CVE-2023 records published in January 2023
This page lists the 731 CVE-2023 records published in January 2023, newest first. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists five of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 729.8% of these records
- Listed in CISA KEV
- 50.7% of these records
- Reported exploited
- 00.0% of these records
- Detection signal
- 172.3% of these records
- Exploit code
- 364.9% of these records
- Actionable vendor fix
- 62084.8% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in January 2023 have had from about 45 months to about 46 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-24829 | Apache IoTDB Workbench: Apache/iotdb-web-workbench: Forge the JWTToken to access workbench | 8.8v3.1 | 1.2% | 2023-01-31 | Fix |
| CVE-2023-24163 | Dromara Hutool vulnerable to SQL injection | 9.8v3.1 | 1.4% | 2023-01-31 | Fix |
| CVE-2023-24162 | Dromara Hutool deserialization of untrusted data | 9.8v3.1 | 1.3% | 2023-01-31 | |
| CVE-2023-22900 | Thinking Software Technology Co., Ltd. Efence SQL injection | 9.8CNA v3.1 | 1.0% | 2023-01-31 | Fix |
| CVE-2023-22611 | Schneider Electric EcoStruxure Geo SCADA Expert 2019 information disclosure | 7.5CNA v3.1 | 0.6% | 2023-01-31 | Fix |
| CVE-2023-22610 | Schneider Electric EcoStruxure Geo SCADA Expert 2019 incorrect authorization | 9.1CNA v3.1 | 0.6% | 2023-01-31 | Fix |
| CVE-2023-0593 | Path traversal in yaffshiv | 5.5NVD v3.1 | 0.4% | 2023-01-31 | |
| CVE-2023-0592 | Path traversal in jefferson | 5.5NVD v3.1 | 0.4% | 2023-01-31 | Fix |
| CVE-2023-0591 | Path traversal in ubi_reader | 5.5NVD v3.1 | 0.4% | 2023-01-31 | Fix |
| CVE-2023-24830 | Apache IoTDB Workbench: Apache/iotdb-web-workbench: Create a user without authorization | 7.5v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2023-24623 | Paranoidhttp server-side request forgery | 7.5v3.1 | 0.7% | 2023-01-30 | Fix |
| CVE-2023-24622 | Safeurl-python contains server-side request forgery | 5.3v3.1 | 0.6% | 2023-01-30 | Fix |
| CVE-2023-24612 | Pdfbook command injection | 9.8v3.1 | 1.3% | 2023-01-30 | |
| CVE-2023-24020 | Snap One Wattbox WB-300-IP-3 missing brute-force protection | 9.8v3.1 | 0.6% | 2023-01-30 | Fix |
| CVE-2023-23582 | Snap One Wattbox WB-300-IP-3 heap-based buffer overflow | 9.8v3.1 | 0.8% | 2023-01-30 | Fix |
| CVE-2023-22389 | Snap One Wattbox WB-300-IP-3 plaintext password storage | 6.5v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-22333 | First Net Japan EasyMail cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-22332 | Pgpool Global Development Group Pgpool-II information disclosure | 6.5v3.1 | 0.7% | 2023-01-30 | Fix |
| CVE-2023-22324 | Contec CONPROSYS HMI System (CHS) SQL injection | 6.5v3.1 | 1.3% | 2023-01-30 | Fix |
| CVE-2023-22322 | OMRON CX-Motion Pro XML external entity injection | 5.5v3.1 | 0.2% | 2023-01-30 | Fix |
| CVE-2023-22315 | Snap One Wattbox WB-300-IP-3 insufficient verification of data authenticity | 7.8v3.1 | 0.1% | 2023-01-30 | Fix |
| CVE-2023-0581 | PrivateContent WordPress plugin Protection Mechanism bypass | 5.3v3.1 | 0.7% | 2023-01-30 | Fix |
| CVE-2023-0512 | Divide by zero in Vim/Vim | 7.8v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-0474 | Google Chrome GuestView use-after-free | 8.8v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-0473 | Google Chrome ServiceWorker API type confusion | 8.8v3.1 | 0.7% | 2023-01-30 | Fix |
| CVE-2023-0472 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 0.7% | 2023-01-30 | Fix |
| CVE-2023-0471 | Google Chrome WebTransport use-after-free | 8.8v3.1 | 0.7% | 2023-01-30 | Fix |
| CVE-2023-0266 | Linux Kernel use-after-free | 7.0NVD v3.1 | 3.7% | 2023-01-30 | KEVFix |
| CVE-2023-0240 | Linux kernel io_uring's implementation logic flaw | 7.8NVD v3.1 | 0.3% | 2023-01-30 | Fix |
| CVE-2023-0097 | Post Grid, Post Carousel, & List Category Posts WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-0074 | WP Social Widget WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-0071 | WP Tabs WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-0033 | PDF Viewer WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-01-30 | Fix |
| CVE-2023-24065 | Nosh Chartingsystem cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-29 | |
| CVE-2023-0572 | Unchecked error condition in froxlor/froxlor | 5.3v3.1 | 0.7% | 2023-01-29 | Fix |
| CVE-2023-0571 | SourceCodester Canteen Management System add customer page cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-29 | |
| CVE-2023-0570 | SourceCodester Online Tours and Travels Management System payment_operation.php SQL injection | 9.8v3.1 | 0.6% | 2023-01-29 | |
| CVE-2023-0569 | Weak password requirements in publify/publify | 6.5NVD v3.1 | 0.7% | 2023-01-29 | Fix |
| CVE-2023-0566 | Improper neutralization of input during web page generation in froxlor/froxlor | 4.8v3.1 | 0.4% | 2023-01-29 | Fix |
| CVE-2023-0565 | Business Logic Errors in froxlor/froxlor | 4.9v3.1 | 0.6% | 2023-01-29 | Fix |
| CVE-2023-0564 | Weak password requirements in froxlor/froxlor | 7.5v3.1 | 0.5% | 2023-01-29 | Fix |
| CVE-2023-23629 | Metabase subject to improper privilege management | 6.3CNA v3.1 | 0.4% | 2023-01-28 | Fix |
| CVE-2023-23628 | Metabase subject to exposure of sensitive information to an unauthorized actor | 5.7CNA v3.1 | 0.4% | 2023-01-28 | Fix |
| CVE-2023-23627 | Sanitize vulnerable to cross-site scripting via improper neutralization of `noscript` element | 6.1CNA v3.1 | 0.5% | 2023-01-28 | Fix |
| CVE-2023-23624 | Discourse's exclude_tags param could leak which topics had a specific hidden tag | 4.3CNA v3.1 | 0.6% | 2023-01-28 | Fix |
| CVE-2023-23621 | Discourse vulnerable to ReDoS in user agent parsing | 8.6CNA v3.1 | 0.9% | 2023-01-28 | Fix |
| CVE-2023-23620 | Discourse restricted tag routes leak topic information | 5.3CNA v3.1 | 0.7% | 2023-01-28 | Fix |
| CVE-2023-23617 | OpenMage LTS has DoS vulnerability in MaliciousCode filter | 4.9CNA v3.1 | 1.0% | 2023-01-28 | Fix |
| CVE-2023-23616 | Discourse membership requests lack character limit | 3.5CNA v3.1 | 0.7% | 2023-01-28 | Fix |
| CVE-2023-22737 | wire-server vulnerable to unauthorized removal of Bots from Conversations | 6.5CNA v3.1 | 0.7% | 2023-01-28 | Fix |
| CVE-2023-0563 | PHPGurukul Bank Locker Management System Assign Locker add-locker-form.php cross-site scripting | 4.8v3.1 | 37.6% | 2023-01-28 | Nuclei |
| CVE-2023-0562 | PHPGurukul Bank Locker Management System Login index.php SQL injection | 9.8v3.1 | 44.3% | 2023-01-28 | Nuclei |
| CVE-2023-0561 | SourceCodester Online Tours and Travels Management System s.php SQL injection | 8.8v3.1 | 0.7% | 2023-01-28 | |
| CVE-2023-0560 | SourceCodester Online Tours and Travels Management System practice_pdf.php SQL injection | 7.2v3.1 | 0.7% | 2023-01-28 | |
| CVE-2023-24060 | havenweb haven server-side request forgery | 5.0v3.1 | 0.5% | 2023-01-27 | |
| CVE-2023-22740 | Discourse vulnerable to Allocation of Resources without Limits via Chat drafts | 4.3CNA v3.1 | 0.7% | 2023-01-27 | Fix |
| CVE-2023-22242 | Adobe Acrobat Reader DC AcroForm Annotation out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.5% | 2023-01-27 | Fix |
| CVE-2023-22241 | Adobe Acrobat Reader DC AcroForm Annotation out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2023-22240 | Adobe Acrobat Reader DC AcroForm Annotation out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2023-0558 | ContentStudio WordPress plugin authorization bypass | 9.8v3.1 | 0.9% | 2023-01-27 | Fix |
| CVE-2023-0557 | ContentStudio WordPress plugin information exposure | 5.3NVD v3.1 | 0.9% | 2023-01-27 | Fix |
| CVE-2023-0556 | ContentStudio WordPress plugin missing authorization | 6.5NVD v3.1 | 1.0% | 2023-01-27 | Fix |
| CVE-2023-0555 | Quick Restaurant Menu WordPress plugin missing authorization | 5.4NVD v3.1 | 0.6% | 2023-01-27 | Fix |
| CVE-2023-0554 | Quick Restaurant Menu WordPress plugin cross-site request forgery | 4.3NVD v3.1 | 0.4% | 2023-01-27 | Fix |
| CVE-2023-0553 | Quick Restaurant Menu WordPress plugin authenticated (Administrator+) cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-01-27 | Fix |
| CVE-2023-0550 | Quick Restaurant Menu WordPress plugin insecure direct object reference | 4.3NVD v3.1 | 0.6% | 2023-01-27 | Fix |
| CVE-2023-0549 | YAFNET Private Message PostPrivateMessage cross-site scripting | 5.4v3.1 | 0.7% | 2023-01-27 | Fix |
| CVE-2023-0534 | SourceCodester Online Tours and Travels Management System expense_report.php SQL injection | 4.7v3.1 | 0.6% | 2023-01-27 | |
| CVE-2023-0533 | SourceCodester Online Tours and Travels Management System expense_report.php SQL injection | 4.7v3.1 | 0.6% | 2023-01-27 | |
| CVE-2023-0532 | SourceCodester Online Tours and Travels Management System disapprove_user.php SQL injection | 4.7v3.1 | 0.6% | 2023-01-27 | |
| CVE-2023-0531 | SourceCodester Online Tours and Travels Management System booking_report.php SQL injection | 4.7v3.1 | 0.6% | 2023-01-27 | |
| CVE-2023-0530 | SourceCodester Online Tours and Travels Management System approve_user.php SQL injection | 9.8v3.1 | 0.6% | 2023-01-27 | |
| CVE-2023-0529 | SourceCodester Online Tours and Travels Management System add_payment.php SQL injection | 6.3v3.1 | 0.6% | 2023-01-27 | |
| CVE-2023-0528 | SourceCodester Online Tours and Travels Management System abc.php SQL injection | 6.3v3.1 | 0.6% | 2023-01-27 | |
| CVE-2023-0527 | PHPGurukul Online Security Guards Hiring System search-request.php cross-site scripting | 6.1v3.1 | 6.1% | 2023-01-27 | NucleiExploit code |
| CVE-2023-24508 | Remote code execution in Baicells RTS Platform | 9.6v3.1 | 1.6% | 2023-01-26 | Fix |
| CVE-2023-24495 | Tenable.sc server-side request forgery | 6.5NVD v3.1 | 0.9% | 2023-01-26 | |
| CVE-2023-24494 | Tenable.sc stored cross-site scripting | 5.4NVD v3.1 | 0.7% | 2023-01-26 | |
| CVE-2023-24493 | Tenable.sc CSV injection | 5.7NVD v3.1 | 0.7% | 2023-01-26 | |
