CVE-2023 records published in July 2023
This page lists the 2,030 CVE-2023 records published in July 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 15 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 29914.7% of these records
- Listed in CISA KEV
- 150.7% of these records
- Reported exploited
- 60.3% of these records
- Detection signal
- 643.2% of these records
- Exploit code
- 984.8% of these records
- Actionable vendor fix
- 1,47472.6% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in July 2023 have had from about 39 months to about 40 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-39122 | BMC Control-M SQL injection | 9.8v3.1 | 0.7% | 2023-07-31 | |
| CVE-2023-38989 | Jeesite missing authorization | 4.3v3.1 | 0.4% | 2023-07-31 | |
| CVE-2023-38750 | In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed. | 7.5v3.1 | 0.9% | 2023-07-31 | Fix |
| CVE-2023-38311 | Webmin cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-38310 | Webmin cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-38309 | Webmin cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-31 | Fix |
| CVE-2023-38308 | Webmin cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-31 | Fix |
| CVE-2023-38307 | Webmin cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-38306 | Webmin cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-31 | Fix |
| CVE-2023-38305 | Webmin cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-31 | Fix |
| CVE-2023-38304 | Webmin cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-38303 | Webmin cross-site scripting | 5.4v3.1 | 0.8% | 2023-07-31 | Fix |
| CVE-2023-37771 | PHPGurukul Art Gallery Management System SQL injection | 9.8v3.1 | 1.5% | 2023-07-31 | Exploit code |
| CVE-2023-37647 | SEMCMS SQL injection | 9.8v3.1 | 0.6% | 2023-07-31 | |
| CVE-2023-37580 | Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting (XSS) | 6.1v3.1 | 49.1% | 2023-07-31 | KEVNucleiFix |
| CVE-2023-36092 | D-Link DIR-859 authentication bypass | 9.8v3.1 | 1.7% | 2023-07-31 | |
| CVE-2023-36091 | D-Link DIR-895L authentication bypass | 9.8v3.1 | 1.5% | 2023-07-31 | |
| CVE-2023-36090 | D-Link DIR-885L authentication bypass | 9.8v3.1 | 1.5% | 2023-07-31 | |
| CVE-2023-36089 | D-Link Dir-645 Firmware authentication bypass | 9.8v3.1 | 1.5% | 2023-07-31 | |
| CVE-2023-35861 | Supermicro H12dst-b email notifications injection | 9.8v3.1 | 2.1% | 2023-07-31 | Fix |
| CVE-2023-35792 | Vound-software Intella Connect cross-site scripting | 6.1v3.1 | 0.3% | 2023-07-31 | |
| CVE-2023-35791 | Vound-software Intella Connect open redirect | 6.1v3.1 | 0.3% | 2023-07-31 | |
| CVE-2023-35019 | IBM Security Verify Governance command execution | 7.2CNA v3.1 | 1.3% | 2023-07-31 | Fix |
| CVE-2023-35016 | IBM Security Verify Governance path traversal | 6.5CNA v3.1 | 1.2% | 2023-07-31 | Fix |
| CVE-2023-34917 | cms open redirect | 6.1v3.1 | 0.4% | 2023-07-31 | |
| CVE-2023-34916 | cms open redirect | 6.1v3.1 | 0.4% | 2023-07-31 | |
| CVE-2023-34872 | Freedesktop Poppler denial of service | 5.5v3.1 | 0.9% | 2023-07-31 | Fix |
| CVE-2023-34842 | DedeCMS remote code execution | 9.8v3.1 | 1.1% | 2023-07-31 | |
| CVE-2023-34644 | Ruijie Re-eg1000m remote code execution | 9.8v3.1 | 1.8% | 2023-07-31 | Fix |
| CVE-2023-34635 | Wifi-soft Unibox Administration SQL injection | 9.8v3.1 | 3.5% | 2023-07-31 | Exploit code |
| CVE-2023-34360 | ASUS RT-AX88U stored XSS | 5.4NVD v3.1 | 0.5% | 2023-07-31 | |
| CVE-2023-34359 | ASUS RT-AX88U out-of-bounds read 2 | 7.5CNA v3.1 | 0.8% | 2023-07-31 | Fix |
| CVE-2023-34358 | ASUS RT-AX88U out-of-bounds read 1 | 7.5CNA v3.1 | 0.8% | 2023-07-31 | Fix |
| CVE-2023-33534 | Sztozed Zlt S10G A cross-site request forgery | 8.8v3.1 | 0.4% | 2023-07-31 | |
| CVE-2023-24971 | IBM B2B Advanced Communication denial of service | 7.5CNA v3.1 | 0.8% | 2023-07-31 | Fix |
| CVE-2023-22595 | IBM B2B Advanced Communication cross-site scripting | 5.4CNA v3.1 | 0.3% | 2023-07-31 | Fix |
| CVE-2023-4007 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4NVD v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-4006 | Improper neutralization of formula elements in a CSV file in thorsten/phpMyFAQ | 9.8v3.1 | 0.8% | 2023-07-31 | Fix |
| CVE-2023-4005 | Insufficient session expiration in FOSSBilling/FOSSBilling | 9.8v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-4004 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.9% | 2023-07-31 | Fix |
| CVE-2023-3997 | Unauthenticated log injection in Splunk Soar | 7.8v3.1 | 0.3% | 2023-07-31 | Fix |
| CVE-2023-3983 | Advantech iView authenticated SQL injection | 8.8NVD v3.1 | 16.7% | 2023-07-31 | |
| CVE-2023-3825 | PTC KEPServerEX resource exhaustion | 7.5v3.1 | 0.8% | 2023-07-31 | Fix |
| CVE-2023-3817 | OpenSSL excessive time spent checking DH q parameter value | 5.3NVD v3.1 | 3.0% | 2023-07-31 | Fix |
| CVE-2023-3508 | WooCommerce Pre-Orders WordPress plugin unauthorised actions via CSRF | 6.5NVD v3.1 | 0.3% | 2023-07-31 | Fix |
| CVE-2023-3507 | WooCommerce Pre-Orders WordPress plugin arbitrary Pre-Order Canceling via CSRF | 6.5NVD v3.1 | 0.3% | 2023-07-31 | Fix |
| CVE-2023-3462 | Vault's LDAP Auth method allows for User Enumeration | 5.3CNA v3.1 | 0.6% | 2023-07-31 | Fix |
| CVE-2023-3345 | LMS by Masteriyo WordPress plugin information exposure | 6.5NVD v3.1 | 2.0% | 2023-07-31 | NucleiFix |
| CVE-2023-3292 | wpsofts Grid Kit Premium reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-3134 | Forminator WordPress plugin reflected XSS | 6.1NVD v3.1 | 4.1% | 2023-07-31 | Fix |
| CVE-2023-3130 | Short URL WordPress plugin Admin+ cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-07-31 | Fix |
| CVE-2023-0602 | Twittee Text Tweet WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-07-31 | Nuclei |
| CVE-2023-37219 | Tadiran Telecom Composit improper neutralization of formula elements in a CSV file | 7.8v3.1 | 0.2% | 2023-07-30 | |
| CVE-2023-37218 | Tadiran Telecom Aeonix improper limitation of a pathname to a restricted directory | 7.5v3.1 | 0.7% | 2023-07-30 | |
| CVE-2023-37217 | Tadiran Telecom Aeonix observable response discrepancy | 5.3v3.1 | 0.5% | 2023-07-30 | |
| CVE-2023-37216 | AnaSystem SensMini M4 an authenticated user can cause denial of service | 6.5NVD v3.1 | 0.6% | 2023-07-30 | |
| CVE-2023-37215 | JBL soundbar multibeam use of hard-coded credentials | 9.8v3.1 | 0.4% | 2023-07-30 | Fix |
| CVE-2023-37214 | Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection | 9.8v3.1 | 0.7% | 2023-07-30 | Fix |
| CVE-2023-37213 | Synel SYnergy Fingerprint Terminals OS command injection | 9.8v3.1 | 1.3% | 2023-07-30 | Fix |
| CVE-2023-32227 | Synel SYnergy Fingerprint Terminals use of hard-coded credentials | 9.8v3.1 | 0.6% | 2023-07-30 | Fix |
| CVE-2023-32226 | SysAid files or directories accessible to external parties | 6.5NVD v3.1 | 0.5% | 2023-07-30 | Fix |
| CVE-2023-32225 | SysAid unrestricted upload of file with dangerous type | 7.2NVD v3.1 | 0.6% | 2023-07-30 | Fix |
| CVE-2023-36542 | Apache NiFi: Potential code injection with Properties Referencing Remote Resources | 8.8v3.1 | 1.9% | 2023-07-29 | Exploit codeFix |
| CVE-2023-2314 | Google Chrome DevTools improper input validation | 6.5v3.1 | 0.4% | 2023-07-29 | Fix |
| CVE-2023-2313 | Google Chrome Sandbox inappropriate implementation | 8.8v3.1 | 0.7% | 2023-07-29 | Fix |
| CVE-2023-2311 | Google Chrome File System API insufficient policy enforcement | 6.5v3.1 | 0.6% | 2023-07-29 | Fix |
| CVE-2023-39023 | University Compass code injection | 9.8v3.1 | 0.9% | 2023-07-28 | |
| CVE-2023-39022 | Code injection in Oscore | 9.8v3.1 | 1.2% | 2023-07-28 | Fix |
| CVE-2023-39021 | Wix Embedded Mysql code injection in wix-embedded-mysql | 9.8v3.1 | 1.0% | 2023-07-28 | |
| CVE-2023-39020 | Stanford Parser code injection in stanford-parser | 9.8v3.1 | 1.0% | 2023-07-28 | Fix |
| CVE-2023-39018 | Bramp Ffmpeg-cli-wrapper code injection | 9.8v3.1 | 0.9% | 2023-07-28 | |
| CVE-2023-39017 | Softwareag Quartz code injection | 9.8v3.1 | 1.2% | 2023-07-28 | Fix |
| CVE-2023-39016 | Bbossgroups Bboss code injection | 9.8v3.1 | 0.8% | 2023-07-28 | |
| CVE-2023-39015 | CODE4CRAFT Webmagic code injection in webmagic-core | 9.8v3.1 | 0.9% | 2023-07-28 | |
| CVE-2023-39013 | Code injection in Duke | 9.8v3.1 | 0.9% | 2023-07-28 | |
| CVE-2023-39010 | Code injection in BoofCV | 9.8v3.1 | 0.9% | 2023-07-28 | Fix |
| CVE-2023-38992 | JeecgBoot SQL injection in jeecg-boot | 9.8v3.1 | 73.6% | 2023-07-28 | NucleiFix |
| CVE-2023-38988 | Jeesite notification management vulnerability | 4.3v3.1 | 0.5% | 2023-07-28 | |
| CVE-2023-38685 | Discourse's restricted tag information visible to unauthenticated users | 4.3CNA v3.1 | 0.5% | 2023-07-28 | Fix |
| CVE-2023-38684 | Discourse vulnerable to ossible DDoS due to unbounded limits in various controller actions | 5.3CNA v3.1 | 0.6% | 2023-07-28 | Fix |
| CVE-2023-38609 | Apple macOS injection | 7.5v3.1 | 1.1% | 2023-07-28 | Exploit codeFix |
| CVE-2023-38604 | Apple tvOS out-of-bounds write | 9.8v3.1 | 1.3% | 2023-07-28 | Fix |
| CVE-2023-38601 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the file system. | 7.5v3.1 | 0.7% | 2023-07-28 | Fix |
| CVE-2023-38599 | Apple Safari logic flaw | 6.5v3.1 | 1.0% | 2023-07-28 | Fix |
| CVE-2023-38598 | Apple tvOS use-after-free | 9.8v3.1 | 1.3% | 2023-07-28 | Fix |
| CVE-2023-38592 | Apple tvOS logic flaw | 8.8v3.1 | 1.2% | 2023-07-28 | Fix |
| CVE-2023-38590 | Apple tvOS buffer overflow | 8.8v3.1 | 1.3% | 2023-07-28 | Fix |
| CVE-2023-38571 | Apple macOS Privacy preferences vulnerability | 7.5v3.1 | 1.6% | 2023-07-28 | Exploit codeFix |
| CVE-2023-38498 | Discourse vulnerable to DoS via defer queue | 4.3CNA v3.1 | 0.7% | 2023-07-28 | Fix |
| CVE-2023-38331 | Zoho Manageengine Supportcenter Plus cross-site scripting | 5.4v3.1 | 2.2% | 2023-07-28 | Fix |
| CVE-2023-37906 | Discourse vulnerable to DoS via post edit reason | 4.3CNA v3.1 | 0.5% | 2023-07-28 | Fix |
| CVE-2023-37904 | Discourse race condition in Accept Invite | 2.6CNA v3.1 | 0.3% | 2023-07-28 | Fix |
| CVE-2023-37754 | Code injection in PowerJob | 9.8v3.1 | 30.0% | 2023-07-28 | |
| CVE-2023-37467 | Discourse CSP nonce reuse vulnerability for anonymous users | 6.8CNA v3.1 | 0.4% | 2023-07-28 | Fix |
| CVE-2023-37285 | Apple macOS out-of-bounds read | 9.8v3.1 | 1.1% | 2023-07-28 | Fix |
| CVE-2023-36495 | Apple tvOS integer overflow | 9.8v3.1 | 1.3% | 2023-07-28 | Fix |
| CVE-2023-34425 | Apple macOS arbitrary code execution | 9.8v3.1 | 1.3% | 2023-07-28 | Fix |
| CVE-2023-32654 | Apple macOS logic flaw | 6.5v3.1 | 0.6% | 2023-07-28 | Fix |
| CVE-2023-32445 | Apple Safari cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-28 | Fix |
| CVE-2023-32444 | Apple macOS logic flaw | 7.5v3.1 | 0.7% | 2023-07-28 | Fix |
| CVE-2023-32427 | This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic. | 5.9v3.1 | 0.4% | 2023-07-28 | Fix |
| CVE-2023-31937 | PHPGurukul Rail Pass Management System SQL injection | 7.2v3.1 | 1.1% | 2023-07-28 | |
| CVE-2023-31936 | PHPGurukul Rail Pass Management System SQL injection | 7.2v3.1 | 1.3% | 2023-07-28 | |
| CVE-2023-31935 | PHPGurukul Rail Pass Management System cross-site scripting | 4.8v3.1 | 0.6% | 2023-07-28 | |
| CVE-2023-31934 | PHPGurukul Rail Pass Management System cross-site scripting | 4.8v3.1 | 0.6% | 2023-07-28 | |
| CVE-2023-31933 | PHPGurukul Rail Pass Management System SQL injection | 7.2v3.1 | 1.3% | 2023-07-28 | |
| CVE-2023-31932 | PHPGurukul Rail Pass Management System SQL injection | 7.2v3.1 | 1.3% | 2023-07-28 | |
| CVE-2023-28203 | Apple Music information disclosure | 5.5v3.1 | 0.2% | 2023-07-28 | Fix |
| CVE-2023-3990 | Mingsoft MCMS HTTP POST request search.do cross-site scripting | 6.1v3.1 | 1.4% | 2023-07-28 | NucleiFix |
| CVE-2023-3989 | SourceCodester Jewelry Store System add_customer.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-28 | |
| CVE-2023-3988 | Cafe Billing System Order index.php SQL injection | 9.8v3.1 | 0.8% | 2023-07-28 | |
| CVE-2023-3987 | SourceCodester Simple Online Mens Salon Management System SQL injection | 9.8v3.1 | 0.8% | 2023-07-28 | |
| CVE-2023-3986 | SourceCodester Simple Online Mens Salon Management System cross-site scripting | 4.8v3.1 | 0.7% | 2023-07-28 | |
| CVE-2023-3985 | SourceCodester Online Jewelry Store login.php SQL injection | 9.8v3.1 | 0.9% | 2023-07-28 | |
| CVE-2023-3984 | phpscriptpoint RecipePoint recipe-result SQL injection | 9.8v3.1 | 0.5% | 2023-07-28 | |
| CVE-2023-3977 | Inisev plugins (various Versions) cross-site request forgery on handle_installation function | 4.3v3.1 | 0.6% | 2023-07-28 | Fix |
| CVE-2023-3774 | Vault Enterprise Namespace Creation may lead to denial of service | 4.9CNA v3.1 | 0.7% | 2023-07-28 | Fix |
| CVE-2023-3670 | CODESYS Development System installation directory permissions vulnerability | 7.3CNA v3.1 | 0.2% | 2023-07-28 | Fix |
| CVE-2023-3598 | Google Chrome ANGLE out-of-bounds read | 8.8v3.1 | 0.7% | 2023-07-28 | Fix |
| CVE-2023-3488 | Uninitialized variable in Gecko Bootloader can leak secure stack | 3.8CNA v3.1 | 0.3% | 2023-07-28 | Fix |
| CVE-2023-2685 | Unquoted service path in ABB AO-OPC | 7.2CNA v3.1 | 0.2% | 2023-07-28 | Fix |
| CVE-2023-0958 | Inisev plugins (various Versions) missing authorization on handle_installation function | 6.5v3.1 | 0.7% | 2023-07-28 | Fix |
| CVE-2023-38611 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.3% | 2023-07-27 | Fix |
| CVE-2023-38608 | The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be able to access user-sensitive data. | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38606 | Apple Multiple Products Kernel vulnerability | 5.5v3.1 | 2.9% | 2023-07-27 | KEVKCVFix |
| CVE-2023-38603 | Apple macOS denial of service | 7.5v3.1 | 1.2% | 2023-07-27 | Fix |
| CVE-2023-38602 | Apple macOS insecure permissions | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38600 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.4% | 2023-07-27 | Exploit codeFix |
| CVE-2023-38597 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.2% | 2023-07-27 | Fix |
| CVE-2023-38595 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.3% | 2023-07-27 | Fix |
