CVE-2023-1882 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq
- CVE-2023-1881 Cross-site Scripting (XSS) - Stored in microweber/microweber
- CVE-2023-1880 Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq
- CVE-2023-1879 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1878 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1877 Command Injection in microweber/microweber
- CVE-2023-1875 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq
- CVE-2023-1874 WP Data Access <= 5.3.7 - Authenticated (Subscriber+) Privilege Escalation
- CVE-2023-1873 SQLi in Bircard
- CVE-2023-1872 Use-after-free in Linux kernel's io_uring subsystem
- CVE-2023-1871 YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Reset
- CVE-2023-1870 YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Language Translation Update
- CVE-2023-1869 YourChannel <= 1.2.5 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-1868 YourChannel <= 1.2.3 - Missing Authorization to Plugin Cache Reset
- CVE-2023-1867 YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Settings Change
- CVE-2023-1866 YourChannel <= 1.2.4 - Cross-Site Request Forgery to Plugin Channel Reset
- CVE-2023-1865 YourChannel <= 1.2.3 - Missing Authorization to Plugin Settings Reset
- CVE-2023-1864 FANUC ROBOGUIDE-HandlingPRO Path Traversal
- CVE-2023-1863 SQLi in Eskom Computer Water Metering Software
- CVE-2023-1862 Remote access to warp-svc.exe in Cloudflare WARP
- CVE-2023-1861 Limit Login Attempts < 1.7.2 - Subscriber+ Stored XSS
- CVE-2023-1860 Keysight IXIA Hawkeye licenses cross site scripting
- CVE-2023-1859 Use after free in Kernel
- CVE-2023-1858 SourceCodester Earnings and Expense Tracker App index.php information disclosure
- CVE-2023-1857 SourceCodester Online Computer and Laptop Store cross site scripting
- CVE-2023-1856 SourceCodester Air Cargo Management System GET Parameter track_shipment.php sql injection
- CVE-2023-1855 Use after free in Kernel
- CVE-2023-1854 SourceCodester Online Graduate Tracer System session expiration
- CVE-2023-1853 SourceCodester Online Payroll System employee_edit.php cross site scripting
- CVE-2023-1852 SourceCodester Online Payroll System deduction_edit.php cross site scripting
- CVE-2023-1851 SourceCodester Online Payroll System employee_add.php cross site scripting
- CVE-2023-1850 SourceCodester Online Payroll System login.php sql injection
- CVE-2023-1849 SourceCodester Online Payroll System cashadvance_row.php sql injection
- CVE-2023-1848 SourceCodester Online Payroll System attendance_row.php sql injection
- CVE-2023-1847 SourceCodester Online Payroll System attendance.php sql injection
- CVE-2023-1846 SourceCodester Online Payroll System deduction_row.php sql injection
- CVE-2023-1845 SourceCodester Online Payroll System employee_row.php sql injection
- CVE-2023-1844 Subscribe2 <= 10.40 - Missing Authorization
- CVE-2023-1843 Metform Elementor Contact Form Builder <= 3.3.0 - Missing Authorization
- CVE-2023-1841 Honeywell MPA2 Web Application XSS vulnerability
- CVE-2023-1840 Sp*tify Play Button for WordPress <= 2.07 - Authenticated (Administrator+) Stored Cross-Site Scripting
- CVE-2023-1839 Product Addons & Fields for WooCommerce < 32.0.6 - Admin+ Stored Cross-Site Scripting
- CVE-2023-1838 Use after free in Kernel
- CVE-2023-1837 Auth bypass in HYPR Server
- CVE-2023-1836 Cross-site scripting in GitLab
- CVE-2023-1835 Ninja Forms < 3.6.22 - Reflected XSS
- CVE-2023-1834 Rockwell Automation Kinetix 5500 Vulnerable to Open Port Exploitation
- CVE-2023-1833 Authentication Bypass in Redline Router
- CVE-2023-1832 Improper authorization check in the server component
- CVE-2023-1831 User password logged in audit logs
- CVE-2023-1829 Use-after-free in tcindex (traffic control index filter) in the Linux Kernel
- CVE-2023-1827 SourceCodester Centralized Covid Vaccination Records System GET Parameter manage_location.php sql injection