| CVE-2023-24459 | Missing permission check in Jenkins BearyChat Plugin | 6.5v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-24458 | Cross-site request forgery vulnerability in Jenkins BearyChat Plugin | 8.8v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-24457 | CSRF vulnerability in Jenkins Keycloak Authentication Plugin | 6.5v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2023-24456 | Session fixation vulnerability in Jenkins Keycloak Authentication Plugin | 9.8v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2023-24455 | Path traversal in Jenkins visualexpert Plugin | 4.3v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2023-24454 | Plaintext storage of a password in Jenkins TestQuality Updater Plugin | 5.5v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2023-24453 | Missing permission check in Jenkins TestQuality Updater Plugin | 6.5v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-24452 | CSRF vulnerability in Jenkins TestQuality Updater Plugin | 8.8v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-24451 | Cisco Spark Notifier Jenkins Plugin contains missing authorization | 4.3v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-24450 | Passwords stored in plain text by Jenkins View-cloner Plugin | 6.5v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-24449 | Path traversal vulnerability in Jenkins PWauth Security Realm Plugin | 4.3v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2023-24448 | Missing permission check in Jenkins RabbitMQ Consumer Plugin | 6.5v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-24447 | Cross-site request forgery vulnerability in Jenkins RabbitMQ Consumer Plugin | 8.8v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-24446 | Cross-site request forgery vulnerability in Jenkins OpenID Plugin | 8.8v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-24445 | Open redirect vulnerability in Jenkins OpenID Plugin | 6.1v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-24444 | Session fixation vulnerability in Jenkins OpenID Plugin | 9.8v3.1 | 1.1% | 2023-01-26 | Fix |
| CVE-2023-24443 | XML entity expansion in Jenkins TestComplete support Plugin | 9.8v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2023-24442 | Plaintext storage of Access Token in Jenkins GitHub Pull Request Coverage Status Plugin | 5.5v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2023-24441 | XML external entity vulnerability on agents in Jenkins MSTest Plugin | 9.8v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2023-24440 | Cleartext transmission of sensitive information in Jenkins JIRA Pipeline Steps Plugin | 5.5v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2023-24439 | Plaintext storage of a password in Jenkins JIRA Pipeline Steps Plugin | 5.5v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2023-24438 | Missing permissions check in Jenkins JIRA Pipeline Steps Plugin | 6.5v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-24437 | Cross-site request forgery vulnerability in Jenkins JIRA Pipeline Steps Plugin | 8.8v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-24436 | Jenkins GitHub Pull Request Builder Plugin A missing authorization | 4.3v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-24435 | Missing permission checks in Jenkins GitHub Pull Request Builder Plugin | 6.5v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-24434 | CSRF vulnerability in Jenkins GitHub Pull Request Builder Plugin | 8.8v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-24433 | Missing permission checks in Jenkins Orka Plugin allow capturing credentials | 6.5v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-24432 | CSRF vulnerability in Jenkins Orka Plugin allow capturing credentials | 8.8v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-24431 | Missing permission checks in Jenkins Orka Plugin allow enumerating credentials IDs | 4.3v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-24430 | XML external entity reference vulnerability on agents in Jenkins Semantic Versioning Plugin | 9.8v3.1 | 1.3% | 2023-01-26 | Fix |
| CVE-2023-24429 | Agent-to-controller security bypass in Jenkins Semantic Versioning Plugin | 9.8v3.1 | 1.3% | 2023-01-26 | Fix |
| CVE-2023-24428 | Cross-site request forgery vulnerability in Jenkins Bitbucket OAuth Plugin | 5.7v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-24427 | Session fixation vulnerability in Jenkins Bitbucket OAuth Plugin | 9.8v3.1 | 1.1% | 2023-01-26 | Fix |
| CVE-2023-24426 | Insufficient session expiration in Jenkins Azure AD Plugin | 8.8v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2023-24425 | Exposure of system-scoped Kubernetes credentials in Jenkins Kubernetes Credentials Provider Plugin | 6.5v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-24424 | Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin | 8.8v3.1 | 1.2% | 2023-01-26 | Fix |
| CVE-2023-24423 | Cross-site request forgery in Jenkins Gerrit Trigger Plugin | 6.5v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-24422 | Sandbox bypass in Jenkins Script Security Plugin | 8.8v3.1 | 0.6% | 2023-01-26 | Exploit codeFix |
| CVE-2023-24170 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-24169 | Tenda AC18 buffer overflow | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-24167 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-24166 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-01-26 | |
| CVE-2023-24165 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-24164 | Tenda AC18 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-24057 | HL7 fhir-ig-publisher MITM based Zip Slip in `ca.uhn.hapi.fhir:org.HL7.fhir.core` | 8.1v3.1 | 1.2% | 2023-01-26 | Exploit codeFix |
| CVE-2023-24022 | Baicells Nova 227 hard coded credential Crypt | 9.8v3.1 | 1.6% | 2023-01-26 | Fix |
| CVE-2023-23951 | Symantec Identity Management And Governance cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-23950 | Symantec Identity Management And Governance cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-23949 | Symantec Identity Management And Governance excessive logging | 5.4NVD v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-23619 | Improper control of generation of code (code injection) in @asyncapi/modelina | 10.0CNA v3.1 | 1.1% | 2023-01-26 | Fix |
| CVE-2023-23614 | pi-hole AdminLTE improper session handling of Remember me for 7 days functionality | 8.8CNA v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-23613 | Field-level security issue with .keyword fields in OpenSearch | 5.7CNA v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-23612 | Issue with whitespace in JWT roles in OpenSearch | 4.7CNA v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-23611 | xblock-lti-consumer contain missing authorization in Grade Pass Back Implementation | 5.4CNA v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2023-23610 | glpi vulnerable to unauthorized access to data export | 6.5CNA v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-23609 | Contiki-NG BLE-L2CAP contains Improper size validation of L2CAP frames | 8.2CNA v3.1 | 0.4% | 2023-01-26 | Fix |
| CVE-2023-23608 | spotipy path traversal vulnerability that may lead to type confusion in URI handling code | 0.0CNA v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-23151 | bloofoxCMS improper resource release | 6.5v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-22971 | Hughes HN7000S cross-site scripting | 6.1v3.1 | 0.7% | 2023-01-26 | |
| CVE-2023-22739 | Discourse subject to allocation of resources without limits or throttling | 6.5CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-22736 | argo-cd controller reconciles apps outside configured namespaces when sharding is enabled | 8.6CNA v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-22725 | glpi vulnerable to XSS on external links | 6.2CNA v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-22724 | glpi contains XSS in RSS Description Link | 6.2CNA v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-22722 | glpi subject to cross-site scripting (XSS) Reflected | 6.8CNA v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-22500 | glpi unauthorized access to inventory files | 7.5CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-22486 | cmark-gfm Quadratic complexity bug in handle_close_bracket may lead to a denial of service | 3.5CNA v3.1 | 1.1% | 2023-01-26 | Fix |
| CVE-2023-22482 | argoproj argo-cd JWT audience claim is not verified | 9.1CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-22468 | Discourse vulnerable to cross-site scripting in local oneboxes | 8.8CNA v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-20928 | Android binder.c use-after-free | 7.8v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2023-20925 | Android PowerSessionManager.cpp privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20924 | Android (TBD) privilege escalation | 6.8v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2023-20923 | Android ShannonRcs information disclosure | 5.5v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20922 | Android PackageManagerService.java crash | 5.5v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20921 | Android incorrect control flow | 7.3v3.1 | 0.3% | 2023-01-26 | Exploit codeFix |
| CVE-2023-20920 | Android UsbRequest.java privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20919 | Android Settings.java privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20916 | Android LauncherAppsService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20915 | Android PhoneAccountRegistrar.java privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20913 | Android PhoneAccountSettingsActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20912 | Android AvatarPickerActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20908 | Android SettingsState.java crash | 5.5v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20905 | Android phNxpExtns_MifareStd.cpp out-of-bounds write | 7.8v3.1 | 0.1% | 2023-01-26 | Fix |
| CVE-2023-20904 | Android SettingsActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2023-01-26 | Exploit codeFix |
| CVE-2023-0519 | Cross-site scripting (XSS) Stored in modoboa/modoboa | 5.4NVD v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-0516 | SourceCodester Online Tours and Travels Management System password reset page SQL injection | 7.2v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-0515 | SourceCodester Online Tours and Travels Management System admin password reset page SQL injection | 7.2v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-0513 | isoftforce Dreamer CMS cross-site scripting | 5.4v3.1 | 0.7% | 2023-01-26 | Fix |
| CVE-2023-0509 | Improper certificate validation in pyload/pyload | 7.4v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-0493 | Improper neutralization of Equivalent Special Elements in btcpayserver/btcpayserver | 8.8v3.1 | 7.9% | 2023-01-26 | Exploit codeFix |