| CVE-2023-38594 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.2% | 2023-07-27 | Fix |
| CVE-2023-38593 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38580 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38572 | Apple Safari Same Origin Policy vulnerability | 7.5v3.1 | 1.2% | 2023-07-27 | Fix |
| CVE-2023-38565 | Apple macOS privilege escalation | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38564 | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to modify protected parts of the file system. | 7.5v3.1 | 0.5% | 2023-07-27 | Fix |
| CVE-2023-38512 | WpStream WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-38510 | Tolgee Lacks Permission Check for API Key for some endpoints | 8.1CNA v3.1 | 0.6% | 2023-07-27 | Fix |
| CVE-2023-38505 | DietPi-Dashboard Insufficient TLS Handshake Pool | 7.5CNA v3.1 | 0.8% | 2023-07-27 | Fix |
| CVE-2023-38504 | Sails DoS vulnerability for apps with sockets enabled | 7.5CNA v3.1 | 0.9% | 2023-07-27 | Fix |
| CVE-2023-38495 | Crossplane vulnerable to possible image tampering from missing image validation for Packages | 8.4CNA v3.1 | 0.8% | 2023-07-27 | Fix |
| CVE-2023-38492 | Kirby vulnerable to denial of service from unlimited password lengths | 5.3CNA v3.1 | 1.2% | 2023-07-27 | Fix |
| CVE-2023-38491 | Kirby vulnerable to cross-site scripting (XSS) from MIME type auto-detection of uploaded files | 5.7CNA v3.1 | 0.6% | 2023-07-27 | Fix |
| CVE-2023-38490 | Kirby XML external entity (XXE) vulnerability in the XML data handler | 6.8CNA v3.1 | 1.7% | 2023-07-27 | Exploit codeFix |
| CVE-2023-38489 | Kirby vulnerable to insufficient session expiration after a password change | 7.3CNA v3.1 | 0.8% | 2023-07-27 | Fix |
| CVE-2023-38488 | Kirby vulnerable to field injection in the KirbyData text storage handler | 7.1CNA v3.1 | 0.9% | 2023-07-27 | Fix |
| CVE-2023-38425 | Apple macOS arbitrary code execution | 7.2v3.1 | 0.8% | 2023-07-27 | Fix |
| CVE-2023-38424 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38421 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-38410 | Apple macOS incorrect default permissions | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38261 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-38259 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-38258 | Apple macOS 3D model processing information disclosure | 5.5v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-38136 | Apple watchOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-38133 | Apple Safari information disclosure | 6.5v3.1 | 1.0% | 2023-07-27 | Fix |
| CVE-2023-37993 | wpShopGermany IT-RECHT KANZLEI WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-37981 | Authors List WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-37980 | Custom Field For WP Job Manager WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-37979 | Ninja Forms WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 9.7% | 2023-07-27 | NucleiExploit codeFix |
| CVE-2023-37977 | WPFunnels WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-37976 | Radio Forge Muses Player with Skins WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-27 | |
| CVE-2023-37975 | Variation Swatches for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-37970 | MF Gig Calendar WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-37900 | Crossplane vulnerable to denial of service from large image | 3.4CNA v3.1 | 0.6% | 2023-07-27 | Fix |
| CVE-2023-37894 | Variation Images Gallery for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-37450 | Apple Multiple Products WebKit code execution | 8.8v3.1 | 19.0% | 2023-07-27 | KEVFix |
| CVE-2023-36942 | PHPGurukul Online Fire Reporting System cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-27 | |
| CVE-2023-36941 | PHPGurukul Online Fire Reporting System cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-27 | |
| CVE-2023-36862 | Apple macOS code-signing restrictions vulnerability | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-36854 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-35993 | Apple tvOS use-after-free | 7.8v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-35983 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-33745 | Teleadapt Roomcast Ta-2400 incorrect default permissions | 9.8v3.1 | 1.0% | 2023-07-27 | |
| CVE-2023-33744 | Teleadapt Roomcast Ta-2400 hard-coded credentials | 9.8v3.1 | 1.0% | 2023-07-27 | |
| CVE-2023-33743 | Teleadapt Roomcast Ta-2400 improper access control | 9.8v3.1 | 1.0% | 2023-07-27 | |
| CVE-2023-33742 | Teleadapt Roomcast Ta-2400 cleartext storage of sensitive information | 7.5v3.1 | 0.5% | 2023-07-27 | |
| CVE-2023-32734 | Apple tvOS arbitrary code execution | 7.8v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-32450 | Dell Power Manager (DPM) insecure temporary file | 6.1CNA v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-32443 | Apple macOS out-of-bounds read | 8.1v3.1 | 0.7% | 2023-07-27 | Fix |
| CVE-2023-32442 | Apple macOS Shortcuts app settings vulnerability | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-32441 | Apple tvOS arbitrary code execution | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-32437 | Apple iOS and iPadOS sandbox escape | 8.6v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-32433 | Apple tvOS use-after-free | 7.8v3.1 | 0.3% | 2023-07-27 | Fix |
| CVE-2023-32429 | Apple macOS Privacy preferences vulnerability | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-32418 | Apple macOS code injection | 7.8v3.1 | 0.5% | 2023-07-27 | Fix |
| CVE-2023-32416 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-32393 | Apple tvOS arbitrary code execution | 8.8v3.1 | 1.0% | 2023-07-27 | Fix |
| CVE-2023-32381 | Apple tvOS use-after-free | 7.8v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-32364 | Apple macOS logic flaw | 8.6v3.1 | 0.8% | 2023-07-27 | Exploit codeFix |
| CVE-2023-28014 | HCL BigFix Mobile can be affected by a cross-site scripting (XSS) | 6.6CNA v3.1 | 0.2% | 2023-07-27 | Fix |
| CVE-2023-28012 | HCL BigFix Mobile can be affected by a command injection | 5.4CNA v3.1 | 0.9% | 2023-07-27 | Fix |
| CVE-2023-23764 | Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling | 4.8CNA v3.1 | 0.6% | 2023-07-27 | Fix |
| CVE-2023-3982 | Cross-site scripting (XSS) Stored in Omeka/omeka-s | 4.8v3.1 | 0.5% | 2023-07-27 | Fix |
| CVE-2023-3981 | Server-side request forgery (SSRF) in Omeka/omeka-s | 4.9v3.1 | 0.7% | 2023-07-27 | Fix |
| CVE-2023-3980 | Cross-site scripting (XSS) Stored in Omeka/omeka-s | 4.8v3.1 | 0.5% | 2023-07-27 | Fix |
| CVE-2023-3975 | OS command injection in jgraph/drawio | 9.8v3.1 | 2.3% | 2023-07-27 | Fix |
| CVE-2023-3974 | OS command injection in jgraph/drawio | 9.8v3.1 | 1.2% | 2023-07-27 | Fix |
| CVE-2023-3973 | Cross-site scripting (XSS) Reflected in jgraph/drawio | 6.1NVD v3.1 | 0.4% | 2023-07-27 | Fix |
| CVE-2023-3970 | GZ Scripts Availability Booking Calendar PHP Image cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-27 | |
| CVE-2023-3969 | GZ Scripts Availability Booking Calendar PHP HTTP POST request index.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-27 | |
| CVE-2023-3957 | ACF Photo Gallery Field WordPress plugin authenticated (Subscriber+) arbitrary Usermeta update | 4.3CNA v3.1 | 0.5% | 2023-07-27 | Fix |
| CVE-2023-3956 | InstaWP Connect WordPress plugin unauthorized access | 9.8CNA v3.1 | 1.0% | 2023-07-27 | Fix |
| CVE-2023-39261 | JetBrains IntelliJ IDEA execution with unnecessary privileges | 5.2CNA v3.1 | 0.3% | 2023-07-26 | Fix |
| CVE-2023-39156 | CSRF vulnerability in Bazaar Plugin | 5.3v3.1 | 0.3% | 2023-07-26 | Fix |
| CVE-2023-39155 | Secret displayed without masking by Chef Identity Plugin | 5.3v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2023-39154 | Incorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentials | 6.5v3.1 | 0.6% | 2023-07-26 | Fix |
| CVE-2023-39153 | CSRF vulnerability in GitLab Authentication Plugin | 5.4v3.1 | 0.7% | 2023-07-26 | Fix |
| CVE-2023-39152 | Incorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log | 6.5v3.1 | 0.8% | 2023-07-26 | Fix |
| CVE-2023-39151 | Jenkins stored cross-site scripting | 5.4v3.1 | 1.0% | 2023-07-26 | Fix |
| CVE-2023-38673 | PaddlePaddle command injection in fs.py | 9.6CNA v3.1 | 2.3% | 2023-07-26 | Fix |
| CVE-2023-38672 | PaddlePaddle FPE in paddle.linalg.matrix_power | 4.7CNA v3.1 | 0.7% | 2023-07-26 | Fix |
| CVE-2023-38671 | PaddlePaddle heap buffer overflow in paddle.trace | 8.3CNA v3.1 | 0.8% | 2023-07-26 | Fix |
| CVE-2023-38670 | PaddlePaddle null pointer dereference in paddle.flip | 4.7CNA v3.1 | 0.7% | 2023-07-26 | Fix |
| CVE-2023-38669 | PaddlePaddle paddle.diagonal use-after-free | 8.3CNA v3.1 | 0.8% | 2023-07-26 | Fix |
| CVE-2023-38647 | Apache Helix: Deserialization vulnerability in Helix workflow and REST | 9.8v3.1 | 2.0% | 2023-07-26 | Fix |
| CVE-2023-38555 | Fujitsu Si-R 30B authentication bypass | 8.8v3.1 | 0.4% | 2023-07-26 | Fix |
| CVE-2023-38433 | Fujitsu IP-HE950E hard-coded credentials | 7.5v3.1 | 3.7% | 2023-07-26 | NucleiFix |
| CVE-2023-38285 | OWASP ModSecurity algorithmic complexity | 7.5v3.1 | 0.9% | 2023-07-26 | Fix |
| CVE-2023-37732 | Yasm null pointer dereference | 5.5v3.1 | 0.4% | 2023-07-26 | Fix |
| CVE-2023-37692 | Stored cross-site scripting October CMS | 5.4v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2023-37624 | Netdisco open redirect | 6.1v3.1 | 0.7% | 2023-07-26 | |
| CVE-2023-37623 | Netdisco cross-site scripting | 4.8v3.1 | 0.6% | 2023-07-26 | |
| CVE-2023-37049 | emlog missing authorization | 6.5v3.1 | 0.7% | 2023-07-26 | |
| CVE-2023-33802 | sumatrapdfreader sumatrapdf buffer overflow | 5.5v3.1 | 0.3% | 2023-07-26 | Exploit code |
| CVE-2023-33308 | Fortinet FortiProxy stack-based buffer overflow | 9.8CNA v3.1 | 2.1% | 2023-07-26 | Fix |
| CVE-2023-33229 | SolarWinds Platform Incorrect Input Neutralization vulnerability | 3.5CNA v3.1 | 0.8% | 2023-07-26 | Fix |
| CVE-2023-33225 | SolarWinds Platform deserialization of untrusted data | 7.2CNA v3.1 | 3.2% | 2023-07-26 | Fix |
| CVE-2023-33224 | SolarWinds Platform incorrect behavior order | 7.2CNA v3.1 | 2.8% | 2023-07-26 | Fix |
| CVE-2023-32629 | Canonical Ubuntu Kernel local privilege escalation | 7.8CNA v3.1 | 9.1% | 2023-07-26 | Exploit codeKCVFix |
| CVE-2023-32468 | Dell ECS Streamer sensitive information in log files | 5.8CNA v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2023-31466 | Fsmlabs Timekeeper cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-26 | |
| CVE-2023-31465 | FSMLabs TimeKeeper getsamplebacklog endpoint vulnerability | 9.8v3.1 | 46.3% | 2023-07-26 | Nuclei |
| CVE-2023-30949 | Palantir Slate sandbox vulnerability | 4.3CNA v3.1 | 0.2% | 2023-07-26 | Fix |
| CVE-2023-30577 | Zmanda Amanda argument injection | 7.8v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2023-30367 | Mremoteng cleartext storage of sensitive information | 7.5v3.1 | 0.5% | 2023-07-26 | Exploit code |
| CVE-2023-28130 | Quantum Appliances, Quantum Security Gateways privilege escalation | 7.2NVD v3.1 | 20.9% | 2023-07-26 | Fix |
| CVE-2023-28013 | HCL Verse is susceptible to a reflected cross-site scripting (XSS) | 6.5CNA v3.1 | 0.3% | 2023-07-26 | Fix |
| CVE-2023-26911 | ASUS Setupasusservices unquoted search path | 7.8v3.1 | 0.2% | 2023-07-26 | |
| CVE-2023-26859 | Brevo PrestaShop sendinblue v.4.0.15 and SQL injection | 9.8v3.1 | 0.8% | 2023-07-26 | Fix |
| CVE-2023-23844 | SolarWinds Platform incomplete list of disallowed inputs | 7.2CNA v3.1 | 3.0% | 2023-07-26 | Fix |
| CVE-2023-23843 | SolarWinds Platform incorrect comparison | 7.2CNA v3.1 | 2.6% | 2023-07-26 | Fix |
| CVE-2023-23842 | SolarWinds Network Configuration Manager directory traversal | 7.2CNA v3.1 | 3.2% | 2023-07-26 | Fix |
| CVE-2023-20891 | VMware Tanzu Application Service for VMs and Isolation segment information disclosure | 6.5CNA v3.1 | 0.6% | 2023-07-26 | Fix |
| CVE-2023-3947 | Video Conferencing with Zoom WordPress plugin sensitive information exposure | 5.3v3.1 | 0.4% | 2023-07-26 | Fix |
| CVE-2023-3946 | Trellix EPO reflected cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-07-26 | Fix |
| CVE-2023-3622 | Access Control Bypass vulnerability in the SolarWinds Platform | 4.3CNA v3.1 | 0.8% | 2023-07-26 | Fix |
| CVE-2023-3442 | Missing authorization in Jenkins plug-in for ServiceNow DevOps | 7.7CNA v3.1 | 0.7% | 2023-07-26 | Fix |
| CVE-2023-3414 | Cross-site request forgery (CSRF) in Jenkins plug-in for ServiceNow DevOps | 6.1CNA v3.1 | 0.4% | 2023-07-26 | Fix |
| CVE-2023-3242 | B&R Industrial Automation B&R Automation Runtime Portmapper used improper initialization | 8.6CNA v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2023-2640 | Canonical Ubuntu Kernel incorrect authorization | 7.8CNA v3.1 | 15.2% | 2023-07-26 | Exploit codeKCVFix |
| CVE-2023-1401 | Insertion of sensitive information into sent data in GitLab | 5.0CNA v3.1 | 0.5% | 2023-07-26 | Fix |
| CVE-2023-39175 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-07-25 | Fix |
| CVE-2023-39174 | JetBrains TeamCity regular expression denial of service | 4.3CNA v3.1 | 1.7% | 2023-07-25 | Fix |
| CVE-2023-39173 | JetBrains TeamCity incorrect privilege assignment | 5.4CNA v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-39130 | GNU gdb out-of-bounds write | 5.5v3.1 | 0.2% | 2023-07-25 | Fix |
| CVE-2023-39129 | GNU gdb use-after-free | 5.5v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-39128 | GNU gdb out-of-bounds write | 5.5NVD v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-38745 | pandoc arbitrary file write | 6.3v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-38503 | Directus has Incorrect Permission Checking for GraphQL Subscriptions | 5.7CNA v3.1 | 0.5% | 2023-07-25 | Fix |
| CVE-2023-38502 | TDengine Database denial of service | 6.5CNA v3.1 | 0.7% | 2023-07-25 | Fix |
| CVE-2023-38501 | copyparty vulnerable to reflected cross-site scripting via k304 parameter | 6.3CNA v3.1 | 9.2% | 2023-07-25 | NucleiExploit codeFix |
| CVE-2023-38500 | TYPO3 html-sanitizer By-passing cross-site scripting Protection in HTML Sanitizer | 4.7CNA v3.1 | 0.5% | 2023-07-25 | Fix |
