CVE-2023 records published in February 2023
This page lists the 1,199 CVE-2023 records published in February 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists eight of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 17614.7% of these records
- Listed in CISA KEV
- 80.7% of these records
- Reported exploited
- 20.2% of these records
- Detection signal
- 312.6% of these records
- Exploit code
- 665.5% of these records
- Actionable vendor fix
- 87673.1% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in February 2023 have had from about 44 months to about 45 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-27372 | SPIP deserialization of untrusted data | 9.8NVD v3.1 | 99.7% | 2023-02-28 | NucleiMetasploitExploit codeFix |
| CVE-2023-27371 | GNU libmicrohttpd out-of-bounds read | 5.9NVD v3.1 | 1.3% | 2023-02-28 | Fix |
| CVE-2023-27320 | sudo per-command chroot feature double free | 7.2v3.1 | 1.7% | 2023-02-28 | Fix |
| CVE-2023-27295 | OpenCATS cross-site request forgery | 5.4NVD v3.1 | 0.4% | 2023-02-28 | |
| CVE-2023-27294 | OpenCATS cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-02-28 | |
| CVE-2023-27293 | OpenCATS cross-site scripting | 6.1NVD v3.1 | 57.0% | 2023-02-28 | |
| CVE-2023-27292 | OpenCATS open redirect | 5.4NVD v3.1 | 1.0% | 2023-02-28 | Nuclei |
| CVE-2023-26256 | Stagil Navigation path traversal | 7.5v3.1 | 11.6% | 2023-02-28 | NucleiExploit code |
| CVE-2023-26255 | Stagil Navigation path traversal | 7.5v3.1 | 47.9% | 2023-02-28 | NucleiExploit code |
| CVE-2023-26105 | Mde utilities contains prototype pollution | 7.5v3.1 | 1.3% | 2023-02-28 | |
| CVE-2023-25807 | DataEase dashboard has a stored XSS | 7.2CNA v3.1 | 0.5% | 2023-02-28 | Fix |
| CVE-2023-25575 | Secured properties in API Platform Core may be accessible within collections | 7.7CNA v3.1 | 0.6% | 2023-02-28 | Fix |
| CVE-2023-25540 | Dell PowerScale OneFS incorrect default permissions | 6.0CNA v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2023-25432 | Online Reviewer Management System SQL injection | 7.2v3.1 | 0.7% | 2023-02-28 | |
| CVE-2023-25431 | Online Reviewer Management System cross-site scripting | 4.8v3.1 | 0.5% | 2023-02-28 | |
| CVE-2023-25266 | Docmosis tornado remote code execution | 8.8v3.1 | 1.6% | 2023-02-28 | Fix |
| CVE-2023-25265 | Docmosis tornado path traversal | 7.5v3.1 | 1.2% | 2023-02-28 | Fix |
| CVE-2023-25264 | Docmosis tornado improper authentication | 7.5v3.1 | 1.0% | 2023-02-28 | Fix |
| CVE-2023-24419 | Formidable Forms WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-23992 | AutomatorWP WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-23983 | Responsive Vertical Icon Menu WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2023-23865 | Stripe Payments For WooCommerce by Checkout WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2023-23689 | Dell PowerScale OneFS resource exhaustion | 5.3CNA v3.1 | 0.6% | 2023-02-28 | Fix |
| CVE-2023-22999 | Linux kernel null pointer dereference | 5.5v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-22998 | Linux kernel interpretation conflict | 5.5v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-22997 | Linux kernel null pointer dereference | 5.5v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-22996 | Linux kernel missing resource release | 5.5v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-22995 | In the Linux kernel before 5.17, an error path in dwc3_qcom_acpi_register_core in drivers/usb/dwc3/dwc3-qcom.c lacks certain platform_device_put and kfree calls. | 7.8v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-20948 | Android AAVCAssembler.cpp out-of-bounds read | 7.5v3.1 | 0.4% | 2023-02-28 | Fix |
| CVE-2023-20946 | Android BluetoothSwitchPreferenceController.java insecure permissions | 9.8v3.1 | 0.5% | 2023-02-28 | Fix |
| CVE-2023-20945 | Android phNxpExtns_MifareStd.cpp out-of-bounds write | 7.8v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2023-20944 | Android ChooseTypeAndAccountActivity.java privilege escalation | 7.8v3.1 | 0.2% | 2023-02-28 | Exploit codeFix |
| CVE-2023-20943 | Android ActivityManagerService.java privilege escalation | 7.8v3.1 | 0.2% | 2023-02-28 | Exploit codeFix |
| CVE-2023-20940 | Android the Android operating system privilege escalation | 7.8v3.1 | 0.1% | 2023-02-28 | Fix |
| CVE-2023-20939 | Android looper_backed_event_loop.cpp privilege escalation | 7.8v3.1 | 0.1% | 2023-02-28 | Fix |
| CVE-2023-20938 | Android binder.c use-after-free | 7.8v3.1 | 0.3% | 2023-02-28 | Exploit codeFix |
| CVE-2023-20937 | Android the Android Linux kernel privilege escalation | 7.8v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2023-20934 | Android ServiceUtilities.cpp privilege escalation | 7.8v3.1 | 0.1% | 2023-02-28 | Fix |
| CVE-2023-20933 | Android MediaCodec.cpp privilege escalation | 7.8v3.1 | 0.2% | 2023-02-28 | Exploit codeFix |
| CVE-2023-20932 | Android EditInfoFragment.java information disclosure | 3.3v3.1 | 0.1% | 2023-02-28 | Fix |
| CVE-2023-20857 | VMware Workspace ONE Content missing authentication | 6.8v3.1 | 0.9% | 2023-02-28 | Fix |
| CVE-2023-1100 | SourceCodester Online Catering Reservation System POST parameter add_message.php SQL injection | 9.8v3.1 | 0.8% | 2023-02-28 | |
| CVE-2023-1099 | SourceCodester Online Student Management System edit-class-detail.php SQL injection | 9.8v3.1 | 0.7% | 2023-02-28 | |
| CVE-2023-1095 | Linux kernel netfilter subsystem null pointer dereference | 5.5NVD v3.1 | 0.2% | 2023-02-28 | Fix |
| CVE-2023-1081 | Cross-site scripting (XSS) Stored in microweber/microweber | 4.8v3.1 | 0.4% | 2023-02-28 | Fix |
| CVE-2023-1080 | GN Publisher WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.3% | 2023-02-28 | NucleiFix |
| CVE-2023-1065 | Snyk Kubernetes Monitor improper authentication | 5.3v3.1 | 0.6% | 2023-02-28 | Fix |
| CVE-2023-1028 | WP Meta SEO WordPress plugin cross-site request forgery via setIgnore | 4.3v3.1 | 0.3% | 2023-02-28 | Fix |
| CVE-2023-1027 | WP Meta SEO WordPress plugin missing authorization in checkAllCategoryInSitemap | 4.3v3.1 | 0.5% | 2023-02-28 | Fix |
| CVE-2023-1026 | WP Meta SEO WordPress plugin missing authorization in listPostsCategory | 4.3v3.1 | 0.6% | 2023-02-28 | Fix |
| CVE-2023-1024 | WP Meta SEO WordPress plugin missing authorization in regenerateSitemaps | 4.3v3.1 | 0.5% | 2023-02-28 | Fix |
| CVE-2023-1023 | WP Meta SEO WordPress plugin missing authorization in saveSitemapSettings | 4.3v3.1 | 0.5% | 2023-02-28 | Fix |
| CVE-2023-1022 | WP Meta SEO WordPress plugin missing authorization in wpmsGGSaveInformation | 4.3v3.1 | 0.6% | 2023-02-28 | Fix |
| CVE-2023-1018 | TPM2.0 vulnerable to out-of-bounds read | 5.5v3.1 | 5.6% | 2023-02-28 | Fix |
| CVE-2023-1017 | TPM2.0 vulnerable to out-of-bounds write | 7.8v3.1 | 1.3% | 2023-02-28 | Fix |
| CVE-2023-0511 | AM Java Policy Agent path traversal | 9.8v3.1 | 1.0% | 2023-02-28 | Fix |
| CVE-2023-0461 | Linux kernel There is a use-after-free | 7.8NVD v3.1 | 0.7% | 2023-02-28 | Fix |
| CVE-2023-0339 | AM Web Policy Agent path traversal | 9.8v3.1 | 1.0% | 2023-02-28 | Fix |
| CVE-2023-27266 | Mattermost disclosure of team owner email address when when accessing the teams API | 2.7CNA v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2023-27265 | Mattermost disclosure of team owner email address when regenerating Invite ID | 2.7CNA v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2023-27264 | Mattermost IDOR: Updating a playbook via the Playbooks API | 7.1CNA v3.1 | 0.5% | 2023-02-27 | |
| CVE-2023-27263 | Mattermost IDOR: Accessing playbook runs via the Playbooks Runs API | 4.3CNA v3.1 | 0.5% | 2023-02-27 | |
| CVE-2023-26762 | Smeup ERP unrestricted file upload | 8.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-26760 | Smeup ERP cleartext storage of sensitive information | 7.5v3.1 | 0.5% | 2023-02-27 | |
| CVE-2023-26759 | Smeup ERP OS command injection | 8.8v3.1 | 2.4% | 2023-02-27 | |
| CVE-2023-26758 | Smeup ERP path traversal | 7.5v3.1 | 0.9% | 2023-02-27 | |
| CVE-2023-26609 | Abus Tvip 20000-21150 arbitrary code execution | 7.2NVD v3.1 | 38.7% | 2023-02-27 | Exploit code |
| CVE-2023-26257 | COVESA dlt-daemon memory leak | 7.5v3.1 | 1.2% | 2023-02-27 | Fix |
| CVE-2023-26043 | geonode XML external entity (XXE) injection in GeoServer style upload functionality | 6.5CNA v3.1 | 0.8% | 2023-02-27 | Fix |
| CVE-2023-26042 | HTML/XSS injection possibilities in Part-DB | 6.1CNA v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2023-26041 | Nextcloud Talk messages can still be seen on conversation after expiring when cron is misconfigured | 2.6CNA v3.1 | 0.8% | 2023-02-27 | Fix |
| CVE-2023-25235 | Tenda AC500 out-of-bounds write | 7.5v3.1 | 11.1% | 2023-02-27 | |
| CVE-2023-25234 | Tenda AC500 out-of-bounds write | 9.8v3.1 | 16.6% | 2023-02-27 | Exploit code |
| CVE-2023-25233 | Tenda AC500 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-25231 | Tenda W30E out-of-bounds write | 9.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-24656 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-24654 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-24653 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-24652 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-24651 | oretnom23 Simple Customer Relationship Management System cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-27 | |
| CVE-2023-24364 | oretnom23 Simple Customer Relationship Management System SQL injection | 8.8v3.1 | 1.0% | 2023-02-27 | |
| CVE-2023-24258 | SPIP SQL injection | 9.8v3.1 | 1.6% | 2023-02-27 | Fix |
| CVE-2023-24253 | Domoticalabs Ikon Server SQL injection | 9.8v3.1 | 0.6% | 2023-02-27 | |
| CVE-2023-24251 | Wangeditor cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-27 | |
| CVE-2023-24249 | Laravel-admin has arbitrary file upload | 7.2v3.1 | 2.4% | 2023-02-27 | Exploit code |
| CVE-2023-24206 | Davinci SQL injection | 9.8v3.1 | 0.7% | 2023-02-27 | |
| CVE-2023-23531 | Apple macOS out-of-bounds write | 8.6v3.1 | 1.8% | 2023-02-27 | Exploit codeFix |
| CVE-2023-23530 | Apple macOS arbitrary code execution | 8.6v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2023-23529 | Apple Multiple Products WebKit type confusion | 8.8v3.1 | 9.5% | 2023-02-27 | KEVFix |
| CVE-2023-23524 | Apple watchOS denial of service | 7.5v3.1 | 0.6% | 2023-02-27 | Fix |
| CVE-2023-23522 | Apple macOS insecure storage of sensitive information | 5.5v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2023-23520 | Apple tvOS time-of-check time-of-use race condition | 5.9v3.1 | 0.8% | 2023-02-27 | Fix |
| CVE-2023-23519 | Apple tvOS out-of-bounds write | 7.5v3.1 | 0.9% | 2023-02-27 | Fix |
| CVE-2023-23518 | Apple tvOS out-of-bounds write | 8.8v3.1 | 0.9% | 2023-02-27 | Fix |
| CVE-2023-23517 | Apple tvOS arbitrary code execution | 8.8v3.1 | 0.9% | 2023-02-27 | Fix |
| CVE-2023-23514 | Apple macOS use-after-free | 7.8v3.1 | 0.7% | 2023-02-27 | Fix |
| CVE-2023-23513 | Apple macOS buffer overflow | 9.8v3.1 | 1.6% | 2023-02-27 | Fix |
| CVE-2023-23512 | Apple tvOS denial of service | 6.5v3.1 | 0.7% | 2023-02-27 | Fix |
| CVE-2023-23511 | Apple tvOS information disclosure | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23510 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23508 | Apple macOS improper access control | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23507 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23506 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23505 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23504 | Apple tvOS out-of-bounds write | 7.8v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2023-23503 | Apple tvOS authentication bypass | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23502 | Apple tvOS out-of-bounds read | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23501 | Apple macOS resource exposure | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23500 | Apple tvOS information disclosure | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23499 | Apple tvOS information disclosure | 5.5v3.1 | 0.4% | 2023-02-27 | Fix |
| CVE-2023-23498 | Apple macOS logic flaw | 3.3v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23497 | Apple macOS improper privilege management | 7.8v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23496 | Apple tvOS code injection | 8.8v3.1 | 0.9% | 2023-02-27 | Fix |
| CVE-2023-23493 | Apple macOS improper authentication | 3.3v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-23158 | PHPGurukul Art Gallery Management System stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-27 | |
| CVE-2023-23157 | PHPGurukul Art Gallery Management System stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-27 | |
| CVE-2023-23156 | PHPGurukul Art Gallery Management System SQL injection | 9.8v3.1 | 3.7% | 2023-02-27 | Exploit code |
| CVE-2023-23155 | PHPGurukul Art Gallery Management System SQL injection | 9.8v3.1 | 1.1% | 2023-02-27 | |
| CVE-2023-23109 | Crasm divide by zero | 7.5v3.1 | 0.7% | 2023-02-27 | |
| CVE-2023-23108 | Crasm null pointer dereference | 7.5v3.1 | 0.9% | 2023-02-27 | |
| CVE-2023-23080 | Tenda It7-lcs command injection | 9.8v3.1 | 2.5% | 2023-02-27 | |
| CVE-2023-22860 | IBM Cloud Pak for Business Automation cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-02-27 | Fix |
| CVE-2023-22636 | Fortinet FortiWeb improper authorization | 6.6CNA v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-1070 | External control of file name or path in nilsteampassnet/TeamPass | 7.1v3.1 | 0.8% | 2023-02-27 | Fix |
| CVE-2023-1068 | Download Read More Excerpt Link WordPress plugin cross-site request forgery to settings update | 4.3v3.1 | 0.3% | 2023-02-27 | Fix |
| CVE-2023-1067 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.4% | 2023-02-27 | Fix |
| CVE-2023-1063 | SourceCodester Doctors Appointment System parameter patient.php SQL injection | 8.8v3.1 | 0.7% | 2023-02-27 | |