| CVE-2023-0488 | Cross-site scripting (XSS) Stored in pyload/pyload | 5.4NVD v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-0476 | Tenable.sc LDAP injection | 6.5NVD v3.1 | 0.7% | 2023-01-26 | |
| CVE-2023-0470 | Cross-site scripting (XSS) Stored in modoboa/modoboa | 5.4NVD v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-0469 | Linux kernel use-after-free | 5.5NVD v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2023-0468 | Linux kernel use-after-free | 4.7NVD v3.1 | 0.3% | 2023-01-26 | Fix |
| CVE-2023-0463 | Devolutions Remote Desktop Manager missing authentication | 3.3NVD v3.1 | 0.2% | 2023-01-26 | Fix |
| CVE-2023-0455 | Unrestricted upload of file with dangerous type in unilogies/Bumsys | 8.8v3.1 | 5.7% | 2023-01-26 | Exploit codeFix |
| CVE-2023-0452 | Econolite EOS weak hash | 5.3NVD v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-0451 | Econolite EOS improper access control | 7.5v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-0448 | WP Helper Lite Wordpress Plugin cross-site scripting | 6.1NVD v3.1 | 42.9% | 2023-01-26 | NucleiFix |
| CVE-2023-0444 | Delta Electronics InfraSuite Device Master privilege escalation | 8.8NVD v3.1 | 1.0% | 2023-01-26 | |
| CVE-2023-0417 | Wireshark NFS dissector memory leak | 6.3CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-0416 | Wireshark GNW dissector crash | 6.3CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-0415 | Wireshark iSCSI dissector crash | 6.3CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-0414 | Wireshark EAP dissector crash | 6.3CNA v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-0413 | Wireshark improper resource release | 6.3CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-0412 | Wireshark TIPC dissector crash | 6.3CNA v3.1 | 0.8% | 2023-01-26 | Fix |
| CVE-2023-0411 | Wireshark excessive iteration | 6.3CNA v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-0394 | Linux kernel null pointer dereference | 5.5NVD v3.1 | 1.0% | 2023-01-26 | Fix |
| CVE-2023-0356 | Socomec MODULYS GP weak password encoding | 7.5v3.1 | 0.5% | 2023-01-26 | Fix |
| CVE-2023-0321 | Disclosure of Sensitive Information on Campbell Scientific Products | 9.1v3.1 | 0.9% | 2023-01-26 | |
| CVE-2023-0284 | Tribe29 Checkmk improper validation of LDAP user IDs | 8.1v3.1 | 0.9% | 2023-01-26 | Fix |
| CVE-2023-0229 | github.com/OpenShift/apiserver-library-go improper input validation | 6.3v3.1 | 0.6% | 2023-01-26 | Fix |
| CVE-2023-0396 | zephyrproject-rtos Zephyr Buffer Overreads in Bluetooth HCI | 6.8v3.1 | 0.4% | 2023-01-25 | |
| CVE-2023-23331 | Amano Xoffice SQL injection | 9.8v3.1 | 0.9% | 2023-01-24 | |
| CVE-2023-22485 | cmark-gfm out-of-bounds read in validate_protocol | 5.3CNA v3.1 | 0.7% | 2023-01-24 | Fix |
| CVE-2023-21796 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 1.0% | 2023-01-24 | Fix |
| CVE-2023-21795 | Microsoft Edge (Chromium-based) elevation of privilege | 8.3CNA v3.1 | 0.9% | 2023-01-24 | Fix |
| CVE-2023-21775 | Microsoft Edge (Chromium-based) remote code execution | 8.3CNA v3.1 | 1.0% | 2023-01-24 | Fix |
| CVE-2023-21719 | Microsoft Edge (Chromium-based) security feature bypass | 6.5CNA v3.1 | 1.7% | 2023-01-24 | Fix |
| CVE-2023-24099 | TRENDnet Tew-820ap out-of-bounds write | 8.8v3.1 | 1.0% | 2023-01-23 | |
| CVE-2023-24098 | TRENDnet Tew-820ap out-of-bounds write | 8.8v3.1 | 1.0% | 2023-01-23 | |
| CVE-2023-24097 | TRENDnet Tew-820ap out-of-bounds write | 8.8v3.1 | 1.0% | 2023-01-23 | |
| CVE-2023-24096 | TRENDnet Tew-820ap stack-based buffer overflow | 8.8v3.1 | 1.0% | 2023-01-23 | |
| CVE-2023-24095 | TRENDnet Tew-820ap out-of-bounds write | 8.8v3.1 | 1.0% | 2023-01-23 | |
| CVE-2023-24070 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-23 | |
| CVE-2023-24069 | Signal-desktop file deletion | 3.3v3.1 | 0.9% | 2023-01-23 | Fix |
| CVE-2023-24068 | Signal Desktop attachment cache vulnerability | 7.8v3.1 | 0.4% | 2023-01-23 | Fix |
| CVE-2023-23824 | WP TopBar WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-01-23 | |
| CVE-2023-23687 | Youtube shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-01-23 | |
| CVE-2023-23560 | Lexmark B2236 server-side request forgery | 9.8v3.1 | 13.9% | 2023-01-23 | Fix |
| CVE-2023-23314 | Zdir /api/upload component arbitrary file upload | 8.8v3.1 | 1.2% | 2023-01-23 | |
| CVE-2023-22960 | Lexmark B2236 missing brute-force protection | 7.5v3.1 | 27.8% | 2023-01-23 | Exploit codeFix |
| CVE-2023-22721 | Oi Yandex.Maps for WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-01-23 | |
| CVE-2023-22630 | Izybat Orange Casiers SQL injection | 4.3v3.1 | 0.6% | 2023-01-23 | |
| CVE-2023-22484 | GitHub cmark-gfm handle_pointy_brace parser denial of service | 3.5CNA v3.1 | 1.0% | 2023-01-23 | Fix |
| CVE-2023-22483 | cmark-gfm Quadratic complexity bugs may lead to a denial of service | 3.5CNA v3.1 | 1.1% | 2023-01-23 | Fix |
| CVE-2023-0447 | My YouTube Channel WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2023-01-23 | Fix |
| CVE-2023-0446 | My YouTube Channel WordPress plugin authenticated (Administrator+) stored cross-site scripting | 5.5v3.1 | 0.6% | 2023-01-23 | Fix |
| CVE-2023-0440 | Observable discrepancy in Healthchecks/Healthchecks | 5.3v3.1 | 0.6% | 2023-01-23 | Fix |
| CVE-2023-0438 | Cross-site request forgery (CSRF) in modoboa/modoboa | 6.5v3.1 | 0.3% | 2023-01-23 | Fix |
| CVE-2023-24059 | Rockstar Games Grand Theft Auto V code injection | 7.3v3.1 | 1.5% | 2023-01-22 | Exploit code |
| CVE-2023-24058 | Twinkle Toes Software Booked improper access control | 4.3v3.1 | 1.0% | 2023-01-22 | Fix |
| CVE-2023-24056 | Pkgconf out-of-bounds write | 5.5v3.1 | 0.5% | 2023-01-22 | Fix |
| CVE-2023-24055 | KeePass cleartext storage of sensitive information | 5.5NVD v3.1 | 3.7% | 2023-01-22 | Exploit codeFix |
| CVE-2023-24044 | Plesk Obsidian open redirect | 6.1v3.1 | 2.2% | 2023-01-22 | Exploit code |
| CVE-2023-0435 | Excessive Attack Surface in pyload/pyload | 9.8v3.1 | 0.7% | 2023-01-22 | Fix |
| CVE-2023-0434 | Improper input validation in pyload/pyload | 7.5v3.1 | 0.8% | 2023-01-22 | Fix |
| CVE-2023-24042 | hfiref0x LightFTP A race condition | 7.5v3.1 | 0.5% | 2023-01-21 | |
| CVE-2023-24040 | Opengroup Common Desktop Environment injection | 7.1v3.1 | 0.5% | 2023-01-21 | |
| CVE-2023-24039 | Opengroup Common Desktop Environment ParseColors in libXm stack-based buffer overflow | 7.8v3.1 | 0.5% | 2023-01-21 | |
| CVE-2023-24038 | Html-stripscripts regular expression denial of service | 7.5v3.1 | 1.1% | 2023-01-21 | Fix |
| CVE-2023-22884 | Apache Airflow, Apache Airflow MySQL Provider: Arbitrary file read | 9.8v3.1 | 11.1% | 2023-01-21 | Exploit codeFix |
| CVE-2023-22617 | PowerDNS Recursor uncontrolled recursion | 7.5v3.1 | 7.3% | 2023-01-21 | Fix |
| CVE-2023-0433 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.5% | 2023-01-21 | Fix |
| CVE-2023-24028 | MISP improper access control | 9.8v3.1 | 0.7% | 2023-01-20 | |
| CVE-2023-24027 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2023-24026 | MISP cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2023-24025 | Pqclean improper signature verification | 7.5v3.1 | 0.5% | 2023-01-20 | |
| CVE-2023-24021 | Trustwave ModSecurity improper null termination | 7.5v3.1 | 0.9% | 2023-01-20 | Fix |
| CVE-2023-23691 | Dell PowerVault ME5 HTTP request smuggling | 8.1CNA v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2023-23607 | Unrestricted file upload leads to remote code execution in erohtar/Dasherr | 9.8CNA v3.1 | 1.6% | 2023-01-20 | Fix |
| CVE-2023-23596 | JC21 nginx-proxy-manager OS command injection | 8.8v3.1 | 15.2% | 2023-01-20 | |
| CVE-2023-23492 | Login with Phone Number WordPress Plugin SQL injection | 8.8NVD v3.1 | 57.1% | 2023-01-20 | NucleiFix |
| CVE-2023-23491 | Quick Event Manager WordPress Plugin cross-site scripting | 6.1NVD v3.1 | 1.2% | 2023-01-20 | NucleiFix |
| CVE-2023-23490 | Survey Maker WordPress Plugin SQL injection | 8.8NVD v3.1 | 2.3% | 2023-01-20 | Fix |
| CVE-2023-23489 | Easy Digital Downloads WordPress Plugin SQL injection | 9.8NVD v3.1 | 11.2% | 2023-01-20 | NucleiFix |
| CVE-2023-23488 | Paid Memberships Pro WordPress Plugin SQL injection | 9.8NVD v3.1 | 92.5% | 2023-01-20 | NucleiMetasploitExploit codeFix |
| CVE-2023-23145 | gpac memory leak | 7.8v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2023-23144 | gpac integer overflow | 5.5v3.1 | 0.3% | 2023-01-20 | Fix |
| CVE-2023-23143 | gpac buffer overflow | 7.8v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2023-23024 | Bookstore Management System cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2023-23015 | Kalkun cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2023-23014 | Inventory System cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-20 | |
| CVE-2023-23012 | Classroombookings craigrodway cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-20 | |
| CVE-2023-23010 | Ecommerce-CodeIgniter-Bootstrap cross-site scripting | 6.1v3.1 | 0.6% | 2023-01-20 | |
| CVE-2023-22964 | Zoho Manageengine Servicedesk Plus Msp improper authentication | 9.1v3.1 | 2.4% | 2023-01-20 | Fix |
| CVE-2023-22912 | mediawiki insufficient randomness | 5.3v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2023-22910 | mediawiki cross-site scripting | 5.4v3.1 | 0.5% | 2023-01-20 | Fix |
| CVE-2023-22742 | libgit2 fails to verify SSH keys by default | 5.3CNA v3.1 | 0.6% | 2023-01-20 | Fix |
| CVE-2023-22726 | Unrestricted file upload leading to privilege escalation in act | 8.0CNA v3.1 | 1.3% | 2023-01-20 | Fix |
| CVE-2023-22458 | Integer overflow in multiple Redis commands can lead to denial of service | 5.5CNA v3.1 | 72.0% | 2023-01-20 | Fix |
| CVE-2023-22373 | Contec CONPROSYS HMI System (CHS) cross-site scripting | 5.4v3.1 | 1.9% | 2023-01-20 | Fix |
| CVE-2023-22339 | Contec CONPROSYS HMI System (CHS) improper access control | 7.5v3.1 | 1.1% | 2023-01-20 | Fix |
| CVE-2023-22334 | Contec CONPROSYS HMI System (CHS) improper authentication | 5.3v3.1 | 0.9% | 2023-01-20 | Fix |
| CVE-2023-22331 | Contec CONPROSYS HMI System (CHS) default credentials | 7.5v3.1 | 1.0% | 2023-01-20 | Fix |
| CVE-2023-20058 | Cisco Unified Intelligence Center cross-site scripting | 6.1CNA v3.0 | 0.5% | 2023-01-20 | Fix |
| CVE-2023-20057 | A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL reputation filters on an affected device. This vulnerability is due to improper processing of URLs. An attacker could | 0.0CNA v3.1 | 0.7% | 2023-01-20 | Fix |