| CVE-2023-38499 | TYPO3/cms-core information disclosure due to Out-of-scope Site Resolution | 3.7CNA v3.1 | 1.1% | 2023-07-25 | Fix |
| CVE-2023-38496 | Apptainer's ineffective privileges drop when requesting container network | 6.1CNA v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-38493 | LINE Armeria paths contain matrix variables bypass decorators | 7.5CNA v3.1 | 0.7% | 2023-07-25 | Fix |
| CVE-2023-38435 | Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin | 6.1v3.1 | 2.2% | 2023-07-25 | Fix |
| CVE-2023-37920 | Certifi's removal of e-Tugra root certificate | 7.5CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-37919 | Cal.com not expiring old sessions after enabling 2FA | 6.5CNA v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-37907 | Cryptomator's MSI installer allows local privilege escalation | 7.0CNA v3.1 | 0.2% | 2023-07-25 | Fix |
| CVE-2023-37902 | Vyper's ecrecover can return undefined data if signature does not verify | 5.3CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-37895 | Apache Jackrabbit RMI access can lead to RCE | 9.8v3.1 | 3.2% | 2023-07-25 | Fix |
| CVE-2023-37677 | Pligg Cms unrestricted file upload | 9.8v3.1 | 1.3% | 2023-07-25 | |
| CVE-2023-37460 | codehaus-plexus plexus-archiver arbitrary file creation in AbstractUnArchiver | 8.1CNA v3.1 | 2.5% | 2023-07-25 | Fix |
| CVE-2023-37361 | Vanderbilt REDCap SQL injection | 2.7v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-37258 | DataEase has a SQL injection vulnerability that can bypass blacklists | 8.8CNA v3.1 | 1.1% | 2023-07-25 | Fix |
| CVE-2023-37257 | The DataEase panel and dataset have a stored XSS | 5.4CNA v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-36826 | Sentry vulnerable to improper authorization on debug and artifact file downloads | 7.7CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-36806 | Contao cross-site scripting vulnerability via input unit widget | 6.5CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-36503 | MaxButtons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-36502 | Balkon WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-36501 | teachPress WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-36385 | PostX Gutenberg Blocks for Post Grid WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-35982 | HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow | 9.8CNA v3.1 | 2.1% | 2023-07-25 | Fix |
| CVE-2023-35981 | HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow | 9.8CNA v3.1 | 2.1% | 2023-07-25 | Fix |
| CVE-2023-35980 | HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow | 9.8CNA v3.1 | 2.1% | 2023-07-25 | Fix |
| CVE-2023-35944 | Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes | 8.2CNA v3.1 | 0.7% | 2023-07-25 | Fix |
| CVE-2023-35943 | Envoy vulnerable to CORS filter segfault when origin header is removed | 6.3CNA v3.1 | 0.7% | 2023-07-25 | Fix |
| CVE-2023-35942 | Envoy's gRPC access log crash caused by the listener draining | 6.5CNA v3.1 | 0.9% | 2023-07-25 | Fix |
| CVE-2023-35941 | Envoy vulnerable to OAuth2 credentials exploit with permanent validity | 8.6CNA v3.1 | 0.8% | 2023-07-25 | Fix |
| CVE-2023-35929 | Tuleap cross-site scripting vulnerability in the card field of the agile dashboard apps | 5.4CNA v3.1 | 0.5% | 2023-07-25 | Fix |
| CVE-2023-35088 | Apache InLong: SQL injection in audit endpoint | 9.8v3.1 | 1.6% | 2023-07-25 | Fix |
| CVE-2023-35078 | Ivanti Endpoint Manager Mobile authentication bypass | 9.8NVD v3.1 | 100.0% | 2023-07-25 | KEVNucleiEmerging ThreatsExploit codeKCVFix |
| CVE-2023-35067 | Plaintext storage of a password in Infodrom Sofwares E-Invoice Approval System | 7.5v3.1 | 0.5% | 2023-07-25 | Fix |
| CVE-2023-35066 | SQLi in Infodrom Sofwares E-Invoice Approval System | 9.8CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-35043 | Recent Posts Slider WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-25 | |
| CVE-2023-34798 | Weaver E-Office arbitrary file upload | 9.8v3.1 | 0.8% | 2023-07-25 | |
| CVE-2023-34434 | Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param | 7.5v3.1 | 1.7% | 2023-07-25 | Fix |
| CVE-2023-34369 | Login Configurator WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-07-25 | |
| CVE-2023-34235 | strapi leaking sensitive user information still possible by filtering on private with prefix fields | 8.6CNA v3.1 | 1.1% | 2023-07-25 | Fix |
| CVE-2023-34189 | Apache InLong: General user can delete and update process | 6.5v3.1 | 1.3% | 2023-07-25 | Fix |
| CVE-2023-34093 | Strapi allows actors to make all attributes on a content-type public without noticing it | 4.8CNA v3.1 | 0.7% | 2023-07-25 | Fix |
| CVE-2023-34017 | Five Star Restaurant Reservations WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-33925 | WooCommerce Product Categories Selection Widget WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-25 | |
| CVE-2023-33777 | PrestaShop Amazon path traversal | 5.3v3.1 | 0.7% | 2023-07-25 | Fix |
| CVE-2023-32639 | The Ministry of Justice Applicant Programme XML external entity injection | 5.5v3.1 | 0.2% | 2023-07-25 | Fix |
| CVE-2023-32637 | Generic Model Organism Database Project GBrowse unrestricted file upload | 9.8v3.1 | 1.1% | 2023-07-25 | Fix |
| CVE-2023-32232 | Vasion Printerlogic Client code execution | 9.9v3.1 | 1.0% | 2023-07-25 | Fix |
| CVE-2023-32231 | Vasion Printerlogic Client code execution | 9.9v3.1 | 1.1% | 2023-07-25 | Fix |
| CVE-2023-25074 | Gallagher Command Centre competency access levels not enforced in the server | 7.1CNA v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-23833 | Steven Henty Drop Shadow Boxes cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-25 | Fix |
| CVE-2023-23568 | Gallagher Command Centre improper authorization | 4.3CNA v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-22363 | Gallagher Command Centre access Zone stack overflow | 6.5CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-21406 | Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication | 7.1CNA v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-21405 | Axis Communications AXIS A1001 Network Door Controller improper syntax validation | 6.5CNA v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-3945 | phpscriptpoint Lawyer search.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-25 | |
| CVE-2023-3944 | phpscriptpoint Lawyer page.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-25 | |
| CVE-2023-3897 | 42Gears SureMDM password reset page information disclosure | 4.8CNA v3.1 | 3.1% | 2023-07-25 | Exploit codeFix |
| CVE-2023-3890 | Campcodes Beauty Salon Management System edit-accepted-appointment.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3888 | Campcodes Beauty Salon Management System admin-profile.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3887 | Campcodes Beauty Salon Management System search-appointment.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3886 | Campcodes Beauty Salon Management System invoice.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3885 | Campcodes Beauty Salon Management System edit_category.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-25 | |
| CVE-2023-3884 | Campcodes Beauty Salon Management System edit_product.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3883 | Campcodes Beauty Salon Management System add-category.php cross-site scripting | 6.1v3.1 | 0.7% | 2023-07-25 | |
| CVE-2023-3882 | Campcodes Beauty Salon Management System edit-accepted-appointment.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3881 | Campcodes Beauty Salon Management System forgot-password.php SQL injection | 7.5v3.1 | 0.7% | 2023-07-25 | Exploit code |
| CVE-2023-3880 | Campcodes Beauty Salon Management System del_service.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3879 | Campcodes Beauty Salon Management System del_category.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3878 | Campcodes Beauty Salon Management System about-us.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3877 | Campcodes Beauty Salon Management System add-services.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3876 | Campcodes Beauty Salon Management System search-appointment.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3875 | Campcodes Beauty Salon Management System del_feedback.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3874 | Campcodes Beauty Salon Management System admin-profile.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-25 | |
| CVE-2023-3873 | Campcodes Beauty Salon Management System index.php SQL injection | 7.5v3.1 | 0.8% | 2023-07-25 | |
| CVE-2023-3773 | Kernel: Xfrm: Out-of-bounds read of xfrma_mtimer_thresh nlattr | 4.4NVD v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-3772 | Kernel: Xfrm: Null pointer dereference in xfrm_update_ae_params | 4.4NVD v3.1 | 0.5% | 2023-07-25 | Fix |
| CVE-2023-3637 | Red Hat OpenStack Platform openstack-neutron: Unrestricted creation of security groups | 4.3CNA v3.1 | 1.3% | 2023-07-25 | Fix |
| CVE-2023-3548 | Johnson Controls IQ Wifi 6 missing brute-force protection | 8.3CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-3486 | PaperCut NG unauthenticated file upload | 7.5NVD v3.1 | 79.2% | 2023-07-25 | Fix |
| CVE-2023-3046 | SQLi in Biltay Technlogys Scienta | 9.8CNA v3.1 | 0.6% | 2023-07-25 | Fix |
| CVE-2023-2850 | NodeBB unintentional leakage of private information via cross-origin websocket session hijacking | 4.7v3.1 | 0.3% | 2023-07-25 | Fix |
| CVE-2023-2626 | Google Nest Hub Max authentication bypass in OpenThread Boarder Router devices | 7.5CNA v3.1 | 0.1% | 2023-07-25 | Fix |
| CVE-2023-38200 | Keylime: Registrar is subject to a DoS against SSL connections | 7.5CNA v3.1 | 1.4% | 2023-07-24 | Fix |
| CVE-2023-38060 | OTRS host header injection by attachments in web service | 6.3CNA v3.1 | 0.7% | 2023-07-24 | Fix |
| CVE-2023-38058 | OTRS tickets can be moved without permissions | 4.1CNA v3.1 | 0.4% | 2023-07-24 | Fix |
| CVE-2023-38057 | XSS stored in Survey answers | 4.1CNA v3.1 | 0.4% | 2023-07-24 | Fix |
| CVE-2023-38056 | OTRS code execution via System Configuration | 7.2CNA v3.1 | 0.9% | 2023-07-24 | Fix |
| CVE-2023-37613 | Assemblysoftware Trialworks cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-34478 | Path traversal in Apache Shiro | 9.8v3.1 | 2.1% | 2023-07-24 | Exploit codeKCVFix |
| CVE-2023-33952 | Kernel: Vmwgfx: Double free within the handling of vmw_buffer_object objects | 6.7NVD v3.1 | 0.5% | 2023-07-24 | Fix |
| CVE-2023-33951 | Kernel: Vmwgfx: Race condition leading to information disclosure | 5.3NVD v3.1 | 0.3% | 2023-07-24 | Fix |
| CVE-2023-32258 | kernel session race condition remote code execution | 8.1NVD v3.1 | 2.5% | 2023-07-24 | Fix |
| CVE-2023-32257 | kernel session race condition remote code execution | 8.1NVD v3.1 | 2.4% | 2023-07-24 | Fix |
| CVE-2023-32252 | kernel session null pointer dereference denial of service | 7.5NVD v3.1 | 4.1% | 2023-07-24 | Fix |
| CVE-2023-32248 | kernel tree connection null pointer dereference denial of service | 7.5NVD v3.1 | 4.1% | 2023-07-24 | Fix |
| CVE-2023-32247 | kernel session setup memory exhaustion denial of service | 7.5NVD v3.1 | 3.9% | 2023-07-24 | Fix |
| CVE-2023-26078 | Atera privilege escalation | 7.8v3.1 | 0.6% | 2023-07-24 | |
| CVE-2023-26077 | Atera incorrect default permissions | 7.8v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-26045 | NodeBB vulnerable to path traversal and code execution via prototype | 10.0CNA v3.1 | 1.0% | 2023-07-24 | Fix |
| CVE-2023-22428 | Gallagher Command Centre improper authorization | 7.6CNA v3.1 | 0.4% | 2023-07-24 | Fix |
| CVE-2023-20593 | An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. | 5.5NVD v3.1 | 5.2% | 2023-07-24 | Exploit codeFix |
| CVE-2023-3872 | Campcodes Beauty Salon Management System edit-services.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-24 | |
| CVE-2023-3871 | Campcodes Beauty Salon Management System edit_category.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-24 | |
| CVE-2023-3863 | kernel use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c | 4.1NVD v3.1 | 0.2% | 2023-07-24 | Fix |
| CVE-2023-3862 | Travelmate Travelable Trek Management Solution Comment Box cross-site scripting | 4.7v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-3861 | phpscriptpoint Insurance search.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-3860 | phpscriptpoint Insurance page.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-3859 | phpscriptpoint Car Listing GET parameter search.php SQL injection | 9.8v3.1 | 0.5% | 2023-07-24 | |
| CVE-2023-3858 | phpscriptpoint Car Listing search.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-3857 | phpscriptpoint Ecommerce product.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-3856 | phpscriptpoint Ecommerce blog-single.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-3855 | phpscriptpoint JobSeeker search-result.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-24 | |
| CVE-2023-3812 | Kernel: Tun: Bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags | 7.8NVD v3.1 | 0.3% | 2023-07-24 | Fix |
| CVE-2023-3750 | Libvirt: Improper locking in virstoragepoolobjlistsearch may lead to denial of service | 6.5CNA v3.1 | 0.8% | 2023-07-24 | Fix |
| CVE-2023-3748 | frr inifinite loop in babld message parsing may cause DoS | 7.5NVD v3.1 | 0.8% | 2023-07-24 | Fix |
| CVE-2023-3745 | ImageMagick: Heap-buffer-overflow in pushcharpixel in quantum-private.h | 5.5NVD v3.1 | 0.5% | 2023-07-24 | Fix |
| CVE-2023-3640 | Linux kernel x86 CPU entry area mapping vulnerability | 7.8NVD v3.1 | 0.8% | 2023-07-24 | Exploit codeFix |
| CVE-2023-3567 | Linux kernel use-after-free | 7.1NVD v3.1 | 0.4% | 2023-07-24 | Fix |
| CVE-2023-3417 | Mozilla Thunderbird file extension spoofing using the Text Direction Override Character | 7.5v3.1 | 0.7% | 2023-07-24 | Fix |
| CVE-2023-3384 | Quay: Stored cross-site scripting | 5.4CNA v3.1 | 0.5% | 2023-07-24 | Fix |
| CVE-2023-3344 | Auto Location for WP Job Manager via Google WordPress plugin Admin+ cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-07-24 | Fix |
| CVE-2023-3324 | Insecure deserialization in Zenon internal DLLs | 6.3CNA v3.1 | 0.3% | 2023-07-24 | Fix |