| CVE-2023-1062 | SourceCodester Doctors Appointment System parameter add-new.php SQL injection | 8.8v3.1 | 0.7% | 2023-02-27 | |
| CVE-2023-1061 | SourceCodester Doctors Appointment System edit-doc.php SQL injection | 8.8v3.1 | 0.8% | 2023-02-27 | |
| CVE-2023-1059 | SourceCodester Doctors Appointment System parameter doctors.php SQL injection | 8.8v3.1 | 0.8% | 2023-02-27 | |
| CVE-2023-1058 | SourceCodester Doctors Appointment System create-account.php SQL injection | 8.8v3.1 | 0.8% | 2023-02-27 | |
| CVE-2023-1057 | SourceCodester Doctors Appointment System login.php edoc SQL injection | 8.8v3.1 | 0.7% | 2023-02-27 | |
| CVE-2023-1056 | SourceCodester Doctors Appointment System patient.php SQL injection | 8.8v3.1 | 0.7% | 2023-02-27 | |
| CVE-2023-1055 | Red Hat Directory Server information disclosure | 5.5v3.1 | 0.2% | 2023-02-27 | Fix |
| CVE-2023-1054 | SourceCodester Music Gallery Site SQL injection | 9.8v3.1 | 0.5% | 2023-02-27 | |
| CVE-2023-1053 | SourceCodester Music Gallery Site view_category.php SQL injection | 9.8v3.1 | 0.5% | 2023-02-27 | |
| CVE-2023-0552 | Pie Register WordPress plugin open redirect | 5.4NVD v3.1 | 24.3% | 2023-02-27 | NucleiFix |
| CVE-2023-0548 | Namaste! LMS WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2023-0543 | Arigato Autoresponder and Newsletter WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2023-0539 | GS Insever Portfolio WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2023-0535 | Donation Block For PayPal WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-27 | Fix |
| CVE-2023-0487 | My Sticky Elements WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.5% | 2023-02-27 | Fix |
| CVE-2023-0381 | GigPress WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 1.3% | 2023-02-27 | Fix |
| CVE-2023-0334 | ShortPixel Adaptive Images WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-02-27 | NucleiFix |
| CVE-2023-0331 | Correos Oficial WordPress plugin unauthenticated arbitrary file download | 7.5NVD v3.1 | 0.8% | 2023-02-27 | |
| CVE-2023-0279 | Media Library Assistant WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.8% | 2023-02-27 | Fix |
| CVE-2023-0278 | GeoDirectory WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.8% | 2023-02-27 | Fix |
| CVE-2023-0230 | VK All in One Expansion Unit WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-27 | Fix |
| CVE-2023-0168 | Olevmedia Shortcodes WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-27 | |
| CVE-2023-0043 | Custom Add User WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-02-27 | |
| CVE-2023-26607 | Linux kernel out-of-bounds read | 7.1NVD v3.1 | 0.6% | 2023-02-26 | Fix |
| CVE-2023-26606 | Linux kernel use-after-free | 7.8v3.1 | 0.4% | 2023-02-26 | Fix |
| CVE-2023-26605 | Linux kernel use-after-free | 7.8v3.1 | 0.4% | 2023-02-26 | Fix |
| CVE-2023-26602 | ASUS Asmb8-ikvm Firmware command injection | 9.8NVD v3.1 | 17.4% | 2023-02-26 | Exploit code |
| CVE-2023-26091 | Frappant Forms Export frp_form_answers allows cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-26 | Fix |
| CVE-2023-1048 | TechPowerUp Ryzen DRAM Calculator WinRing0x64.sys initialization | 7.8v3.1 | 0.6% | 2023-02-26 | |
| CVE-2023-1047 | TechPowerUp RealTemp WinRing0x64.sys initialization | 7.8v3.1 | 0.4% | 2023-02-26 | |
| CVE-2023-1046 | MuYuCMS getFile.html server-side request forgery | 8.8v3.1 | 0.6% | 2023-02-26 | |
| CVE-2023-1045 | MuYuCMS filesdel.html path traversal | 8.1v3.1 | 0.9% | 2023-02-26 | |
| CVE-2023-1044 | MuYuCMS index.php path traversal | 8.8v3.1 | 1.1% | 2023-02-26 | |
| CVE-2023-1043 | MuYuCMS index.php path traversal | 4.3v3.1 | 0.7% | 2023-02-26 | |
| CVE-2023-1042 | SourceCodester Online Pet Shop We App update_status.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-02-26 | |
| CVE-2023-1041 | SourceCodester Simple Responsive Tourism Website rate_review.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-26 | |
| CVE-2023-1040 | SourceCodester Online Graduate Tracer System add_acc.php SQL injection | 9.8v3.1 | 0.6% | 2023-02-26 | |
| CVE-2023-1039 | SourceCodester Class and Exam Timetabling System POST parameter index3.php SQL injection | 8.8v3.1 | 0.8% | 2023-02-26 | |
| CVE-2023-1038 | SourceCodester Online Reviewer Management System questions-view.php SQL injection | 9.8v3.1 | 0.8% | 2023-02-26 | |
| CVE-2023-1037 | SourceCodester Dental Clinic Appointment Reservation System POST parameter login.php SQL injection | 9.8v3.1 | 0.9% | 2023-02-26 | |
| CVE-2023-1036 | SourceCodester Dental Clinic Appointment Reservation System signup.php cross-site scripting | 6.1v3.1 | 0.8% | 2023-02-26 | |
| CVE-2023-26550 | BMC Control-M SQL injection | 9.8v3.1 | 0.8% | 2023-02-25 | |
| CVE-2023-26545 | Linux kernel double free | 4.7v3.1 | 0.3% | 2023-02-25 | Fix |
| CVE-2023-26544 | Linux kernel use-after-free | 7.8v3.1 | 0.4% | 2023-02-25 | Fix |
| CVE-2023-26104 | Denial of service vulnerability in lite-web-server | 7.5v3.1 | 1.2% | 2023-02-25 | |
| CVE-2023-26103 | deno regular expression denial of service in Deno.upgradeWebSocket API | 7.5v3.1 | 1.2% | 2023-02-25 | Fix |
| CVE-2023-26039 | ZoneMinder vulnerable to OS command injection in daemonControl API | 7.1CNA v3.1 | 1.3% | 2023-02-25 | Exploit codeFix |
| CVE-2023-26038 | ZoneMinder contains local file inclusion vulnerability via `web/ajax/modal.php` | 5.4CNA v3.1 | 0.5% | 2023-02-25 | Fix |
| CVE-2023-26037 | ZoneMinder contains SQL injection via report_event_audit | 8.9CNA v3.1 | 0.6% | 2023-02-25 | Fix |
| CVE-2023-26036 | ZoneMinder contains local file inclusion | 8.1CNA v3.1 | 0.9% | 2023-02-25 | Fix |
| CVE-2023-26035 | ZoneMinder vulnerable to missing authorization | 7.2CNA v3.1 | 80.5% | 2023-02-25 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-26034 | ZoneMinder SQL injection | 9.6CNA v3.1 | 1.6% | 2023-02-25 | Fix |
| CVE-2023-26033 | Gentoo soko contains DoS attack based on SQL injection | 7.5CNA v3.1 | 0.6% | 2023-02-25 | Fix |
| CVE-2023-26032 | ZoneMinder contains SQL injection via malicious Jason Web Token | 8.9CNA v3.1 | 0.6% | 2023-02-25 | Fix |
| CVE-2023-25825 | ZoneMinder contains cross-site scripting via log viewing | 7.7CNA v3.1 | 0.7% | 2023-02-25 | Fix |
| CVE-2023-25821 | Nextcloud download permissions can be changed by resharer | 5.7CNA v3.1 | 0.9% | 2023-02-25 | Fix |
| CVE-2023-25816 | Nextcloud vulnerable to uncontrolled resource consumption | 4.3CNA v3.1 | 1.4% | 2023-02-25 | Fix |
| CVE-2023-1035 | SourceCodester Clinics Patient Management System update_user.php SQL injection | 8.8v3.1 | 0.7% | 2023-02-25 | |
| CVE-2023-1034 | Path traversal: \..\filename in salesagility/SuiteCRM | 8.8v3.1 | 26.2% | 2023-02-25 | Fix |
| CVE-2023-1033 | Cross-site request forgery (CSRF) in froxlor/froxlor | 8.8v3.1 | 0.3% | 2023-02-25 | Fix |
| CVE-2023-26468 | Cerebrate API key creation vulnerability | 9.1v3.1 | 0.6% | 2023-02-24 | |
| CVE-2023-26102 | rangy vulnerable to prototype pollution | 8.2v3.1 | 0.8% | 2023-02-24 | |
| CVE-2023-25956 | Apache Airflow AWS Provider: Arbitrary file read via AWS provider | 7.5v3.1 | 1.5% | 2023-02-24 | Fix |
| CVE-2023-25696 | Apache Airflow Hive Provider Beeline RCE | 9.8v3.1 | 2.0% | 2023-02-24 | Fix |
| CVE-2023-25693 | Sqoop Apache Airflow Provider remote code execution | 9.8v3.1 | 1.9% | 2023-02-24 | Fix |
| CVE-2023-25692 | Apache Airflow Google provider: Google Cloud Sql Provider denial of service | 7.5v3.1 | 1.8% | 2023-02-24 | Fix |
| CVE-2023-25691 | Apache Airflow Google provider: Google Cloud Sql Provider remote command execution | 9.8v3.1 | 1.6% | 2023-02-24 | Fix |
| CVE-2023-24189 | Bstek Urule An XML external entity injection | 9.8v3.1 | 1.2% | 2023-02-24 | |
| CVE-2023-23205 | MZ Automation lib60870 memory leak | 5.5v3.1 | 0.2% | 2023-02-24 | |
| CVE-2023-22427 | SHIRASAGI theme switching function stored cross-site scripting | 4.8v3.1 | 0.8% | 2023-02-24 | Fix |
| CVE-2023-22425 | SHIRASAGI Schedule function stored cross-site scripting | 5.4v3.1 | 0.8% | 2023-02-24 | Fix |
| CVE-2023-1030 | SourceCodester Online Boat Reservation System login.php cross-site scripting | 6.1v3.1 | 0.7% | 2023-02-24 | |
| CVE-2023-1029 | WP Meta SEO WordPress plugin cross-site request forgery via regenerateSitemaps | 4.3v3.1 | 0.3% | 2023-02-24 | Fix |
| CVE-2023-1010 | vox2png vox2png.c heap-based overflow | 5.5v3.1 | 0.4% | 2023-02-24 | |
| CVE-2023-1009 | DrayTek Vigor 2960 Web Management interface mainfunction.cgi sub_1DF14 path traversal | 5.5v3.1 | 15.7% | 2023-02-24 | Emerging Threats |
| CVE-2023-1008 | Twister Antivirus IoControlCode filmfd.sys 0x801120E4 denial of service | 5.5v3.1 | 0.4% | 2023-02-24 | |
| CVE-2023-1007 | Twister Antivirus IoControlCode filmfd.sys 0x801120E4 access control | 7.8v3.1 | 0.5% | 2023-02-24 | |
| CVE-2023-1006 | SourceCodester Medical Certificate Generator App New Record cross-site scripting | 5.4v3.1 | 0.3% | 2023-02-24 | |
| CVE-2023-1005 | JP1016 Markdown-Electron code injection | 7.8v3.1 | 0.4% | 2023-02-24 | |
| CVE-2023-1004 | MarkText WSH JScript code injection | 7.8v3.1 | 0.4% | 2023-02-24 | |
| CVE-2023-1002 | MuYuCMS index.php path traversal | 6.5v3.1 | 1.0% | 2023-02-24 | |
| CVE-2023-0999 | SourceCodester Sales Tracker Management System cross-site request forgery | 8.8v3.1 | 0.5% | 2023-02-24 | |
| CVE-2023-0998 | SourceCodester Alphaware Simple E-Commerce System Payment summary.php access control | 5.3v3.1 | 0.9% | 2023-02-24 | |
| CVE-2023-0997 | SourceCodester Moosikay E-Commerce System POST parameter order.php SQL injection | 8.8v3.1 | 0.9% | 2023-02-24 | |
| CVE-2023-0996 | struktur libheif buffer overflow | 7.8v3.1 | 0.3% | 2023-02-24 | Fix |
| CVE-2023-0995 | Cross-site scripting (XSS) Stored in unilogies/bumsys | 5.4v3.1 | 0.5% | 2023-02-24 | Fix |
| CVE-2023-0994 | Exposure of sensitive information to an unauthorized actor in francoisjacquet/RosarioSIS | 7.5v3.1 | 1.0% | 2023-02-24 | Fix |
| CVE-2023-0595 | Schneider Electric EcoStruxure Geo SCADA Expert 2019 log injection | 5.3CNA v3.1 | 0.4% | 2023-02-24 | Fix |
| CVE-2023-0586 | All in One SEO Pack WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 2.5% | 2023-02-24 | Fix |
| CVE-2023-0585 | All in One SEO Pack WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.8% | 2023-02-24 | Fix |
| CVE-2023-0481 | quarkus insecure temporary file | 3.3v3.1 | 0.2% | 2023-02-24 | Fix |
| CVE-2023-26462 | ThingsBoard hard-coded credentials | 8.1v3.1 | 1.1% | 2023-02-23 | Fix |
| CVE-2023-26326 | BuddyForms WordPress Plugin deserialization of untrusted data | 9.8NVD v3.1 | 3.8% | 2023-02-23 | Exploit codeKCVFix |
| CVE-2023-26325 | ReviewX WordPress Plugin SQL injection | 8.8NVD v3.1 | 0.9% | 2023-02-23 | Fix |
| CVE-2023-26303 | markdown-it-py crash on null assertions | 5.5NVD v3.1 | 0.2% | 2023-02-23 | Fix |
| CVE-2023-25824 | mod_gnutls contains infinite loop on request read timeout | 7.5CNA v3.1 | 1.1% | 2023-02-23 | Fix |
| CVE-2023-25823 | Gradio contains use of hard-coded credentials | 5.4CNA v3.1 | 0.6% | 2023-02-23 | Fix |
| CVE-2023-25621 | Apache Sling does not allow to handle i18n content in a secure way | 6.5v3.1 | 1.1% | 2023-02-23 | Fix |
| CVE-2023-24415 | AI ChatBot WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2023-24384 | Organization chart WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2023-24317 | Judging Management System unrestricted file upload | 8.1v3.1 | 1.4% | 2023-02-23 | Exploit code |
| CVE-2023-24212 | Tenda AX3 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-02-23 | |
| CVE-2023-24205 | Clash incorrect permission assignment | 9.8v3.1 | 1.3% | 2023-02-23 | |
| CVE-2023-24104 | Ubiquiti Networks UniFi Dream Machine Pro v7.2.95 allows attackers to bypass domain restrictions via crafted packets. | 9.8v3.1 | 0.8% | 2023-02-23 | |
| CVE-2023-23920 | Node.js Node An untrusted search path | 4.2v3.1 | 0.5% | 2023-02-23 | Fix |
| CVE-2023-23919 | Node.js Node denial of service | 7.5v3.1 | 2.2% | 2023-02-23 | Fix |
| CVE-2023-23918 | Node.js Node A privilege escalation | 7.5v3.1 | 2.0% | 2023-02-23 | Fix |
| CVE-2023-23917 | Rocket.Chat prototype pollution | 8.8v3.1 | 1.0% | 2023-02-23 | |
| CVE-2023-23916 | https://github.com/curl/curl An resource exhaustion | 6.5NVD v3.1 | 1.7% | 2023-02-23 | Fix |
| CVE-2023-23915 | https://github.com/curl/curl A cleartext transmission of sensitive information | 6.5NVD v3.1 | 0.9% | 2023-02-23 | Fix |
| CVE-2023-23914 | https://github.com/curl/curl A cleartext transmission of sensitive information | 9.1NVD v3.1 | 0.9% | 2023-02-23 | Fix |
| CVE-2023-23659 | MainWP Matomo Extension WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2023-23296 | Korenix Jetwave 2111 denial of service | 6.5v3.1 | 0.8% | 2023-02-23 | Fix |
| CVE-2023-23295 | Korenix Jetwave 2111 command injection | 8.8v3.1 | 3.8% | 2023-02-23 | Fix |
| CVE-2023-23294 | Korenix Jetwave 2111 command injection | 8.8v3.1 | 2.7% | 2023-02-23 | Fix |
| CVE-2023-22476 | MantisBT: Exposure of Private issues' summary to unauthorized users | 4.3CNA v3.1 | 0.6% | 2023-02-23 | Fix |
| CVE-2023-20089 | Cisco NX-OS System Software in ACI Mode Link Layer Discovery Protocol memory leak | 7.4CNA v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2023-20050 | Cisco NX-OS Software CLI command injection | 4.4CNA v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2023-20016 | Cisco FXOS Software and UCS Manager Software Configuration Backup Static Key vulnerability | 6.3CNA v3.1 | 0.1% | 2023-02-23 | Fix |
| CVE-2023-20015 | Cisco Unified Computing System OS command injection | 6.0CNA v3.1 | 0.2% | 2023-02-23 | Fix |
| CVE-2023-20012 | Cisco Nexus 9300-FX3 Series Fabric Extender for UCS Fabric Interconnects authentication bypass | 5.3CNA v3.1 | 0.3% | 2023-02-23 | Fix |
| CVE-2023-20011 | Cisco Application Policy Infrastructure Controller (APIC) cross-site request forgery | 8.8CNA v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2023-0988 | SourceCodester Online Pizza Ordering System cross-site request forgery | 8.8v3.1 | 0.5% | 2023-02-23 | |