| CVE-2023-20047 | Cisco Webex Room Phone denial of service | 6.5CNA v3.1 | 0.3% | 2023-01-20 | Fix |
| CVE-2023-20045 | Cisco Small Business RV Series Router Firmware command injection | 4.9CNA v3.1 | 1.0% | 2023-01-20 | Fix |
| CVE-2023-20044 | Cisco CX Cloud Agent insecure permissions | 6.7CNA v3.1 | 0.1% | 2023-01-20 | Fix |
| CVE-2023-20043 | Cisco CX Cloud Agent insecure permissions | 6.7CNA v3.1 | 0.2% | 2023-01-20 | Fix |
| CVE-2023-20040 | Cisco Network Services Orchestrator relative path traversal | 5.5CNA v3.1 | 1.2% | 2023-01-20 | Fix |
| CVE-2023-20038 | Cisco Industrial Network Director hard-coded cryptographic key | 8.8CNA v3.1 | 0.2% | 2023-01-20 | Fix |
| CVE-2023-20037 | Cisco Industrial Network Director cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-01-20 | Fix |
| CVE-2023-20026 | Cisco Small Business RV Series Router Firmware command injection | 6.5CNA v3.1 | 1.3% | 2023-01-20 | |
| CVE-2023-20025 | Cisco Small Business RV Series Router Firmware authentication bypass | 9.0CNA v3.1 | 1.6% | 2023-01-20 | Exploit code |
| CVE-2023-20020 | Cisco BroadWorks infinite loop | 8.6CNA v3.1 | 0.9% | 2023-01-20 | Fix |
| CVE-2023-20019 | Cisco BroadWorks cross-site scripting | 6.1CNA v3.1 | 0.6% | 2023-01-20 | Fix |
| CVE-2023-20018 | Cisco Session Initiation Protocol (SIP) Software authentication bypass | 8.6CNA v3.1 | 0.6% | 2023-01-20 | Fix |
| CVE-2023-20010 | Cisco Unified Communications Manager SQL injection | 8.1CNA v3.1 | 0.9% | 2023-01-20 | Fix |
| CVE-2023-20008 | Cisco RoomOS Software link following | 4.4CNA v3.1 | 0.2% | 2023-01-20 | Fix |
| CVE-2023-20007 | Cisco Small Business RV Series Router Firmware buffer overflow | 4.7CNA v3.1 | 0.7% | 2023-01-20 | Fix |
| CVE-2023-20002 | Cisco RoomOS Software server-side request forgery | 4.4CNA v3.1 | 0.2% | 2023-01-20 | Fix |
| CVE-2023-0410 | Cross-site scripting (XSS) Generic in BuilderIO/Qwik | 6.1v3.1 | 0.5% | 2023-01-20 | Fix |
| CVE-2023-0101 | Nessus improper privilege management | 8.8NVD v3.1 | 0.8% | 2023-01-20 | |
| CVE-2023-0052 | SAUTER Controls Nova 200-220 Series missing authentication for critical function | 8.8NVD v3.1 | 0.7% | 2023-01-20 | |
| CVE-2023-23690 | Dell Cloud Mobility for Dell Storage man-in-the-middle | 7.0CNA v3.1 | 0.2% | 2023-01-19 | Fix |
| CVE-2023-22745 | Buffer Overlow in TSS2_RC_Decode in tpm2-tss | 6.4CNA v3.1 | 0.5% | 2023-01-19 | Fix |
| CVE-2023-22741 | sofia-sip STUN attribute parser buffer overflow | 9.8CNA v3.1 | 2.4% | 2023-01-19 | Fix |
| CVE-2023-0406 | Cross-site request forgery (CSRF) in modoboa/modoboa | 4.3v3.1 | 0.4% | 2023-01-19 | Fix |
| CVE-2023-0404 | Events Made Easy WordPress plugin missing authorization | 5.4v3.1 | 0.5% | 2023-01-19 | Fix |
| CVE-2023-0403 | Social Warfare WordPress plugin cross-site request forgery | 5.4v3.1 | 0.4% | 2023-01-19 | Fix |
| CVE-2023-0402 | Social Warfare WordPress plugin missing authorization | 5.4v3.1 | 0.8% | 2023-01-19 | Fix |
| CVE-2023-0398 | Cross-site request forgery (CSRF) in modoboa/modoboa | 6.5v3.1 | 0.3% | 2023-01-19 | Fix |
| CVE-2023-0397 | zephyrproject-rtos Zephyr DoS: Invalid Initialization in le_read_buffer_size_complete | 9.6CNA v3.1 | 0.5% | 2023-01-19 | |
| CVE-2023-0126 | SonicWall SMA1000 Firmware Pre-authentication path traversal | 7.5v3.1 | 72.7% | 2023-01-19 | NucleiEmerging ThreatsFix |
| CVE-2023-22863 | IBM Robotic Process Automation information disclosure | 5.9CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-22809 | sudo improper privilege management | 7.8NVD v3.1 | 55.4% | 2023-01-18 | Exploit codeFix |
| CVE-2023-22594 | IBM Robotic Process Automation for Cloud Pak cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-22592 | IBM Robotic Process Automation for Cloud Pak insufficient permission settings | 4.0CNA v3.1 | 0.1% | 2023-01-18 | Fix |
| CVE-2023-21900 | Oracle Solaris NSSwitch component unauthorized data modification | 4.0CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21899 | Oracle VM VirtualBox Core component denial of service | 5.5CNA v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-21898 | Oracle VM VirtualBox Core component denial of service | 5.5CNA v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-21894 | Oracle Global Lifecycle Management NextGen OUI Framework NextGen Installer issues component takeover | 7.3CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2023-21893 | Component takeover in Oracle Data Provider for .NET | 7.5CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21892 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21891 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21890 | Oracle Communications Converged Application Server Core component takeover | 9.8CNA v3.1 | 0.8% | 2023-01-18 | Fix |
| CVE-2023-21889 | Oracle VM VirtualBox Core component information disclosure | 3.8CNA v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-21888 | Oracle Primavera Gateway WebUI component unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21887 | Oracle MySQL Server GIS component denial of service | 4.9CNA v3.1 | 43.4% | 2023-01-18 | Exploit codeFix |
| CVE-2023-21886 | Oracle VM VirtualBox Core component takeover | 8.1CNA v3.1 | 1.2% | 2023-01-18 | Fix |
| CVE-2023-21885 | Oracle VM VirtualBox Core component information disclosure | 3.8CNA v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-21884 | Oracle VM VirtualBox Core component denial of service | 4.4CNA v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-21883 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21882 | Oracle MySQL Server Optimizer component unauthorized data modification | 2.7CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21881 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21880 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.5CNA v3.1 | 0.8% | 2023-01-18 | Fix |
| CVE-2023-21879 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21878 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21877 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.5CNA v3.1 | 0.8% | 2023-01-18 | Fix |
| CVE-2023-21876 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21875 | Oracle MySQL Server Security Encryption component unauthorized data modification | 5.9CNA v3.1 | 1.5% | 2023-01-18 | Fix |
| CVE-2023-21874 | Oracle MySQL Server Thread Pooling component denial of service | 2.7CNA v3.1 | 1.0% | 2023-01-18 | Fix |
| CVE-2023-21873 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21872 | Oracle MySQL Server Optimizer component unauthorized data modification | 5.5CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21871 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21870 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21869 | Oracle MySQL Server InnoDB component unauthorized data modification | 5.5CNA v3.1 | 0.8% | 2023-01-18 | Fix |
| CVE-2023-21868 | Oracle MySQL Server Optimizer component denial of service | 6.5CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21867 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21866 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.0% | 2023-01-18 | Fix |
| CVE-2023-21865 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2023-01-18 | Fix |
| CVE-2023-21864 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.1% | 2023-01-18 | Fix |
| CVE-2023-21863 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21862 | Oracle Web Services Manager XML Security component component unauthorized data access | 8.1CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21861 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21860 | Oracle MySQL Cluster Internal Operations component takeover | 6.3CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21859 | Oracle Access Manager Authentication Engine component unauthorized data access | 4.4CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2023-21858 | Oracle E-Business Suite Collaborative Planning Installation component unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21857 | Oracle E-Business Suite HCM Common Architecture unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21856 | Oracle E-Business Suite iSetup unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21855 | Oracle E-Business Suite Sales for Handhelds unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21854 | Oracle E-Business Suite Sales Offline Core components component unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21853 | Oracle E-Business Suite Mobile Field Service unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21852 | Oracle E-Business Suite Learning Management Setup component unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21851 | Oracle E-Business Suite Marketing Administration component unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21850 | Oracle Supply Chain Demantra Demand Management unauthorized data modification | 7.5CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21849 | Oracle E-Business Suite Applications DBA Java utils component unauthorized data modification | 7.5CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21848 | Oracle Communications Convergence Admin Configuration component takeover | 8.8CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21847 | Oracle Web Applications Desktop Integrator Download component unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21846 | Oracle BI Publisher Security component takeover | 8.8CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21845 | Oracle PeopleSoft Enterprise PeopleTools Panel Processor component unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21844 | Oracle PeopleSoft Enterprise PeopleTools Elastic Search component unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21843 | Oracle Java SE, Oracle GraalVM Enterprise Edition Sound component unauthorized data modification | 3.7CNA v3.1 | 1.4% | 2023-01-18 | Fix |
| CVE-2023-21842 | Oracle WebLogic Server Web Container component unauthorized data access | 7.5CNA v3.1 | 0.7% | 2023-01-18 | Fix |
| CVE-2023-21841 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 0.7% | 2023-01-18 | Fix |
| CVE-2023-21840 | Oracle MySQL Server PS component denial of service | 4.9CNA v3.1 | 1.1% | 2023-01-18 | Fix |
| CVE-2023-21839 | Oracle WebLogic Server missing authentication | 7.5CNA v3.1 | 99.9% | 2023-01-18 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-21838 | Oracle WebLogic Server Core component denial of service | 7.5CNA v3.1 | 0.9% | 2023-01-18 | Fix |