| CVE-2023-3323 | Code execution through overwriting project file on Zenon engineering studio system | 5.9CNA v3.1 | 0.3% | 2023-07-24 | Fix |
| CVE-2023-3322 | ABB Ability™ zenon code execution through overwriting service executable in utilities directory | 7.0CNA v3.1 | 0.3% | 2023-07-24 | Fix |
| CVE-2023-3321 | ABB Ability™ zenon code execution through Writable Mosquitto Configuration file | 7.0CNA v3.1 | 0.4% | 2023-07-24 | Fix |
| CVE-2023-3248 | All-in-one Floating Contact Form WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-07-24 | Fix |
| CVE-2023-3019 | Qemu: E1000e: Heap use-after-free in e1000e_write_packet_to_guest | 6.5NVD v3.1 | 0.3% | 2023-07-24 | Fix |
| CVE-2023-2860 | kernel out-of-bounds read when setting hmac data | 4.4NVD v3.1 | 0.3% | 2023-07-24 | Fix |
| CVE-2023-2761 | User Activity Log WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 0.9% | 2023-07-24 | Fix |
| CVE-2023-2309 | wpForo Forum WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.8% | 2023-07-24 | NucleiFix |
| CVE-2023-1386 | Qemu: 9pfs: Suid/sgid bits not dropped on file write | 7.8NVD v3.1 | 0.2% | 2023-07-24 | Fix |
| CVE-2023-28133 | Harmony Endpoint incorrect permission assignment | 7.8NVD v3.1 | 5.7% | 2023-07-23 | Fix |
| CVE-2023-3854 | phpscriptpoint BloodBank POST parameter search SQL injection | 9.8v3.1 | 0.5% | 2023-07-23 | |
| CVE-2023-3853 | phpscriptpoint BloodBank page.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-23 | |
| CVE-2023-3852 | OpenRapid RapidCMS upload.php unrestricted upload | 7.2v3.1 | 25.0% | 2023-07-23 | |
| CVE-2023-3850 | SourceCodester Lost and Found Information System HTTP POST request SQL injection | 9.8v3.1 | 0.5% | 2023-07-23 | |
| CVE-2023-3849 | mooSocial mooDating URL find-a-match cross-site scripting | 6.1v3.1 | 6.0% | 2023-07-23 | NucleiExploit code |
| CVE-2023-3848 | mooSocial mooDating URL view cross-site scripting | 6.1v3.1 | 6.0% | 2023-07-23 | NucleiExploit code |
| CVE-2023-3847 | mooSocial mooDating URL users cross-site scripting | 6.1v3.1 | 6.0% | 2023-07-23 | NucleiExploit code |
| CVE-2023-3846 | mooSocial mooDating URL pages cross-site scripting | 6.1v3.1 | 6.0% | 2023-07-23 | NucleiExploit code |
| CVE-2023-3845 | mooSocial mooDating URL ajax_invite cross-site scripting | 6.1v3.1 | 6.0% | 2023-07-23 | NucleiExploit code |
| CVE-2023-3844 | mooSocial mooDating URL friends cross-site scripting | 6.1v3.1 | 6.0% | 2023-07-23 | NucleiExploit code |
| CVE-2023-3843 | mooSocial mooDating URL question cross-site scripting | 6.1v3.1 | 6.0% | 2023-07-23 | NucleiExploit code |
| CVE-2023-3842 | Pointware EasyInventory Easy2W.exe unquoted search path | 7.8v3.1 | 0.2% | 2023-07-23 | |
| CVE-2023-3841 | NxFilter user.jsp cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-23 | |
| CVE-2023-3840 | NxFilter cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-23 | |
| CVE-2023-3839 | DedeBIZ sys_sql_query.php SQL injection | 7.2v3.1 | 0.7% | 2023-07-23 | |
| CVE-2023-3838 | DedeBIZ vote_edit.php cross-site scripting | 4.8v3.1 | 0.6% | 2023-07-23 | |
| CVE-2023-2430 | kernel improper locking | 5.5NVD v3.1 | 0.2% | 2023-07-23 | Fix |
| CVE-2023-38633 | GNOME Librsvg URL decoder path traversal | 5.5v3.1 | 2.4% | 2023-07-22 | Fix |
| CVE-2023-38195 | Datalust Seq external metadata storage vulnerability | 4.9v3.1 | 0.5% | 2023-07-22 | |
| CVE-2023-28530 | IBM Cognos Analytics cross-site scripting | 5.4CNA v3.1 | 0.7% | 2023-07-22 | Fix |
| CVE-2023-25929 | IBM Cognos Analytics cross-site scripting | 4.6CNA v3.1 | 0.5% | 2023-07-22 | Fix |
| CVE-2023-3837 | DedeBIZ sys_sql_query.php cross-site scripting | 4.8v3.1 | 0.7% | 2023-07-22 | |
| CVE-2023-3836 | Dahua Smart Park Management unrestricted upload | 9.8v3.1 | 73.5% | 2023-07-22 | NucleiExploit code |
| CVE-2023-3835 | Bug Finder MineStack Ticket Handler cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3834 | Bug Finder EX-RATE Ticket Handler cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3833 | Bug Finder Montage Ticket Handler cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3832 | Bug Finder Wedding Wonders Ticket Handler cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3831 | Bug Finder Finounce Ticket Handler cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3830 | Bug Finder SASS BILLER store cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3829 | Bug Finder ICOGenie Support Ticket Handler cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3828 | Bug Finder Listplace Directory Listing Platform Photo coverPhotoUpdate cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3827 | Bug Finder Listplace Directory Listing Platform HTTP POST request create cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-22 | |
| CVE-2023-3826 | IBOS OA Interview edit&op=status SQL injection | 9.8v3.1 | 0.7% | 2023-07-22 | |
| CVE-2023-3247 | PHP missing error check and insufficient random bytes in HTTP Digest authentication for SOAP | 2.6CNA v3.1 | 0.7% | 2023-07-22 | Fix |
| CVE-2023-38646 | metabase arbitrary command execution | 9.8v3.1 | 97.9% | 2023-07-21 | Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-38632 | Asynchronous Sockets For C++ out-of-bounds write | 9.8v3.1 | 1.9% | 2023-07-21 | Exploit code |
| CVE-2023-38187 | Microsoft Edge (Chromium-based) elevation of privilege | 6.5CNA v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2023-38173 | Microsoft Edge for Android spoofing | 4.3CNA v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-37918 | API token authentication bypass in HTTP endpoints in Dapr | 6.8CNA v3.1 | 1.4% | 2023-07-21 | Fix |
| CVE-2023-37917 | Privilege escalation in KubePi | 9.1CNA v3.1 | 0.7% | 2023-07-21 | Fix |
| CVE-2023-37916 | 1Panel-dev KubePi leak password hash of any user | 6.5CNA v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2023-37915 | Malformed PID_PROPERTY_LIST parameter in DATA submessage remotely crashes OpenDDS | 7.5CNA v3.1 | 0.9% | 2023-07-21 | Fix |
| CVE-2023-37905 | Cross-site scripting (XSS) in Source Mode of Editor in CKEditor-WordCount-Plugin | 6.1CNA v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-37903 | Sandbox escape in vm2 | 9.8CNA v3.1 | 4.2% | 2023-07-21 | Exploit codeFix |
| CVE-2023-37901 | indico cross-site-scripting via confirmation prompts | 5.4CNA v3.1 | 0.5% | 2023-07-21 | Fix |
| CVE-2023-37742 | Webboss.io Cms cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-21 | Fix |
| CVE-2023-37292 | HGiga iSherlock command injection | 9.8CNA v3.1 | 1.3% | 2023-07-21 | Fix |
| CVE-2023-37291 | Galaxy Software Services Vitals ESP use of hard-coded cryptographic key | 9.8v3.1 | 0.5% | 2023-07-21 | |
| CVE-2023-36339 | Webboss.io Cms An improper access control | 7.5v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-35392 | Microsoft Edge (Chromium-based) spoofing | 4.7CNA v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2023-35087 | ASUS RT-AX56U V2 and RT-AC86U format string 2 | 9.8CNA v3.1 | 1.1% | 2023-07-21 | Fix |
| CVE-2023-35086 | ASUS RT-AX56U V2 and RT-AC86U format string -1 | 7.2CNA v3.1 | 38.5% | 2023-07-21 | Exploit codeFix |
| CVE-2023-35077 | Ivanti Endpoint Manager out-of-bounds write | 7.5v3.1 | 2.2% | 2023-07-21 | Fix |
| CVE-2023-32625 | SAKURA internet TS Webfonts for SAKURA cross-site request forgery | 4.3v3.1 | 0.3% | 2023-07-21 | Fix |
| CVE-2023-32624 | SAKURA internet TS Webfonts for SAKURA cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-32478 | Dell PowerStore sensitive information in log files | 9.0CNA v3.1 | 0.5% | 2023-07-21 | Fix |
| CVE-2023-28730 | Panasonic Control FPWIN Pro memory corruption | 7.8v3.1 | 0.2% | 2023-07-21 | Fix |
| CVE-2023-28729 | Panasonic Control FPWIN Pro type confusion | 7.8v3.1 | 0.2% | 2023-07-21 | Fix |
| CVE-2023-28728 | Panasonic Control FPWIN Pro stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-07-21 | Fix |
| CVE-2023-26301 | HP LaserJet Pro missing authorization | 9.8v3.1 | 0.8% | 2023-07-21 | Fix |
| CVE-2023-25841 | Bug-000158075 stored XSS issue in ArcGIS Server | 6.1CNA v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-25840 | Bug-000154070 stored XSS issue in the ArcGIS REST services directory | 3.4CNA v3.1 | 0.5% | 2023-07-21 | Fix |
| CVE-2023-25837 | Bug-000133088 ArcGIS Enterprise site builder is subject to stored XSS | 8.4CNA v3.1 | 1.0% | 2023-07-21 | Fix |
| CVE-2023-25836 | Bug-000135364 XSS in sites builder iframe source | 5.4CNA v3.1 | 0.4% | 2023-07-21 | Fix |
| CVE-2023-25835 | Bug-000153659 ArcGIS Enterprise Sites has a stored XSS | 8.4CNA v3.1 | 0.9% | 2023-07-21 | Fix |
| CVE-2023-3822 | Cross-site scripting (XSS) Reflected in pimcore/pimcore | 6.1v3.1 | 0.5% | 2023-07-21 | Fix |
| CVE-2023-3821 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-3820 | SQL injection in pimcore/pimcore | 7.2v3.1 | 1.2% | 2023-07-21 | Fix |
| CVE-2023-3819 | Exposure of sensitive information to an unauthorized actor in pimcore/pimcore | 6.5NVD v3.1 | 0.7% | 2023-07-21 | Fix |
| CVE-2023-3815 | y_project RuoYi file upload uploadFilesPath cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-21 | |
| CVE-2023-3813 | Jupiter X Core WordPress plugin unauthenticated arbitrary file download | 7.5CNA v3.1 | 1.2% | 2023-07-21 | Fix |
| CVE-2023-3811 | Hospital Management System patientprofile.php SQL injection | 9.8v3.1 | 0.7% | 2023-07-21 | |
| CVE-2023-3810 | Hospital Management System patientappointment.php SQL injection | 9.8v3.1 | 0.7% | 2023-07-21 | |
| CVE-2023-3809 | Hospital Management System patient.php SQL injection | 9.8v3.1 | 0.7% | 2023-07-21 | |
| CVE-2023-3808 | Hospital Management System patientforgotpassword.php SQL injection | 8.8v3.1 | 0.7% | 2023-07-21 | |
| CVE-2023-3807 | Campcodes Beauty Salon Management System edit_product.php SQL injection | 8.8v3.1 | 0.7% | 2023-07-21 | |
| CVE-2023-3806 | SourceCodester House Rental and Property Listing System btn_functions.php unrestricted upload | 9.8v3.1 | 0.9% | 2023-07-21 | |
| CVE-2023-3805 | Four-Faith Video Surveillance Management System login handler improper authorization | 9.8v3.1 | 0.9% | 2023-07-21 | |
| CVE-2023-3804 | Chengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx unrestricted upload | 9.8v3.1 | 0.9% | 2023-07-21 | |
| CVE-2023-3803 | Chengdu Flash Flood Disaster Monitoring and Warning System insufficient randomness | 3.7v3.1 | 0.7% | 2023-07-21 | |
| CVE-2023-3802 | Chengdu Flash Flood Disaster Monitoring and Warning System Ajaxfileupload.ashx unrestricted upload | 9.8v3.1 | 1.0% | 2023-07-21 | |
| CVE-2023-3801 | IBOS OA Mobile Notification edit actionEdit SQL injection | 9.8v3.1 | 0.7% | 2023-07-21 | |
| CVE-2023-3776 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.5% | 2023-07-21 | Fix |
| CVE-2023-3611 | Out-of-bounds write in Linux Kernel's net/sched: Sch_qfq component | 7.8NVD v3.1 | 0.3% | 2023-07-21 | Fix |
| CVE-2023-3610 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.2% | 2023-07-21 | Fix |
| CVE-2023-3609 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.5% | 2023-07-21 | Fix |
| CVE-2023-3603 | libssh processing sftp server read may cause null dereference | 6.5NVD v3.1 | 0.9% | 2023-07-21 | Fix |
| CVE-2023-3484 | Incorrect authorization in GitLab | 8.0CNA v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-3102 | Insertion of sensitive information into sent data in GitLab | 5.3CNA v3.1 | 0.6% | 2023-07-21 | Fix |
| CVE-2023-38617 | Mobisystems Office Suite cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-20 | |
| CVE-2023-38523 | Samsung Fgn1115-wp-wh missing authentication | 5.3v3.1 | 1.0% | 2023-07-20 | Fix |
| CVE-2023-38408 | OpenBSD OpenSSH unquoted search path | 9.8NVD v3.1 | 79.7% | 2023-07-20 | Exploit codeKCVFix |
| CVE-2023-38335 | Omnis studio incorrect default permissions | 5.3v3.1 | 1.2% | 2023-07-20 | |
| CVE-2023-38334 | Omnis studio incorrect default permissions | 6.5v3.1 | 0.9% | 2023-07-20 | |
| CVE-2023-38203 | Adobe ColdFusion deserialization of untrusted data | 9.8CNA v3.1 | 97.1% | 2023-07-20 | KEVNucleiKCVFix |
| CVE-2023-37728 | IceWarp cross-site scripting | 6.1v3.1 | 1.2% | 2023-07-20 | Nuclei |
| CVE-2023-37650 | Cockpit CMS cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-20 | Fix |
| CVE-2023-37649 | Cockpit CMS vulnerable to incorrect access control | 7.5v3.1 | 0.9% | 2023-07-20 | Fix |
| CVE-2023-37645 | EyouCMS information disclosure | 5.3v3.1 | 24.9% | 2023-07-20 | Nuclei |
| CVE-2023-37602 | Alkacon OpenCMS arbitrary file upload | 6.1v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-37601 | Mobisystems Office Suite path traversal | 7.5v3.1 | 1.2% | 2023-07-20 | |
| CVE-2023-37600 | Mobisystems Office Suite cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-20 | |
| CVE-2023-37471 | OpenIdentityPlatform OpenAM User impersonation using SAMLv1.x SSO in Open Access Management | 9.1CNA v3.1 | 1.3% | 2023-07-20 | Fix |
| CVE-2023-37290 | InfoDoc Document On-line Submission and Approval System server-side request forgery (SSRF) | 7.5CNA v3.1 | 0.7% | 2023-07-20 | |
| CVE-2023-37289 | InfoDoc Document On-line Submission and Approval System arbitrary file upload | 9.8v3.1 | 0.9% | 2023-07-20 | |
| CVE-2023-37165 | Millhouse Project SQL injection | 9.8v3.1 | 1.9% | 2023-07-20 | |
| CVE-2023-37164 | Diafan.cms cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-20 | Exploit code |
| CVE-2023-34968 | Samba: Spotlight server-side share path disclosure | 5.3NVD v3.1 | 1.3% | 2023-07-20 | Fix |
| CVE-2023-34967 | Samba: Type confusion in mdssvc RPC service for spotlight | 5.3NVD v3.1 | 61.2% | 2023-07-20 | Fix |
| CVE-2023-34966 | Samba: Infinite loop in mdssvc RPC service for spotlight | 7.5NVD v3.1 | 62.4% | 2023-07-20 | Fix |
| CVE-2023-34625 | Showmojo Mojobox authentication bypass by replay | 8.1v3.1 | 1.0% | 2023-07-20 | |
| CVE-2023-32483 | Dell Wyse Management Suite cleartext storage of sensitive information | 4.4CNA v3.1 | 0.1% | 2023-07-20 | Fix |
| CVE-2023-32482 | Dell Wyse Management Suite improper authorization | 4.9CNA v3.1 | 0.5% | 2023-07-20 | Fix |
| CVE-2023-32481 | Dell Wyse Management Suite resource exhaustion | 4.9CNA v3.1 | 0.6% | 2023-07-20 | Fix |