| CVE-2023-0987 | SourceCodester Online Pizza Ordering System cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-23 | |
| CVE-2023-0986 | SourceCodester Sales Tracker Management System Edit User SQL injection | 9.8v3.1 | 0.5% | 2023-02-23 | |
| CVE-2023-0982 | SourceCodester Yoga Class Registration System Add Class Entry SQL injection | 9.8v3.1 | 0.5% | 2023-02-23 | |
| CVE-2023-0981 | SourceCodester Yoga Class Registration System Delete User SQL injection | 9.8v3.1 | 0.5% | 2023-02-23 | |
| CVE-2023-0980 | SourceCodester Yoga Class Registration System Status Update update_status.php SQL injection | 9.8v3.1 | 0.5% | 2023-02-23 | |
| CVE-2023-0939 | Multiple SQL injection on NTN Information Technologies' Online Services Software | 9.8v3.1 | 0.7% | 2023-02-23 | Fix |
| CVE-2023-0869 | The OpenNMS Group Meridian cross-site scripting in outage/list.htm | 5.8CNA v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2023-0868 | The OpenNMS Group Meridian stealing Cookies using reflected XSS via graph results | 6.7CNA v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2023-0867 | The OpenNMS Group Meridian multiple stored and reflected cross-site scripting in webapp | 6.7CNA v3.1 | 0.4% | 2023-02-23 | Fix |
| CVE-2023-0815 | The OpenNMS Group Meridian plaintext password Present in the Web logs | 6.8CNA v3.1 | 0.6% | 2023-02-23 | Fix |
| CVE-2023-0755 | PTC ThingWorx Edge C-SDK improper array index validation | 9.8v3.1 | 11.8% | 2023-02-23 | Fix |
| CVE-2023-0754 | PTC ThingWorx Edge C-SDK integer overflow | 9.8v3.1 | 2.9% | 2023-02-23 | Fix |
| CVE-2023-0597 | Linux kernel flaw possibility of memory leak | 5.5NVD v3.1 | 0.3% | 2023-02-23 | KCVFix |
| CVE-2023-0044 | Cross-site scripting in Quarkus | 6.1v3.1 | 0.6% | 2023-02-23 | Fix |
| CVE-2023-26314 | mono arbitrary code execution | 8.8v3.1 | 1.0% | 2023-02-22 | Fix |
| CVE-2023-26302 | markdown-it-py CLI crash on invalid UTF-8 characters | 5.5NVD v3.1 | 0.2% | 2023-02-22 | Fix |
| CVE-2023-26214 | TIBCO BusinessConnect reflected XSS | 7.3CNA v3.1 | 0.4% | 2023-02-22 | |
| CVE-2023-25813 | SQL injection via replacements in sequelize | 10.0CNA v3.1 | 1.4% | 2023-02-22 | Exploit codeFix |
| CVE-2023-25579 | Directory traversal in Nextcloud Server | 6.0CNA v3.1 | 0.5% | 2023-02-22 | Fix |
| CVE-2023-25154 | Cross-site scripting (XSS) of ActivityPub URI in Misskey | 7.1CNA v3.1 | 0.4% | 2023-02-22 | Fix |
| CVE-2023-24812 | misskey SQL injection of notes/search-by-tag | 8.8CNA v3.1 | 0.7% | 2023-02-22 | Fix |
| CVE-2023-24811 | Cross-site scripting (XSS) vulnerability using URL preview in Misskey | 7.1CNA v3.1 | 0.4% | 2023-02-22 | Fix |
| CVE-2023-24810 | Cross-site scripting (XSS) vulnerability using authentication callback in Misskey | 7.1CNA v3.1 | 0.4% | 2023-02-22 | Fix |
| CVE-2023-24114 | Typecho code injection | 9.8v3.1 | 1.4% | 2023-02-22 | |
| CVE-2023-24108 | Zetacomponents Mvctools hidden functionality | 9.8v3.1 | 1.4% | 2023-02-22 | |
| CVE-2023-24107 | Hour Of Code Python 2015 code injection | 9.8v3.1 | 1.2% | 2023-02-22 | |
| CVE-2023-24093 | H3C A210-g improper access control | 9.8v3.1 | 0.8% | 2023-02-22 | |
| CVE-2023-23063 | Cellinx Nvt Web Server path traversal | 7.5v3.1 | 2.4% | 2023-02-22 | Nuclei |
| CVE-2023-23040 | TP-Link TL-WR940N weak cryptographic algorithm | 7.5v3.1 | 0.4% | 2023-02-22 | |
| CVE-2023-23039 | Linux kernel race condition | 5.7v3.1 | 0.2% | 2023-02-22 | Fix |
| CVE-2023-22974 | openemr setup.php path traversal | 7.5v3.1 | 1.9% | 2023-02-22 | Exploit codeFix |
| CVE-2023-22973 | openemr interface/forms/LBF/new.php local file inclusion | 8.8v3.1 | 1.8% | 2023-02-22 | Fix |
| CVE-2023-22972 | openemr reflected cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-22 | Fix |
| CVE-2023-20858 | VMware Carbon Black App Control injection | 7.2v3.1 | 16.9% | 2023-02-22 | Fix |
| CVE-2023-20855 | VMware vRealize Orchestrator XML external entity injection | 8.8v3.1 | 1.3% | 2023-02-22 | Fix |
| CVE-2023-0966 | SourceCodester Online Eyewear Shop cross-site scripting | 8.8v3.1 | 0.8% | 2023-02-22 | |
| CVE-2023-0964 | SourceCodester Sales Tracker Management System view_product.php SQL injection | 8.1v3.1 | 0.5% | 2023-02-22 | |
| CVE-2023-0963 | SourceCodester Music Gallery Site POST Request Users.php access control | 9.8v3.1 | 4.7% | 2023-02-22 | Exploit code |
| CVE-2023-0962 | SourceCodester Music Gallery Site GET Request Master.php SQL injection | 8.8v3.1 | 1.7% | 2023-02-22 | Exploit code |
| CVE-2023-0961 | SourceCodester Music Gallery Site GET request view_music_details.php SQL injection | 9.8v3.1 | 1.9% | 2023-02-22 | Exploit code |
| CVE-2023-0960 | SeaCMS Picture Management config.ftp.php deserialization | 9.8v3.1 | 1.0% | 2023-02-22 | |
| CVE-2023-0949 | Cross-site scripting (XSS) Reflected in modoboa/modoboa | 4.8v3.1 | 0.5% | 2023-02-22 | Fix |
| CVE-2023-0947 | Path traversal in flatpressblog/FlatPress | 9.8v3.1 | 3.6% | 2023-02-22 | NucleiFix |
| CVE-2023-0941 | Google Chrome Prompts use-after-free | 8.8v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2023-0933 | Google Chrome PDF integer overflow | 8.8v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2023-0932 | Google Chrome WebRTC use-after-free | 8.8v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2023-0931 | Google Chrome Video use-after-free | 8.8v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2023-0930 | Google Chrome Video heap-based buffer overflow | 8.8v3.1 | 0.7% | 2023-02-22 | Fix |
| CVE-2023-0929 | Google Chrome Vulkan use-after-free | 8.8v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2023-0928 | Google Chrome SwiftShader use-after-free | 8.8v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2023-0927 | Google Chrome Web Payments API use-after-free | 8.8v3.1 | 0.6% | 2023-02-22 | Fix |
| CVE-2023-0846 | The OpenNMS Group Horizon unauthenticated, stored XSS in display of alarm reduction-key | 6.7CNA v3.1 | 0.5% | 2023-02-22 | Fix |
| CVE-2023-0104 | Weintek EasyBuilder Pro cMT path traversal | 7.8NVD v3.1 | 21.8% | 2023-02-22 | Fix |
| CVE-2023-26267 | Php-saml-sp XML external entity injection | 6.5v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-26266 | Afl++ uncontrolled search path | 7.3v3.1 | 0.4% | 2023-02-21 | Fix |
| CVE-2023-26265 | borg path traversal | 5.3v3.1 | 0.6% | 2023-02-21 | |
| CVE-2023-26253 | glusterfs out-of-bounds read | 7.5v3.1 | 0.9% | 2023-02-21 | Fix |
| CVE-2023-26249 | NIC Knot Resolver resource exhaustion | 7.5v3.1 | 0.7% | 2023-02-21 | Fix |
| CVE-2023-26242 | Linux kernel integer overflow | 7.8v3.1 | 0.2% | 2023-02-21 | Fix |
| CVE-2023-26235 | Jd-gui cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-21 | |
| CVE-2023-26234 | Jd-gui deserialization of untrusted data | 9.8v3.1 | 0.8% | 2023-02-21 | |
| CVE-2023-25928 | IBM InfoSphere Information Server cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-02-21 | Fix |
| CVE-2023-25812 | Allowed delete on resources on object locked buckets under Governance mode in Minio | 6.5CNA v3.1 | 1.0% | 2023-02-21 | Fix |
| CVE-2023-25811 | louislam uptime-kuma persistent cross-site scripting (XSS) in Uptime Kuma | 6.3CNA v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-25810 | louislam uptime-kuma persistent cross-site scripting | 6.3CNA v3.1 | 0.4% | 2023-02-21 | Fix |
| CVE-2023-25657 | Remote code execution in Jinja2 template rendering in Nautobot | 7.5CNA v3.1 | 1.5% | 2023-02-21 | Fix |
| CVE-2023-25158 | Unfiltered SQL injection in Geotools | 9.8CNA v3.1 | 1.1% | 2023-02-21 | Fix |
| CVE-2023-25157 | Unfiltered SQL injection vulnerabilities in GeoServer | 9.8CNA v3.1 | 85.2% | 2023-02-21 | Reported exploitedNucleiExploit codeFix |
| CVE-2023-24575 | Dell Multifunction Printer E525w Driver and Software Suite unquoted search path | 7.8CNA v3.1 | 0.2% | 2023-02-21 | Fix |
| CVE-2023-24320 | Axcora An improper access control | 9.8v3.1 | 1.3% | 2023-02-21 | |
| CVE-2023-24184 | TOTOLINK A7100RU command injection | 9.8v3.1 | 1.3% | 2023-02-21 | |
| CVE-2023-24081 | Go-redrock Tutortrac Redrock software stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-24080 | Chamberlain Myq missing brute-force protection | 9.8v3.1 | 0.9% | 2023-02-21 | |
| CVE-2023-23009 | libreswan denial of service | 6.5v3.1 | 1.6% | 2023-02-21 | Fix |
| CVE-2023-22984 | Axis 207W cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-21 | |
| CVE-2023-22920 | Zyxel LTE3316-M604 improper access control | 9.8CNA v3.1 | 0.8% | 2023-02-21 | Fix |
| CVE-2023-0946 | SourceCodester Best POS Management System SQL injection | 9.8v3.1 | 0.5% | 2023-02-21 | |
| CVE-2023-0945 | SourceCodester Best POS Management System cross-site scripting | 5.4v3.1 | 0.4% | 2023-02-21 | |
| CVE-2023-0943 | SourceCodester Best POS Management System Image save_settings unrestricted upload | 8.8v3.1 | 2.3% | 2023-02-21 | Exploit code |
| CVE-2023-0942 | Japanized For WooCommerce WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.2% | 2023-02-21 | NucleiFix |
| CVE-2023-0938 | SourceCodester Music Gallery Site GET request music_list.php SQL injection | 9.8v3.1 | 1.8% | 2023-02-21 | Exploit code |
| CVE-2023-0936 | TP-Link Archer C50 web management interface denial of service | 6.5v3.1 | 0.9% | 2023-02-21 | |
| CVE-2023-0935 | DolphinPHP Incomplete Fix common.php os command injection | 9.8v3.1 | 4.8% | 2023-02-21 | |
| CVE-2023-0934 | Cross-site scripting (XSS) Stored in answerdev/Answer | 5.4v3.1 | 0.4% | 2023-02-21 | Fix |
| CVE-2023-0559 | GS Portfolio for Envato WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0541 | GS Books Showcase WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-21 | Fix |
| CVE-2023-0540 | GS Filterable Portfolio WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0492 | GS Products Slider for WooCommerce WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0453 | WP Private Message WordPress plugin Private Message disclosure via IDOR | 4.3NVD v3.1 | 0.6% | 2023-02-21 | Fix |
| CVE-2023-0442 | Loan Comparison WordPress plugin reflected XSS via shortcode | 6.1NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0429 | Watu Quiz WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0428 | Watu Quiz WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.6% | 2023-02-21 | Fix |
| CVE-2023-0419 | Shortcode for Font Awesome WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0380 | Easy Digital Downloads WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0378 | Greenshift WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-21 | Fix |
| CVE-2023-0375 | Easy Affiliate Links WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2023-02-21 | Fix |
| CVE-2023-0372 | EmbedStories WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0371 | EmbedSocial WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0366 | Loan Comparison WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0285 | Real Media Library WordPress plugin Author+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0271 | WP Font Awesome WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0232 | ShopLentor WordPress plugin PHP object injection | 9.8NVD v3.1 | 3.3% | 2023-02-21 | Fix |
| CVE-2023-0231 | ShopLentor WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0067 | Timed Content WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-0059 | Youzify WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-21 | Fix |
| CVE-2023-26093 | Puzzle Liima SQL injection | 9.8v3.1 | 0.9% | 2023-02-20 | |
| CVE-2023-26092 | Puzzle Liima expression language injection | 9.8v3.1 | 0.9% | 2023-02-20 | |
| CVE-2023-26081 | GNOME Epiphany resource exposure | 7.5v3.1 | 1.2% | 2023-02-20 | Fix |
| CVE-2023-25805 | versionn command injection | 9.8CNA v3.1 | 1.6% | 2023-02-20 | Fix |
| CVE-2023-25656 | notation-go has excessive memory allocation on verification | 7.5CNA v3.1 | 0.4% | 2023-02-20 | Fix |
| CVE-2023-25613 | LDAP injection vulnerability in Apache Kerby | 9.8v3.1 | 1.5% | 2023-02-20 | Fix |
| CVE-2023-25570 | Apollo has potential access control security issue in eureka | 7.5CNA v3.1 | 0.8% | 2023-02-20 | Fix |
| CVE-2023-25569 | apolloconfig apollo apollo-portal has potential CSRF issue | 5.7CNA v3.1 | 0.4% | 2023-02-20 | Fix |
| CVE-2023-24998 | Apache Commons FileUpload, Apache Tomcat: FileUpload DoS with excessive parts | 7.5NVD v3.1 | 48.8% | 2023-02-20 | Exploit codeFix |
| CVE-2023-23453 | FX0-GENT v3 Firmware SICK missing authentication | 9.8v3.1 | 1.1% | 2023-02-20 | |
| CVE-2023-23452 | FX0-GPNT v3 Firmware SICK missing authentication | 9.8v3.1 | 1.1% | 2023-02-20 | |
| CVE-2023-0919 | Missing authentication for critical function in Kareadita/Kavita | 3.5NVD v3.1 | 0.5% | 2023-02-19 | Fix |
| CVE-2023-0918 | codeprojects Pharmacy Management System Avatar Image add.php unrestricted upload | 9.8v3.1 | 0.7% | 2023-02-19 | |
| CVE-2023-0917 | SourceCodester Simple Customer Relationship Management System login.php SQL injection | 9.8v3.1 | 0.9% | 2023-02-19 | |
| CVE-2023-0916 | SourceCodester Auto Dealer Management System Users.php access control | 8.8v3.1 | 3.1% | 2023-02-19 | Exploit code |
| CVE-2023-0915 | SourceCodester Auto Dealer Management System SQL injection | 8.8v3.1 | 1.7% | 2023-02-19 | Exploit code |
| CVE-2023-0914 | Improper authorization in pixelfed/pixelfed | 5.3v3.1 | 0.5% | 2023-02-19 | Fix |
| CVE-2023-0913 | SourceCodester Auto Dealer Management System SQL injection | 8.8v3.1 | 1.6% | 2023-02-18 | Exploit code |
| CVE-2023-0912 | SourceCodester Auto Dealer Management System SQL injection | 8.8v3.1 | 1.6% | 2023-02-18 | Exploit code |
| CVE-2023-0910 | SourceCodester Online Pizza Ordering System GET parameter view_prod.php SQL injection | 9.8v3.1 | 0.5% | 2023-02-18 | |
| CVE-2023-0909 | cxasm notepad-- Directory Comparison denial of service | 5.5v3.1 | 0.3% | 2023-02-18 | |
| CVE-2023-0908 | Xoslab Easy File Locker xlkfs.sys MessageNotifyCallback denial of service | 7.8v3.1 | 0.2% | 2023-02-18 | |