| CVE-2023-21837 | Oracle WebLogic Server Core component unauthorized data access | 7.5CNA v3.1 | 0.9% | 2023-01-18 | Exploit codeFix |
| CVE-2023-21836 | Oracle MySQL Server DML component denial of service | 4.9CNA v3.1 | 0.8% | 2023-01-18 | Fix |
| CVE-2023-21835 | Oracle Java SE, Oracle GraalVM Enterprise Edition JSSE component denial of service | 5.3CNA v3.1 | 1.9% | 2023-01-18 | Fix |
| CVE-2023-21834 | Oracle E-Business Suite Self-Service Human Resources unauthorized data modification | 4.3CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21832 | Oracle BI Publisher Security component takeover | 8.8CNA v3.1 | 0.6% | 2023-01-18 | Fix |
| CVE-2023-21831 | Oracle PeopleSoft Enterprise CS Academic Advisement Advising Notes component information disclosure | 5.3CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21830 | Oracle Java SE, Oracle GraalVM Enterprise Edition unauthorized data modification | 5.3CNA v3.1 | 1.1% | 2023-01-18 | Fix |
| CVE-2023-21829 | Oracle Database RDBMS Security vulnerability | 6.3CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21828 | Oracle Hospitality Reporting and Analytics unauthorized data access | 8.1CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21827 | Oracle Database Data Redaction information disclosure | 4.3CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21826 | Oracle Hospitality Reporting and Analytics unauthorized data access | 7.6CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21825 | Oracle E-Business Suite iSupplier Portal Supplier Management component information disclosure | 5.3CNA v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-21824 | Oracle Communications BRM - Elastic Charging Engine unauthorized data access | 4.4CNA v3.1 | 0.2% | 2023-01-18 | Fix |
| CVE-2023-21614 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.5% | 2023-01-18 | Fix |
| CVE-2023-21613 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.5% | 2023-01-18 | Fix |
| CVE-2023-21612 | Adobe Acrobat Reader insecure permissions | 7.8CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21611 | Adobe Acrobat Reader insecure permissions | 7.8CNA v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-21610 | Adobe Acrobat Reader stack-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 2.5% | 2023-01-18 | Fix |
| CVE-2023-21609 | Adobe Acrobat Reader DC AcroForm Annotation out-of-bounds write remote code execution | 7.8CNA v3.1 | 2.1% | 2023-01-18 | Fix |
| CVE-2023-21608 | Adobe Acrobat and Reader use-after-free | 7.8CNA v3.1 | 59.2% | 2023-01-18 | KEVExploit codeFix |
| CVE-2023-21607 | Adobe Acrobat Reader improper input validation remote code execution | 7.8CNA v3.1 | 4.7% | 2023-01-18 | Fix |
| CVE-2023-21606 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 2.5% | 2023-01-18 | Fix |
| CVE-2023-21605 | Adobe Acrobat Reader DC Font Parsing heap-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 2.6% | 2023-01-18 | Fix |
| CVE-2023-21604 | Adobe Acrobat Reader stack-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 2.6% | 2023-01-18 | Fix |
| CVE-2023-21603 | Adobe Dimension USD File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-21601 | Adobe Dimension OBJ File Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-21585 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.5% | 2023-01-18 | Fix |
| CVE-2023-21581 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.4% | 2023-01-18 | Fix |
| CVE-2023-21579 | Adobe Acrobat Reader DC Font Parsing integer overflow remote code execution | 7.8CNA v3.1 | 4.9% | 2023-01-18 | Fix |
| CVE-2023-0385 | Custom 404 Pro WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-01-18 | Fix |
| CVE-2023-0358 | gpac/gpac GitHub repository use-after-free | 7.8v3.1 | 0.4% | 2023-01-18 | Fix |
| CVE-2023-0290 | Rapid7 Velociraptor directory traversal in client ID parameter | 4.3v3.1 | 0.7% | 2023-01-18 | Fix |
| CVE-2023-0242 | Rapid7 Velociraptor insufficient permission check in the VQL copy function | 8.8v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-0214 | XSS in Skyhigh Security SWG | 6.1CNA v3.1 | 1.9% | 2023-01-18 | Exploit codeFix |
| CVE-2023-0164 | OrangeScrum OS command injection | 8.8v3.1 | 1.4% | 2023-01-18 | |
| CVE-2023-0040 | Async HTTP Client has CRLF injection vulnerability in HTTP request headers | 7.5v3.1 | 0.5% | 2023-01-18 | Fix |
| CVE-2023-23749 | Extension miniOrange LDAP Integration LDAP injection (username) | 7.5NVD v3.1 | 0.6% | 2023-01-17 | Fix |
| CVE-2023-23637 | Unistra Impatient cross-site scripting | 7.6v3.1 | 0.6% | 2023-01-17 | Fix |
| CVE-2023-22875 | IBM Security QRadar SIEM information disclosure | 8.4CNA v3.1 | 0.3% | 2023-01-17 | Fix |
| CVE-2023-22734 | Improper Input Newsletter subscription option validation in shopware | 4.3CNA v3.1 | 0.6% | 2023-01-17 | Fix |
| CVE-2023-22733 | Improper Output Neutralization in Log module in shopware | 2.7CNA v3.1 | 0.7% | 2023-01-17 | Fix |
| CVE-2023-22732 | Insufficient session expiration in Administration in shopware | 3.7CNA v3.1 | 0.7% | 2023-01-17 | Fix |
| CVE-2023-22731 | Improper control of generation of code in Twig rendered views in shopware | 10.0CNA v3.1 | 1.3% | 2023-01-17 | Fix |
| CVE-2023-22730 | shopware platform improper input validation of Clearance sale in cart | 5.3CNA v3.1 | 0.7% | 2023-01-17 | Fix |
| CVE-2023-22727 | Database Query::offset and limit vulnerable to SQL injection in cakephp | 9.8CNA v3.1 | 0.9% | 2023-01-17 | Fix |
| CVE-2023-22624 | Zoho ManageEngine Exchange Reporter Plus XML external entity injection | 7.5v3.1 | 3.2% | 2023-01-17 | Fix |
| CVE-2023-22499 | Interactive permission prompt spoofing in Deno | 7.5CNA v3.1 | 0.6% | 2023-01-17 | Fix |
| CVE-2023-22366 | OMRON CX-Motion-MCH uninitialized pointer access | 7.8v3.1 | 0.2% | 2023-01-17 | Fix |
| CVE-2023-22357 | OMRON CP1L-EL20DR-D active debug code | 9.8v3.1 | 1.2% | 2023-01-17 | Fix |
| CVE-2023-22316 | PIXELA PIX-RT100 hidden functionality | 6.5v3.1 | 0.3% | 2023-01-17 | Fix |
| CVE-2023-22304 | PIXELA PIX-RT100 OS command injection | 8.0v3.1 | 0.9% | 2023-01-17 | Fix |
| CVE-2023-22303 | TP-Link SG105PE improper authentication | 9.8v3.1 | 0.9% | 2023-01-17 | Fix |
| CVE-2023-22298 | pgAdmin 4 open redirect | 6.1v3.1 | 0.9% | 2023-01-17 | Fix |
| CVE-2023-22296 | Mahoroba Kobo MAHO-PBX NetDevancer series reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-17 | Fix |
| CVE-2023-22286 | Mahoroba Kobo MAHO-PBX NetDevancer series cross-site request forgery | 8.1v3.1 | 0.4% | 2023-01-17 | Fix |
| CVE-2023-22280 | Mahoroba Kobo MAHO-PBX NetDevancer series OS command injection | 7.2v3.1 | 1.0% | 2023-01-17 | Fix |
| CVE-2023-22279 | Mahoroba Kobo MAHO-PBX NetDevancer series OS command injection | 9.8v3.1 | 1.1% | 2023-01-17 | Fix |
| CVE-2023-22278 | Digital Arts m-FILTER Ver.5 Series and Ver.4 Series improper authentication | 5.3v3.1 | 0.7% | 2023-01-17 | Fix |
| CVE-2023-0338 | Cross-site scripting (XSS) Reflected in lirantal/Daloradius | 6.1v3.1 | 0.5% | 2023-01-17 | |
| CVE-2023-0337 | Cross-site scripting (XSS) Reflected in lirantal/Daloradius | 6.1v3.1 | 0.5% | 2023-01-17 | |
| CVE-2023-0332 | SourceCodester Online Food Ordering System manage_user.php SQL injection | 9.8v3.1 | 0.9% | 2023-01-17 | |
| CVE-2023-0296 | Red Hat Openshift weak cryptographic algorithm | 5.3v3.1 | 0.3% | 2023-01-17 | Fix |
| CVE-2023-0158 | NLnet Labs Krill triggered crash on direct RRDP access | 7.5v3.1 | 0.7% | 2023-01-17 | Fix |
| CVE-2023-0122 | Linux kernel A null pointer dereference | 7.5NVD v3.1 | 1.3% | 2023-01-17 | Fix |
| CVE-2023-0327 | saemorris TheRadSystem users.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-16 | |
| CVE-2023-0324 | SourceCodester Online Tours and Travels Management System page-login.php SQL injection | 9.8v3.1 | 18.8% | 2023-01-16 | |
| CVE-2023-0323 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.5% | 2023-01-16 | Fix |
| CVE-2023-0316 | Path traversal: \..\filename in froxlor/froxlor | 5.5v3.1 | 0.7% | 2023-01-16 | Fix |
| CVE-2023-0315 | Command injection in froxlor/froxlor | 8.8v3.1 | 97.7% | 2023-01-16 | MetasploitExploit codeFix |
| CVE-2023-23595 | Bluecatnetworks Device Registration Portal XML external entity injection | 7.5v3.1 | 1.0% | 2023-01-15 | Fix |
| CVE-2023-23590 | Mercedes-benz Xentry Retail DATA Storage denial of service | 7.5v3.1 | 26.4% | 2023-01-15 | Fix |
| CVE-2023-0314 | Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ | 6.1v3.1 | 0.5% | 2023-01-15 | Fix |
| CVE-2023-0313 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.4% | 2023-01-15 | Fix |
| CVE-2023-0312 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 6.1NVD v3.1 | 0.6% | 2023-01-15 | Fix |
| CVE-2023-0311 | Improper authentication in thorsten/phpMyFAQ | 9.8v3.1 | 0.9% | 2023-01-15 | Fix |
| CVE-2023-0310 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-01-15 | Fix |
| CVE-2023-0309 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-01-15 | Fix |
| CVE-2023-0308 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-01-15 | Fix |
| CVE-2023-0307 | Weak password requirements in thorsten/phpMyFAQ | 9.8v3.1 | 0.6% | 2023-01-15 | Fix |
| CVE-2023-0306 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-01-15 | Fix |
| CVE-2023-0305 | SourceCodester Online Food Ordering System Login module admin_class.php SQL injection | 7.5v3.1 | 0.6% | 2023-01-15 | |
| CVE-2023-0304 | SourceCodester Online Food Ordering System Signup module admin_class.php SQL injection | 7.5v3.1 | 0.6% | 2023-01-15 | |
| CVE-2023-0303 | SourceCodester Online Food Ordering System view_prod.php SQL injection | 7.5v3.1 | 0.6% | 2023-01-15 | |
| CVE-2023-0302 | Failure to sanitize special elements into a different plane in radareorg/radare2 | 7.8v3.1 | 0.4% | 2023-01-15 | Fix |
| CVE-2023-23589 | torproject Tor logic flaw | 6.5v3.1 | 0.8% | 2023-01-14 | Fix |
| CVE-2023-22853 | Tiki structlib.php code injection | 8.8v3.1 | 0.9% | 2023-01-14 | Fix |
| CVE-2023-22852 | Tiki cross-site request forgery | 6.5v3.1 | 0.3% | 2023-01-14 | Fix |
| CVE-2023-22851 | Tiki unrestricted file upload | 7.2v3.1 | 1.0% | 2023-01-14 | Fix |
| CVE-2023-22850 | Tiki deserialization of untrusted data | 8.8v3.1 | 1.2% | 2023-01-14 | Fix |
| CVE-2023-22602 | Apache Shiro, when used with Spring Boot+, may allow authentication bypass | 7.5v3.1 | 1.6% | 2023-01-14 | Fix |
| CVE-2023-22497 | Netdata is vulnerable to improper authentication | 6.5CNA v3.1 | 0.7% | 2023-01-14 | Fix |