| CVE-2023-32476 | Dell Hybrid Client (DHC) hard-coded credentials | 6.4CNA v3.1 | 0.2% | 2023-07-20 | Fix |
| CVE-2023-32455 | Dell Wyse Proprietary OS (Modern ThinOS) cleartext storage of sensitive information | 5.5CNA v3.1 | 0.1% | 2023-07-20 | Fix |
| CVE-2023-32447 | Dell Wyse Proprietary OS (Modern ThinOS) cleartext storage of sensitive information | 5.5CNA v3.1 | 0.1% | 2023-07-20 | Fix |
| CVE-2023-32446 | Dell Wyse Proprietary OS (Modern ThinOS) cleartext storage of sensitive information | 5.5CNA v3.1 | 0.1% | 2023-07-20 | Fix |
| CVE-2023-32265 | Micro Focus Enterprise Server ESCWA component information disclosure | 7.1CNA v3.1 | 0.5% | 2023-07-20 | Fix |
| CVE-2023-31753 | Endonesia diskusi.php SQL injection | 9.8v3.1 | 1.3% | 2023-07-20 | Exploit code |
| CVE-2023-31462 | Steelseries Gg incorrect default permissions | 8.8v3.1 | 1.0% | 2023-07-20 | |
| CVE-2023-31461 | Steelseries Gg path traversal | 7.5v3.1 | 1.0% | 2023-07-20 | |
| CVE-2023-30200 | Advancedplugins Ultimateimagetool path traversal | 7.5v3.1 | 0.7% | 2023-07-20 | Fix |
| CVE-2023-3800 | EasyAdmin8 file upload module index.html unrestricted upload | 6.6v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3799 | IBOS OA Delete Category del SQL injection | 9.8v3.1 | 0.7% | 2023-07-20 | |
| CVE-2023-3798 | Chengdu Flash Flood Disaster Monitoring and Warning System upload.aspx unrestricted upload | 9.8v3.1 | 0.9% | 2023-07-20 | |
| CVE-2023-3797 | A vulnerability, which was classified as critical, was found in Gen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System up to 20230712. This affects an unknown part of the file /Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx. The manipulation of th | 8.8v3.1 | 0.9% | 2023-07-20 | |
| CVE-2023-3796 | Bug Finder Foody Friend Profile Picture profile unrestricted upload | 8.8v3.1 | 0.5% | 2023-07-20 | |
| CVE-2023-3795 | Bug Finder ChainCity Real Estate Investment Platform GET parameter property SQL injection | 9.8v3.1 | 0.5% | 2023-07-20 | |
| CVE-2023-3794 | Bug Finder ChainCity Real Estate Investment Platform new ticket cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-20 | |
| CVE-2023-3793 | Weaver e-cology HTTP POST request filelFileDownloadForOutDoc.class SQL injection | 9.8v3.1 | 0.5% | 2023-07-20 | |
| CVE-2023-3792 | Beijing Netcon NS-ASG test_status.php direct request | 6.5v3.1 | 0.7% | 2023-07-20 | |
| CVE-2023-3791 | IBOS OA Personal Office Address Book export actionExport SQL injection | 9.8v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3790 | Boom CMS assets-manager add cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3789 | PaulPrinting CMS Search delivery cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3788 | ActiveITzone Active Super Shop CMS Manage Details page cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3787 | CodeCanyon Tiva Events Calender cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3786 | Aures Komet Kiosk Mode access control | 6.8v3.1 | 0.3% | 2023-07-20 | |
| CVE-2023-3785 | PaulPrinting CMS cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3784 | Dooblou WiFi File Explorer cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3783 | Webile HTTP POST request cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-20 | |
| CVE-2023-3779 | Essential Addons For Elementor WordPress plugin unauthenticated MailChimp API key disclosure | 5.3CNA v3.1 | 0.6% | 2023-07-20 | Fix |
| CVE-2023-3347 | Samba: Smb2 packet signing is not enforced when server signing = required is set | 5.9NVD v3.1 | 0.4% | 2023-07-20 | Fix |
| CVE-2023-3300 | Nomad Search API leaks information About CSI plugins | 5.3CNA v3.1 | 0.6% | 2023-07-20 | Fix |
| CVE-2023-3299 | Nomad Caller ACL Token's Secret ID is Exposed to Sentinel | 3.4CNA v3.1 | 0.6% | 2023-07-20 | Fix |
| CVE-2023-3072 | Nomad ACL Policies without Label are Applied to Unexpected Resources | 4.1CNA v3.1 | 0.4% | 2023-07-20 | Fix |
| CVE-2023-37899 | feathersjs socket handler allows abusing implicit toString | 7.5CNA v3.1 | 1.2% | 2023-07-19 | Fix |
| CVE-2023-37748 | miniupnp project Ngiflib infinite loop | 5.5v3.1 | 0.3% | 2023-07-19 | |
| CVE-2023-37733 | TDuckCloud tduck-platform An arbitrary file upload | 6.1v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-37362 | Weintek Weincloud improper authentication | 8.8v3.1 | 0.6% | 2023-07-19 | Fix |
| CVE-2023-37276 | Aiohttp vulnerable to HTTP request smuggling | 5.3CNA v3.1 | 1.3% | 2023-07-19 | Fix |
| CVE-2023-36853 | Keysight Geolocation Server exposed dangerous method or function | 7.8v3.1 | 0.2% | 2023-07-19 | Fix |
| CVE-2023-35900 | IBM Robotic Process Automation information disclosure | 4.3CNA v3.1 | 0.5% | 2023-07-19 | Fix |
| CVE-2023-35898 | IBM InfoSphere Information Server information disclosure | 4.3CNA v3.1 | 0.5% | 2023-07-19 | Fix |
| CVE-2023-35134 | Weintek Weincloud weak password recovery mechanism for forgotten password | 5.9NVD v3.1 | 0.5% | 2023-07-19 | Fix |
| CVE-2023-34429 | Weintek Weincloud Improper Handling of Structural Elements | 7.5v3.1 | 0.7% | 2023-07-19 | Fix |
| CVE-2023-34394 | Keysight N6845A relative path traversal | 7.8v3.1 | 0.2% | 2023-07-19 | Fix |
| CVE-2023-34034 | Access Control Bypass in Spring Security | 9.1CNA v3.1 | 4.0% | 2023-07-19 | Exploit codeFix |
| CVE-2023-33876 | Foxit Reader way use-after-free | 8.8v3.1 | 1.0% | 2023-07-19 | Fix |
| CVE-2023-33866 | Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free | 8.8v3.1 | 0.9% | 2023-07-19 | Fix |
| CVE-2023-33832 | IBM Storage Protect denial of service | 6.2CNA v3.1 | 0.1% | 2023-07-19 | Fix |
| CVE-2023-32664 | Foxit Reader Javascript checkThisBox method as implemented type confusion | 7.8v3.1 | 1.0% | 2023-07-19 | Fix |
| CVE-2023-32657 | Weintek Weincloud improper restriction of excessive authentication attempts | 7.5v3.1 | 0.5% | 2023-07-19 | Fix |
| CVE-2023-32635 | Financial Services Agency XBRL data create application XML external entity injection | 5.5v3.1 | 0.2% | 2023-07-19 | Fix |
| CVE-2023-32263 | Potential leak of credentials in Micro Focus Dimensions CM Jenkins plugin | 2.6CNA v3.1 | 0.3% | 2023-07-19 | Fix |
| CVE-2023-32262 | Exposure of system-scoped credentials in Jenkins Dimensions plugin | 4.3CNA v3.1 | 0.8% | 2023-07-19 | Fix |
| CVE-2023-32261 | Missing permission check in Jenkins Dimensions plugin allows enumerating credentials IDs | 4.2CNA v3.1 | 0.6% | 2023-07-19 | Fix |
| CVE-2023-30799 | MikroTik RouterOS Administrator privilege escalation | 7.2NVD v3.1 | 1.4% | 2023-07-19 | Reported exploitedExploit codeFix |
| CVE-2023-30433 | IBM Security Verify Access HTTP open redirect | 6.5CNA v3.1 | 0.4% | 2023-07-19 | Fix |
| CVE-2023-29260 | IBM Sterling Connect:Express for UNIX server-side request forgery | 6.5CNA v3.1 | 0.3% | 2023-07-19 | Fix |
| CVE-2023-29259 | IBM Sterling Connect:Express for UNIX information disclosure | 3.7CNA v3.1 | 0.5% | 2023-07-19 | Fix |
| CVE-2023-28754 | ShardingSphere-Agent: Deserialization vulnerability in ShardingSphere agent | 8.8v3.1 | 1.5% | 2023-07-19 | Fix |
| CVE-2023-28744 | Foxit PDF Reader JavaScript engine of Foxit Software's use-after-free | 8.8v3.1 | 0.9% | 2023-07-19 | Fix |
| CVE-2023-28513 | IBM MQ denial of service | 5.9CNA v3.1 | 1.0% | 2023-07-19 | Fix |
| CVE-2023-27877 | IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure | 5.3CNA v3.1 | 0.5% | 2023-07-19 | Fix |
| CVE-2023-27379 | Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free | 8.8v3.1 | 1.1% | 2023-07-19 | Fix |
| CVE-2023-26217 | TIBCO EBX Add-ons SQL injection | 8.8CNA v3.1 | 0.7% | 2023-07-19 | |
| CVE-2023-26026 | IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure | 5.3CNA v3.1 | 0.6% | 2023-07-19 | Fix |
| CVE-2023-26023 | IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure | 6.5CNA v3.1 | 0.7% | 2023-07-19 | Fix |
| CVE-2023-25839 | Bug-000157278 ArcGIS Insights has a security vulnerability desktop | 7.0CNA v3.1 | 0.2% | 2023-07-19 | Fix |
| CVE-2023-25838 | Esri ArcGIS Insights SQL injection | 7.5CNA v3.1 | 0.7% | 2023-07-19 | Fix |
| CVE-2023-22506 | Atlassian Bamboo Data Center code injection | 7.5CNA v3.0 | 2.1% | 2023-07-19 | Fix |
| CVE-2023-3782 | Squareup Okhttp-brotli DoS of the OkHttp client when | 5.9NVD v3.1 | 0.7% | 2023-07-19 | |
| CVE-2023-3765 | Absolute path traversal in MLflow/MLflow | 10.0v3.1 | 67.3% | 2023-07-19 | NucleiFix |
| CVE-2023-3763 | Intergard SGS SQL Query cleartext transmission | 7.5v3.1 | 0.6% | 2023-07-19 | |
| CVE-2023-3762 | Intergard SGS sensitive information in memory | 7.5v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-3761 | Intergard SGS Password Change cleartext transmission | 7.5v3.1 | 0.5% | 2023-07-19 | |
| CVE-2023-3760 | Intergard SGS Change Password denial of service | 6.5v3.1 | 1.0% | 2023-07-19 | |
| CVE-2023-3759 | Intergard SGS improper permissions | 9.8v3.1 | 0.9% | 2023-07-19 | |
| CVE-2023-3757 | GZ Scripts Car Rental Script cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-3756 | Creativeitem Atlas Business Directory Listing search cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-3755 | Creativeitem Atlas Business Directory Listing filter_listings cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-3754 | Creativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-3753 | Creativeitem Mastery LMS browse cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-3752 | Creativeitem Academy LMS courses cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-19 | |
| CVE-2023-3751 | Super Store Finder POST parameter index.php SQL injection | 9.8v3.1 | 0.5% | 2023-07-19 | |
| CVE-2023-3722 | Avaya Aura Device Services remote code execution | 8.6CNA v3.1 | 3.9% | 2023-07-19 | NucleiExploit codeFix |
| CVE-2023-3674 | Keylime: Attestation failure when the quote's signature does not validate | 2.3CNA v3.1 | 0.2% | 2023-07-19 | Fix |
| CVE-2023-3638 | GeoVision GV-ADR2701 improper authentication | 9.8v3.1 | 0.7% | 2023-07-19 | |
| CVE-2023-3519 | Citrix NetScaler ADC and NetScaler Gateway code injection | 9.8CNA v3.1 | 99.7% | 2023-07-19 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-3467 | Citrix NetScaler ADC improper privilege management | 8.0CNA v3.1 | 1.3% | 2023-07-19 | Fix |
| CVE-2023-3466 | Citrix NetScaler ADC reflected cross-site scripting | 8.3CNA v3.1 | 2.6% | 2023-07-19 | Fix |
| CVE-2023-3463 | GE Digital CIMPLICITY heap-based buffer overflow | 9.8v3.1 | 0.4% | 2023-07-19 | Fix |
| CVE-2023-3446 | OpenSSL excessive time spent checking DH keys and parameters | 5.3NVD v3.1 | 6.5% | 2023-07-19 | Fix |
| CVE-2023-38434 | Xhttp close_connection double free | 7.5v3.1 | 1.1% | 2023-07-18 | Exploit code |
| CVE-2023-38432 | Linux kernel out-of-bounds read | 9.1v3.1 | 2.5% | 2023-07-18 | Fix |
| CVE-2023-38431 | Linux kernel out-of-bounds read | 9.1v3.1 | 1.2% | 2023-07-18 | Fix |
| CVE-2023-38430 | Linux kernel out-of-bounds read | 9.1v3.1 | 1.2% | 2023-07-18 | Fix |
| CVE-2023-38429 | Linux kernel off-by-one error | 9.8v3.1 | 1.2% | 2023-07-18 | Fix |
| CVE-2023-38428 | Linux kernel out-of-bounds read | 9.1v3.1 | 3.2% | 2023-07-18 | Fix |
| CVE-2023-38427 | Linux kernel out-of-bounds read | 9.8v3.1 | 1.2% | 2023-07-18 | Fix |
| CVE-2023-38426 | Linux kernel out-of-bounds read | 9.1v3.1 | 3.0% | 2023-07-18 | Fix |
| CVE-2023-38257 | Iagona ScrutisWeb insecure direct object reference | 7.5v3.1 | 0.7% | 2023-07-18 | Fix |
| CVE-2023-37973 | David Pokorny Replace Word cross-site request forgery | 8.8v3.1 | 0.2% | 2023-07-18 | |
| CVE-2023-37897 | Server-side template injection (SSTI) in grav | 7.2CNA v3.1 | 2.8% | 2023-07-18 | Fix |
| CVE-2023-37892 | Shortcode IMDB WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | |
| CVE-2023-37889 | WPAdmin AWS CDN WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-37788 | goproxy denial of service | 7.5v3.1 | 1.0% | 2023-07-18 | Fix |
| CVE-2023-37758 | D-Link DIR-815 buffer overflow | 7.5v3.1 | 1.4% | 2023-07-18 | |
| CVE-2023-37481 | Fides Webserver vulnerable to SVG Bomb File Uploads | 2.7CNA v3.1 | 0.7% | 2023-07-18 | Fix |
| CVE-2023-37480 | Fides Webserver vulnerable to zip bomb File Uploads | 2.7CNA v3.1 | 0.7% | 2023-07-18 | Fix |
| CVE-2023-37477 | Command injection in firewall ip functionality in 1Panel | 7.2CNA v3.1 | 5.8% | 2023-07-18 | Fix |
| CVE-2023-37387 | Classified Listing WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-37386 | Media Library Helper by Codexin WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-37259 | matrix-org matrix-react-sdk cross-site scripting in Export Chat feature | 6.1CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-37143 | Microsoft ChakraCore resource exhaustion | 5.5v3.1 | 0.8% | 2023-07-18 | |
| CVE-2023-37142 | Microsoft ChakraCore resource exhaustion | 5.5v3.1 | 0.8% | 2023-07-18 | |
| CVE-2023-37141 | Microsoft ChakraCore resource exhaustion | 5.5v3.1 | 0.8% | 2023-07-18 | |
| CVE-2023-37140 | Microsoft ChakraCore resource exhaustion | 5.5v3.1 | 0.8% | 2023-07-18 | |
| CVE-2023-37139 | Microsoft ChakraCore out-of-bounds write | 5.5v3.1 | 0.9% | 2023-07-18 | |
| CVE-2023-36670 | Kratosdefense Ngc Indoor Unit OS command injection | 9.8v3.1 | 1.5% | 2023-07-18 | Fix |
| CVE-2023-36669 | Kratosdefense Ngc Indoor Unit missing authentication | 9.8v3.1 | 0.9% | 2023-07-18 | Fix |
| CVE-2023-36384 | Booking Calendar Contact Form WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-36383 | Event Manager for WooCommerce WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-35763 | Iagona ScrutisWeb use of hard-coded cryptographic key | 5.5v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-35189 | Iagona ScrutisWeb unrestricted upload of file with dangerous type | 9.8v3.1 | 1.0% | 2023-07-18 | Fix |
| CVE-2023-34330 | AMI MegaRAC SPx12 code injection via Dynamic Redfish extension interface | 8.2CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-34329 | AMI MegaRAC SPx12 authentication bypass via HTTP header spoofing | 9.1CNA v3.1 | 1.2% | 2023-07-18 | Emerging ThreatsFix |
| CVE-2023-34143 | Improper validation of Certificate vulnerability in Hitachi Device Manager | 5.6CNA v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-34142 | Cleartext transmission vulnerability in Hitachi Device Manager | 9.0CNA v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-34035 | Spring Security's authorization rules can be misconfigured when using multiple servlets | 7.3CNA v3.1 | 0.7% | 2023-07-18 | Fix |