| CVE-2023-0907 | Filseclab Twister Antivirus IoControlCode ffsmon.sys 0x220017 denial of service | 5.5v3.1 | 0.2% | 2023-02-18 | |
| CVE-2023-0906 | SourceCodester Online Pizza Ordering System ajax.php delete_category handler missing authentication | 9.8v3.1 | 0.7% | 2023-02-18 | |
| CVE-2023-0905 | SourceCodester Employee Task Management System changePasswordForEmployee.php improper authentication | 7.5v3.1 | 3.2% | 2023-02-18 | Exploit code |
| CVE-2023-0904 | SourceCodester Employee Task Management System task-details.php SQL injection | 8.8v3.1 | 1.7% | 2023-02-18 | Exploit code |
| CVE-2023-0903 | SourceCodester Employee Task Management System edit-task.php SQL injection | 8.8v3.1 | 0.7% | 2023-02-18 | |
| CVE-2023-0902 | SourceCodester Simple Food Ordering System process_order.php cross-site scripting | 5.4v3.1 | 2.7% | 2023-02-18 | Exploit code |
| CVE-2023-0901 | Exposure of sensitive information to an unauthorized actor in pixelfed/pixelfed | 5.3v3.1 | 0.6% | 2023-02-18 | Fix |
| CVE-2023-26020 | CrafterCMS improper neutralization of special elements used in an SQL command in Crafter Studio | 7.2v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-24964 | IBM InfoSphere Information Server information disclosure | 6.2CNA v3.1 | 0.1% | 2023-02-17 | Fix |
| CVE-2023-24960 | IBM InfoSphere Information Server information disclosure | 7.5CNA v3.1 | 1.4% | 2023-02-17 | Fix |
| CVE-2023-24809 | NetHack Call command buffer overflow | 5.5CNA v3.1 | 0.2% | 2023-02-17 | Fix |
| CVE-2023-24785 | PeaZip resource exhaustion | 5.5v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-24769 | Webtechnologies Changedetection stored cross-site scripting in Changedetection.io | 5.4v3.1 | 0.6% | 2023-02-17 | Fix |
| CVE-2023-24388 | Booking calendar, Appointment Booking System WordPress plugin cross-site request forgery (CSRF) | 5.4v3.1 | 0.2% | 2023-02-17 | Fix |
| CVE-2023-24369 | UJCMS A cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-17 | |
| CVE-2023-24329 | Python improper input validation | 7.5NVD v3.1 | 20.5% | 2023-02-17 | Exploit codeFix |
| CVE-2023-24221 | Luckyframeweb SQL injection | 9.8v3.1 | 0.8% | 2023-02-17 | |
| CVE-2023-24220 | Luckyframeweb SQL injection | 9.8v3.1 | 0.8% | 2023-02-17 | |
| CVE-2023-24219 | Luckyframeweb SQL injection | 9.8v3.1 | 0.8% | 2023-02-17 | |
| CVE-2023-24078 | Real Time Logic Fuguhub code injection | 8.8v3.1 | 53.2% | 2023-02-17 | Exploit code |
| CVE-2023-23923 | Moodle: Possible to set the preferred start page of other users | 8.2NVD v3.1 | 1.0% | 2023-02-17 | Fix |
| CVE-2023-23922 | Moodle: Reflected XSS risk in blog search | 6.1NVD v3.1 | 0.9% | 2023-02-17 | Fix |
| CVE-2023-23921 | Moodle: Reflected XSS risk in some returnurl parameters | 6.1NVD v3.1 | 0.8% | 2023-02-17 | Fix |
| CVE-2023-23899 | Extensions For CF7 WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-02-17 | Fix |
| CVE-2023-23695 | Dell Secure Connect Gateway (SCG) weak cryptographic algorithm | 5.9CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-23586 | Linux kernel io_uring subsystem use-after-free | 5.5NVD v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-23279 | Canteen Management System SQL injection | 9.8v3.1 | 0.9% | 2023-02-17 | Exploit code |
| CVE-2023-23064 | TOTOLINK A720R incorrect authorization | 9.8v3.1 | 0.7% | 2023-02-17 | |
| CVE-2023-23007 | Ecisp ESPCMS SQL injection | 7.2v3.1 | 0.6% | 2023-02-17 | |
| CVE-2023-22868 | IBM Aspera Faspex cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-22246 | Adobe Animate FLA files use-after-free arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-22244 | Adobe Premiere Rush PSD files use-after-free arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-22243 | Adobe Animate SVG file stack-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-22239 | Adobe After Effects improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22238 | Adobe After Effects Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22237 | Adobe After Effects Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22236 | Adobe Animate heap-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-22234 | Adobe Premiere Rush PSD file stack-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-22233 | Adobe After Effects Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22232 | Adobe Connect improper access control security feature bypass | 5.3CNA v3.1 | 83.4% | 2023-02-17 | NucleiExploit codeFix |
| CVE-2023-22231 | Adobe Bridge Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22230 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22229 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22228 | Adobe Bridge improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22227 | Adobe Bridge Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-22226 | Adobe Bridge SVG file stack-based buffer overflow arbitrary code execution | 7.8CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-21622 | Adobe FrameMaker Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21621 | Adobe FrameMaker improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21620 | Adobe FrameMaker Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21619 | Adobe FrameMaker Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21593 | Adobe InDesign SVG file null pointer dereference application denial of service | 5.5CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21584 | Adobe FrameMaker Font Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.4% | 2023-02-17 | Fix |
| CVE-2023-21583 | Adobe Bridge Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21578 | Adobe Photoshop Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21577 | Adobe Photoshop Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21576 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21575 | Adobe Photoshop Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-21574 | Adobe Photoshop improper input validation remote code execution | 7.8CNA v3.1 | 0.3% | 2023-02-17 | Fix |
| CVE-2023-0895 | WP Coder add custom html, css and js code WordPress plugin authenticated (Admin+) SQL injection | 4.9NVD v3.1 | 0.8% | 2023-02-17 | Fix |
| CVE-2023-0887 | phjounin TFTPD64-SE tftpd64_svc.exe unquoted search path | 7.8v3.1 | 0.2% | 2023-02-17 | |
| CVE-2023-0883 | SourceCodester Online Pizza Ordering System index.php SQL injection | 9.8v3.1 | 0.6% | 2023-02-17 | |
| CVE-2023-0882 | Authorization bypass through user-controlled key on Single Connect | 8.8v3.1 | 0.7% | 2023-02-17 | Fix |
| CVE-2023-0880 | Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11. | 4.3NVD v3.1 | 0.6% | 2023-02-17 | Fix |
| CVE-2023-0879 | Cross-site scripting (XSS) Stored in btcpayserver/btcpayserver | 5.4v3.1 | 0.5% | 2023-02-17 | Fix |
| CVE-2023-0878 | Cross-site scripting (XSS) Generic in nuxt/framework | 6.1v3.1 | 0.5% | 2023-02-17 | Fix |
| CVE-2023-0877 | Code injection in froxlor/froxlor | 8.8NVD v3.1 | 3.9% | 2023-02-17 | Fix |
| CVE-2023-0822 | Delta Electronics DIAEnergie improper authorization | 8.8v3.1 | 0.6% | 2023-02-17 | |
| CVE-2023-0482 | Insecure temporary file in RESTEasy | 5.5v3.1 | 0.8% | 2023-02-17 | Fix |
| CVE-2023-25653 | Cisco node-jose improper calculations in ECC implementation can trigger a denial of service (DoS) | 7.5CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2023-25602 | Fortinet FortiWeb stack-based buffer overflow | 7.4CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2023-25173 | containerd supplementary groups are not set up properly | 5.3CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2023-25153 | containerd OCI image importer memory exhaustion | 6.2CNA v3.1 | 0.4% | 2023-02-16 | Fix |
| CVE-2023-24807 | Undici vulnerable to regular expression denial of service in headers | 7.5CNA v3.1 | 1.3% | 2023-02-16 | Fix |
| CVE-2023-24485 | Privilege escalation on the system running a vulnerable version of Citrix Workspace app for Windows | 7.8v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2023-24484 | Citrix Workspace app improper access control | 5.5v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2023-24483 | Citrix Virtual Apps and Desktops privilege escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA | 7.8v3.1 | 0.3% | 2023-02-16 | Fix |
| CVE-2023-24238 | TOTOLINK A7100RU command injection | 9.8v3.1 | 1.9% | 2023-02-16 | |
| CVE-2023-24236 | TOTOLINK A7100RU command injection | 9.8v3.1 | 1.9% | 2023-02-16 | |
| CVE-2023-23947 | Argo CD cluster secrets incorrect authorization | 9.1CNA v3.1 | 0.7% | 2023-02-16 | Fix |
| CVE-2023-23936 | CRLF injection in Nodejs undici via host | 6.5CNA v3.1 | 1.1% | 2023-02-16 | Fix |
| CVE-2023-23926 | neo4j apoc XML external entity (XXE) vulnerability in apoc.import.graphml | 5.9CNA v3.1 | 0.9% | 2023-02-16 | Fix |
| CVE-2023-23784 | Fortinet FortiWeb relative path traversal | 5.6CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2023-23783 | Fortinet FortiWeb format string | 6.5CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2023-23782 | Fortinet FortiWeb heap-based buffer overflow | 7.1CNA v3.1 | 0.2% | 2023-02-16 | Fix |
| CVE-2023-23781 | Fortinet FortiWeb stack-based buffer overflow | 6.1CNA v3.1 | 0.7% | 2023-02-16 | Fix |
| CVE-2023-23780 | Fortinet FortiWeb stack-based buffer overflow | 7.6CNA v3.1 | 0.8% | 2023-02-16 | Fix |
| CVE-2023-23779 | Fortinet FortiWeb OS command injection | 6.6CNA v3.1 | 1.3% | 2023-02-16 | Fix |
| CVE-2023-23778 | Fortinet FortiWeb relative path traversal | 4.7CNA v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2023-23752 | Joomla! improper access control | 5.3NVD v3.1 | 99.8% | 2023-02-16 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-23558 | Eternal Terminal link following | 6.3v3.1 | 0.3% | 2023-02-16 | |
| CVE-2023-22638 | Fortinet FortiNAC cross-site scripting | 6.7CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2023-22580 | Feathers-Sequalize Sequelize.js sequalize Bad query filtering leading to SQL errors | 7.5v3.1 | 0.6% | 2023-02-16 | Fix |
| CVE-2023-22579 | Feathers-Sequalize Sequelize.js Sequalize Unsafe fall-through in getWhereConditions | 8.8NVD v3.1 | 0.8% | 2023-02-16 | Fix |
| CVE-2023-22578 | Feathers-Sequalize Sequelize.js sequalize Default support for raw attributes when using parentheses | 9.8v3.1 | 0.8% | 2023-02-16 | Fix |
| CVE-2023-22380 | GitHub Enterprise Server GitHub Pages build path traversal | 6.5v3.1 | 0.7% | 2023-02-16 | Fix |
| CVE-2023-0866 | Heap-based buffer overflow in gpac/gpac | 7.8v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2023-0862 | Path traversal in NetModule NSRW | 8.8NVD v3.1 | 2.4% | 2023-02-16 | Fix |
| CVE-2023-0861 | Authenticated command injection in NetModule NSRW | 8.8NVD v3.1 | 27.5% | 2023-02-16 | Exploit codeFix |
| CVE-2023-0860 | Improper restriction of excessive authentication attempts in modoboa/modoboa-installer | 7.5v3.1 | 0.7% | 2023-02-16 | Exploit codeFix |
| CVE-2023-0821 | Nomad client vulnerable to Decompression Bombs in Artifact block | 6.5CNA v3.1 | 0.8% | 2023-02-16 | Fix |
| CVE-2023-0662 | PHP DoS vulnerability when parsing multipart request body | 7.5CNA v3.1 | 1.4% | 2023-02-16 | Fix |
| CVE-2023-0568 | PHP array overrun in common path resolve code | 7.5CNA v3.1 | 1.2% | 2023-02-16 | Fix |
| CVE-2023-0567 | PHP password_verify always returns true for some invalid hashes | 7.7CNA v3.1 | 0.9% | 2023-02-16 | Fix |
| CVE-2023-0475 | HashiCorp go-getter decompression bomb | 4.2CNA v3.1 | 0.5% | 2023-02-16 | Fix |
| CVE-2023-25768 | Missing authorization in Jenkins Azure Credentials Plugin | 6.5v3.1 | 0.6% | 2023-02-15 | Fix |
| CVE-2023-25767 | Cross-site request forgery in Jenkins Azure Credentials Plugin | 8.8v3.1 | 0.5% | 2023-02-15 | Fix |
| CVE-2023-25766 | Missing authorization in Jenkins Azure Credentials Plugin | 4.3v3.1 | 0.5% | 2023-02-15 | Fix |
| CVE-2023-25765 | Sandbox escape in Jenkins Email Extension Plugin | 9.9v3.1 | 1.1% | 2023-02-15 | Fix |
| CVE-2023-25764 | Cross-site scripting in Jenkins Email Extension Plugin | 5.4v3.1 | 0.6% | 2023-02-15 | Fix |
| CVE-2023-25763 | Cross-site scripting in Jenkins Email Extension Plugin | 5.4v3.1 | 0.6% | 2023-02-15 | Fix |
| CVE-2023-25762 | Cross-site scripting in Jenkins Pipeline: Build Step Plugin | 5.4v3.1 | 81.4% | 2023-02-15 | Fix |
| CVE-2023-25761 | Cross-site scripting in Jenkins JUnit Plugin | 5.4v3.1 | 0.7% | 2023-02-15 | Fix |
| CVE-2023-25578 | Starlite DoS vulnerability when parsing multipart request body | 7.5CNA v3.1 | 1.0% | 2023-02-15 | Fix |
| CVE-2023-25192 | AMI MegaRAC_SPx resource exposure | 5.3v3.1 | 0.5% | 2023-02-15 | Fix |
| CVE-2023-25191 | AMI MegaRAC_SPx insufficiently protected credentials | 7.5v3.1 | 0.6% | 2023-02-15 | Fix |
| CVE-2023-25171 | Kiwi TCMS has denial of service vulnerability on Password reset page | 7.5CNA v3.1 | 0.9% | 2023-02-15 | Fix |
| CVE-2023-25156 | Kiwi TCMS has no protection against brute-force attacks on login page | 7.5CNA v3.1 | 0.9% | 2023-02-15 | Fix |
| CVE-2023-25011 | NEC PC settings tool improper privilege management | 7.8v3.1 | 0.2% | 2023-02-15 | |
| CVE-2023-24580 | Resource exhaustion in Django | 7.5v3.1 | 62.6% | 2023-02-15 | Fix |
| CVE-2023-24499 | Butterfly Button plugin may leave traces of its use on user's device | 4.6v3.1 | 0.3% | 2023-02-15 | |
| CVE-2023-24498 | Netgear ProSAFE 24 Port 10/100 FS726TP insufficiently protected credentials | 7.5v3.1 | 0.6% | 2023-02-15 | |
| CVE-2023-23850 | Synopsys Jenkins Coverity Plugin has incorrect default permissions | 4.3v3.1 | 0.5% | 2023-02-15 | Fix |
| CVE-2023-23848 | CSRF vulnerability in Jenkins Coverity Plugin allow capturing credentials | 4.3v3.1 | 0.5% | 2023-02-15 | Fix |
| CVE-2023-23847 | CSRF vulnerability in Synopsys Jenkins Coverity Plugin | 3.5v3.1 | 0.4% | 2023-02-15 | Fix |
| CVE-2023-23836 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 80.3% | 2023-02-15 | Fix |