| CVE-2023-22496 | Netdata vulnerable to command injection | 8.1CNA v3.1 | 36.2% | 2023-01-14 | Exploit codeFix |
| CVE-2023-22495 | Izanami is vulnerable to authorization bypass | 9.8CNA v3.1 | 1.1% | 2023-01-14 | Fix |
| CVE-2023-22480 | KubeOperator is vulnerable to unauthorized access to system API | 7.3CNA v3.1 | 66.8% | 2023-01-14 | NucleiFix |
| CVE-2023-22478 | KubePi is vulnerable to missing authorization | 7.3CNA v3.1 | 3.6% | 2023-01-14 | NucleiFix |
| CVE-2023-22471 | Nextcloud Deck vulnerable to authorization bypass | 3.5CNA v3.1 | 0.5% | 2023-01-14 | Fix |
| CVE-2023-22470 | Nextcloud Deck vulnerable to uncontrolled resource consumption | 3.5CNA v3.1 | 0.7% | 2023-01-14 | Fix |
| CVE-2023-0301 | Cross-site scripting (XSS) Stored in alfio-event/alf.io | 5.4v3.1 | 0.5% | 2023-01-14 | Fix |
| CVE-2023-0300 | Cross-site scripting (XSS) Reflected in alfio-event/alf.io | 5.4v3.1 | 0.5% | 2023-01-14 | Fix |
| CVE-2023-0299 | Improper input validation in publify/publify | 9.8v3.1 | 0.9% | 2023-01-14 | Fix |
| CVE-2023-0298 | Incorrect authorization in firefly-iii/firefly-iii | 6.5v3.1 | 0.6% | 2023-01-14 | Fix |
| CVE-2023-0297 | Code injection in pyload/pyload | 9.8NVD v3.1 | 95.9% | 2023-01-14 | NucleiMetasploitExploit codeFix |
| CVE-2023-23566 | Axigen Mail Server incorrect default permissions | 9.8v3.1 | 0.9% | 2023-01-13 | Fix |
| CVE-2023-23559 | Linux kernel integer overflow | 7.8NVD v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-22493 | RSSHub is vulnerable to SSRF (server-side request forgery) | 8.8CNA v3.1 | 0.8% | 2023-01-13 | Fix |
| CVE-2023-22491 | Gatsby-transformer-remark vulnerable to unsanitized JavaScript code injection | 8.1CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22489 | Flarum is missing authorization in discussion replies | 3.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22417 | Junos OS: SRX Series: A memory leak might be observed in IPsec VPN scenario leading to an FPC crash | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22416 | Juniper Networks Junos OS SIP ALG buffer overflow | 7.5CNA v3.1 | 0.7% | 2023-01-13 | Fix |
| CVE-2023-22415 | Juniper Networks Junos OS H.323 ALG out-of-bounds write | 7.5CNA v3.1 | 0.8% | 2023-01-13 | Fix |
| CVE-2023-22414 | Juniper Networks Junos OS Flexible PIC Concentrator memory leak | 6.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-22413 | Juniper Networks Junos OS IPsec library improper exception handling | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22412 | Juniper Networks Junos OS SIP ALG improper locking | 7.5CNA v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2023-22411 | Juniper Networks Junos OS Flow Processing daemon out-of-bounds write | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22410 | Juniper Networks Junos OS A memory leak | 7.5CNA v3.1 | 0.8% | 2023-01-13 | Fix |
| CVE-2023-22409 | Juniper Networks Junos OS NAT library unchecked loop condition | 5.5CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2023-22408 | Junos OS: SRX 5000 Series: Upon processing of a specific SIP packet an FPC can crash | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22407 | Juniper Networks Junos OS Routing protocol daemon incomplete cleanup | 6.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-22406 | Juniper Networks Junos OS Evolved memory leak | 6.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-22405 | Juniper Junos OS Packet Forwarding Engine MAC limiting denial of service | 6.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-22404 | Juniper Networks Junos OS Internet Key Exchange protocol daemon out-of-bounds write | 6.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22403 | Junos OS: QFX10K Series: An ICCP flap will be observed due to excessive specific traffic | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22402 | Juniper Networks Junos OS Evolved kernel use-after-free | 5.9CNA v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2023-22401 | Juniper Networks Junos OS Advanced Forwarding Toolkit Manager daemon improper array index validation | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22400 | Juniper Networks Junos OS Evolved PFE management daemon resource exhaustion | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22399 | Junos OS: QFX10K Series: PFE crash upon receipt of specific genuine packets when sFlow is enabled | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22398 | Junos OS and Junos OS Evolved: RPD might crash when MPLS ping is performed on BGP LSPs | 5.3CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2023-22397 | Juniper Networks Junos OS Evolved An resource exhaustion | 6.1CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2023-22396 | Juniper Networks Junos OS An resource exhaustion | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22395 | Juniper Networks Junos OS kernel memory leak | 6.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-22394 | Junos OS: SRX Series and MX Series: Memory leak due to receipt of specially crafted SIP calls | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22393 | Junos OS and Junos OS Evolved: RPD crash upon receipt of BGP route with invalid next-hop | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-22391 | Junos OS: ACX2K Series: Receipt of a high rate of specific traffic will lead to a denial of service | 7.5CNA v3.1 | 0.6% | 2023-01-13 | Fix |
| CVE-2023-21599 | Adobe InCopy Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21598 | Adobe InCopy Font Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21597 | Adobe InCopy Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21596 | Adobe InCopy improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21595 | Adobe InCopy Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21594 | Adobe InCopy Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-01-13 | Fix |
| CVE-2023-21592 | Adobe InDesign Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21591 | Adobe InDesign Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21590 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21589 | Adobe InDesign Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21588 | Adobe InDesign improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-01-13 | Fix |
| CVE-2023-21587 | Adobe InDesign Font Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-01-13 | Fix |
| CVE-2023-0295 | Launchpad Coming Soon and Maintenance Mode WordPress plugin cross-site scripting | 4.8v3.1 | 0.5% | 2023-01-13 | |
| CVE-2023-0294 | Mediamatic Media Library Folders WordPress plugin cross-site request forgery | 4.3NVD v3.1 | 0.4% | 2023-01-13 | |
| CVE-2023-0293 | Mediamatic Media Library Folders WordPress plugin missing authorization | 4.3v3.1 | 0.6% | 2023-01-13 | |
| CVE-2023-0289 | Cross-site scripting (XSS) Stored in craigk5n/WebCalendar | 5.4NVD v3.1 | 0.5% | 2023-01-13 | |
| CVE-2023-0288 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2023-0287 | ityouknow favorites-web comment cross-site scripting | 5.4v3.1 | 0.5% | 2023-01-13 | |
| CVE-2023-0283 | SourceCodester Online Flight Booking Management System review_search.php SQL injection | 9.8v3.1 | 0.7% | 2023-01-13 | |
| CVE-2023-0281 | SourceCodester Online Flight Booking Management System judge_panel.php SQL injection | 9.8v3.1 | 0.7% | 2023-01-13 | |
| CVE-2023-0221 | Trellix Application and Change Control improper privilege management | 4.4CNA v3.1 | 0.2% | 2023-01-13 | Fix |
| CVE-2023-0105 | Keycloak: Impersonation and lockout possible through incorrect handling of email trust | 6.5v3.1 | 0.7% | 2023-01-13 | Fix |
| CVE-2023-0091 | Keycloak has lack of validation of access token on client registrations endpoint | 3.8v3.1 | 0.5% | 2023-01-13 | Fix |
| CVE-2023-23457 | Upx: Segv on packlinuxelf64::invert_pt_dynamic in p_lx_elf.cpp | 5.5NVD v3.1 | 0.3% | 2023-01-12 | Fix |
| CVE-2023-23456 | Upx: Heap-buffer-overflow in packtmt::pack | 5.5NVD v3.1 | 0.4% | 2023-01-12 | Fix |
| CVE-2023-23455 | Linux kernel type confusion | 5.5NVD v3.1 | 0.3% | 2023-01-12 | Fix |
| CVE-2023-23454 | Linux kernel type confusion | 5.5NVD v3.1 | 0.3% | 2023-01-12 | Fix |
| CVE-2023-22601 | InHand Networks InRouter302 insufficient randomness | 8.6NVD v3.1 | 0.6% | 2023-01-12 | Fix |
| CVE-2023-22600 | InHand Networks InRouter302 improper access control | 8.1NVD v3.1 | 0.5% | 2023-01-12 | Fix |
| CVE-2023-22599 | InHand Networks InRouter302 predictable password hash salt | 9.1v3.1 | 0.3% | 2023-01-12 | Fix |
| CVE-2023-22598 | InHand Networks InRouter302 OS command injection | 7.2v3.1 | 1.6% | 2023-01-12 | Fix |
| CVE-2023-22597 | InHand Networks InRouter302 cleartext transmission of sensitive information | 5.9v3.1 | 0.5% | 2023-01-12 | Fix |
| CVE-2023-22488 | Missing authorization in Flarum | 6.8CNA v3.1 | 0.4% | 2023-01-12 | Fix |
| CVE-2023-0258 | SourceCodester Online Food Ordering System Category List cross-site scripting | 6.1v3.1 | 0.4% | 2023-01-12 | |
| CVE-2023-0257 | SourceCodester Online Food Ordering System menu form unrestricted upload | 9.8v3.1 | 0.5% | 2023-01-12 | |
| CVE-2023-0256 | SourceCodester Online Food Ordering System Login page SQL injection | 9.8v3.1 | 0.5% | 2023-01-12 | |
| CVE-2023-0254 | Simple Membership WP user Import WordPress plugin authenticated (Admin+) SQL injection | 4.9NVD v3.1 | 0.9% | 2023-01-12 | Fix |
| CVE-2023-0247 | Uncontrolled search path element in bits-and-blooms/Bloom | 7.8v3.1 | 0.4% | 2023-01-12 | Fix |
| CVE-2023-0246 | earclink Espcms content cross-site scripting | 5.4v3.1 | 0.6% | 2023-01-12 | |
| CVE-2023-0245 | SourceCodester Online Flight Booking Management System add_contestant.php SQL injection | 9.8v3.1 | 0.7% | 2023-01-12 | |
| CVE-2023-0244 | TuziCMS KefuController.class.php delall SQL injection | 9.8v3.1 | 0.8% | 2023-01-12 | |
| CVE-2023-0243 | TuziCMS Article Module ArticleController.class.php index SQL injection | 9.8v3.1 | 0.7% | 2023-01-12 | |
| CVE-2023-0227 | Insufficient session expiration in pyload/pyload | 6.5NVD v3.1 | 0.7% | 2023-01-12 | Fix |
| CVE-2023-0042 | GitLab open redirect | 6.1CNA v3.1 | 0.4% | 2023-01-12 | Fix |
| CVE-2023-22963 | Personnummer/dart vulnerable to improper input validation | 5.3v3.1 | 0.5% | 2023-01-11 | Fix |
| CVE-2023-22959 | Webchess SQL injection | 8.8v3.1 | 13.7% | 2023-01-11 | |
| CVE-2023-22958 | syracom Secure Login open redirect | 6.1v3.1 | 0.4% | 2023-01-11 | |
| CVE-2023-22952 | Multiple SugarCRM Products remote code execution | 8.8v3.1 | 80.1% | 2023-01-11 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-22947 | Shibboleth Service Provider uncontrolled search path | 7.3v3.1 | 0.3% | 2023-01-11 | |
| CVE-2023-22945 | mediawiki incorrect authorization | 4.3v3.1 | 0.5% | 2023-01-11 | Fix |
| CVE-2023-22492 | ZITADEL refresh token insufficient session expiration | 5.9CNA v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-22487 | flarum framework post mentions can be used to read any post on the forum without access control | 7.7CNA v3.1 | 0.7% | 2023-01-11 | Fix |
| CVE-2023-20532 | AMD 2nd Gen EPYC SMU improper input validation | 5.3v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-20531 | AMD 2nd Gen EPYC denial of service | 7.5v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-20530 | AMD 3rd Gen EPYC SMU improper input validation | 7.5v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-20529 | AMD 2nd Gen EPYC denial of service | 7.5v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-20528 | AMD 2nd Gen EPYC SMU improper input validation | 2.4v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2023-20527 | AMD 1st Gen EPYC denial of service | 6.5v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-20525 | AMD 2nd Gen EPYC denial of service | 6.5v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-20523 | AMD 2nd Gen EPYC ASP time-of-check time-of-use race condition | 5.7v3.1 | 0.2% | 2023-01-11 | Fix |
| CVE-2023-20522 | AMD 2nd Gen EPYC ASP improper input validation | 7.5v3.1 | 0.6% | 2023-01-11 | Fix |
| CVE-2023-22911 | mediawiki cross-site scripting | 6.1v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-22909 | mediawiki denial of service | 5.3v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-22903 | librephotos improper access control | 9.8v3.1 | 0.7% | 2023-01-10 | |
| CVE-2023-22899 | Zip4j origin validation error | 5.9v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-22898 | CIRCL pandora decompression bomb | 6.5v3.1 | 0.6% | 2023-01-10 | |
| CVE-2023-22895 | bzip2 allows attackers to cause a denial of service | 7.5v3.1 | 1.2% | 2023-01-10 | Fix |
| CVE-2023-22479 | KubePi vulnerable to session fixation attack | 7.5CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-22469 | Nextcloud Deck card vulnerable to data leak to unauthorized users via reference preview cache | 5.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-22320 | OpenAM consortium OpenAM Web Policy Agent (OpenAM Consortium Edition) path traversal | 7.5v3.1 | 0.7% | 2023-01-10 | |
| CVE-2023-21793 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21792 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21791 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21790 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21789 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21788 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21787 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21786 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21785 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21784 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21783 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 1.1% | 2023-01-10 | Fix |
| CVE-2023-21782 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21781 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21780 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21779 | Microsoft Visual Studio Code remote code execution | 7.8CNA v3.1 | 2.3% | 2023-01-10 | Fix |
| CVE-2023-21776 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 1.0% | 2023-01-10 | Fix |
| CVE-2023-21774 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21773 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21772 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21771 | Microsoft Windows Local Session Manager (LSM) elevation of privilege | 7.0CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-21768 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.8CNA v3.1 | 65.4% | 2023-01-10 | Exploit codeFix |
| CVE-2023-21767 | Microsoft Windows Overlay Filter elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21766 | Microsoft Windows Overlay Filter information disclosure | 4.7CNA v3.1 | 0.9% | 2023-01-10 | Exploit codeFix |
| CVE-2023-21765 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21764 | Microsoft Exchange Server elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21763 | Microsoft Exchange Server elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21762 | Microsoft Exchange Server spoofing | 8.0CNA v3.1 | 1.6% | 2023-01-10 | Fix |
| CVE-2023-21761 | Microsoft Exchange Server information disclosure | 7.5CNA v3.1 | 1.6% | 2023-01-10 | Fix |
| CVE-2023-21760 | Microsoft Windows Print Spooler elevation of privilege | 7.1CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21759 | Microsoft Windows Smart Card Resource Management Server security feature bypass | 3.3CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21758 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 92.5% | 2023-01-10 | Fix |
| CVE-2023-21757 | Microsoft Windows Layer 2 Tunneling Protocol (L2TP) denial of service | 7.5CNA v3.1 | 2.0% | 2023-01-10 | Fix |
| CVE-2023-21755 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21754 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21753 | Microsoft Event Tracing for Windows information disclosure | 5.5CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21752 | Microsoft Windows Backup service elevation of privilege | 7.1CNA v3.1 | 5.3% | 2023-01-10 | Exploit codeFix |
| CVE-2023-21750 | Microsoft Windows Kernel elevation of privilege | 7.1CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21749 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2023-21748 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2023-21747 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2023-21746 | Microsoft Windows NTLM elevation of privilege | 7.8CNA v3.1 | 2.4% | 2023-01-10 | Exploit codeFix |
| CVE-2023-21745 | Microsoft Exchange Server spoofing | 8.0CNA v3.1 | 1.5% | 2023-01-10 | Fix |
| CVE-2023-21744 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 2.8% | 2023-01-10 | Fix |
| CVE-2023-21743 | Microsoft SharePoint server security feature bypass | 5.3CNA v3.1 | 1.1% | 2023-01-10 | Fix |
| CVE-2023-21742 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 55.8% | 2023-01-10 | Emerging ThreatsExploit codeFix |
| CVE-2023-21741 | Microsoft Office Visio information disclosure | 7.1CNA v3.1 | 1.8% | 2023-01-10 | Fix |
| CVE-2023-21739 | Microsoft Windows Bluetooth driver elevation of privilege | 7.0CNA v3.1 | 0.6% | 2023-01-10 | Exploit codeFix |
| CVE-2023-21738 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21737 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21736 | Microsoft Office Visio remote code execution | 7.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21735 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-21734 | Microsoft Office remote code execution | 7.8CNA v3.1 | 0.9% | 2023-01-10 | Fix |
| CVE-2023-21733 | Microsoft Windows Bind Filter driver elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-01-10 | Fix |
| CVE-2023-21732 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.4% | 2023-01-10 | Fix |
| CVE-2023-21730 | Microsoft Cryptographic services elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21728 | Microsoft Windows Netlogon denial of service | 7.5CNA v3.1 | 2.0% | 2023-01-10 | Fix |
| CVE-2023-21726 | Microsoft Windows Credential Manager User interface elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21725 | Microsoft Windows Malicious Software Removal Tool elevation of privilege | 6.3CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-21724 | Microsoft DWM Core library elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21683 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 2.0% | 2023-01-10 | Fix |
| CVE-2023-21682 | Microsoft Windows Point-to-Point Protocol (PPP) information disclosure | 5.3CNA v3.1 | 1.4% | 2023-01-10 | Fix |
| CVE-2023-21681 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.4% | 2023-01-10 | Fix |
| CVE-2023-21680 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21679 | Microsoft Windows Layer 2 Tunneling Protocol (L2TP) remote code execution | 8.1CNA v3.1 | 1.1% | 2023-01-10 | Fix |
| CVE-2023-21678 | Microsoft Windows Print Spooler elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21677 | Microsoft Windows Internet Key Exchange (IKE) extension denial of service | 7.5CNA v3.1 | 2.0% | 2023-01-10 | Fix |
| CVE-2023-21676 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) remote code execution | 8.8CNA v3.1 | 1.5% | 2023-01-10 | Fix |
| CVE-2023-21675 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-01-10 | Fix |
| CVE-2023-21674 | Microsoft Windows Advanced Local Procedure Call (ALPC) privilege escalation | 8.8CNA v3.1 | 41.0% | 2023-01-10 | KEVExploit codeFix |
| CVE-2023-21563 | Microsoft Windows BitLocker security feature bypass | 6.8CNA v3.1 | 1.5% | 2023-01-10 | Exploit codeKCVFix |
| CVE-2023-21561 | Microsoft Cryptographic services elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-21560 | Microsoft Windows Boot Manager security feature bypass | 6.6CNA v3.1 | 1.1% | 2023-01-10 | Exploit codeFix |
| CVE-2023-21559 | Microsoft Windows Cryptographic information disclosure | 5.5CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21558 | Microsoft Windows Error Reporting service elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-21557 | Microsoft Windows Lightweight Directory Access Protocol (LDAP) denial of service | 7.5CNA v3.1 | 2.0% | 2023-01-10 | Fix |
| CVE-2023-21556 | Microsoft Windows Layer 2 Tunneling Protocol (L2TP) remote code execution | 8.1CNA v3.1 | 1.5% | 2023-01-10 | Fix |
| CVE-2023-21555 | Microsoft Windows Layer 2 Tunneling Protocol (L2TP) remote code execution | 8.1CNA v3.1 | 1.1% | 2023-01-10 | Fix |
| CVE-2023-21552 | Microsoft Windows GDI elevation of privilege | 7.8CNA v3.1 | 3.5% | 2023-01-10 | Fix |
| CVE-2023-21551 | Microsoft Cryptographic services elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-21550 | Microsoft Windows Cryptographic information disclosure | 5.5CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21549 | Microsoft Windows SMB Witness service elevation of privilege | 8.8CNA v3.1 | 1.4% | 2023-01-10 | Fix |
| CVE-2023-21548 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution | 8.1CNA v3.1 | 1.1% | 2023-01-10 | Fix |