| CVE-2023-33871 | Iagona ScrutisWeb absolute path traversal | 7.5v3.1 | 1.3% | 2023-07-18 | Fix |
| CVE-2023-33329 | Custom Post Type Generator WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-07-18 | |
| CVE-2023-33312 | Easy Captcha WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-18 | |
| CVE-2023-33265 | Hazelcast Executor services don't check client permissions properly | 8.8v3.1 | 0.7% | 2023-07-18 | Fix |
| CVE-2023-33231 | XSS in SolarWinds Database Performance Analyzer | 6.1CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-32965 | Jazz Popups WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-07-18 | |
| CVE-2023-31998 | Ubiquiti EdgeRouter A heap-based buffer overflow | 7.5v3.1 | 0.8% | 2023-07-18 | Fix |
| CVE-2023-31441 | Ncia Advisor Network null pointer dereference | 5.5v3.1 | 0.3% | 2023-07-18 | |
| CVE-2023-30906 | HPE Intelligent Provisioning (IP) for Gen9 privilege escalation | 7.5CNA v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-30383 | TP-Link Archer C2 V1 buffer overflow | 7.5v3.1 | 1.4% | 2023-07-18 | Exploit code |
| CVE-2023-30153 | PrestaShop Payplug An SQL injection | 9.8v3.1 | 1.0% | 2023-07-18 | |
| CVE-2023-28023 | HCL BigFix WebUI Software Distribution cross-site request forgery | 4.9CNA v3.1 | 0.2% | 2023-07-18 | |
| CVE-2023-28021 | BigFix WebUI is vulnerable to use of a risky cryptographic algorithm | 5.9CNA v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-28020 | URL redirection affects BigFix WebUI | 4.7CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-28019 | An SQL injection affects BigFix WebUI API | 5.5CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-25482 | WP Tiles WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | |
| CVE-2023-25475 | Smart YouTube PRO WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | |
| CVE-2023-25473 | Flickr Justified Gallery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-18 | |
| CVE-2023-25036 | Social Media Icons Widget WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-18 | |
| CVE-2023-24390 | WeSecur Security WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-07-18 | |
| CVE-2023-23660 | MainWP Maintenance Extension WordPress plugin SQL injection | 8.8v3.1 | 0.8% | 2023-07-18 | Fix |
| CVE-2023-22508 | Atlassian Confluence Data Center remote code execution | 8.5CNA v3.0 | 2.2% | 2023-07-18 | Fix |
| CVE-2023-22505 | Atlassian Confluence Data Center remote code execution | 8.0CNA v3.0 | 2.1% | 2023-07-18 | Fix |
| CVE-2023-22062 | Oracle Hyperion Financial Reporting Repository component unauthorized data access | 8.5CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-22061 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22060 | Oracle Hyperion Workspace UI and Visualization component unauthorized data access | 7.6CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-22058 | Oracle MySQL Server DDL component denial of service | 4.4CNA v3.1 | 1.7% | 2023-07-18 | Fix |
| CVE-2023-22057 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 1.4% | 2023-07-18 | Fix |
| CVE-2023-22056 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.8% | 2023-07-18 | Fix |
| CVE-2023-22055 | Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22054 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.4% | 2023-07-18 | Fix |
| CVE-2023-22053 | Oracle MySQL Server client programs component denial of service | 5.9CNA v3.1 | 1.3% | 2023-07-18 | Fix |
| CVE-2023-22052 | Oracle Database Java VM vulnerability | 3.1CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22051 | Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK information disclosure | 3.7CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-22050 | Oracle JD Edwards EnterpriseOne Orchestrator unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22049 | Oracle Java SE Libraries vulnerability | 3.7CNA v3.1 | 1.5% | 2023-07-18 | Fix |
| CVE-2023-22048 | Oracle MySQL Server Pluggable Auth component information disclosure | 3.1CNA v3.1 | 1.0% | 2023-07-18 | Fix |
| CVE-2023-22047 | Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data access | 7.5CNA v3.1 | 77.0% | 2023-07-18 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2023-22046 | Oracle MySQL Server Optimizer component denial of service | 4.9CNA v3.1 | 1.3% | 2023-07-18 | Fix |
| CVE-2023-22045 | Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK information disclosure | 3.7CNA v3.1 | 1.3% | 2023-07-18 | Fix |
| CVE-2023-22044 | Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK information disclosure | 3.7CNA v3.1 | 1.4% | 2023-07-18 | Fix |
| CVE-2023-22043 | Oracle Java SE JavaFX vulnerability | 5.9CNA v3.1 | 1.1% | 2023-07-18 | Fix |
| CVE-2023-22042 | Oracle E-Business Suite Applications Framework Diagnostics component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22041 | Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unauthorized data access | 5.1CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-22040 | Oracle WebLogic Server Core component unauthorized data modification | 6.5CNA v3.1 | 0.7% | 2023-07-18 | Fix |
| CVE-2023-22039 | Oracle Supply Chain Agile PLM WebClient component unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22038 | Oracle MySQL Server Security Privileges component unauthorized data modification | 2.7CNA v3.1 | 0.9% | 2023-07-18 | Fix |
| CVE-2023-22037 | Oracle Web Applications Desktop Integrator unauthorized data modification | 6.5CNA v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-22036 | Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK denial of service | 3.7CNA v3.1 | 1.3% | 2023-07-18 | Fix |
| CVE-2023-22035 | Oracle E-Business Suite Scripting iSurvey module component unauthorized data modification | 6.1CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22034 | Oracle Database Unified Audit vulnerability | 4.9CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-22033 | Oracle MySQL Server InnoDB component denial of service | 4.4CNA v3.1 | 1.2% | 2023-07-18 | Fix |
| CVE-2023-22031 | Oracle WebLogic Server Core component denial of service | 4.4CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-22027 | Oracle Business Intelligence Enterprise Edition Analytics Server component denial of service | 4.3CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-22023 | Oracle Solaris Device driver interface component takeover | 7.8CNA v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-22022 | Oracle Health Sciences Sciences Data Management Workbench unauthorized data access | 6.5CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-22021 | Oracle Business Intelligence Enterprise Edition Analytics Server component denial of service | 4.3CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-22020 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22018 | Oracle VM VirtualBox Core component takeover | 8.1CNA v3.1 | 1.0% | 2023-07-18 | Fix |
| CVE-2023-22017 | Oracle VM VirtualBox Core component denial of service | 5.5CNA v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-22016 | Oracle VM VirtualBox Core component denial of service | 4.2CNA v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-22014 | Oracle PeopleSoft Enterprise PeopleTools portal component takeover | 8.4CNA v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-22013 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 4.3CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22012 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 4.3CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22011 | Oracle Business Intelligence Enterprise Edition unauthorized data modification | 5.4CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-22010 | Oracle Essbase Security and Provisioning information disclosure | 2.2CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22009 | Oracle E-Business Suite Self-Service Human Resources information disclosure | 4.3CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-22008 | Oracle MySQL Server InnoDB component denial of service | 4.9CNA v3.1 | 1.3% | 2023-07-18 | Fix |
| CVE-2023-22007 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 1.1% | 2023-07-18 | Fix |
| CVE-2023-22006 | Oracle Java SE Networking vulnerability | 3.1CNA v3.1 | 0.9% | 2023-07-18 | Fix |
| CVE-2023-22005 | Oracle MySQL Server Replication component denial of service | 4.4CNA v3.1 | 1.3% | 2023-07-18 | Fix |
| CVE-2023-22004 | Oracle E-Business Suite Applications Technology unauthorized data modification | 4.3CNA v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-21994 | Oracle Mobile Security Suite Android Mobile Authenticator App component unauthorized data access | 6.5CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-21983 | Oracle Application Express Administration None component unauthorized data modification | 5.6CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-21975 | Oracle Application Express Customers Plugin User Account component takeover | 9.0CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-21974 | Oracle Application Express Team Calendar Plugin User Account component takeover | 9.0CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-21961 | Oracle Hyperion Essbase Administration Services unauthorized data access | 6.0CNA v3.1 | 0.2% | 2023-07-18 | Fix |
| CVE-2023-21950 | Oracle MySQL Server Replication component denial of service | 4.9CNA v3.1 | 1.0% | 2023-07-18 | Fix |
| CVE-2023-21949 | Oracle Database Advanced Networking Option vulnerability | 3.7CNA v3.1 | 0.4% | 2023-07-18 | Fix |
| CVE-2023-3743 | SQL injection vulnerability in LeoTheme's Ap Page Builder | 7.5v3.1 | 0.8% | 2023-07-18 | Fix |
| CVE-2023-3714 | ProfileGrid WordPress plugin unauthorized access | 8.8v3.1 | 0.9% | 2023-07-18 | Fix |
| CVE-2023-3713 | ProfileGrid WordPress plugin authenticated (Subscriber+) arbitrary option update | 8.8CNA v3.1 | 0.8% | 2023-07-18 | Fix |
| CVE-2023-3709 | Royal Elementor Addons WordPress plugin unauthenticated MailChimp API key disclosure | 5.3CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-3708 | Amela WordPress theme cross-site scripting | 6.1CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-3527 | Avaya Call Management System CSV injection | 6.8CNA v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-3459 | Export and Import Users and Customers WordPress plugin unauthorized access | 7.2CNA v3.1 | 0.9% | 2023-07-18 | Fix |
| CVE-2023-3403 | ProfileGrid WordPress plugin missing authorization to user import | 4.3v3.1 | 0.6% | 2023-07-18 | Fix |
| CVE-2023-2913 | Rockwell Automation ThinManager ThinServer path traversal | 7.5CNA v3.1 | 2.4% | 2023-07-18 | Fix |
| CVE-2023-2433 | YARPP Yet Another Related Posts WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-18 | Fix |
| CVE-2023-2263 | Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A denial of service | 7.5CNA v3.1 | 1.2% | 2023-07-18 | Fix |
| CVE-2023-0160 | kernel possibility of deadlock in libbpf function sock_hash_delete_elem | 5.5NVD v3.1 | 0.3% | 2023-07-18 | Fix |
| CVE-2023-38409 | Linux kernel race condition | 5.5v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-38405 | Crestron Cp3-gv 6506034 resource exhaustion | 7.5v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-38404 | Veritas Infoscale Operations Manager unrestricted file upload | 8.8v3.1 | 0.9% | 2023-07-17 | Fix |
| CVE-2023-38403 | ES iperf3 integer overflow | 7.5v3.1 | 2.0% | 2023-07-17 | Fix |
| CVE-2023-37985 | Five Star Restaurant Menu WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-37974 | WP Social AutoConnect WordPress plugin Justin Klein cross-site request forgery | 8.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-37968 | Falang multilanguage WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-37791 | D-Link DIR-619L out-of-bounds write | 9.8v3.1 | 12.7% | 2023-07-17 | |
| CVE-2023-37781 | EMQX emqx_sn plugin path traversal | 6.5v3.1 | 0.9% | 2023-07-17 | |
| CVE-2023-37770 | Grame Faust out-of-bounds write | 5.5v3.1 | 0.3% | 2023-07-17 | |
| CVE-2023-37769 | pixman divide by zero | 6.5v3.1 | 0.6% | 2023-07-17 | |
| CVE-2023-37479 | Improper sanitization of MXCSR and RFLAGS in OpenEnclave | 5.3CNA v3.1 | 0.7% | 2023-07-17 | Fix |
| CVE-2023-37476 | OpenRefine vulnerable to zip slip in project import | 5.5CNA v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-37475 | Attacker-controlled parameter can cause denial of service in hamba avro | 7.5CNA v3.1 | 1.0% | 2023-07-17 | Fix |
| CVE-2023-37461 | Path traversal in metersphere | 5.6CNA v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-37266 | Weak json web token (JWT) secrets in CasaOS | 9.8CNA v3.1 | 6.8% | 2023-07-17 | NucleiFix |
| CVE-2023-37265 | Incorrect identification of source IP addresses in CasaOS | 9.8CNA v3.1 | 7.4% | 2023-07-17 | NucleiFix |
| CVE-2023-36656 | Jaegertracing Jaeger UI cross-site scripting | 5.4v3.1 | 1.1% | 2023-07-17 | |
| CVE-2023-36514 | WooCommerce Ship to Multiple Addresses WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-36513 | AutomateWoo WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-36511 | WooCommerce Order Barcodes WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-35901 | IBM Robotic Process Automation improper authentication | 2.7CNA v3.1 | 0.5% | 2023-07-17 | Fix |
| CVE-2023-35880 | WooCommerce Brands WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-35818 | espressif Esp-eye unauthorized access | 6.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-35096 | myCred WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-35089 | Recipe Maker For Your Food Blog from Zip Recipes WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-35038 | WP PDF Generator WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-35012 | IBM Db2 code execution | 6.7CNA v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-34669 | TOTOLINK Cp300+ observable discrepancy | 7.5v3.1 | 0.8% | 2023-07-17 | |
| CVE-2023-34141 | Zyxel ATP series firmware access point command injection | 8.0CNA v3.1 | 0.7% | 2023-07-17 | Fix |