| CVE-2023-23467 | Media CP Media Control Panel reflected XSS | 6.1NVD v3.1 | 0.4% | 2023-02-15 | |
| CVE-2023-23466 | Media CP Media Control Panel insufficiently protected credential change | 7.5v3.1 | 0.4% | 2023-02-15 | |
| CVE-2023-23465 | Media CP Media Control Panel CSRF | 8.8NVD v3.1 | 0.3% | 2023-02-15 | |
| CVE-2023-23464 | Media CP Media Control Panel information disclosure | 7.5v3.1 | 0.5% | 2023-02-15 | |
| CVE-2023-23463 | Sunell DVR insufficiently protected credentials | 7.5v3.1 | 0.5% | 2023-02-15 | |
| CVE-2023-23462 | Libpeconv integer overflow | 9.8v3.1 | 0.7% | 2023-02-15 | |
| CVE-2023-23461 | Libpeconv – access violation, before commit b076013 (30/11/2022). | 9.8v3.1 | 0.7% | 2023-02-15 | |
| CVE-2023-23460 | Priority Web authentication bypass | 9.8v3.1 | 0.7% | 2023-02-15 | Fix |
| CVE-2023-23459 | Priority Windows command execution via SQL injection | 9.8v3.1 | 0.9% | 2023-02-15 | Fix |
| CVE-2023-23458 | Sunell DVR exposure of sensitive information | 6.5v3.1 | 0.5% | 2023-02-15 | |
| CVE-2023-22855 | Kardex Control Center code injection | 9.8NVD v3.1 | 14.8% | 2023-02-15 | Exploit code |
| CVE-2023-22807 | LS Electric XBC-DN32U XGT protocol improper access control | 9.8v3.1 | 0.7% | 2023-02-15 | |
| CVE-2023-22806 | LS Electric XBC-DN32U XGT protocol cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2023-02-15 | |
| CVE-2023-22805 | LS Electric XBC-DN32U read prohibition feature improper access control | 4.3v3.1 | 0.7% | 2023-02-15 | |
| CVE-2023-22804 | LS Electric XBC-DN32U user account creation missing authentication | 9.8v3.1 | 0.7% | 2023-02-15 | |
| CVE-2023-22803 | LS Electric XBC-DN32U PLC mode control missing authentication | 7.5v3.1 | 0.6% | 2023-02-15 | |
| CVE-2023-22377 | Fujitsu tsClinical Define.xml Generator and Metadata Desktop Tools XML external entity injection | 7.4v3.1 | 0.7% | 2023-02-15 | Fix |
| CVE-2023-22368 | ELECOM Camera Assistant and QuickFileDealer untrusted search path | 7.8v3.1 | 0.2% | 2023-02-15 | Fix |
| CVE-2023-20949 | Android s2mpg11-regulator.c out-of-bounds read | 5.5v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2023-20927 | Android AndroidManifest.xml privilege escalation | 7.8v3.1 | 0.1% | 2023-02-15 | Fix |
| CVE-2023-0850 | Netgear WNDR3700v2 web interface denial of service | 7.5v3.1 | 1.0% | 2023-02-15 | |
| CVE-2023-0849 | Netgear WNDR3700v2 web interface command injection | 9.8v3.1 | 2.8% | 2023-02-15 | |
| CVE-2023-0848 | Netgear WNDR3700v2 web management interface denial of service | 7.5v3.1 | 0.9% | 2023-02-15 | |
| CVE-2023-0841 | GPAC reframe_mp3.c mp3_dmx_process heap-based overflow | 8.8v3.1 | 1.2% | 2023-02-15 | |
| CVE-2023-0840 | PHPCrazy cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-15 | |
| CVE-2023-0361 | gnutls timing side channel | 7.4NVD v3.1 | 1.5% | 2023-02-15 | Fix |
| CVE-2023-0103 | LS Electric XBC-DN32U communication buffer out-of-bounds access | 7.5v3.1 | 0.7% | 2023-02-15 | |
| CVE-2023-0102 | LS Electric XBC-DN32U deletion command missing authentication | 9.1v3.1 | 0.7% | 2023-02-15 | |
| CVE-2023-25758 | Onekey Touch man-in-the-middle | 4.2v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-25725 | HAProxy HTTP request smuggling | 9.1v3.1 | 5.5% | 2023-02-14 | Exploit codeFix |
| CVE-2023-25614 | SAP NetWeaver AS ABAP (BSP Framework) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-25577 | Werkzeug may allow high resource usage when parsing multipart form data with many fields | 7.5CNA v3.1 | 1.4% | 2023-02-14 | Fix |
| CVE-2023-25576 | @fastify/multipart vulnerable to DoS due to unlimited number of parts | 7.5CNA v3.1 | 1.5% | 2023-02-14 | Fix |
| CVE-2023-25571 | Backstage has XSS vulnerability in Software Catalog | 6.8CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-25567 | GSS-NTLMSSP vulnerable to out-of-bounds read when decoding target information | 7.5CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-25566 | GSS-NTLMSSP vulnerable to memory leak when parsing usernames | 7.5CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-25565 | GSS-NTLMSSP vulnerable to incorrect free when decoding target information | 7.5CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-25564 | GSS-NTLMSSP vulnerable to memory corruption when decoding UTF16 strings | 6.5CNA v3.1 | 1.9% | 2023-02-14 | Fix |
| CVE-2023-25563 | GSS-NTLMSSP vulnerable to multiple out-of-bounds reads when decoding NTLM fields | 5.9CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-25149 | TimescaleDB has incorrect access control | 8.8CNA v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-25141 | JNDI injection into Apache sling-org-apache-sling-jcr-base | 7.5v3.1 | 1.2% | 2023-02-14 | Fix |
| CVE-2023-25140 | Siemens Parasolid out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-25066 | FV Flowplayer Video Player WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-25065 | WP Tabs WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-24996 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24995 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24994 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24993 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24992 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24991 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24990 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24989 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24988 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24987 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24986 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24985 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24984 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24983 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24982 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24981 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24980 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24979 | Siemens Tecnomatix Plant Simulation out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24978 | Siemens Tecnomatix Plant Simulation uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24581 | Siemens Solid Edge SE2022 use-after-free | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24566 | Siemens Solid Edge SE2022 stack-based buffer overflow | 3.3CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24565 | Siemens Solid Edge SE2022 out-of-bounds read | 3.3CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24564 | Siemens Solid Edge SE2022 memory corruption | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24563 | Siemens Solid Edge SE2022 uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24562 | Siemens Solid Edge SE2022 uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24561 | Siemens Solid Edge SE2022 uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24560 | Siemens Solid Edge SE2022 out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24559 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24558 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24557 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24556 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24555 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24554 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24553 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24552 | Siemens Solid Edge SE2022 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24551 | Siemens Solid Edge SE2022 heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24550 | Siemens Solid Edge SE2022 heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24549 | Siemens Solid Edge SE2022 stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24530 | SAP BusinessObjects Business Intelligence Platform (CMC) unrestricted file upload | 8.4CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-24529 | SAP NetWeaver AS ABAP cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-24528 | SAP Fiori apps missing authorization | 6.5CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-24525 | SAP CRM (WebClient UI) cross-site scripting | 4.3CNA v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-24524 | SAP S/4 HANA missing authorization | 6.5CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-24523 | SAP Host Agent Service resource exposure | 8.8CNA v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-24522 | SAP NetWeaver AS ABAP (BSP Framework) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-24521 | SAP NetWeaver AS ABAP (BSP Framework) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-24482 | Siemens COMOS buffer overflow | 10.0CNA v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-24382 | Material Design Icons for Page Builders WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-24377 | Ecwid Shopping Cart WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-24187 | XML external entity Reference in Ureport | 7.8v3.1 | 0.9% | 2023-02-14 | |
| CVE-2023-24161 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-14 | |
| CVE-2023-24160 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-14 | |
| CVE-2023-24159 | TOTOLINK CA300-PoE command injection | 9.8v3.1 | 1.9% | 2023-02-14 | |
| CVE-2023-23946 | Git's `git apply` overwriting paths outside the working tree | 6.2CNA v3.1 | 1.1% | 2023-02-14 | Exploit codeFix |
| CVE-2023-23934 | pallets werkzeug wrkzeug's incorrect parsing of nameless cookies leads to __Host- cookies bypass | 2.6CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-23860 | SAP NetWeaver AS for ABAP and ABAP Platform open redirect | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-23859 | SAP NetWeaver AS for ABAP and ABAP Platform cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-23858 | SAP NetWeaver AS for ABAP and ABAP Platform cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-23856 | SAP BusinessObjects Business Intelligence (Web Intelligence UI) cross-site scripting | 4.3CNA v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-23855 | SAP Solution Manager open redirect | 6.5CNA v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-23854 | SAP NetWeaver AS ABAP and ABAP Platform missing authorization | 3.8CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-23853 | SAP NetWeaver Application Server for ABAP and ABAP Platform open redirect | 6.1CNA v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-23852 | SAP Solution Manager cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-23851 | SAP Business Planning and Consolidation unrestricted file upload | 5.4CNA v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-23835 | Siemens Mendix Applications using Mendix 7 improper access control | 5.9CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-23618 | git-for-windows git gitk can inadvertently call executables in the worktree | 8.6CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-23390 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-23382 | Microsoft Azure Machine Learning Compute Instance information disclosure | 6.5CNA v3.1 | 2.7% | 2023-02-14 | Fix |
| CVE-2023-23381 | Visual Studio remote code execution | 7.8CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-23379 | Microsoft Defender for IoT elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-23378 | Microsoft Print 3D remote code execution | 7.8CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-23377 | Microsoft 3D Builder remote code execution | 7.8CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-23376 | Microsoft Windows Common Log File System (CLFS) driver privilege escalation | 7.8CNA v3.1 | 10.9% | 2023-02-14 | KEVFix |
| CVE-2023-23374 | Microsoft Edge (Chromium-based) remote code execution | 8.3CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-22943 | Splunk Add-on Builder and CloudConnect SDK REST API modular input fail-open behavior | 5.3v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-22942 | Cross-site request forgery in the ssg/kvstore_client REST endpoint in Splunk Enterprise | 4.3v3.1 | 0.2% | 2023-02-14 | Fix |
| CVE-2023-22941 | Improperly Formatted INGEST_EVAL parameter crashes Splunk daemon | 7.5v3.1 | 1.0% | 2023-02-14 | Exploit codeFix |
| CVE-2023-22940 | SPL Command Safeguards Bypass via the collect SPL Command Aliases in Splunk Enterprise | 5.7v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-22939 | SPL Command Safeguards Bypass via the map SPL command in Splunk Enterprise | 8.8v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-22938 | Permissions Validation failure in the sendemail REST API endpoint in Splunk Enterprise | 4.3v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-22937 | Unnecessary file Extensions Allowed by Lookup Table Uploads in Splunk Enterprise | 4.3v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-22936 | Splunk Enterprise search_listener parameter server-side request forgery | 6.3v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-22935 | Splunk Enterprise SPL command safeguards improper input validation | 8.8v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-22934 | SPL Command Safeguards Bypass via the pivot SPL command in Splunk Enterprise | 8.0v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-22933 | Persistent cross-site scripting through the module Tag in a view in Splunk Enterprise | 6.1NVD v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-22932 | Persistent cross-site scripting through a Base64-encoded Image in a view in Splunk Enterprise | 6.1NVD v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-22931 | Createrss External Search Command Overwrites Existing RSS Feeds in Splunk Enterprise | 4.3v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-22743 | Git For Windows' installer is susceptible to DLL side loading attacks | 7.3CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-22629 | Southrivertech Titan FTP Server path traversal | 8.8v3.1 | 12.3% | 2023-02-14 | NucleiExploit codeFix |
| CVE-2023-22490 | Git vulnerable to local clone-based data exfiltration with non-local transports | 5.5CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-22376 | PLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-14 | |
| CVE-2023-22375 | Planex CS-WMV02G cross-site request forgery | 8.8v3.1 | 0.4% | 2023-02-14 | |
| CVE-2023-22370 | PLANEX COMMUNICATIONS Wired/Wireless LAN Pan/Tilt Network Camera CS-WMV02G cross-site scripting | 5.2v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-21823 | Microsoft Windows Graphic component privilege escalation | 7.8CNA v3.1 | 5.6% | 2023-02-14 | KEVExploit codeFix |
| CVE-2023-21822 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-21820 | Microsoft Windows Distributed File System (DFS) remote code execution | 7.4CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21819 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 30.8% | 2023-02-14 | Fix |
| CVE-2023-21818 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 43.2% | 2023-02-14 | Fix |
| CVE-2023-21817 | Microsoft Windows Kerberos elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-21816 | Microsoft Windows Active Directory Domain Services API denial of service | 7.5CNA v3.1 | 1.7% | 2023-02-14 | Fix |
| CVE-2023-21815 | Visual Studio remote code execution | 7.8CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-21813 | Microsoft Windows Secure Channel denial of service | 7.5CNA v3.1 | 1.7% | 2023-02-14 | Fix |
| CVE-2023-21812 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 3.3% | 2023-02-14 | Fix |
| CVE-2023-21811 | Microsoft Windows iSCSI service denial of service | 7.5CNA v3.1 | 1.7% | 2023-02-14 | Fix |
| CVE-2023-21809 | Microsoft Defender for endpoint security feature bypass | 7.8CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21808 | Microsoft .NET and Visual Studio remote code execution | 7.8CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-21807 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 6.5CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-21806 | Microsoft Power BI Report Server spoofing | 8.2CNA v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-21805 | Microsoft Windows MSHTML Platform remote code execution | 7.8CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-21804 | Microsoft Windows Graphics component elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-21803 | Microsoft Windows iSCSI Discovery service remote code execution | 9.8CNA v3.1 | 1.8% | 2023-02-14 | Fix |
| CVE-2023-21802 | Microsoft Windows Media remote code execution | 7.8CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21801 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 7.8CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-21800 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-21799 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.2% | 2023-02-14 | Fix |
| CVE-2023-21798 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.2% | 2023-02-14 | Fix |
| CVE-2023-21797 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.2% | 2023-02-14 | Fix |
| CVE-2023-21794 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-21778 | Microsoft Dynamics Unified Service Desk remote code execution | 8.0CNA v3.1 | 1.0% | 2023-02-14 | Fix |
| CVE-2023-21777 | Microsoft Azure App Service on Azure Stack Hub elevation of privilege | 8.7CNA v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-21722 | NET Framework denial of service | 5.0CNA v3.1 | 0.9% | 2023-02-14 | Fix |
| CVE-2023-21721 | Microsoft OneNote elevation of privilege | 6.5CNA v3.1 | 0.9% | 2023-02-14 | Fix |
| CVE-2023-21720 | Microsoft Edge (Chromium-based) tampering | 5.3CNA v3.1 | 1.2% | 2023-02-14 | Fix |
| CVE-2023-21718 | Microsoft ODBC driver for SQL server remote code execution | 7.8CNA v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-21717 | Microsoft SharePoint server elevation of privilege | 8.8CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-21716 | Microsoft Word remote code execution | 9.8CNA v3.1 | 84.8% | 2023-02-14 | Exploit codeFix |
| CVE-2023-21715 | Microsoft Office Publisher security feature bypass | 7.3CNA v3.1 | 12.0% | 2023-02-14 | KEVFix |
| CVE-2023-21714 | Microsoft Office information disclosure | 5.5CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21713 | Microsoft SQL server remote code execution | 8.8CNA v3.1 | 1.8% | 2023-02-14 | Fix |
| CVE-2023-21710 | Microsoft Exchange Server remote code execution | 7.2CNA v3.1 | 7.9% | 2023-02-14 | Fix |
| CVE-2023-21707 | Microsoft Exchange Server remote code execution | 8.8CNA v3.1 | 82.0% | 2023-02-14 | Exploit codeFix |
| CVE-2023-21706 | Microsoft Exchange Server remote code execution | 8.8CNA v3.1 | 4.1% | 2023-02-14 | Fix |
| CVE-2023-21705 | Microsoft SQL server remote code execution | 8.8CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-21704 | Microsoft ODBC driver for SQL server remote code execution | 7.8CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-21703 | Microsoft Azure Data Box Gateway remote code execution | 6.5CNA v3.1 | 1.5% | 2023-02-14 | Fix |
| CVE-2023-21702 | Microsoft Windows iSCSI service denial of service | 7.5CNA v3.1 | 1.7% | 2023-02-14 | Fix |
| CVE-2023-21701 | Microsoft Protected Extensible Authentication Protocol (PEAP) denial of service | 7.5CNA v3.1 | 1.7% | 2023-02-14 | Fix |
| CVE-2023-21700 | Microsoft Windows iSCSI Discovery service denial of service | 7.5CNA v3.1 | 1.7% | 2023-02-14 | Fix |
| CVE-2023-21699 | Microsoft Windows Internet Storage Name service (iSNS) server information disclosure | 5.3CNA v3.1 | 1.1% | 2023-02-14 | Fix |
| CVE-2023-21697 | Microsoft Windows Internet Storage Name service (iSNS) server information disclosure | 6.2CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-21695 | Microsoft Protected Extensible Authentication Protocol (PEAP) remote code execution | 7.5CNA v3.1 | 1.0% | 2023-02-14 | Fix |
| CVE-2023-21694 | Microsoft Windows Fax service remote code execution | 6.8CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21693 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 5.7CNA v3.1 | 1.4% | 2023-02-14 | Fix |
| CVE-2023-21692 | Microsoft Protected Extensible Authentication Protocol (PEAP) remote code execution | 9.8CNA v3.1 | 21.2% | 2023-02-14 | Fix |
| CVE-2023-21691 | Microsoft Protected Extensible Authentication Protocol (PEAP) information disclosure | 7.5CNA v3.1 | 1.4% | 2023-02-14 | Fix |
| CVE-2023-21690 | Microsoft Protected Extensible Authentication Protocol (PEAP) remote code execution | 9.8CNA v3.1 | 27.5% | 2023-02-14 | Fix |
| CVE-2023-21689 | Microsoft Protected Extensible Authentication Protocol (PEAP) remote code execution | 9.8CNA v3.1 | 26.5% | 2023-02-14 | Fix |
| CVE-2023-21688 | Microsoft Windows NT OS Kernel elevation of privilege | 7.8CNA v3.1 | 3.6% | 2023-02-14 | Fix |
| CVE-2023-21687 | Microsoft Windows HTTP.sys information disclosure | 5.5CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-21686 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.2% | 2023-02-14 | Fix |
| CVE-2023-21685 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.2% | 2023-02-14 | Fix |
| CVE-2023-21684 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.3% | 2023-02-14 | Fix |
| CVE-2023-21573 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21572 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 6.5CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21571 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21570 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-02-14 | Fix |
| CVE-2023-21568 | Microsoft SQL Server Integration Service (VS extension) remote code execution | 7.3CNA v3.1 | 0.9% | 2023-02-14 | Fix |
| CVE-2023-21567 | Visual Studio denial of service | 5.6CNA v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-21566 | Visual Studio elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-21564 | Microsoft Azure DevOps Server cross-site scripting | 7.1CNA v3.1 | 0.9% | 2023-02-14 | Fix |
| CVE-2023-21553 | Microsoft Azure DevOps Server remote code execution | 7.5CNA v3.1 | 1.4% | 2023-02-14 | Fix |
| CVE-2023-21529 | Microsoft Exchange Server deserialization of untrusted data | 8.8CNA v3.1 | 59.3% | 2023-02-14 | KEVSnortFix |
| CVE-2023-21528 | Microsoft SQL server remote code execution | 7.8CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-0830 | EasyNAS backup.pl system os command injection | 8.8v3.1 | 20.9% | 2023-02-14 | Exploit code |
| CVE-2023-0827 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 3.0% | 2023-02-14 | Fix |
| CVE-2023-0814 | Profile Builder WordPress plugin information disclosure | 6.5v3.1 | 0.8% | 2023-02-14 | Fix |
| CVE-2023-0655 | SonicWall Email Security information disclosure through error messages | 5.3v3.1 | 0.7% | 2023-02-14 | Fix |
| CVE-2023-0025 | SAP Solution Manager (BSP Application) cross-site scripting | 6.5CNA v3.1 | 0.3% | 2023-02-14 | Fix |
| CVE-2023-0024 | SAP Solution Manager (BSP Application) cross-site scripting | 6.5CNA v3.1 | 0.4% | 2023-02-14 | Fix |
| CVE-2023-0020 | SAP BusinessObjects Business Intelligence Platform information disclosure | 8.5CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-0019 | SAP GRC (Process Control) missing authorization | 6.5CNA v3.1 | 0.5% | 2023-02-14 | Fix |
| CVE-2023-25727 | Cross-site scripting vulnerability in drag-and-drop upload of phpMyAdmin | 5.4v3.1 | 1.2% | 2023-02-13 | Fix |
| CVE-2023-25719 | ConnectWise Control injection | 8.8v3.1 | 1.1% | 2023-02-13 | |
| CVE-2023-25718 | ConnectWise Control improper signature verification | 9.8v3.1 | 0.7% | 2023-02-13 | |
| CVE-2023-25717 | Multiple Ruckus Wireless Products CSRF and RCE | 9.8v3.1 | 98.1% | 2023-02-13 | KEVNucleiEmerging ThreatsFix |
| CVE-2023-25572 | marmelab react-admin RichTextField cross-site scripting | 5.4CNA v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2023-25241 | Bgerp cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-13 | |
| CVE-2023-25240 | pimcore arbitrary code execution | 8.8v3.1 | 1.0% | 2023-02-13 | Fix |
| CVE-2023-25162 | Nextcloud Server vulnerable to SSRF via filter bypass due to lax checking on IPs | 5.3CNA v3.1 | 0.8% | 2023-02-13 | Fix |
| CVE-2023-25161 | Nextcloud Server password reset vulnerability | 3.7CNA v3.1 | 0.7% | 2023-02-13 | Fix |
| CVE-2023-25160 | IDOR vulnerability in Nextcloud Mail | 4.1CNA v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-25159 | Nextcloud Server previews are accessible without a watermark | 2.3CNA v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-24804 | ownCloud Android app vulnerable to path traversal | 4.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-24648 | Zippy Zstore cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-13 | |
| CVE-2023-24647 | oretnom23 Online Food Ordering System SQL injection | 7.5v3.1 | 0.7% | 2023-02-13 | |
| CVE-2023-24646 | oretnom23 Online Food Ordering System An arbitrary file upload | 9.8v3.1 | 1.1% | 2023-02-13 | |
| CVE-2023-24619 | redpanda insufficiently protected credentials | 5.5v3.1 | 0.3% | 2023-02-13 | |
| CVE-2023-24572 | Dell Command | Integration Suite for System Center, versions before 6.4.0 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. | 4.7CNA v3.1 | 0.2% | 2023-02-13 | Fix |
| CVE-2023-24188 | Arbitrary file deletion in Ureport | 9.1v3.1 | 1.2% | 2023-02-13 | |
| CVE-2023-24086 | SLiMS cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-13 | |
| CVE-2023-24084 | Chikoi SQL injection | 9.8v3.1 | 0.9% | 2023-02-13 | |
| CVE-2023-23948 | ownCloud Android app vulnerable to SQL injection | 5.5NVD v3.1 | 0.5% | 2023-02-13 | |
| CVE-2023-23697 | Dell Command | Intel vPro Out of Band, versions before 4.4.0, contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. | 4.7CNA v3.1 | 0.2% | 2023-02-13 | Fix |
| CVE-2023-23553 | X-400 cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-23551 | X-600m code injection | 9.8v3.1 | 0.9% | 2023-02-13 | Fix |
| CVE-2023-22854 | Mitel Micontact Center Business arbitrary file read | 7.5NVD v3.1 | 0.6% | 2023-02-13 | Fix |
| CVE-2023-22367 | Betrend Corporation and ICHIRAN Ichiran App improper certificate validation | 5.9v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-22362 | AKINDO SUSHIRO SUSHIRO App sensitive information in log files | 7.5v3.1 | 0.8% | 2023-02-13 | Fix |
| CVE-2023-22360 | JTEKT ELECTRONICS Screen Creator Advance 2 use-after-free | 7.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2023-22353 | JTEKT ELECTRONICS Screen Creator Advance 2 out-of-bounds read | 7.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2023-22350 | JTEKT ELECTRONICS Screen Creator Advance 2 out-of-bounds read | 7.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2023-22349 | JTEKT ELECTRONICS Screen Creator Advance 2 out-of-bounds read | 7.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2023-22347 | JTEKT ELECTRONICS Screen Creator Advance 2 out-of-bounds read | 7.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2023-22346 | JTEKT ELECTRONICS Screen Creator Advance 2 out-of-bounds read | 7.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2023-22345 | JTEKT ELECTRONICS Screen Creator Advance 2 out-of-bounds write | 7.8v3.1 | 0.3% | 2023-02-13 | Fix |
| CVE-2023-0819 | Heap-based buffer overflow in gpac/gpac | 7.8v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0818 | Off-by-one error in gpac/gpac | 5.5NVD v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0817 | Buffer over-read in gpac/gpac | 7.8v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0810 | Cross-site scripting (XSS) Stored in Btcpayserver/Btcpayserver | 5.4NVD v3.1 | 0.6% | 2023-02-13 | Fix |
| CVE-2023-0808 | Deye/Revolt/Bosswerk Inverter Access Point setting hard-coded password | 6.8v3.1 | 0.2% | 2023-02-13 | |
| CVE-2023-0804 | libtiff out-of-bounds write | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0803 | libtiff out-of-bounds write | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0802 | libtiff out-of-bounds write | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0801 | libtiff out-of-bounds write | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0800 | libtiff out-of-bounds write | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0799 | libtiff use-after-free | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0798 | libtiff out-of-bounds read | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0797 | libtiff out-of-bounds read | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0796 | libtiff out-of-bounds read | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0795 | libtiff out-of-bounds read | 6.8CNA v3.1 | 0.4% | 2023-02-13 | Fix |
| CVE-2023-0518 | GitLab denial of service | 4.3CNA v3.1 | 1.2% | 2023-02-13 | Fix |
| CVE-2023-0405 | GPT3 AI Content Writer WordPress plugin Subscriber+ arbitrary post content update | 4.3NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0379 | Spotlight Social Feeds WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0373 | Lightweight Accordion WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-13 | Fix |
| CVE-2023-0362 | Themify Portfolio Post WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0360 | Location Weather WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0333 | TemplatesNext ToolKit WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0275 | Easy Accept Payments for PayPal WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0270 | YaMaps for WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0263 | WP Yelp Review Slider WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-02-13 | Fix |
| CVE-2023-0262 | WP Airbnb Review Slider WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-02-13 | Fix |
| CVE-2023-0261 | WP TripAdvisor Review Slider WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 4.4% | 2023-02-13 | NucleiFix |
| CVE-2023-0260 | WP Review Slider WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-02-13 | Fix |
| CVE-2023-0259 | WP Google Review Slider WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-02-13 | Fix |
| CVE-2023-0255 | Enable Media Replace WordPress plugin Author+ arbitrary file upload | 8.8NVD v3.1 | 1.1% | 2023-02-13 | Fix |
| CVE-2023-0220 | Pinpoint Booking System WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-02-13 | Fix |
| CVE-2023-0177 | Social Like Box and Page by WpDevArt WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0169 | Zoho Forms WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 1.6% | 2023-02-13 | Fix |
| CVE-2023-0166 | PickPlugins Product Slider for WooCommerce WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0159 | Extensive VC Addons for WPBakery page builder WordPress plugin unauthenticated RCE | 7.5NVD v3.1 | 55.5% | 2023-02-13 | NucleiExploit codeFix |
| CVE-2023-0151 | uTubeVideo Gallery WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0099 | Simple URLs WordPress plugin Multiple reflected XSS | 6.1NVD v3.1 | 1.7% | 2023-02-13 | NucleiExploit codeFix |
| CVE-2023-0098 | Simple URLs WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 0.9% | 2023-02-13 | Fix |
| CVE-2023-0080 | Customer Reviews for WooCommerce WordPress plugin Contributor+ LFI | 8.8NVD v3.1 | 1.1% | 2023-02-13 | Fix |
| CVE-2023-0075 | Amazon JS WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-13 | |
| CVE-2023-0061 | Judge.me Product Reviews for WooCommerce WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.6% | 2023-02-13 | Fix |
| CVE-2023-0060 | Responsive Gallery Grid WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-0034 | JetWidgets For Elementor WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.5% | 2023-02-13 | Fix |
| CVE-2023-20076 | Cisco IOx Application Hosting Environment command injection | 7.2CNA v3.1 | 1.5% | 2023-02-12 | Fix |
| CVE-2023-0794 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2023-0793 | Weak password requirements in thorsten/phpMyFAQ | 8.8v3.1 | 0.7% | 2023-02-12 | Fix |
| CVE-2023-0792 | Code injection in thorsten/phpMyFAQ | 5.4v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2023-0791 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2023-0790 | Uncaught exception in thorsten/phpMyFAQ | 8.8v3.1 | 0.7% | 2023-02-12 | Fix |
| CVE-2023-0789 | Command injection in thorsten/phpMyFAQ | 9.8v3.1 | 1.7% | 2023-02-12 | Fix |
| CVE-2023-0788 | Code injection in thorsten/phpMyFAQ | 9.8v3.1 | 0.9% | 2023-02-12 | Fix |
| CVE-2023-0787 | Cross-site scripting (XSS) Generic in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-02-12 | Fix |
| CVE-2023-0786 | Cross-site scripting (XSS) Generic in thorsten/phpMyFAQ | 4.8NVD v3.1 | 0.6% | 2023-02-12 | Fix |
| CVE-2023-0785 | SourceCodester Best Online News Portal check_availability.php information exposure | 3.7v3.1 | 0.9% | 2023-02-12 | |
| CVE-2023-0784 | SourceCodester Best Online News Portal Login page SQL injection | 9.8v3.1 | 0.8% | 2023-02-12 | |
| CVE-2023-0661 | Devolutions Server improper access control | 6.5v3.1 | 0.7% | 2023-02-12 | Fix |
| CVE-2023-25562 | Failure to Invalidate Session on Logout in DataHub | 6.9CNA v3.1 | 0.4% | 2023-02-11 | Fix |
| CVE-2023-25561 | Login fail open on JAAS misconfiguration in DataHub | 5.7CNA v3.1 | 0.4% | 2023-02-11 | Fix |
| CVE-2023-25560 | JSON injection in DataHub | 8.2CNA v3.1 | 0.6% | 2023-02-11 | Fix |
| CVE-2023-25559 | System account impersonation in DataHub | 8.2CNA v3.1 | 0.5% | 2023-02-11 | Fix |
| CVE-2023-25558 | Deserialization of untrusted data in DataHub | 7.5CNA v3.1 | 1.0% | 2023-02-11 | Fix |
| CVE-2023-25557 | Server-side request forgery in DataHub | 7.5CNA v3.1 | 0.7% | 2023-02-11 | Fix |
| CVE-2023-0783 | EcShop PHP file template.php unrestricted upload | 9.8v3.1 | 0.9% | 2023-02-11 | |
| CVE-2023-0782 | Tenda AC23 httpd formGetSysToolDDNS out-of-bounds write | 9.8v3.1 | 1.5% | 2023-02-11 | |
| CVE-2023-0781 | SourceCodester Canteen Management System removeOrder.php query SQL injection | 9.8v3.1 | 0.7% | 2023-02-11 | |
| CVE-2023-0780 | Improper restriction of rendered UI layers or frames in cockpit-hq/cockpit | 5.4v3.1 | 0.4% | 2023-02-11 | Fix |
| CVE-2023-0776 | Remote code execution in Baicells QRTB Platform | 10.0v3.1 | 1.2% | 2023-02-11 | Fix |
| CVE-2023-0127 | D-Link DWL-2600AP with firmware firmware_update command command injection | 7.8NVD v3.1 | 2.0% | 2023-02-11 | |
| CVE-2023-24816 | Set_term_title command injection in ipython | 4.5CNA v3.1 | 1.3% | 2023-02-10 | Fix |
| CVE-2023-24573 | Dell Command Monitor (DCM) access control weakness | 4.7CNA v3.1 | 0.2% | 2023-02-10 | Fix |
| CVE-2023-24569 | Dell Alienware Command Center (AWCC) improper input validation | 7.8CNA v3.1 | 0.2% | 2023-02-10 | Fix |
| CVE-2023-24352 | D-Link DIR-605L out-of-bounds write | 9.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24351 | D-Link DIR-605L out-of-bounds write | 9.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24350 | D-Link DIR-605L out-of-bounds write | 9.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24349 | D-Link DIR-605L out-of-bounds write | 9.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24348 | D-Link DIR-605L stack-based buffer overflow | 9.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24347 | D-Link DIR-605L stack-based buffer overflow | 8.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24346 | D-Link DIR-605L stack-based buffer overflow | 8.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24345 | D-Link DIR-605L stack-based buffer overflow | 8.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24344 | D-Link DIR-605L stack-based buffer overflow | 8.8v3.1 | 1.3% | 2023-02-10 | |
| CVE-2023-24343 | D-Link DIR-605L stack-based buffer overflow | 8.8v3.1 | 1.2% | 2023-02-10 | |
| CVE-2023-24234 | Inventory Management System stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-02-10 | |
| CVE-2023-24233 | Inventory Management System stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-02-10 | |
| CVE-2023-24232 | Inventory Management System stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-02-10 | |
| CVE-2023-24231 | Inventory Management System stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-02-10 | |
| CVE-2023-24230 | Formwork cross-site scripting (XSS) from page title field | 4.8v3.1 | 0.5% | 2023-02-10 | Fix |
| CVE-2023-23698 | Dell Command Update (DCU) arbitrary file deletion | 5.5CNA v3.1 | 0.2% | 2023-02-10 | Fix |
| CVE-2023-23286 | Farsight Provide Server cross-site scripting | 6.1v3.1 | 2.6% | 2023-02-10 | Exploit code |
| CVE-2023-23163 | PHPGurukul Art Gallery Management System SQL injection | 9.8v3.1 | 4.4% | 2023-02-10 | Exploit code |
| CVE-2023-23162 | PHPGurukul Art Gallery Management System SQL injection | 9.8v3.1 | 4.4% | 2023-02-10 | Exploit code |
| CVE-2023-23161 | PHPGurukul Art Gallery Management System reflected cross-site scripting | 6.1v3.1 | 5.9% | 2023-02-10 | NucleiExploit code |
| CVE-2023-22832 | Apache NiFi: Improper Restriction of XML external entity References in ExtractCCDAAttributes | 7.5v3.1 | 1.4% | 2023-02-10 | Fix |
| CVE-2023-0777 | Authentication bypass by primary weakness in modoboa/modoboa | 9.8v3.1 | 15.1% | 2023-02-10 | NucleiExploit codeFix |
| CVE-2023-0774 | SourceCodester Medical Certificate Generator App action.php SQL injection | 9.8v3.1 | 0.5% | 2023-02-10 | |
| CVE-2023-0771 | SQL injection in ampache/ampache | 8.8v3.1 | 0.7% | 2023-02-10 | Fix |
| CVE-2023-25168 | Symbolic Link Following allowing the deletion of files and directories on the host system in wings | 9.6CNA v3.1 | 1.0% | 2023-02-09 | Fix |
| CVE-2023-24815 | Disclosure of classpath resources on Windows when mounted on a wildcard route in vertx-web | 4.8CNA v3.1 | 0.9% | 2023-02-09 | Fix |
| CVE-2023-24690 | ChurchCRM cross-site scripting | 5.4v3.1 | 0.5% | 2023-02-09 | |
| CVE-2023-24689 | Mojoportal path traversal | 4.3v3.1 | 0.7% | 2023-02-09 | |
| CVE-2023-24688 | Mojoportal improper access control | 5.3v3.1 | 0.7% | 2023-02-09 | |
| CVE-2023-24687 | Mojoportal cross-site scripting | 5.4v3.1 | 0.6% | 2023-02-09 | |
| CVE-2023-24686 | ChurchCRM cross-site scripting | 4.8v3.1 | 0.7% | 2023-02-09 | |
| CVE-2023-24685 | ChurchCRM SQL injection | 7.2v3.1 | 1.0% | 2023-02-09 | |
| CVE-2023-24684 | ChurchCRM SQL injection | 7.2v3.1 | 1.0% | 2023-02-09 | |
| CVE-2023-24323 | Mojoportal XML external entity injection | 8.8v3.1 | 1.2% | 2023-02-09 | |
| CVE-2023-24322 | Mojoportal FileDialog.aspx component reflected cross-site scripting | 6.1v3.1 | 31.7% | 2023-02-09 | Nuclei |
| CVE-2023-23912 | Ubiquiti EdgeRouter(s) and USG(s) special element injection | 8.8v3.1 | 0.9% | 2023-02-09 | |
| CVE-2023-23631 | HAMT Decoding Panics in github.com/ipfs/go-unixfsnode | 5.9CNA v3.1 | 0.9% | 2023-02-09 | Fix |
| CVE-2023-23626 | Denial of service when feeding malformed size arguments in go-bitfield | 5.9CNA v3.1 | 0.9% | 2023-02-09 | Fix |
| CVE-2023-23625 | Denial of service in HAMT Decoding in go-unixfs | 5.9CNA v3.1 | 0.7% | 2023-02-09 | Fix |
| CVE-2023-23592 | Wallix Bastion Access Manager information disclosure | 7.5v3.1 | 0.8% | 2023-02-09 | Fix |
| CVE-2023-22953 | ExpressionEngine remote code execution | 8.8v3.1 | 1.4% | 2023-02-09 | Fix |
| CVE-2023-22799 | ReDoS based DoS vulnerability in GlobalID | 7.5v3.1 | 1.0% | 2023-02-09 | Fix |
| CVE-2023-22798 | https://github.com/brave/adblock-lists open redirect | 6.1v3.1 | 0.5% | 2023-02-09 | |
| CVE-2023-22797 | Open redirect vulnerability in Action Pack | 6.1v3.1 | 0.6% | 2023-02-09 | Fix |
| CVE-2023-22796 | https://github.com/rails/rails ReDoS based DoS vulnerability in Active Support's underscore | 7.5v3.1 | 1.7% | 2023-02-09 | Fix |
| CVE-2023-22795 | https://github.com/rails/rails ReDoS based DoS vulnerability in Action Dispatch | 7.5v3.1 | 2.3% | 2023-02-09 | Fix |
| CVE-2023-22794 | SQL injection vulnerability via ActiveRecord comments | 8.8v3.1 | 2.2% | 2023-02-09 | Fix |
| CVE-2023-22792 | https://github.com/rails/rails ReDoS based DoS vulnerability in Action Dispatch | 7.5v3.1 | 1.7% | 2023-02-09 | Fix |
| CVE-2023-21451 | Samsung Mobile Devices IpcRxEmbmsSessionList in SECRIL stack-based buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21450 | Samsung Mobile One Hand Operation + missing authorization | 2.3CNA v3.1 | 0.3% | 2023-02-09 | Fix |
| CVE-2023-21448 | Samsung Mobile Samsung Cloud path traversal | 5.7CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21447 | Samsung Mobile Samsung Cloud improper access control | 4.0CNA v3.1 | 0.1% | 2023-02-09 | Fix |
| CVE-2023-21446 | Samsung Mobile MyFiles improper input validation | 6.2CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21445 | Samsung Mobile The patch adds proper access control to use explicit intent improper access control | 5.5CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21444 | Samsung Mobile Samsung Flow for PC inadequate encryption strength | 7.5CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21443 | Samsung Mobile Samsung Flow inadequate encryption strength | 7.5CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21442 | Samsung Mobile Runestone improper access control | 4.0CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21441 | Samsung Mobile Routine insufficient verification of data authenticity | 7.4CNA v3.1 | 0.1% | 2023-02-09 | Fix |
| CVE-2023-21440 | Samsung Mobile Devices WindowManagerService improper access control | 6.2CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21439 | Samsung Mobile Devices UwbDataTxStatusEvent improper input validation | 8.5CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21438 | Samsung Mobile Devices improper access control | 2.1CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21437 | Samsung Mobile Devices Phone application improper access control | 4.0CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21436 | Samsung Mobile Devices improper authorization | 3.3CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21435 | Samsung Mobile Devices Fingerprint TA information disclosure | 4.4CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21434 | Samsung Mobile Galaxy Store improper input validation | 6.2CNA v3.1 | 12.9% | 2023-02-09 | Fix |
| CVE-2023-21433 | Samsung Mobile Galaxy Store improper access control | 7.8CNA v3.1 | 3.7% | 2023-02-09 | Fix |
| CVE-2023-21432 | Samsung Mobile SmartThings improper access control | 4.2CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21431 | Samsung Mobile Bixby Vision improper input validation | 3.3CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21430 | Samsung Mobile Devices out-of-bounds read | 4.4CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21429 | Samsung Mobile Devices improper authorization | 4.0CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21428 | Samsung Mobile Devices TelephonyUI improper input validation | 4.0CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21427 | Samsung Mobile Devices NfcTile improper access control | 5.4CNA v3.1 | 0.3% | 2023-02-09 | Fix |
| CVE-2023-21426 | Samsung Mobile Devices hard-coded credentials | 4.3CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21425 | Samsung Mobile Devices telecom application improper access control | 4.3CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21424 | Samsung Mobile Devices SemChameleonHelper improper handling of insufficient permissions | 5.1CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21423 | Samsung Mobile Devices ChnFileShareKit improper authorization | 5.1CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21422 | Samsung Mobile Devices semAddPublicDnsAddr in WifiSevice improper authorization | 5.7CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21421 | Samsung Mobile Devices KnoxCustomManagerService improper handling of insufficient permissions | 5.9CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21420 | Samsung Mobile Devices STST TA format string | 7.3CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-21419 | Samsung Mobile Devices improper authentication | 4.3CNA v3.1 | 0.2% | 2023-02-09 | Fix |
| CVE-2023-0770 | Stack-based buffer overflow in gpac/gpac | 7.8v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2023-0760 | Heap-based buffer overflow in gpac/gpac | 7.8v3.1 | 0.4% | 2023-02-09 | Fix |
| CVE-2023-0759 | Privilege Chaining in GitHub repository cockpit-hq/cockpit prior to 2.3.8. | 8.8v3.1 | 0.3% | 2023-02-09 | Fix |
| CVE-2023-0758 | glorylion JFinalOA SysOrg.java SQL injection | 9.8v3.1 | 0.6% | 2023-02-09 | |
| CVE-2023-0745 | YugabyteDB Anywhere arbitrary file write in High Availability Backup upload | 6.7CNA v3.1 | 0.5% | 2023-02-09 | |
| CVE-2023-0624 | OrangeScrum cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-09 | |
| CVE-2023-0575 | YugabyteDB remote code execution | 7.2CNA v3.1 | 0.8% | 2023-02-09 | Fix |
| CVE-2023-0574 | YugabyteDB Anywhere server-side request forgery | 6.8CNA v3.1 | 0.6% | 2023-02-09 | |
| CVE-2023-25396 | Caphyon Advanced Installer MSI repair functionality privilege escalation | 7.8v3.1 | 0.2% | 2023-02-08 | Fix |
| CVE-2023-25167 | Regular expression denial of service via installing themes via git in discourse | 6.5CNA v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-25166 | hapijs formula regular expression denial of service (ReDoS) | 5.5CNA v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-25165 | helm getHostByName function information disclosure | 4.3CNA v3.1 | 0.8% | 2023-02-08 | Fix |
| CVE-2023-25164 | Sensitive information leak via script file in TinaCMS | 8.6CNA v3.1 | 0.7% | 2023-02-08 | Fix |
| CVE-2023-25163 | argoproj argo-cd argo CD leaks repository credentials in user-facing error messages and in logs | 6.3CNA v3.1 | 0.8% | 2023-02-08 | Fix |
| CVE-2023-25152 | Symbolic Link (Symlink) Following in github.com/pterodactyl/wings | 8.4CNA v3.1 | 0.7% | 2023-02-08 | Fix |
| CVE-2023-25151 | DoS vulnerability for high cardinality metrics in opentelemetry-go-contrib | 7.5CNA v3.1 | 1.0% | 2023-02-08 | Fix |
| CVE-2023-25150 | Nextcloud Richdocuments Collabora integration information disclosure | 5.8CNA v3.1 | 0.7% | 2023-02-08 | Fix |
| CVE-2023-24828 | OneDev access token and password reset key generation weak random number generator | 8.1CNA v3.1 | 0.7% | 2023-02-08 | Fix |
| CVE-2023-23475 | IBM InfoSphere Information Server cross-site scripting | 4.6CNA v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0751 | FreeBSD GELI silently omits the keyfile if read from stdin | 6.5v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0748 | Open redirect in Btcpayserver/Btcpayserver | 6.1v3.1 | 0.6% | 2023-02-08 | Exploit codeFix |
| CVE-2023-0747 | Cross-site scripting (XSS) Stored in Btcpayserver/Btcpayserver | 5.4v3.1 | 0.5% | 2023-02-08 | Fix |
| CVE-2023-0744 | Improper access control in answerdev/Answer | 9.8v3.1 | 6.4% | 2023-02-08 | Exploit codeFix |
| CVE-2023-0743 | Cross-site scripting (XSS) Generic in answerdev/Answer | 9.0v3.1 | 0.7% | 2023-02-08 | Fix |
| CVE-2023-0742 | Cross-site scripting (XSS) Stored in answerdev/Answer | 9.0v3.1 | 0.9% | 2023-02-08 | Fix |
| CVE-2023-0741 | Cross-site scripting (XSS) DOM in answerdev/Answer | 9.0v3.1 | 0.9% | 2023-02-08 | Fix |
| CVE-2023-0740 | Cross-site scripting (XSS) Stored in answerdev/Answer | 9.0v3.1 | 0.7% | 2023-02-08 | Fix |
| CVE-2023-0739 | Concurrent execution using shared resource with improper synchronization in answerdev/Answer | 6.8NVD v3.1 | 0.7% | 2023-02-08 | Fix |
| CVE-2023-0726 | Wicked Folders WordPress plugin cross-site request forgery via ajax_edit_folder | 4.3v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0725 | Wicked Folders WordPress plugin cross-site request forgery via ajax_clone_folder | 4.3v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0724 | Wicked Folders WordPress plugin cross-site request forgery via ajax_add_folder | 4.3v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0722 | Wicked Folders WordPress plugin cross-site request forgery via ajax_save_state | 4.3v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0720 | Wicked Folders WordPress plugin missing authorization on ajax_save_folder_order | 4.3v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0718 | Wicked Folders WordPress plugin missing authorization on ajax_save_folder | 4.3v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0717 | Wicked Folders WordPress plugin missing authorization via ajax_delete_folder | 4.3v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0716 | Wicked Folders WordPress plugin missing authorization on ajax_edit_folder | 4.3v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0715 | Wicked Folders WordPress plugin missing authorization on ajax_clone_folder | 4.3v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0711 | Wicked Folders WordPress plugin missing authorization via ajax_save_state | 4.3v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0690 | HashiCorp Boundary PKI worker credential rotation vulnerability | 5.0CNA v3.1 | 0.4% | 2023-02-08 | Fix |
| CVE-2023-0685 | Wicked Folders WordPress plugin cross-site request forgery via ajax_unassign_folders | 4.3v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0684 | Wicked Folders WordPress plugin missing authorization via ajax_unassign_folders | 4.3v3.1 | 0.6% | 2023-02-08 | Fix |
| CVE-2023-0401 | OpenSSL null dereference during PKCS7 data verification | 7.5v3.1 | 1.8% | 2023-02-08 | Fix |
| CVE-2023-0286 | OpenSSL X.400 address type confusion in X.509 GeneralName | 7.4NVD v3.1 | 71.2% | 2023-02-08 | Fix |
| CVE-2023-0251 | Delta Electronics DIAScreen buffer overflow | 7.8v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0250 | Delta Electronics DIAScreen stack-based buffer overflow | 7.8v3.1 | 2.2% | 2023-02-08 | Fix |
| CVE-2023-0249 | Delta Electronics DIAScreen out-of-bounds write | 7.8v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0217 | OpenSSL null dereference validating DSA public key | 7.5v3.1 | 1.8% | 2023-02-08 | Fix |
| CVE-2023-0216 | OpenSSL invalid pointer dereference in d2i_PKCS7 functions | 7.5v3.1 | 1.8% | 2023-02-08 | Fix |
| CVE-2023-0215 | OpenSSL use-after-free following BIO_new_NDEF | 7.5NVD v3.1 | 5.0% | 2023-02-08 | Fix |
| CVE-2023-0003 | Cortex XSOAR: Local File Disclosure vulnerability in the Cortex XSOAR Server | 6.5CNA v3.1 | 1.3% | 2023-02-08 | Fix |
| CVE-2023-0002 | Cortex XDR Agent: Product Disruption by Local Windows User | 5.5CNA v3.1 | 0.3% | 2023-02-08 | Fix |
| CVE-2023-0001 | Cortex XDR Agent: Cleartext Exposure of Agent Admin Password | 6.0CNA v3.1 | 0.2% | 2023-02-08 | Fix |
| CVE-2023-25194 | Apache Kafka Connect API: Possible RCE/denial of service attack | 8.8NVD v3.1 | 95.8% | 2023-02-07 | NucleiMetasploitExploit codeFix |
| CVE-2023-24827 | Credential disclosure in syft when SYFT_ATTEST_PASSWORD environment variable set in syft | 6.5CNA v3.1 | 0.8% | 2023-02-07 | Fix |
| CVE-2023-24814 | Persisted cross-site scripting in Frontend Rendering in TYPO3 | 8.8CNA v3.1 | 0.8% | 2023-02-07 | Fix |
| CVE-2023-24813 | dompdf URI validation failure on SVG parsing. Bypass of | 10.0CNA v3.1 | 2.5% | 2023-02-07 | Fix |
| CVE-2023-24808 | Denial of service when opening a corrupt PDF file in pdfio | 5.3CNA v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2023-23931 | Cipher.update_into can corrupt memory in pyca cryptography | 4.8CNA v3.1 | 1.3% | 2023-02-07 | Fix |
| CVE-2023-23696 | Dell Command Intel vPro Out of Band (DCIV) improper authorization | 7.0CNA v3.1 | 0.5% | 2023-02-07 | Fix |
| CVE-2023-23026 | Simple Sales Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-07 | |
| CVE-2023-23011 | InvoicePlane cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-07 | |
| CVE-2023-22735 | Zulip Server S3 file uploads vulnerability | 4.4CNA v3.1 | 0.5% | 2023-02-07 | Fix |
| CVE-2023-22643 | Libzypp-plugin-appdata: Potential arbitrary code execution | 6.3CNA v3.1 | 2.4% | 2023-02-07 | Fix |
| CVE-2023-0736 | Cross-site scripting (XSS) Stored in wallabag/wallabag | 5.4v3.1 | 0.4% | 2023-02-07 | Fix |
| CVE-2023-0735 | Cross-site request forgery (CSRF) in wallabag/wallabag | 6.5v3.1 | 0.3% | 2023-02-07 | Fix |
| CVE-2023-0732 | SourceCodester Online Eyewear Shop POST Request Users.php registration cross-site scripting | 6.1v3.1 | 0.4% | 2023-02-07 | |
| CVE-2023-0731 | Interactive Geo Maps WordPress plugin authenticated (Editor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-02-07 | Fix |
| CVE-2023-0730 | Wicked Folders WordPress plugin cross-site request forgery via ajax_save_folder_order | 4.3v3.1 | 0.3% | 2023-02-07 | Fix |
| CVE-2023-0728 | Wicked Folders WordPress plugin cross-site request forgery on ajax_save_folder | 4.3v3.1 | 0.3% | 2023-02-07 | Fix |
| CVE-2023-0727 | Wicked Folders WordPress plugin cross-site request forgery via ajax_delete_folder | 4.3v3.1 | 0.3% | 2023-02-07 | Fix |
| CVE-2023-0723 | Wicked Folders WordPress plugin cross-site request forgery on ajax_move_object | 4.3v3.1 | 0.3% | 2023-02-07 | Fix |
| CVE-2023-0719 | Wicked Folders WordPress plugin missing authorization on ajax_save_sort_order | 4.3v3.1 | 0.6% | 2023-02-07 | Fix |
| CVE-2023-0713 | Wicked Folders WordPress plugin missing authorization on ajax_add_folder | 4.3v3.1 | 0.6% | 2023-02-07 | Fix |
| CVE-2023-0712 | Wicked Folders WordPress plugin missing authorization on ajax_move_object | 4.3v3.1 | 0.6% | 2023-02-07 | Fix |
| CVE-2023-0707 | SourceCodester Medical Certificate Generator App function.php delete_record SQL injection | 9.8v3.1 | 0.3% | 2023-02-07 | |
| CVE-2023-0706 | SourceCodester Medical Certificate Generator App manage_record.php SQL injection | 8.8v3.1 | 0.3% | 2023-02-07 | |
| CVE-2023-0705 | Google Chrome Core integer overflow | 7.5v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2023-0704 | Google Chrome DevTools insufficient policy enforcement | 6.5v3.1 | 0.9% | 2023-02-07 | Fix |
| CVE-2023-0703 | Google Chrome DevTools type confusion | 8.8v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2023-0702 | Google Chrome Data Transfer type confusion | 8.8v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2023-0701 | Google Chrome WebUI heap-based buffer overflow | 8.8v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2023-0700 | Google Chrome Download inappropriate implementation | 6.5v3.1 | 0.7% | 2023-02-07 | Fix |
| CVE-2023-0699 | Google Chrome GPU use-after-free | 8.8v3.1 | 0.8% | 2023-02-07 | Fix |
| CVE-2023-0698 | Google Chrome WebRTC out-of-bounds read | 8.8v3.1 | 0.6% | 2023-02-07 | Fix |
| CVE-2023-0697 | Google Chrome Full screen mode inappropriate implementation | 6.5v3.1 | 0.5% | 2023-02-07 | Fix |
| CVE-2023-0696 | Google Chrome V8 type confusion | 8.8v3.1 | 0.6% | 2023-02-07 | Fix |
| CVE-2023-25016 | Couchbase Server cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2023-02-06 | Fix |
| CVE-2023-24276 | TOTOLINK A7100RU command injection | 9.8v3.1 | 1.9% | 2023-02-06 | |
| CVE-2023-24202 | oretnom23 Raffle Draw System unrestricted file upload | 9.8v3.1 | 1.0% | 2023-02-06 | |
| CVE-2023-24201 | oretnom23 Raffle Draw System excessive memory allocation | 9.8v3.1 | 0.9% | 2023-02-06 | |
| CVE-2023-24200 | oretnom23 Raffle Draw System SQL injection | 9.8v3.1 | 0.9% | 2023-02-06 | |
| CVE-2023-24199 | oretnom23 Raffle Draw System SQL injection | 9.8v3.1 | 0.9% | 2023-02-06 | |
| CVE-2023-24198 | oretnom23 Raffle Draw System SQL injection | 9.8v3.1 | 0.9% | 2023-02-06 | |
| CVE-2023-24197 | oretnom23 Online Food Ordering System cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-06 | |
| CVE-2023-24195 | oretnom23 Online Food Ordering System cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-06 | |
| CVE-2023-24194 | oretnom23 Online Food Ordering System cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-06 | |
| CVE-2023-24192 | oretnom23 Online Food Ordering System cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-06 | |
| CVE-2023-24191 | oretnom23 Online Food Ordering System cross-site scripting | 6.1v3.1 | 0.5% | 2023-02-06 |