| CVE-2023-21547 | Microsoft Windows internet Key Exchange (IKE) protocol denial of service | 7.5CNA v3.1 | 89.3% | 2023-01-10 | Fix |
| CVE-2023-21546 | Microsoft Windows Layer 2 Tunneling Protocol (L2TP) remote code execution | 8.1CNA v3.1 | 1.1% | 2023-01-10 | Fix |
| CVE-2023-21543 | Microsoft Windows Layer 2 Tunneling Protocol (L2TP) remote code execution | 8.1CNA v3.1 | 1.7% | 2023-01-10 | Fix |
| CVE-2023-21542 | Microsoft Windows Installer elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-01-10 | Fix |
| CVE-2023-21541 | Microsoft Windows Task Scheduler elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21540 | Microsoft Windows Cryptographic information disclosure | 5.5CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21539 | Microsoft Windows Authentication remote code execution | 7.5CNA v3.1 | 1.2% | 2023-01-10 | Fix |
| CVE-2023-21538 | Microsoft .NET denial of service | 7.5CNA v3.1 | 2.8% | 2023-01-10 | Fix |
| CVE-2023-21537 | Microsoft Message Queuing (MSMQ) elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-01-10 | Exploit codeFix |
| CVE-2023-21536 | Microsoft Event Tracing for Windows information disclosure | 4.7CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-21535 | Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution | 8.1CNA v3.1 | 1.1% | 2023-01-10 | Fix |
| CVE-2023-21532 | Microsoft Windows GDI elevation of privilege | 7.0CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-21531 | Microsoft Azure Service Fabric Container elevation of privilege | 7.0CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-21527 | Microsoft Windows iSCSI service denial of service | 7.5CNA v3.1 | 2.0% | 2023-01-10 | Fix |
| CVE-2023-21525 | Microsoft Windows Remote Procedure Call Runtime denial of service | 5.3CNA v3.1 | 1.5% | 2023-01-10 | Fix |
| CVE-2023-21524 | Microsoft Windows Local Security Authority (LSA) elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-0162 | CPO Companion WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0141 | Google Chrome CORS insufficient policy enforcement | 4.3v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0140 | Google Chrome in File System API inappropriate implementation | 6.5v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0139 | Google Chrome improper input validation | 6.5v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0138 | Google Chrome libphonenumber heap-based buffer overflow | 8.8v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-0137 | Google Chrome Platform Apps heap-based buffer overflow | 8.8v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0136 | Google Chrome in Fullscreen API inappropriate implementation | 8.8v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0135 | Google Chrome Cart use-after-free | 8.8v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0134 | Google Chrome Cart use-after-free | 8.8v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0133 | Google Chrome in Permission prompts inappropriate implementation | 6.5v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0132 | Google Chrome in Permission prompts inappropriate implementation | 6.5v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0131 | Google Chrome in iframe Sandbox inappropriate implementation | 6.5v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0130 | Google Chrome in Fullscreen API inappropriate implementation | 6.5v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0129 | Google Chrome Network service heap-based buffer overflow | 8.8v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0128 | Google Chrome Overview Mode use-after-free | 8.8v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0023 | Information disclosure in SAP Bank Account Management (Manage Banks) | 4.5CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0022 | Code injection vulnerability in SAP BusinessObjects Business Intelligence platform | 9.9CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-0018 | Cross-site scripting vulnerability in SAP BusinessObjects Business Intelligence Platform | 10.0CNA v3.1 | 0.5% | 2023-01-10 | Fix |
| CVE-2023-0017 | Improper access control in SAP NetWeaver AS for Java | 9.4CNA v3.1 | 15.7% | 2023-01-10 | Fix |
| CVE-2023-0016 | SQL injection vulnerability in SAP Business Planning and Consolidation MS | 9.9CNA v3.1 | 0.6% | 2023-01-10 | Fix |
| CVE-2023-0015 | Cross-site scripting vulnerability in SAP BusinessObjects Business Intelligence | 4.6CNA v3.1 | 0.3% | 2023-01-10 | Fix |
| CVE-2023-0014 | SAP NetWeaver ABAP Server and ABAP Platform authentication bypass by replay | 9.0CNA v3.1 | 0.7% | 2023-01-10 | Fix |
| CVE-2023-0013 | Cross-site scripting (XSS) vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform | 6.1CNA v3.1 | 0.4% | 2023-01-10 | Fix |
| CVE-2023-0012 | Local privilege escalation in SAP Host Agent (Windows) | 6.4CNA v3.1 | 0.2% | 2023-01-10 | Fix |
| CVE-2023-22477 | Mercurius is vulnerable to denial of service (DoS) when using subscriptions | 5.3CNA v3.1 | 1.1% | 2023-01-09 | Fix |
| CVE-2023-22473 | Nextcloud security-advisories passcode bypass on Talk-Android app | 2.1CNA v3.1 | 0.6% | 2023-01-09 | Fix |
| CVE-2023-22472 | Nextcloud Deck Desktop client is vulnerable to cross-site request forgery (CSRF) via malicious link | 5.3CNA v3.1 | 0.2% | 2023-01-09 | |
| CVE-2023-0125 | Control iD Gerencia Web Web interface cross-site scripting | 6.1v3.1 | 0.5% | 2023-01-09 | |
| CVE-2023-0036 | OpenHarmony misc subsystem authentication bypass | 6.5CNA v3.1 | 0.2% | 2023-01-09 | |
| CVE-2023-0035 | OpenHarmony communication subsystem authentication bypass | 6.5CNA v3.1 | 0.2% | 2023-01-09 | |
| CVE-2023-0114 | Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on disk | 5.5v3.1 | 0.1% | 2023-01-07 | |
| CVE-2023-0113 | Netis Netcore Router Backup param.file.tgz information disclosure | 7.5v3.1 | 0.8% | 2023-01-07 | |
| CVE-2023-0112 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.6% | 2023-01-07 | Fix |
| CVE-2023-0111 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4v3.1 | 0.5% | 2023-01-07 | Fix |
| CVE-2023-0110 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.5% | 2023-01-07 | Fix |
| CVE-2023-0108 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.5% | 2023-01-07 | Fix |
| CVE-2023-0107 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4v3.1 | 0.5% | 2023-01-07 | Fix |
| CVE-2023-0106 | Cross-site scripting (XSS) Stored in usememos/memos | 5.4NVD v3.1 | 0.6% | 2023-01-07 | Fix |
| CVE-2023-22671 | NSA Ghidra command injection | 9.8v3.1 | 2.9% | 2023-01-06 | |
| CVE-2023-22475 | thinkst canarytokens cross-site scripting in Canarytoken history | 6.3CNA v3.1 | 0.5% | 2023-01-06 | Fix |
| CVE-2023-22626 | PgHero allows information disclosure through EXPLAIN feature | 7.5v3.1 | 0.8% | 2023-01-05 | Fix |
| CVE-2023-22622 | WordPress wp-cron.php vulnerability | 5.3v3.1 | 1.7% | 2023-01-05 | Exploit codeFix |
| CVE-2023-22455 | Discourse vulnerable to cross-site scripting through tag descriptions | 6.8CNA v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2023-22454 | Discourse vulnerable to cross-site scripting through pending post titles descriptions | 8.0CNA v3.1 | 0.6% | 2023-01-05 | Fix |
| CVE-2023-22453 | Discourse vulnerable to exposure of user post counts per topic to unauthorized users | 5.3CNA v3.1 | 0.6% | 2023-01-05 | Fix |
| CVE-2023-0088 | Swifty Page Manager WordPress plugin cross-site request forgery | 8.8v3.1 | 0.6% | 2023-01-05 | |
| CVE-2023-0087 | Swifty Page Manager WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.6% | 2023-01-05 | |
| CVE-2023-0086 | JetWidgets for Elementor WordPress plugin cross-site request forgery to settings update | 6.5v3.1 | 0.3% | 2023-01-05 | Fix |
| CVE-2023-0077 | Synology Router Manager (SRM) CGI component integer overflow | 6.5CNA v3.1 | 0.9% | 2023-01-05 | Fix |
| CVE-2023-0057 | Improper restriction of rendered UI layers or frames in pyload/pyload | 6.1v3.1 | 0.5% | 2023-01-05 | Fix |
| CVE-2023-22467 | moment luxon luxon.js inefficient regular expression complexity | 7.5CNA v3.1 | 1.7% | 2023-01-04 | Fix |
| CVE-2023-22466 | Tokio's reject_remote_clients configuration may get dropped when creating a Windows named pipe | 5.4CNA v3.1 | 0.6% | 2023-01-04 | Fix |
| CVE-2023-22465 | Http4s has fatal error parsing User-Agent and Server headers | 7.5CNA v3.1 | 0.8% | 2023-01-04 | Fix |
| CVE-2023-22464 | ViewVC XSS vulnerability in revision view changed path copyfrom locations | 5.4CNA v3.1 | 0.6% | 2023-01-04 | Fix |
| CVE-2023-22463 | KubePi's Hard-coded Jwtsigkeys allows malicious actor to login with a forged JWT token | 9.8CNA v3.0 | 69.7% | 2023-01-04 | NucleiFix |
| CVE-2023-22461 | sanitize-svg Filter Bypass allows cross-site scripting (XSS) | 7.6CNA v3.1 | 0.6% | 2023-01-04 | Fix |
| CVE-2023-22460 | go-ipld-prime json codec may panic if asked to encode bytes | 7.5CNA v3.1 | 1.1% | 2023-01-04 | Fix |
| CVE-2023-22457 | XWiki CKEditor.HTMLConverter vulnerable to remote code execution via cross-site request forgery | 9.1CNA v3.1 | 18.7% | 2023-01-04 | Fix |
| CVE-2023-0055 | Sensitive Cookie in HTTPS Session without Secure attribute in pyload/pyload | 5.3v3.1 | 0.4% | 2023-01-04 | Fix |
| CVE-2023-0054 | Out-of-bounds write in Vim/Vim | 7.8v3.1 | 0.5% | 2023-01-04 | Fix |
| CVE-2023-0051 | Heap-based buffer overflow in Vim/Vim | 7.8v3.1 | 0.5% | 2023-01-04 | Fix |
| CVE-2023-0049 | Out-of-bounds read in Vim/Vim | 7.8v3.1 | 0.6% | 2023-01-04 | Fix |
| CVE-2023-0048 | Code injection in lirantal/Daloradius | 8.8v3.1 | 30.1% | 2023-01-04 | |
| CVE-2023-0046 | Improper Restriction of Names for files and other Resources in lirantal/Daloradius | 7.2v3.1 | 1.0% | 2023-01-04 | |
| CVE-2023-22456 | ViewVC XSS vulnerability in revision view changed paths | 6.1CNA v3.1 | 0.7% | 2023-01-03 | Fix |
| CVE-2023-0038 | Survey Maker Best WordPress Survey plugin unauthenticated stored cross-site scripting | 6.1NVD v3.1 | 0.7% | 2023-01-03 | Fix |
| CVE-2023-22452 | Improper input validation in kenny2automate | 6.5CNA v3.1 | 0.5% | 2023-01-02 | Fix |
| CVE-2023-22451 | Weak password requirements in Kiwi TCMS | 6.5CNA v3.1 | 0.7% | 2023-01-02 | Fix |
| CVE-2023-22551 | FTP denial of service | 7.5v3.1 | 1.5% | 2023-01-01 | Exploit code |
| CVE-2023-0029 | Multilaser RE708 Telnet service denial of service | 7.5v3.1 | 1.0% | 2023-01-01 | |
| CVE-2023-0028 | Cross-site scripting (XSS) Stored in linagora/Twake | 5.4v3.1 | 56.0% | 2023-01-01 | Fix |