| CVE-2023-34140 | Zyxel ATP series firmware buffer overflow | 6.5CNA v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-34139 | Zyxel USG FLEX series firmware command injection | 8.8CNA v3.1 | 0.8% | 2023-07-17 | Fix |
| CVE-2023-34138 | Zyxel ATP series firmware hotspot management feature of the Zyxel command injection | 8.0CNA v3.1 | 0.7% | 2023-07-17 | Fix |
| CVE-2023-34036 | Forwarded header exploit with Spring HATEOAS on WebFlux | 5.3CNA v3.1 | 0.5% | 2023-07-17 | Fix |
| CVE-2023-34005 | Front End Users WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-33857 | IBM InfoSphere Information Server information disclosure | 5.3CNA v3.1 | 0.7% | 2023-07-17 | Fix |
| CVE-2023-33012 | Zyxel ATP series firmware configuration parser of the Zyxel command injection | 8.8CNA v3.1 | 9.9% | 2023-07-17 | MetasploitExploit codeFix |
| CVE-2023-33011 | Zyxel ATP series firmware format string | 8.8CNA v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-31853 | Cudy LT400 cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-17 | Exploit code |
| CVE-2023-31852 | Cudy LT400 cross-site scripting | 6.1v3.1 | 0.7% | 2023-07-17 | Exploit code |
| CVE-2023-31851 | Cudy LT400 cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-17 | Exploit code |
| CVE-2023-31216 | Ultimate Member WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-28864 | Progress Chef Infra Server insecure storage of sensitive information | 5.5v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-28767 | Zyxel ATP series firmware OS command injection | 8.8CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-27606 | WP Reroute Email WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-27424 | Inactive User Deleter WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-17 | Fix |
| CVE-2023-26512 | Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data | 9.8v3.1 | 1.4% | 2023-07-17 | Fix |
| CVE-2023-23719 | Premmerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-23646 | Album Gallery WordPress Gallery plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-22672 | vSlider Multi Image Slider for WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-17 | |
| CVE-2023-3724 | wolfSSL TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension | 9.1CNA v3.1 | 0.7% | 2023-07-17 | Fix |
| CVE-2023-3700 | Authorization bypass through user-controlled key in alextselegidis/easyappointments | 4.3v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3696 | Prototype pollution in Automattic/Mongoose | 9.8v3.1 | 1.2% | 2023-07-17 | Fix |
| CVE-2023-3695 | Campcodes Beauty Salon Management System add-product.php SQL injection | 9.8v3.1 | 0.6% | 2023-07-17 | |
| CVE-2023-3694 | SourceCodester/Projectworlds House Rental and Property Listing index.php SQL injection | 9.8v3.1 | 0.8% | 2023-07-17 | |
| CVE-2023-3615 | Mattermost iOS app lack of server certificate validation in websockets connection | 8.1CNA v3.1 | 0.3% | 2023-07-17 | |
| CVE-2023-3614 | Mattermost denial of service via specially crafted gif image | 4.3CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3613 | Mattermost Plugins guest accounts invited and added to channels by Welcomebot plugin | 3.5CNA v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-3593 | Mattermost server crash via a specially crafted markdown input | 4.3CNA v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-3591 | Mattermost lack of previous password reset tokens on new token creation | 4.8CNA v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-3590 | Mattermost deleted attachments in Boards remain accessible | 3.1CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3587 | Mattermost inconsistent state in UI after boards permission change by system admin | 2.7CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3586 | Mattermost disabling publicly-shared boards does not disable existing publicly available board links | 4.2CNA v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-3585 | Mattermost channel DoS by sharing a boards link | 4.3CNA v3.1 | 0.5% | 2023-07-17 | Fix |
| CVE-2023-3584 | Mattermost member can create team with team override scheme | 3.1CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3582 | Mattermost lack of channel membership check when linking a board to a channel | 4.3CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3581 | Mattermost WebSockets accept connections from HTTPS origin | 6.2CNA v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-3577 | Mattermost limited blind SSRF to localhost/intranet in interactive dialog implementation | 3.5CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3376 | SQLi in Digital Strategys Zekiweb | 9.8CNA v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-3245 | Floating Chat Widget WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-07-17 | Fix |
| CVE-2023-3186 | Supsystic Popup WordPress plugin prototype pollution | 9.8NVD v3.1 | 1.5% | 2023-07-17 | Fix |
| CVE-2023-3182 | Membership Plugin - Restrict Content WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-07-17 | Fix |
| CVE-2023-3179 | POST SMTP Mailer WordPress plugin account takeover via CSRF | 8.8NVD v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-3041 | Autochat WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-07-17 | |
| CVE-2023-2963 | SQLi in Oliva Expertise | 9.8CNA v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-2960 | XSS in Oliva Expertise | 6.1CNA v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-2959 | Authentication bypass by primary weakness in Oliva Expertise | 7.5v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-2958 | Origin Software ATS Pro insecure direct object reference | 9.8v3.1 | 0.8% | 2023-07-17 | Fix |
| CVE-2023-2912 | Secomea SiteManager Embedded use-after-free | 5.9CNA v3.1 | 0.5% | 2023-07-17 | Fix |
| CVE-2023-2760 | TAPHOME SQL injection in Core Platform | 7.6v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-2759 | TAPHOME improper authentication in Core Platform | 8.8CNA v3.1 | 0.6% | 2023-07-17 | Fix |
| CVE-2023-2701 | Gravity Forms WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-07-17 | Fix |
| CVE-2023-2636 | AN_GradeBook WordPress plugin Subscriber+ SQLi | 8.8NVD v3.1 | 6.9% | 2023-07-17 | Exploit code |
| CVE-2023-2579 | InventoryPress WordPress plugin Author+ stored XSS | 5.4NVD v3.1 | 1.1% | 2023-07-17 | Exploit code |
| CVE-2023-2330 | Caldera Forms Google Sheets Connector WordPress plugin access code update via CSRF | 8.8NVD v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-2329 | WooCommerce Google Sheet Connector WordPress plugin access code update via CSRF | 8.8NVD v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-2143 | Enable SVG, WebP and ICO Upload WordPress plugin Author+ stored XSS | 5.4NVD v3.1 | 0.3% | 2023-07-17 | Fix |
| CVE-2023-1893 | Login Configurator WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.7% | 2023-07-17 | Nuclei |
| CVE-2023-0439 | NEX-Forms WordPress plugin authenticated stored XSS | 5.4NVD v3.1 | 0.4% | 2023-07-17 | Fix |
| CVE-2023-38379 | Rigol MSO5000 missing authentication | 7.5v3.1 | 0.8% | 2023-07-16 | |
| CVE-2023-38378 | Rigol MSO5000 OS command injection | 9.8v3.1 | 1.5% | 2023-07-16 | |
| CVE-2023-30989 | IBM i privilege escalation | 8.4CNA v3.1 | 0.2% | 2023-07-16 | Fix |
| CVE-2023-30988 | IBM i privilege escalation | 8.4CNA v3.1 | 0.2% | 2023-07-16 | Fix |
| CVE-2023-3693 | SourceCodester Life Insurance Management System login.php SQL injection | 9.8v3.1 | 0.8% | 2023-07-16 | |
| CVE-2023-3692 | Unrestricted upload of file with dangerous type in Admidio/Admidio | 7.2v3.1 | 1.0% | 2023-07-16 | Fix |
| CVE-2023-3691 | layui HTML attribute cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-16 | Fix |
| CVE-2023-3690 | Bylancer QuickOrder GET parameter blog SQL injection | 9.8v3.1 | 0.5% | 2023-07-16 | |
| CVE-2023-3689 | Bylancer QuickQR GET parameter blog SQL injection | 9.8v3.1 | 0.5% | 2023-07-16 | |
| CVE-2023-3688 | Bylancer QuickJob GET parameter SQL injection | 9.8v3.1 | 0.5% | 2023-07-16 | |
| CVE-2023-3687 | Bylancer QuickVCard GET parameter blog SQL injection | 9.8v3.1 | 0.5% | 2023-07-16 | |
| CVE-2023-3686 | Bylancer QuickAI OpenAI GET parameter blog SQL injection | 9.8v3.1 | 0.5% | 2023-07-16 | |
| CVE-2023-3685 | Nesote Inout Search Engine AI Edition index.php cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-16 | |
| CVE-2023-3684 | LivelyWorks Articart Base64 Encoding de_DE redirect | 6.1v3.1 | 0.3% | 2023-07-16 | KCV |
| CVE-2023-3683 | LivelyWorks Articart search cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-16 | |
| CVE-2023-38350 | PNP4NAGIOS cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-15 | |
| CVE-2023-38349 | PNP4NAGIOS cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-15 | |
| CVE-2023-35802 | Extreme Networks AP1130 buffer overflow | 9.8v3.1 | 1.1% | 2023-07-15 | Fix |
| CVE-2023-30791 | Plane insecure file upload | 4.6NVD v3.1 | 0.5% | 2023-07-15 | |
| CVE-2023-3682 | Nesote Inout Blockchain EasyPayments POST parameter getcoinaddress SQL injection | 9.8v3.1 | 0.5% | 2023-07-15 | |
| CVE-2023-3681 | Campcodes Retro Cellphone Online Store modal_add_product.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-15 | |
| CVE-2023-3680 | SourceCodester Lost and Found Information System HTTP POST request SQL injection | 9.8v3.1 | 0.5% | 2023-07-15 | |
| CVE-2023-3679 | SourceCodester Lost and Found Information System HTTP POST request SQL injection | 9.8v3.1 | 0.5% | 2023-07-15 | |
| CVE-2023-3678 | SourceCodester AC Repair and Services System HTTP POST request SQL injection | 9.8v3.1 | 0.5% | 2023-07-15 | |
| CVE-2023-2507 | CleverTap Cordova Plugin reflected XSS | 6.1NVD v3.1 | 0.9% | 2023-07-15 | Fix |
| CVE-2023-2268 | Plane unauthorized access to files | 7.5v3.1 | 0.7% | 2023-07-15 | |
| CVE-2023-38337 | Rswag vulnerable to arbitrary JSON and YAML file read via directory traversal | 7.5v3.1 | 1.3% | 2023-07-14 | Fix |
| CVE-2023-38336 | Netkit command injection | 9.8v3.1 | 2.1% | 2023-07-14 | |
| CVE-2023-38325 | cryptography mishandles SSH certificates | 7.5v3.1 | 0.7% | 2023-07-14 | Fix |
| CVE-2023-38286 | Spring-boot-admin sandbox bypass via crafted HTML | 7.5v3.1 | 1.0% | 2023-07-14 | Fix |
| CVE-2023-38253 | W3m: Out-of-bounds read in growbuf_to_str at w3m/indep.c | 5.5NVD v3.1 | 0.4% | 2023-07-14 | Fix |
| CVE-2023-38252 | W3m: Out-of-bounds read in strnew_size at w3m/str.c | 5.5NVD v3.1 | 0.4% | 2023-07-14 | Fix |
| CVE-2023-37794 | WAYOS Fbm-291w command injection | 9.8v3.1 | 2.4% | 2023-07-14 | |
| CVE-2023-37793 | WAYOS Fbm-291w buffer overflow | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37723 | Tenda FH1202 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37722 | Tenda FH1202 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37721 | Tenda FH1202 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37719 | Tenda FH1202 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37718 | Tenda FH1202 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37717 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37716 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37715 | Tenda FH1202 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37714 | Tenda FH1202 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-07-14 | |
| CVE-2023-37474 | Path traversal in copyparty | 7.5CNA v3.0 | 44.9% | 2023-07-14 | NucleiFix |
| CVE-2023-37473 | Limited code execution in zenstruck/collections | 8.6CNA v3.1 | 0.9% | 2023-07-14 | Fix |
| CVE-2023-37472 | Query injection in Knowage server | 7.7CNA v3.1 | 0.7% | 2023-07-14 | Fix |
| CVE-2023-37466 | vm2 Promise handler sanitization code injection | 9.8CNA v3.1 | 3.9% | 2023-07-14 | Fix |
| CVE-2023-37464 | Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose | 8.6CNA v3.1 | 0.7% | 2023-07-14 | Fix |
| CVE-2023-37462 | xwiki-platform org.Xwiki.platform:xwiki-platform-skin-ui eval injection | 10.0CNA v3.1 | 91.6% | 2023-07-14 | Reported exploitedNucleiFix |
| CVE-2023-37268 | User login confusion with SSO in warpgate | 6.4CNA v3.1 | 0.5% | 2023-07-14 | Fix |
| CVE-2023-37224 | Archerirm Archer sensitive information in log files | 5.5v3.1 | 0.2% | 2023-07-14 | Fix |
| CVE-2023-37223 | Archerirm Archer cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-14 | Fix |
| CVE-2023-36888 | Microsoft Edge for Android (Chromium-based) tampering | 6.3CNA v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-36887 | Microsoft Edge (Chromium-based) remote code execution | 7.8CNA v3.1 | 1.4% | 2023-07-14 | Fix |
| CVE-2023-36883 | Microsoft Edge for iOS spoofing | 4.3CNA v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-36850 | Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet | 6.5CNA v3.1 | 0.3% | 2023-07-14 | Fix |
| CVE-2023-36849 | Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received | 6.5CNA v3.1 | 0.3% | 2023-07-14 | Fix |
| CVE-2023-36848 | Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet | 6.5CNA v3.1 | 0.3% | 2023-07-14 | Fix |
| CVE-2023-36840 | Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run | 5.5CNA v3.1 | 0.2% | 2023-07-14 | Fix |
| CVE-2023-36838 | Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command | 5.5CNA v3.1 | 0.2% | 2023-07-14 | Fix |
| CVE-2023-36836 | Juniper Networks Junos OS routing protocol daemon uninitialized resource use | 4.7CNA v3.1 | 0.2% | 2023-07-14 | Fix |
| CVE-2023-36835 | Juniper Networks Junos OS Packet Forwarding Engine improper check for exceptional conditions | 7.5CNA v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-36834 | Juniper Networks Junos OS packet forwarding engine denial of service | 6.5CNA v3.1 | 0.3% | 2023-07-14 | Fix |
| CVE-2023-36833 | Juniper Networks Junos OS Evolved packet forwarding engine use-after-free | 6.5CNA v3.1 | 0.3% | 2023-07-14 | Fix |
| CVE-2023-36832 | Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface | 7.5CNA v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-36831 | Junos OS: SRX Series: Jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied | 7.5CNA v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-36818 | Denial of service via User Custom Sidebar Section Unlimited Link Creation in discourse | 6.5CNA v3.1 | 0.7% | 2023-07-14 | Fix |
| CVE-2023-36466 | Topic Title Validation Skipped when Changing Category in Discourse | 3.5CNA v3.1 | 0.4% | 2023-07-14 | Fix |
| CVE-2023-35692 | Google Android GeoLocation.java privilege escalation | 7.8v3.1 | 0.1% | 2023-07-14 | Fix |
| CVE-2023-34236 | Information disclosure vulnerability in Weave GitOps Terraform Controller | 8.5CNA v3.1 | 1.0% | 2023-07-14 | Fix |
| CVE-2023-32761 | Archerirm Archer cross-site request forgery | 8.0v3.1 | 0.4% | 2023-07-14 | Fix |
| CVE-2023-32760 | Archerirm Archer information disclosure | 6.5NVD v3.1 | 0.5% | 2023-07-14 | Fix |
| CVE-2023-32759 | Archerirm Archer information disclosure | 6.5NVD v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-28985 | Juniper Networks Junos OS Intrusion Detection and Prevention improper syntax validation | 7.5CNA v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-24896 | Microsoft Dynamics 365 Finance spoofing | 5.4CNA v3.1 | 0.7% | 2023-07-14 | Fix |
| CVE-2023-3673 | SQL injection in pimcore/pimcore | 7.2v3.1 | 0.9% | 2023-07-14 | Fix |
| CVE-2023-3672 | Cross-site scripting (XSS) DOM in plaidweb/Webmention.js | 6.1NVD v3.1 | 0.5% | 2023-07-14 | Fix |
| CVE-2023-3668 | Improper encoding or escaping of output in froxlor/froxlor | 7.2NVD v3.1 | 1.0% | 2023-07-14 | Fix |
| CVE-2023-3649 | Buffer over-read in Wireshark | 5.3CNA v3.1 | 0.2% | 2023-07-14 | Fix |
| CVE-2023-3648 | Mismatched Memory Management Routines in Wireshark | 5.3CNA v3.1 | 0.3% | 2023-07-14 | Fix |
| CVE-2023-3633 | Bitdefender Engines out-of-bounds memory corruption issue in CEVA Engine | 8.1CNA v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-3514 | Razer Central RazerCentralSerivce Unsafe Named Pipe permission escalation of Privilege | 7.8v3.1 | 0.2% | 2023-07-14 | |
| CVE-2023-3513 | Razer Central RazerCentralService unsafe deserialization escalation of privilege | 7.8v3.1 | 0.3% | 2023-07-14 | |
| CVE-2023-3434 | QRC handler without Input Validation in Jami | 5.4v3.1 | 0.4% | 2023-07-14 | Fix |
| CVE-2023-3433 | Local denial of service in Jami | 5.5v3.1 | 0.2% | 2023-07-14 | Fix |
| CVE-2023-2975 | OpenSSL AES-SIV implementation ignores empty associated data entries | 5.3v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-2082 | Buy Me a Coffee Button and Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-14 | Fix |
| CVE-2023-38199 | OWASP coreruleset content-type confusion | 9.8v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-38198 | acme.sh code injection | 9.8v3.1 | 1.1% | 2023-07-13 | Fix |
| CVE-2023-38197 | Qt XML entity expansion infinite loop | 7.5v3.1 | 1.3% | 2023-07-13 | Fix |
| CVE-2023-37849 | WatchGuard Panda Security VPN DLL hijacking | 6.5v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-37839 | DedeCMS /dede/file_manage_control.php arbitrary file upload | 9.8v3.1 | 1.2% | 2023-07-13 | |
| CVE-2023-37837 | JPEG Libjpeg out-of-bounds write | 6.5v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-37836 | JPEG Libjpeg reachable assertion | 6.5v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-37787 | Geeklog Multiple cross-site scripting | 4.8v3.1 | 0.5% | 2023-07-13 | |
| CVE-2023-37786 | Geeklog Multiple cross-site scripting | 4.8v3.1 | 0.5% | 2023-07-13 | Exploit code |
| CVE-2023-37785 | ImpressCMS cross-site scripting | 4.8v3.1 | 0.5% | 2023-07-13 | |
| CVE-2023-37746 | PHPGurukul Maid Hiring Management System cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-13 | |
| CVE-2023-37745 | PHPGurukul Maid Hiring Management System cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-13 | |
| CVE-2023-37744 | PHPGurukul Maid Hiring Management System cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-13 | |
| CVE-2023-37743 | PHPGurukul Teacher Subject Allocation System cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-13 | |
| CVE-2023-37599 | Issabel PBX information disclosure | 7.5v3.1 | 3.6% | 2023-07-13 | NucleiExploit code |
| CVE-2023-37598 | Issabel PBX cross-site request forgery | 4.5v3.1 | 0.6% | 2023-07-13 | Exploit code |
| CVE-2023-37568 | ELECOM WRC-1167GHBK-S command injection | 8.0v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-37567 | LOGITEC LAN-W301NR ELECOM and command injection | 9.8v3.1 | 2.4% | 2023-07-13 | Fix |
| CVE-2023-37566 | LOGITEC LAN-W301NR ELECOM and command injection | 8.0v3.1 | 1.1% | 2023-07-13 | Fix |
| CVE-2023-37565 | ELECOM WRC-1167GHBK-S code injection | 8.0v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-37564 | ELECOM WRC-1167GHBK-S OS command injection | 8.0v3.1 | 0.9% | 2023-07-13 | Fix |
| CVE-2023-37563 | ELECOM WRC-1167GHBK-S insecure storage of sensitive information | 6.5v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-37562 | ELECOM WTC-C1167GC-B exists cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-37561 | ELECOM WRH-300WH-H open redirect | 6.1v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-37560 | ELECOM WRH-300WH-H cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-37468 | Storing unencrypted LDAP passwords in feedbacksystem | 6.0CNA v3.1 | 0.2% | 2023-07-13 | Fix |
| CVE-2023-37463 | GitHub cmark-gfm quadratic complexity bugs may lead to a denial of service | 6.4CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-37415 | Apache Airflow Apache Hive Provider: Improper input validation in Hive Provider with proxy_user | 8.8v3.1 | 1.6% | 2023-07-13 | Fix |
| CVE-2023-37278 | GLPI vulnerable to SQL injection via dashboard administration | 6.8CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-37275 | Significant-Gravitas AutoGPT system logs spoofable in Auto-GPT via ANSI control sequences | 3.1CNA v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-37274 | Significant-Gravitas AutoGPT python code execution sandbox escape in non-docker version in Auto-GPT | 7.6CNA v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-37273 | Significant-Gravitas Auto-GPT docker-compose setup code injection | 8.1CNA v3.1 | 0.4% | 2023-07-13 | Exploit codeFix |
| CVE-2023-37272 | sos-berlin joc-cockpit XSS vulnerability in JOC Cockpit branch | 6.3CNA v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-37267 | Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions | 7.5CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-36473 | CSP nonce reuse vulnerability in Discourse | 6.8CNA v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-35945 | Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec | 7.5CNA v3.1 | 1.7% | 2023-07-13 | Fix |
| CVE-2023-35833 | YSoft Safeq Server cleartext transmission of sensitive information | 6.5v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-35694 | Google Android DMPixelLogger.cpp out-of-bounds read | 7.5v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-35693 | Google Android vfs.c memory corruption | 6.7v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-35691 | Google Android out-of-bounds read | 7.2v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-35070 | VegaGroup Web Collection SQL command improper neutralization | 9.8CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-35069 | Path traversal in Bullwark | 7.5v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-34458 | Mx-chain-go's relayed transactions always increment nonce | 7.1CNA v3.1 | 1.3% | 2023-07-13 | Fix |
| CVE-2023-34137 | SonicWall GMS authentication bypass | 9.8v3.1 | 1.0% | 2023-07-13 | Fix |
| CVE-2023-34136 | SonicWall GMS unrestricted file upload | 9.8v3.1 | 0.8% | 2023-07-13 | Fix |
| CVE-2023-34135 | SonicWall Analytics SonicWall GMS and path traversal | 6.5v3.1 | 1.6% | 2023-07-13 | Fix |
| CVE-2023-34134 | SonicWall Analytics SonicWall GMS and information disclosure | 6.5v3.1 | 1.1% | 2023-07-13 | Fix |
| CVE-2023-34133 | SonicWall GMS SQL command improper neutralization | 7.5v3.1 | 72.2% | 2023-07-13 | Reported exploitedNucleiMetasploitExploit codeKCVFix |
| CVE-2023-34132 | Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. | 9.8v3.1 | 7.7% | 2023-07-13 | Reported exploitedMetasploitExploit codeKCVFix |
| CVE-2023-34131 | SonicWall Analytics SonicWall GMS and information disclosure | 5.3v3.1 | 0.8% | 2023-07-13 | Fix |
| CVE-2023-34130 | SonicWall GMS weak cryptographic algorithm | 9.8v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-34129 | SonicWall GMS path traversal | 8.8v3.1 | 41.2% | 2023-07-13 | Fix |
| CVE-2023-34128 | SonicWall GMS and Analytics configuration file vulnerability | 9.8v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-34127 | SonicWall GMS OS command improper neutralization | 8.8v3.1 | 86.5% | 2023-07-13 | MetasploitExploit codeKCVFix |
| CVE-2023-34126 | SonicWall GMS unrestricted file upload | 8.8v3.1 | 0.8% | 2023-07-13 | Fix |
| CVE-2023-34125 | SonicWall Analytics GMS and path traversal | 6.5v3.1 | 23.6% | 2023-07-13 | Fix |
| CVE-2023-34124 | SonicWall GMS authentication bypass | 9.8v3.1 | 50.5% | 2023-07-13 | Reported exploitedNucleiMetasploitExploit codeKCVFix |
| CVE-2023-34123 | SonicWall GMS hard-coded cryptographic key | 7.5v3.1 | 0.8% | 2023-07-13 | Fix |
| CVE-2023-33768 | Belkin Wemo Smart Plug WSP080 improper signature verification | 6.5v3.1 | 1.1% | 2023-07-13 | Exploit code |
| CVE-2023-31825 | Inageya missing encryption | 7.5v3.1 | 0.6% | 2023-07-13 | |
| CVE-2023-31824 | Dericia Delicia insufficiently protected credentials | 7.5v3.1 | 1.0% | 2023-07-13 | |
| CVE-2023-31823 | Marui cleartext transmission of sensitive information | 7.5v3.1 | 0.6% | 2023-07-13 | |
| CVE-2023-31822 | Entetsu Store missing encryption | 7.5v3.1 | 0.6% | 2023-07-13 | |
| CVE-2023-31821 | Albis cleartext storage of sensitive information | 7.5v3.1 | 0.6% | 2023-07-13 | |
| CVE-2023-31820 | Shizutetsu Store missing encryption | 7.5v3.1 | 0.6% | 2023-07-13 | |
| CVE-2023-31819 | Keisei Store Livre missing encryption | 7.5v3.1 | 0.6% | 2023-07-13 | |
| CVE-2023-31705 | Task Reminder System Sourcecodester reflected cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-13 | Exploit code |
| CVE-2023-31704 | oretnom23 Online Computer and Laptop Store incorrect authorization | 9.8v3.1 | 1.3% | 2023-07-13 | Exploit code |
| CVE-2023-30565 | Becton Dickinson Guardrails CQI Reporter cleartext transmission of sensitive information | 3.5CNA v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-30564 | Becton Dickinson Alaris Systems Manager device import function improper input validation | 6.9CNA v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-30563 | Becton Dickinson Alaris Systems Manager user import function stored cross-site scripting | 8.2CNA v3.1 | 0.4% | 2023-07-13 | Fix |
| CVE-2023-30562 | Becton Dickinson & BD Alarisâ„¢ Guardrailsâ„¢ Editor Lack of Dataset Integrity Checking | 6.7CNA v3.1 | 0.2% | 2023-07-13 | Fix |
| CVE-2023-30561 | Becton Dickinson Alaris Point-of-Care Unit IUI bus missing encryption | 6.1CNA v3.1 | 0.2% | 2023-07-13 | Fix |
| CVE-2023-30560 | Becton Dickinson Alaris Point-of-Care Unit configuration interface missing authentication | 6.8CNA v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-30559 | Wireless Card Firmware improperly Signed | 5.2CNA v3.1 | 0.2% | 2023-07-13 | Fix |
| CVE-2023-30151 | Boxtal Envoimoinscher SQL injection | 9.8v3.1 | 1.4% | 2023-07-13 | |
| CVE-2023-29458 | Zabbix duktape bug crashes JavaScript putting too many values in valstack | 5.9CNA v3.1 | 0.8% | 2023-07-13 | Fix |
| CVE-2023-29457 | Zabbix insufficient validation of action form input fields | 6.3CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-29456 | Zabbix inefficient URL schema validation | 5.7CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-29455 | Zabbix reflected XSS in several fields of graph form | 5.4CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-29454 | Zabbix persistent XSS in the user form | 5.4CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-29452 | Zabbix remove possibility to add html into Geomap attribution field | 5.5CNA v3.1 | 64.1% | 2023-07-13 | Fix |
| CVE-2023-29451 | Zabbix denial of service caused by a bug in the JSON parser | 4.7CNA v3.1 | 0.8% | 2023-07-13 | Fix |
| CVE-2023-29450 | Zabbix unauthorized limited filesystem access from preprocessing | 8.5CNA v3.1 | 1.3% | 2023-07-13 | Fix |
| CVE-2023-29449 | Zabbix limited control of resource utilization in JS preprocessing | 5.9CNA v3.1 | 1.2% | 2023-07-13 | Fix |
| CVE-2023-26597 | Honeywell C300 controller DOS on sending error response | 7.5CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-25948 | Honeywell Experion Server server data type confusion info leak | 7.5CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-25770 | Honeywell C300 controller stack overflow on decoding messages from the server | 9.8CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-25178 | Controller design flaw unsigned firmware | 9.8CNA v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-25078 | Honeywell Experion Server DoS due to heap overflow | 9.8CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-24480 | Honeywell C300 controller stack overflow when decoding messages from the server | 9.8CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-24474 | Honeywell Experion server-controller communication heap-based buffer overflow | 7.5CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-23585 | Honeywell Experion Server server DoS due to heap overflow | 9.8CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-22435 | Honeywell Experion Server message parser stack overflow | 7.5CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-21400 | Google Android io_uring.c memory corruption | 6.7v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-21399 | Google Android weak cryptographic algorithm | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21262 | Google Android race condition | 3.1v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21260 | Google Android origin validation error | 5.5v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21257 | Google Android InstallPackageHelper.java privilege escalation | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21256 | Google Android SettingsHomepageActivity.java privilege escalation | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |