CVE-2023 records published in July 2023

This page lists the 2,030 CVE-2023 records published in July 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 15 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
29914.7% of these records
Listed in CISA KEV
150.7% of these records
Reported exploited
60.3% of these records
Detection signal
643.2% of these records
Exploit code
984.8% of these records
Actionable vendor fix
1,47472.6% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in July 2023 have had from about 39 months to about 40 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in July 2023, newest first: records 1 to 1,000 of 2,030
CVE Summary CVSS EPSS Published Signals
CVE-2023-39122BMC Control-M SQL injection9.8v3.10.7%2023-07-31
CVE-2023-38989Jeesite missing authorization4.3v3.10.4%2023-07-31
CVE-2023-38750In Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41, 9 before 9.0.0 Patch 34, and 10 before 10.0.2, internal JSP and XML files can be exposed.7.5v3.10.9%2023-07-31Fix
CVE-2023-38311Webmin cross-site scripting5.4v3.10.5%2023-07-31Fix
CVE-2023-38310Webmin cross-site scripting5.4v3.10.5%2023-07-31Fix
CVE-2023-38309Webmin cross-site scripting6.1v3.10.6%2023-07-31Fix
CVE-2023-38308Webmin cross-site scripting6.1v3.10.6%2023-07-31Fix
CVE-2023-38307Webmin cross-site scripting5.4v3.10.5%2023-07-31Fix
CVE-2023-38306Webmin cross-site scripting6.1v3.10.6%2023-07-31Fix
CVE-2023-38305Webmin cross-site scripting6.1v3.10.6%2023-07-31Fix
CVE-2023-38304Webmin cross-site scripting5.4v3.10.5%2023-07-31Fix
CVE-2023-38303Webmin cross-site scripting5.4v3.10.8%2023-07-31Fix
CVE-2023-37771PHPGurukul Art Gallery Management System SQL injection9.8v3.11.5%2023-07-31Exploit code
CVE-2023-37647SEMCMS SQL injection9.8v3.10.6%2023-07-31
CVE-2023-37580Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting (XSS)6.1v3.149.1%2023-07-31KEVNucleiFix
CVE-2023-36092D-Link DIR-859 authentication bypass9.8v3.11.7%2023-07-31
CVE-2023-36091D-Link DIR-895L authentication bypass9.8v3.11.5%2023-07-31
CVE-2023-36090D-Link DIR-885L authentication bypass9.8v3.11.5%2023-07-31
CVE-2023-36089D-Link Dir-645 Firmware authentication bypass9.8v3.11.5%2023-07-31
CVE-2023-35861Supermicro H12dst-b email notifications injection9.8v3.12.1%2023-07-31Fix
CVE-2023-35792Vound-software Intella Connect cross-site scripting6.1v3.10.3%2023-07-31
CVE-2023-35791Vound-software Intella Connect open redirect6.1v3.10.3%2023-07-31
CVE-2023-35019IBM Security Verify Governance command execution7.2CNA v3.11.3%2023-07-31Fix
CVE-2023-35016IBM Security Verify Governance path traversal6.5CNA v3.11.2%2023-07-31Fix
CVE-2023-34917cms open redirect6.1v3.10.4%2023-07-31
CVE-2023-34916cms open redirect6.1v3.10.4%2023-07-31
CVE-2023-34872Freedesktop Poppler denial of service5.5v3.10.9%2023-07-31Fix
CVE-2023-34842DedeCMS remote code execution9.8v3.11.1%2023-07-31
CVE-2023-34644Ruijie Re-eg1000m remote code execution9.8v3.11.8%2023-07-31Fix
CVE-2023-34635Wifi-soft Unibox Administration SQL injection9.8v3.13.5%2023-07-31Exploit code
CVE-2023-34360ASUS RT-AX88U stored XSS5.4NVD v3.10.5%2023-07-31
CVE-2023-34359ASUS RT-AX88U out-of-bounds read 27.5CNA v3.10.8%2023-07-31Fix
CVE-2023-34358ASUS RT-AX88U out-of-bounds read 17.5CNA v3.10.8%2023-07-31Fix
CVE-2023-33534Sztozed Zlt S10G A cross-site request forgery8.8v3.10.4%2023-07-31
CVE-2023-24971IBM B2B Advanced Communication denial of service7.5CNA v3.10.8%2023-07-31Fix
CVE-2023-22595IBM B2B Advanced Communication cross-site scripting5.4CNA v3.10.3%2023-07-31Fix
CVE-2023-4007Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4NVD v3.10.5%2023-07-31Fix
CVE-2023-4006Improper neutralization of formula elements in a CSV file in thorsten/phpMyFAQ9.8v3.10.8%2023-07-31Fix
CVE-2023-4005Insufficient session expiration in FOSSBilling/FOSSBilling9.8v3.10.5%2023-07-31Fix
CVE-2023-4004Linux kernel A use-after-free7.8NVD v3.10.9%2023-07-31Fix
CVE-2023-3997Unauthenticated log injection in Splunk Soar7.8v3.10.3%2023-07-31Fix
CVE-2023-3983Advantech iView authenticated SQL injection8.8NVD v3.116.7%2023-07-31
CVE-2023-3825PTC KEPServerEX resource exhaustion7.5v3.10.8%2023-07-31Fix
CVE-2023-3817OpenSSL excessive time spent checking DH q parameter value5.3NVD v3.13.0%2023-07-31Fix
CVE-2023-3508WooCommerce Pre-Orders WordPress plugin unauthorised actions via CSRF6.5NVD v3.10.3%2023-07-31Fix
CVE-2023-3507WooCommerce Pre-Orders WordPress plugin arbitrary Pre-Order Canceling via CSRF6.5NVD v3.10.3%2023-07-31Fix
CVE-2023-3462Vault's LDAP Auth method allows for User Enumeration5.3CNA v3.10.6%2023-07-31Fix
CVE-2023-3345LMS by Masteriyo WordPress plugin information exposure6.5NVD v3.12.0%2023-07-31NucleiFix
CVE-2023-3292wpsofts Grid Kit Premium reflected cross-site scripting6.1NVD v3.10.5%2023-07-31Fix
CVE-2023-3134Forminator WordPress plugin reflected XSS6.1NVD v3.14.1%2023-07-31Fix
CVE-2023-3130Short URL WordPress plugin Admin+ cross-site scripting4.8NVD v3.10.5%2023-07-31Fix
CVE-2023-0602Twittee Text Tweet WordPress plugin reflected XSS6.1NVD v3.10.9%2023-07-31Nuclei
CVE-2023-37219Tadiran Telecom Composit improper neutralization of formula elements in a CSV file7.8v3.10.2%2023-07-30
CVE-2023-37218Tadiran Telecom Aeonix improper limitation of a pathname to a restricted directory7.5v3.10.7%2023-07-30
CVE-2023-37217Tadiran Telecom Aeonix observable response discrepancy5.3v3.10.5%2023-07-30
CVE-2023-37216AnaSystem SensMini M4 an authenticated user can cause denial of service6.5NVD v3.10.6%2023-07-30
CVE-2023-37215JBL soundbar multibeam use of hard-coded credentials9.8v3.10.4%2023-07-30Fix
CVE-2023-37214Heights Telecom ERO1xS-Pro Dual-Band WiFi command injection9.8v3.10.7%2023-07-30Fix
CVE-2023-37213Synel SYnergy Fingerprint Terminals OS command injection9.8v3.11.3%2023-07-30Fix
CVE-2023-32227Synel SYnergy Fingerprint Terminals use of hard-coded credentials9.8v3.10.6%2023-07-30Fix
CVE-2023-32226SysAid files or directories accessible to external parties6.5NVD v3.10.5%2023-07-30Fix
CVE-2023-32225SysAid unrestricted upload of file with dangerous type7.2NVD v3.10.6%2023-07-30Fix
CVE-2023-36542Apache NiFi: Potential code injection with Properties Referencing Remote Resources8.8v3.11.9%2023-07-29Exploit codeFix
CVE-2023-2314Google Chrome DevTools improper input validation6.5v3.10.4%2023-07-29Fix
CVE-2023-2313Google Chrome Sandbox inappropriate implementation8.8v3.10.7%2023-07-29Fix
CVE-2023-2311Google Chrome File System API insufficient policy enforcement6.5v3.10.6%2023-07-29Fix
CVE-2023-39023University Compass code injection9.8v3.10.9%2023-07-28
CVE-2023-39022Code injection in Oscore9.8v3.11.2%2023-07-28Fix
CVE-2023-39021Wix Embedded Mysql code injection in wix-embedded-mysql9.8v3.11.0%2023-07-28
CVE-2023-39020Stanford Parser code injection in stanford-parser9.8v3.11.0%2023-07-28Fix
CVE-2023-39018Bramp Ffmpeg-cli-wrapper code injection9.8v3.10.9%2023-07-28
CVE-2023-39017Softwareag Quartz code injection9.8v3.11.2%2023-07-28Fix
CVE-2023-39016Bbossgroups Bboss code injection9.8v3.10.8%2023-07-28
CVE-2023-39015CODE4CRAFT Webmagic code injection in webmagic-core9.8v3.10.9%2023-07-28
CVE-2023-39013Code injection in Duke9.8v3.10.9%2023-07-28
CVE-2023-39010Code injection in BoofCV9.8v3.10.9%2023-07-28Fix
CVE-2023-38992JeecgBoot SQL injection in jeecg-boot9.8v3.173.6%2023-07-28NucleiFix
CVE-2023-38988Jeesite notification management vulnerability4.3v3.10.5%2023-07-28
CVE-2023-38685Discourse's restricted tag information visible to unauthenticated users4.3CNA v3.10.5%2023-07-28Fix
CVE-2023-38684Discourse vulnerable to ossible DDoS due to unbounded limits in various controller actions5.3CNA v3.10.6%2023-07-28Fix
CVE-2023-38609Apple macOS injection7.5v3.11.1%2023-07-28Exploit codeFix
CVE-2023-38604Apple tvOS out-of-bounds write9.8v3.11.3%2023-07-28Fix
CVE-2023-38601This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to modify protected parts of the file system.7.5v3.10.7%2023-07-28Fix
CVE-2023-38599Apple Safari logic flaw6.5v3.11.0%2023-07-28Fix
CVE-2023-38598Apple tvOS use-after-free9.8v3.11.3%2023-07-28Fix
CVE-2023-38592Apple tvOS logic flaw8.8v3.11.2%2023-07-28Fix
CVE-2023-38590Apple tvOS buffer overflow8.8v3.11.3%2023-07-28Fix
CVE-2023-38571Apple macOS Privacy preferences vulnerability7.5v3.11.6%2023-07-28Exploit codeFix
CVE-2023-38498Discourse vulnerable to DoS via defer queue4.3CNA v3.10.7%2023-07-28Fix
CVE-2023-38331Zoho Manageengine Supportcenter Plus cross-site scripting5.4v3.12.2%2023-07-28Fix
CVE-2023-37906Discourse vulnerable to DoS via post edit reason4.3CNA v3.10.5%2023-07-28Fix
CVE-2023-37904Discourse race condition in Accept Invite2.6CNA v3.10.3%2023-07-28Fix
CVE-2023-37754Code injection in PowerJob9.8v3.130.0%2023-07-28
CVE-2023-37467Discourse CSP nonce reuse vulnerability for anonymous users6.8CNA v3.10.4%2023-07-28Fix
CVE-2023-37285Apple macOS out-of-bounds read9.8v3.11.1%2023-07-28Fix
CVE-2023-36495Apple tvOS integer overflow9.8v3.11.3%2023-07-28Fix
CVE-2023-34425Apple macOS arbitrary code execution9.8v3.11.3%2023-07-28Fix
CVE-2023-32654Apple macOS logic flaw6.5v3.10.6%2023-07-28Fix
CVE-2023-32445Apple Safari cross-site scripting6.1v3.10.6%2023-07-28Fix
CVE-2023-32444Apple macOS logic flaw7.5v3.10.7%2023-07-28Fix
CVE-2023-32427This issue was addressed by using HTTPS when sending information over the network. This issue is fixed in Apple Music 4.2.0 for Android. An attacker in a privileged network position may be able to intercept network traffic.5.9v3.10.4%2023-07-28Fix
CVE-2023-31937PHPGurukul Rail Pass Management System SQL injection7.2v3.11.1%2023-07-28
CVE-2023-31936PHPGurukul Rail Pass Management System SQL injection7.2v3.11.3%2023-07-28
CVE-2023-31935PHPGurukul Rail Pass Management System cross-site scripting4.8v3.10.6%2023-07-28
CVE-2023-31934PHPGurukul Rail Pass Management System cross-site scripting4.8v3.10.6%2023-07-28
CVE-2023-31933PHPGurukul Rail Pass Management System SQL injection7.2v3.11.3%2023-07-28
CVE-2023-31932PHPGurukul Rail Pass Management System SQL injection7.2v3.11.3%2023-07-28
CVE-2023-28203Apple Music information disclosure5.5v3.10.2%2023-07-28Fix
CVE-2023-3990Mingsoft MCMS HTTP POST request search.do cross-site scripting6.1v3.11.4%2023-07-28NucleiFix
CVE-2023-3989SourceCodester Jewelry Store System add_customer.php cross-site scripting6.1v3.10.6%2023-07-28
CVE-2023-3988Cafe Billing System Order index.php SQL injection9.8v3.10.8%2023-07-28
CVE-2023-3987SourceCodester Simple Online Mens Salon Management System SQL injection9.8v3.10.8%2023-07-28
CVE-2023-3986SourceCodester Simple Online Mens Salon Management System cross-site scripting4.8v3.10.7%2023-07-28
CVE-2023-3985SourceCodester Online Jewelry Store login.php SQL injection9.8v3.10.9%2023-07-28
CVE-2023-3984phpscriptpoint RecipePoint recipe-result SQL injection9.8v3.10.5%2023-07-28
CVE-2023-3977Inisev plugins (various Versions) cross-site request forgery on handle_installation function4.3v3.10.6%2023-07-28Fix
CVE-2023-3774Vault Enterprise Namespace Creation may lead to denial of service4.9CNA v3.10.7%2023-07-28Fix
CVE-2023-3670CODESYS Development System installation directory permissions vulnerability7.3CNA v3.10.2%2023-07-28Fix
CVE-2023-3598Google Chrome ANGLE out-of-bounds read8.8v3.10.7%2023-07-28Fix
CVE-2023-3488Uninitialized variable in Gecko Bootloader can leak secure stack3.8CNA v3.10.3%2023-07-28Fix
CVE-2023-2685Unquoted service path in ABB AO-OPC7.2CNA v3.10.2%2023-07-28Fix
CVE-2023-0958Inisev plugins (various Versions) missing authorization on handle_installation function6.5v3.10.7%2023-07-28Fix
CVE-2023-38611Apple Safari arbitrary code execution8.8v3.11.3%2023-07-27Fix
CVE-2023-38608The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be able to access user-sensitive data.5.5v3.10.2%2023-07-27Fix
CVE-2023-38606Apple Multiple Products Kernel vulnerability5.5v3.12.9%2023-07-27KEVKCVFix
CVE-2023-38603Apple macOS denial of service7.5v3.11.2%2023-07-27Fix
CVE-2023-38602Apple macOS insecure permissions5.5v3.10.2%2023-07-27Fix
CVE-2023-38600Apple Safari arbitrary code execution8.8v3.11.4%2023-07-27Exploit codeFix
CVE-2023-38597Apple Safari arbitrary code execution8.8v3.11.2%2023-07-27Fix
CVE-2023-38595Apple Safari arbitrary code execution8.8v3.11.3%2023-07-27Fix
CVE-2023-38594Apple Safari arbitrary code execution8.8v3.11.2%2023-07-27Fix
CVE-2023-38593Apple macOS logic flaw5.5v3.10.2%2023-07-27Fix
CVE-2023-38580Apple macOS arbitrary code execution7.8v3.10.2%2023-07-27Fix
CVE-2023-38572Apple Safari Same Origin Policy vulnerability7.5v3.11.2%2023-07-27Fix
CVE-2023-38565Apple macOS privilege escalation7.8v3.10.2%2023-07-27Fix
CVE-2023-38564The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. An app may be able to modify protected parts of the file system.7.5v3.10.5%2023-07-27Fix
CVE-2023-38512WpStream WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-27Fix
CVE-2023-38510Tolgee Lacks Permission Check for API Key for some endpoints8.1CNA v3.10.6%2023-07-27Fix
CVE-2023-38505DietPi-Dashboard Insufficient TLS Handshake Pool7.5CNA v3.10.8%2023-07-27Fix
CVE-2023-38504Sails DoS vulnerability for apps with sockets enabled7.5CNA v3.10.9%2023-07-27Fix
CVE-2023-38495Crossplane vulnerable to possible image tampering from missing image validation for Packages8.4CNA v3.10.8%2023-07-27Fix
CVE-2023-38492Kirby vulnerable to denial of service from unlimited password lengths5.3CNA v3.11.2%2023-07-27Fix
CVE-2023-38491Kirby vulnerable to cross-site scripting (XSS) from MIME type auto-detection of uploaded files5.7CNA v3.10.6%2023-07-27Fix
CVE-2023-38490Kirby XML external entity (XXE) vulnerability in the XML data handler6.8CNA v3.11.7%2023-07-27Exploit codeFix
CVE-2023-38489Kirby vulnerable to insufficient session expiration after a password change7.3CNA v3.10.8%2023-07-27Fix
CVE-2023-38488Kirby vulnerable to field injection in the KirbyData text storage handler7.1CNA v3.10.9%2023-07-27Fix
CVE-2023-38425Apple macOS arbitrary code execution7.2v3.10.8%2023-07-27Fix
CVE-2023-38424Apple macOS arbitrary code execution7.8v3.10.2%2023-07-27Fix
CVE-2023-38421Apple macOS information disclosure5.5v3.10.3%2023-07-27Fix
CVE-2023-38410Apple macOS incorrect default permissions7.8v3.10.2%2023-07-27Fix
CVE-2023-38261Apple macOS arbitrary code execution7.8v3.10.3%2023-07-27Fix
CVE-2023-38259Apple macOS logic flaw5.5v3.10.2%2023-07-27Fix
CVE-2023-38258Apple macOS 3D model processing information disclosure5.5v3.10.3%2023-07-27Fix
CVE-2023-38136Apple watchOS arbitrary code execution7.8v3.10.3%2023-07-27Fix
CVE-2023-38133Apple Safari information disclosure6.5v3.11.0%2023-07-27Fix
CVE-2023-37993wpShopGermany IT-RECHT KANZLEI WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-07-27Fix
CVE-2023-37981Authors List WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-27Fix
CVE-2023-37980Custom Field For WP Job Manager WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-07-27Fix
CVE-2023-37979Ninja Forms WordPress plugin cross-site scripting (XSS)6.1NVD v3.19.7%2023-07-27NucleiExploit codeFix
CVE-2023-37977WPFunnels WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-27Fix
CVE-2023-37976Radio Forge Muses Player with Skins WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-27
CVE-2023-37975Variation Swatches for WooCommerce WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-27Fix
CVE-2023-37970MF Gig Calendar WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-07-27Fix
CVE-2023-37900Crossplane vulnerable to denial of service from large image3.4CNA v3.10.6%2023-07-27Fix
CVE-2023-37894Variation Images Gallery for WooCommerce WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-27Fix
CVE-2023-37450Apple Multiple Products WebKit code execution8.8v3.119.0%2023-07-27KEVFix
CVE-2023-36942PHPGurukul Online Fire Reporting System cross-site scripting6.1v3.10.6%2023-07-27
CVE-2023-36941PHPGurukul Online Fire Reporting System cross-site scripting6.1v3.10.6%2023-07-27
CVE-2023-36862Apple macOS code-signing restrictions vulnerability5.5v3.10.2%2023-07-27Fix
CVE-2023-36854Apple macOS arbitrary code execution7.8v3.10.3%2023-07-27Fix
CVE-2023-35993Apple tvOS use-after-free7.8v3.10.3%2023-07-27Fix
CVE-2023-35983Apple macOS incorrect authorization5.5v3.10.2%2023-07-27Fix
CVE-2023-33745Teleadapt Roomcast Ta-2400 incorrect default permissions9.8v3.11.0%2023-07-27
CVE-2023-33744Teleadapt Roomcast Ta-2400 hard-coded credentials9.8v3.11.0%2023-07-27
CVE-2023-33743Teleadapt Roomcast Ta-2400 improper access control9.8v3.11.0%2023-07-27
CVE-2023-33742Teleadapt Roomcast Ta-2400 cleartext storage of sensitive information7.5v3.10.5%2023-07-27
CVE-2023-32734Apple tvOS arbitrary code execution7.8v3.10.3%2023-07-27Fix
CVE-2023-32450Dell Power Manager (DPM) insecure temporary file6.1CNA v3.10.2%2023-07-27Fix
CVE-2023-32443Apple macOS out-of-bounds read8.1v3.10.7%2023-07-27Fix
CVE-2023-32442Apple macOS Shortcuts app settings vulnerability5.5v3.10.2%2023-07-27Fix
CVE-2023-32441Apple tvOS arbitrary code execution7.8v3.10.2%2023-07-27Fix
CVE-2023-32437Apple iOS and iPadOS sandbox escape8.6v3.10.2%2023-07-27Fix
CVE-2023-32433Apple tvOS use-after-free7.8v3.10.3%2023-07-27Fix
CVE-2023-32429Apple macOS Privacy preferences vulnerability5.5v3.10.2%2023-07-27Fix
CVE-2023-32418Apple macOS code injection7.8v3.10.5%2023-07-27Fix
CVE-2023-32416Apple macOS logic flaw5.5v3.10.2%2023-07-27Fix
CVE-2023-32393Apple tvOS arbitrary code execution8.8v3.11.0%2023-07-27Fix
CVE-2023-32381Apple tvOS use-after-free7.8v3.10.2%2023-07-27Fix
CVE-2023-32364Apple macOS logic flaw8.6v3.10.8%2023-07-27Exploit codeFix
CVE-2023-28014HCL BigFix Mobile can be affected by a cross-site scripting (XSS)6.6CNA v3.10.2%2023-07-27Fix
CVE-2023-28012HCL BigFix Mobile can be affected by a command injection5.4CNA v3.10.9%2023-07-27Fix
CVE-2023-23764Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling4.8CNA v3.10.6%2023-07-27Fix
CVE-2023-3982Cross-site scripting (XSS) Stored in Omeka/omeka-s4.8v3.10.5%2023-07-27Fix
CVE-2023-3981Server-side request forgery (SSRF) in Omeka/omeka-s4.9v3.10.7%2023-07-27Fix
CVE-2023-3980Cross-site scripting (XSS) Stored in Omeka/omeka-s4.8v3.10.5%2023-07-27Fix
CVE-2023-3975OS command injection in jgraph/drawio9.8v3.12.3%2023-07-27Fix
CVE-2023-3974OS command injection in jgraph/drawio9.8v3.11.2%2023-07-27Fix
CVE-2023-3973Cross-site scripting (XSS) Reflected in jgraph/drawio6.1NVD v3.10.4%2023-07-27Fix
CVE-2023-3970GZ Scripts Availability Booking Calendar PHP Image cross-site scripting5.4v3.10.6%2023-07-27
CVE-2023-3969GZ Scripts Availability Booking Calendar PHP HTTP POST request index.php cross-site scripting5.4v3.10.6%2023-07-27
CVE-2023-3957ACF Photo Gallery Field WordPress plugin authenticated (Subscriber+) arbitrary Usermeta update4.3CNA v3.10.5%2023-07-27Fix
CVE-2023-3956InstaWP Connect WordPress plugin unauthorized access9.8CNA v3.11.0%2023-07-27Fix
CVE-2023-39261JetBrains IntelliJ IDEA execution with unnecessary privileges5.2CNA v3.10.3%2023-07-26Fix
CVE-2023-39156CSRF vulnerability in Bazaar Plugin5.3v3.10.3%2023-07-26Fix
CVE-2023-39155Secret displayed without masking by Chef Identity Plugin5.3v3.10.5%2023-07-26Fix
CVE-2023-39154Incorrect permission checks in Qualys Web App Scanning Connector Plugin allow capturing credentials6.5v3.10.6%2023-07-26Fix
CVE-2023-39153CSRF vulnerability in GitLab Authentication Plugin5.4v3.10.7%2023-07-26Fix
CVE-2023-39152Incorrect control flow in Jenkins Gradle Plugin breaks credentials masking in the build log6.5v3.10.8%2023-07-26Fix
CVE-2023-39151Jenkins stored cross-site scripting5.4v3.11.0%2023-07-26Fix
CVE-2023-38673PaddlePaddle command injection in fs.py9.6CNA v3.12.3%2023-07-26Fix
CVE-2023-38672PaddlePaddle FPE in paddle.linalg.matrix_power4.7CNA v3.10.7%2023-07-26Fix
CVE-2023-38671PaddlePaddle heap buffer overflow in paddle.trace8.3CNA v3.10.8%2023-07-26Fix
CVE-2023-38670PaddlePaddle null pointer dereference in paddle.flip4.7CNA v3.10.7%2023-07-26Fix
CVE-2023-38669PaddlePaddle paddle.diagonal use-after-free8.3CNA v3.10.8%2023-07-26Fix
CVE-2023-38647Apache Helix: Deserialization vulnerability in Helix workflow and REST9.8v3.12.0%2023-07-26Fix
CVE-2023-38555Fujitsu Si-R 30B authentication bypass8.8v3.10.4%2023-07-26Fix
CVE-2023-38433Fujitsu IP-HE950E hard-coded credentials7.5v3.13.7%2023-07-26NucleiFix
CVE-2023-38285OWASP ModSecurity algorithmic complexity7.5v3.10.9%2023-07-26Fix
CVE-2023-37732Yasm null pointer dereference5.5v3.10.4%2023-07-26Fix
CVE-2023-37692Stored cross-site scripting October CMS5.4v3.10.5%2023-07-26Fix
CVE-2023-37624Netdisco open redirect6.1v3.10.7%2023-07-26
CVE-2023-37623Netdisco cross-site scripting4.8v3.10.6%2023-07-26
CVE-2023-37049emlog missing authorization6.5v3.10.7%2023-07-26
CVE-2023-33802sumatrapdfreader sumatrapdf buffer overflow5.5v3.10.3%2023-07-26Exploit code
CVE-2023-33308Fortinet FortiProxy stack-based buffer overflow9.8CNA v3.12.1%2023-07-26Fix
CVE-2023-33229SolarWinds Platform Incorrect Input Neutralization vulnerability3.5CNA v3.10.8%2023-07-26Fix
CVE-2023-33225SolarWinds Platform deserialization of untrusted data7.2CNA v3.13.2%2023-07-26Fix
CVE-2023-33224SolarWinds Platform incorrect behavior order7.2CNA v3.12.8%2023-07-26Fix
CVE-2023-32629Canonical Ubuntu Kernel local privilege escalation7.8CNA v3.19.1%2023-07-26Exploit codeKCVFix
CVE-2023-32468Dell ECS Streamer sensitive information in log files5.8CNA v3.10.5%2023-07-26Fix
CVE-2023-31466Fsmlabs Timekeeper cross-site scripting5.4v3.10.5%2023-07-26
CVE-2023-31465FSMLabs TimeKeeper getsamplebacklog endpoint vulnerability9.8v3.146.3%2023-07-26Nuclei
CVE-2023-30949Palantir Slate sandbox vulnerability4.3CNA v3.10.2%2023-07-26Fix
CVE-2023-30577Zmanda Amanda argument injection7.8v3.10.5%2023-07-26Fix
CVE-2023-30367Mremoteng cleartext storage of sensitive information7.5v3.10.5%2023-07-26Exploit code
CVE-2023-28130Quantum Appliances, Quantum Security Gateways privilege escalation7.2NVD v3.120.9%2023-07-26Fix
CVE-2023-28013HCL Verse is susceptible to a reflected cross-site scripting (XSS)6.5CNA v3.10.3%2023-07-26Fix
CVE-2023-26911ASUS Setupasusservices unquoted search path7.8v3.10.2%2023-07-26
CVE-2023-26859Brevo PrestaShop sendinblue v.4.0.15 and SQL injection9.8v3.10.8%2023-07-26Fix
CVE-2023-23844SolarWinds Platform incomplete list of disallowed inputs7.2CNA v3.13.0%2023-07-26Fix
CVE-2023-23843SolarWinds Platform incorrect comparison7.2CNA v3.12.6%2023-07-26Fix
CVE-2023-23842SolarWinds Network Configuration Manager directory traversal7.2CNA v3.13.2%2023-07-26Fix
CVE-2023-20891VMware Tanzu Application Service for VMs and Isolation segment information disclosure6.5CNA v3.10.6%2023-07-26Fix
CVE-2023-3947Video Conferencing with Zoom WordPress plugin sensitive information exposure5.3v3.10.4%2023-07-26Fix
CVE-2023-3946Trellix EPO reflected cross-site scripting5.4CNA v3.10.6%2023-07-26Fix
CVE-2023-3622Access Control Bypass vulnerability in the SolarWinds Platform4.3CNA v3.10.8%2023-07-26Fix
CVE-2023-3442Missing authorization in Jenkins plug-in for ServiceNow DevOps7.7CNA v3.10.7%2023-07-26Fix
CVE-2023-3414Cross-site request forgery (CSRF) in Jenkins plug-in for ServiceNow DevOps6.1CNA v3.10.4%2023-07-26Fix
CVE-2023-3242B&R Industrial Automation B&R Automation Runtime Portmapper used improper initialization8.6CNA v3.10.5%2023-07-26Fix
CVE-2023-2640Canonical Ubuntu Kernel incorrect authorization7.8CNA v3.115.2%2023-07-26Exploit codeKCVFix
CVE-2023-1401Insertion of sensitive information into sent data in GitLab5.0CNA v3.10.5%2023-07-26Fix
CVE-2023-39175JetBrains TeamCity cross-site scripting4.6CNA v3.11.0%2023-07-25Fix
CVE-2023-39174JetBrains TeamCity regular expression denial of service4.3CNA v3.11.7%2023-07-25Fix
CVE-2023-39173JetBrains TeamCity incorrect privilege assignment5.4CNA v3.10.4%2023-07-25Fix
CVE-2023-39130GNU gdb out-of-bounds write5.5v3.10.2%2023-07-25Fix
CVE-2023-39129GNU gdb use-after-free5.5v3.10.3%2023-07-25Fix
CVE-2023-39128GNU gdb out-of-bounds write5.5NVD v3.10.4%2023-07-25Fix
CVE-2023-38745pandoc arbitrary file write6.3v3.10.3%2023-07-25Fix
CVE-2023-38503Directus has Incorrect Permission Checking for GraphQL Subscriptions5.7CNA v3.10.5%2023-07-25Fix
CVE-2023-38502TDengine Database denial of service6.5CNA v3.10.7%2023-07-25Fix
CVE-2023-38501copyparty vulnerable to reflected cross-site scripting via k304 parameter6.3CNA v3.19.2%2023-07-25NucleiExploit codeFix
CVE-2023-38500TYPO3 html-sanitizer By-passing cross-site scripting Protection in HTML Sanitizer4.7CNA v3.10.5%2023-07-25Fix
CVE-2023-38499TYPO3/cms-core information disclosure due to Out-of-scope Site Resolution3.7CNA v3.11.1%2023-07-25Fix
CVE-2023-38496Apptainer's ineffective privileges drop when requesting container network6.1CNA v3.10.3%2023-07-25Fix
CVE-2023-38493LINE Armeria paths contain matrix variables bypass decorators7.5CNA v3.10.7%2023-07-25Fix
CVE-2023-38435Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin6.1v3.12.2%2023-07-25Fix
CVE-2023-37920Certifi's removal of e-Tugra root certificate7.5CNA v3.10.6%2023-07-25Fix
CVE-2023-37919Cal.com not expiring old sessions after enabling 2FA6.5CNA v3.10.3%2023-07-25Fix
CVE-2023-37907Cryptomator's MSI installer allows local privilege escalation7.0CNA v3.10.2%2023-07-25Fix
CVE-2023-37902Vyper's ecrecover can return undefined data if signature does not verify5.3CNA v3.10.6%2023-07-25Fix
CVE-2023-37895Apache Jackrabbit RMI access can lead to RCE9.8v3.13.2%2023-07-25Fix
CVE-2023-37677Pligg Cms unrestricted file upload9.8v3.11.3%2023-07-25
CVE-2023-37460codehaus-plexus plexus-archiver arbitrary file creation in AbstractUnArchiver8.1CNA v3.12.5%2023-07-25Fix
CVE-2023-37361Vanderbilt REDCap SQL injection2.7v3.10.6%2023-07-25
CVE-2023-37258DataEase has a SQL injection vulnerability that can bypass blacklists8.8CNA v3.11.1%2023-07-25Fix
CVE-2023-37257The DataEase panel and dataset have a stored XSS5.4CNA v3.10.4%2023-07-25Fix
CVE-2023-36826Sentry vulnerable to improper authorization on debug and artifact file downloads7.7CNA v3.10.6%2023-07-25Fix
CVE-2023-36806Contao cross-site scripting vulnerability via input unit widget6.5CNA v3.10.6%2023-07-25Fix
CVE-2023-36503MaxButtons WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-07-25Fix
CVE-2023-36502Balkon WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-25Fix
CVE-2023-36501teachPress WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-25Fix
CVE-2023-36385PostX Gutenberg Blocks for Post Grid WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-25Fix
CVE-2023-35982HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-07-25Fix
CVE-2023-35981HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-07-25Fix
CVE-2023-35980HPE Aruba Access Points running InstantOS and ArubaOS 10 buffer overflow9.8CNA v3.12.1%2023-07-25Fix
CVE-2023-35944Envoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes8.2CNA v3.10.7%2023-07-25Fix
CVE-2023-35943Envoy vulnerable to CORS filter segfault when origin header is removed6.3CNA v3.10.7%2023-07-25Fix
CVE-2023-35942Envoy's gRPC access log crash caused by the listener draining6.5CNA v3.10.9%2023-07-25Fix
CVE-2023-35941Envoy vulnerable to OAuth2 credentials exploit with permanent validity8.6CNA v3.10.8%2023-07-25Fix
CVE-2023-35929Tuleap cross-site scripting vulnerability in the card field of the agile dashboard apps5.4CNA v3.10.5%2023-07-25Fix
CVE-2023-35088Apache InLong: SQL injection in audit endpoint9.8v3.11.6%2023-07-25Fix
CVE-2023-35078Ivanti Endpoint Manager Mobile authentication bypass9.8NVD v3.1100.0%2023-07-25KEVNucleiEmerging ThreatsExploit codeKCVFix
CVE-2023-35067Plaintext storage of a password in Infodrom Sofwares E-Invoice Approval System7.5v3.10.5%2023-07-25Fix
CVE-2023-35066SQLi in Infodrom Sofwares E-Invoice Approval System9.8CNA v3.10.6%2023-07-25Fix
CVE-2023-35043Recent Posts Slider WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-25
CVE-2023-34798Weaver E-Office arbitrary file upload9.8v3.10.8%2023-07-25
CVE-2023-34434Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param7.5v3.11.7%2023-07-25Fix
CVE-2023-34369Login Configurator WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-07-25
CVE-2023-34235strapi leaking sensitive user information still possible by filtering on private with prefix fields8.6CNA v3.11.1%2023-07-25Fix
CVE-2023-34189Apache InLong: General user can delete and update process6.5v3.11.3%2023-07-25Fix
CVE-2023-34093Strapi allows actors to make all attributes on a content-type public without noticing it4.8CNA v3.10.7%2023-07-25Fix
CVE-2023-34017Five Star Restaurant Reservations WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-25Fix
CVE-2023-33925WooCommerce Product Categories Selection Widget WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-25
CVE-2023-33777PrestaShop Amazon path traversal5.3v3.10.7%2023-07-25Fix
CVE-2023-32639The Ministry of Justice Applicant Programme XML external entity injection5.5v3.10.2%2023-07-25Fix
CVE-2023-32637Generic Model Organism Database Project GBrowse unrestricted file upload9.8v3.11.1%2023-07-25Fix
CVE-2023-32232Vasion Printerlogic Client code execution9.9v3.11.0%2023-07-25Fix
CVE-2023-32231Vasion Printerlogic Client code execution9.9v3.11.1%2023-07-25Fix
CVE-2023-25074Gallagher Command Centre competency access levels not enforced in the server7.1CNA v3.10.3%2023-07-25Fix
CVE-2023-23833Steven Henty Drop Shadow Boxes cross-site scripting5.4v3.10.4%2023-07-25Fix
CVE-2023-23568Gallagher Command Centre improper authorization4.3CNA v3.10.3%2023-07-25Fix
CVE-2023-22363Gallagher Command Centre access Zone stack overflow6.5CNA v3.10.6%2023-07-25Fix
CVE-2023-21406Heap-based buffer overflow in Axis A1001 Network Door Controller's OSDP communication7.1CNA v3.10.3%2023-07-25Fix
CVE-2023-21405Axis Communications AXIS A1001 Network Door Controller improper syntax validation6.5CNA v3.10.3%2023-07-25Fix
CVE-2023-3945phpscriptpoint Lawyer search.php cross-site scripting6.1v3.10.4%2023-07-25
CVE-2023-3944phpscriptpoint Lawyer page.php cross-site scripting6.1v3.10.4%2023-07-25
CVE-2023-389742Gears SureMDM password reset page information disclosure4.8CNA v3.13.1%2023-07-25Exploit codeFix
CVE-2023-3890Campcodes Beauty Salon Management System edit-accepted-appointment.php cross-site scripting6.1v3.10.6%2023-07-25
CVE-2023-3888Campcodes Beauty Salon Management System admin-profile.php cross-site scripting6.1v3.10.6%2023-07-25
CVE-2023-3887Campcodes Beauty Salon Management System search-appointment.php cross-site scripting6.1v3.10.6%2023-07-25
CVE-2023-3886Campcodes Beauty Salon Management System invoice.php cross-site scripting6.1v3.10.6%2023-07-25
CVE-2023-3885Campcodes Beauty Salon Management System edit_category.php cross-site scripting6.1v3.10.5%2023-07-25
CVE-2023-3884Campcodes Beauty Salon Management System edit_product.php cross-site scripting6.1v3.10.6%2023-07-25
CVE-2023-3883Campcodes Beauty Salon Management System add-category.php cross-site scripting6.1v3.10.7%2023-07-25
CVE-2023-3882Campcodes Beauty Salon Management System edit-accepted-appointment.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3881Campcodes Beauty Salon Management System forgot-password.php SQL injection7.5v3.10.7%2023-07-25Exploit code
CVE-2023-3880Campcodes Beauty Salon Management System del_service.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3879Campcodes Beauty Salon Management System del_category.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3878Campcodes Beauty Salon Management System about-us.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3877Campcodes Beauty Salon Management System add-services.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3876Campcodes Beauty Salon Management System search-appointment.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3875Campcodes Beauty Salon Management System del_feedback.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3874Campcodes Beauty Salon Management System admin-profile.php SQL injection7.5v3.10.6%2023-07-25
CVE-2023-3873Campcodes Beauty Salon Management System index.php SQL injection7.5v3.10.8%2023-07-25
CVE-2023-3773Kernel: Xfrm: Out-of-bounds read of xfrma_mtimer_thresh nlattr4.4NVD v3.10.3%2023-07-25Fix
CVE-2023-3772Kernel: Xfrm: Null pointer dereference in xfrm_update_ae_params4.4NVD v3.10.5%2023-07-25Fix
CVE-2023-3637Red Hat OpenStack Platform openstack-neutron: Unrestricted creation of security groups4.3CNA v3.11.3%2023-07-25Fix
CVE-2023-3548Johnson Controls IQ Wifi 6 missing brute-force protection8.3CNA v3.10.6%2023-07-25Fix
CVE-2023-3486PaperCut NG unauthenticated file upload7.5NVD v3.179.2%2023-07-25Fix
CVE-2023-3046SQLi in Biltay Technlogys Scienta9.8CNA v3.10.6%2023-07-25Fix
CVE-2023-2850NodeBB unintentional leakage of private information via cross-origin websocket session hijacking4.7v3.10.3%2023-07-25Fix
CVE-2023-2626Google Nest Hub Max authentication bypass in OpenThread Boarder Router devices7.5CNA v3.10.1%2023-07-25Fix
CVE-2023-38200Keylime: Registrar is subject to a DoS against SSL connections7.5CNA v3.11.4%2023-07-24Fix
CVE-2023-38060OTRS host header injection by attachments in web service6.3CNA v3.10.7%2023-07-24Fix
CVE-2023-38058OTRS tickets can be moved without permissions4.1CNA v3.10.4%2023-07-24Fix
CVE-2023-38057XSS stored in Survey answers4.1CNA v3.10.4%2023-07-24Fix
CVE-2023-38056OTRS code execution via System Configuration7.2CNA v3.10.9%2023-07-24Fix
CVE-2023-37613Assemblysoftware Trialworks cross-site scripting6.1v3.10.4%2023-07-24
CVE-2023-34478Path traversal in Apache Shiro9.8v3.12.1%2023-07-24Exploit codeKCVFix
CVE-2023-33952Kernel: Vmwgfx: Double free within the handling of vmw_buffer_object objects6.7NVD v3.10.5%2023-07-24Fix
CVE-2023-33951Kernel: Vmwgfx: Race condition leading to information disclosure5.3NVD v3.10.3%2023-07-24Fix
CVE-2023-32258kernel session race condition remote code execution8.1NVD v3.12.5%2023-07-24Fix
CVE-2023-32257kernel session race condition remote code execution8.1NVD v3.12.4%2023-07-24Fix
CVE-2023-32252kernel session null pointer dereference denial of service7.5NVD v3.14.1%2023-07-24Fix
CVE-2023-32248kernel tree connection null pointer dereference denial of service7.5NVD v3.14.1%2023-07-24Fix
CVE-2023-32247kernel session setup memory exhaustion denial of service7.5NVD v3.13.9%2023-07-24Fix
CVE-2023-26078Atera privilege escalation7.8v3.10.6%2023-07-24
CVE-2023-26077Atera incorrect default permissions7.8v3.10.4%2023-07-24
CVE-2023-26045NodeBB vulnerable to path traversal and code execution via prototype10.0CNA v3.11.0%2023-07-24Fix
CVE-2023-22428Gallagher Command Centre improper authorization7.6CNA v3.10.4%2023-07-24Fix
CVE-2023-20593An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.5.5NVD v3.15.2%2023-07-24Exploit codeFix
CVE-2023-3872Campcodes Beauty Salon Management System edit-services.php SQL injection7.5v3.10.6%2023-07-24
CVE-2023-3871Campcodes Beauty Salon Management System edit_category.php SQL injection7.5v3.10.6%2023-07-24
CVE-2023-3863kernel use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c4.1NVD v3.10.2%2023-07-24Fix
CVE-2023-3862Travelmate Travelable Trek Management Solution Comment Box cross-site scripting4.7v3.10.4%2023-07-24
CVE-2023-3861phpscriptpoint Insurance search.php cross-site scripting6.1v3.10.4%2023-07-24
CVE-2023-3860phpscriptpoint Insurance page.php cross-site scripting6.1v3.10.4%2023-07-24
CVE-2023-3859phpscriptpoint Car Listing GET parameter search.php SQL injection9.8v3.10.5%2023-07-24
CVE-2023-3858phpscriptpoint Car Listing search.php cross-site scripting6.1v3.10.4%2023-07-24
CVE-2023-3857phpscriptpoint Ecommerce product.php cross-site scripting6.1v3.10.4%2023-07-24
CVE-2023-3856phpscriptpoint Ecommerce blog-single.php cross-site scripting6.1v3.10.4%2023-07-24
CVE-2023-3855phpscriptpoint JobSeeker search-result.php cross-site scripting6.1v3.10.4%2023-07-24
CVE-2023-3812Kernel: Tun: Bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags7.8NVD v3.10.3%2023-07-24Fix
CVE-2023-3750Libvirt: Improper locking in virstoragepoolobjlistsearch may lead to denial of service6.5CNA v3.10.8%2023-07-24Fix
CVE-2023-3748frr inifinite loop in babld message parsing may cause DoS7.5NVD v3.10.8%2023-07-24Fix
CVE-2023-3745ImageMagick: Heap-buffer-overflow in pushcharpixel in quantum-private.h5.5NVD v3.10.5%2023-07-24Fix
CVE-2023-3640Linux kernel x86 CPU entry area mapping vulnerability7.8NVD v3.10.8%2023-07-24Exploit codeFix
CVE-2023-3567Linux kernel use-after-free7.1NVD v3.10.4%2023-07-24Fix
CVE-2023-3417Mozilla Thunderbird file extension spoofing using the Text Direction Override Character7.5v3.10.7%2023-07-24Fix
CVE-2023-3384Quay: Stored cross-site scripting5.4CNA v3.10.5%2023-07-24Fix
CVE-2023-3344Auto Location for WP Job Manager via Google WordPress plugin Admin+ cross-site scripting4.8NVD v3.10.4%2023-07-24Fix
CVE-2023-3324Insecure deserialization in Zenon internal DLLs6.3CNA v3.10.3%2023-07-24Fix
CVE-2023-3323Code execution through overwriting project file on Zenon engineering studio system5.9CNA v3.10.3%2023-07-24Fix
CVE-2023-3322ABB Ability™ zenon code execution through overwriting service executable in utilities directory7.0CNA v3.10.3%2023-07-24Fix
CVE-2023-3321ABB Ability™ zenon code execution through Writable Mosquitto Configuration file7.0CNA v3.10.4%2023-07-24Fix
CVE-2023-3248All-in-one Floating Contact Form WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2023-07-24Fix
CVE-2023-3019Qemu: E1000e: Heap use-after-free in e1000e_write_packet_to_guest6.5NVD v3.10.3%2023-07-24Fix
CVE-2023-2860kernel out-of-bounds read when setting hmac data4.4NVD v3.10.3%2023-07-24Fix
CVE-2023-2761User Activity Log WordPress plugin Admin+ SQL injection7.2NVD v3.10.9%2023-07-24Fix
CVE-2023-2309wpForo Forum WordPress plugin reflected cross-site scripting6.1NVD v3.10.8%2023-07-24NucleiFix
CVE-2023-1386Qemu: 9pfs: Suid/sgid bits not dropped on file write7.8NVD v3.10.2%2023-07-24Fix
CVE-2023-28133Harmony Endpoint incorrect permission assignment7.8NVD v3.15.7%2023-07-23Fix
CVE-2023-3854phpscriptpoint BloodBank POST parameter search SQL injection9.8v3.10.5%2023-07-23
CVE-2023-3853phpscriptpoint BloodBank page.php cross-site scripting6.1v3.10.4%2023-07-23
CVE-2023-3852OpenRapid RapidCMS upload.php unrestricted upload7.2v3.125.0%2023-07-23
CVE-2023-3850SourceCodester Lost and Found Information System HTTP POST request SQL injection9.8v3.10.5%2023-07-23
CVE-2023-3849mooSocial mooDating URL find-a-match cross-site scripting6.1v3.16.0%2023-07-23NucleiExploit code
CVE-2023-3848mooSocial mooDating URL view cross-site scripting6.1v3.16.0%2023-07-23NucleiExploit code
CVE-2023-3847mooSocial mooDating URL users cross-site scripting6.1v3.16.0%2023-07-23NucleiExploit code
CVE-2023-3846mooSocial mooDating URL pages cross-site scripting6.1v3.16.0%2023-07-23NucleiExploit code
CVE-2023-3845mooSocial mooDating URL ajax_invite cross-site scripting6.1v3.16.0%2023-07-23NucleiExploit code
CVE-2023-3844mooSocial mooDating URL friends cross-site scripting6.1v3.16.0%2023-07-23NucleiExploit code
CVE-2023-3843mooSocial mooDating URL question cross-site scripting6.1v3.16.0%2023-07-23NucleiExploit code
CVE-2023-3842Pointware EasyInventory Easy2W.exe unquoted search path7.8v3.10.2%2023-07-23
CVE-2023-3841NxFilter user.jsp cross-site request forgery8.8v3.10.3%2023-07-23
CVE-2023-3840NxFilter cross-site scripting6.1v3.10.4%2023-07-23
CVE-2023-3839DedeBIZ sys_sql_query.php SQL injection7.2v3.10.7%2023-07-23
CVE-2023-3838DedeBIZ vote_edit.php cross-site scripting4.8v3.10.6%2023-07-23
CVE-2023-2430kernel improper locking5.5NVD v3.10.2%2023-07-23Fix
CVE-2023-38633GNOME Librsvg URL decoder path traversal5.5v3.12.4%2023-07-22Fix
CVE-2023-38195Datalust Seq external metadata storage vulnerability4.9v3.10.5%2023-07-22
CVE-2023-28530IBM Cognos Analytics cross-site scripting5.4CNA v3.10.7%2023-07-22Fix
CVE-2023-25929IBM Cognos Analytics cross-site scripting4.6CNA v3.10.5%2023-07-22Fix
CVE-2023-3837DedeBIZ sys_sql_query.php cross-site scripting4.8v3.10.7%2023-07-22
CVE-2023-3836Dahua Smart Park Management unrestricted upload9.8v3.173.5%2023-07-22NucleiExploit code
CVE-2023-3835Bug Finder MineStack Ticket Handler cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3834Bug Finder EX-RATE Ticket Handler cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3833Bug Finder Montage Ticket Handler cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3832Bug Finder Wedding Wonders Ticket Handler cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3831Bug Finder Finounce Ticket Handler cross-site scripting5.4v3.10.4%2023-07-22
CVE-2023-3830Bug Finder SASS BILLER store cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3829Bug Finder ICOGenie Support Ticket Handler cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3828Bug Finder Listplace Directory Listing Platform Photo coverPhotoUpdate cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3827Bug Finder Listplace Directory Listing Platform HTTP POST request create cross-site scripting6.1v3.10.4%2023-07-22
CVE-2023-3826IBOS OA Interview edit&op=status SQL injection9.8v3.10.7%2023-07-22
CVE-2023-3247PHP missing error check and insufficient random bytes in HTTP Digest authentication for SOAP2.6CNA v3.10.7%2023-07-22Fix
CVE-2023-38646metabase arbitrary command execution9.8v3.197.9%2023-07-21Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-38632Asynchronous Sockets For C++ out-of-bounds write9.8v3.11.9%2023-07-21Exploit code
CVE-2023-38187Microsoft Edge (Chromium-based) elevation of privilege6.5CNA v3.10.8%2023-07-21Fix
CVE-2023-38173Microsoft Edge for Android spoofing4.3CNA v3.10.6%2023-07-21Fix
CVE-2023-37918API token authentication bypass in HTTP endpoints in Dapr6.8CNA v3.11.4%2023-07-21Fix
CVE-2023-37917Privilege escalation in KubePi9.1CNA v3.10.7%2023-07-21Fix
CVE-2023-379161Panel-dev KubePi leak password hash of any user6.5CNA v3.10.8%2023-07-21Fix
CVE-2023-37915Malformed PID_PROPERTY_LIST parameter in DATA submessage remotely crashes OpenDDS7.5CNA v3.10.9%2023-07-21Fix
CVE-2023-37905Cross-site scripting (XSS) in Source Mode of Editor in CKEditor-WordCount-Plugin6.1CNA v3.10.6%2023-07-21Fix
CVE-2023-37903Sandbox escape in vm29.8CNA v3.14.2%2023-07-21Exploit codeFix
CVE-2023-37901indico cross-site-scripting via confirmation prompts5.4CNA v3.10.5%2023-07-21Fix
CVE-2023-37742Webboss.io Cms cross-site scripting6.1v3.10.5%2023-07-21Fix
CVE-2023-37292HGiga iSherlock command injection9.8CNA v3.11.3%2023-07-21Fix
CVE-2023-37291Galaxy Software Services Vitals ESP use of hard-coded cryptographic key9.8v3.10.5%2023-07-21
CVE-2023-36339Webboss.io Cms An improper access control7.5v3.10.6%2023-07-21Fix
CVE-2023-35392Microsoft Edge (Chromium-based) spoofing4.7CNA v3.10.8%2023-07-21Fix
CVE-2023-35087ASUS RT-AX56U V2 and RT-AC86U format string 29.8CNA v3.11.1%2023-07-21Fix
CVE-2023-35086ASUS RT-AX56U V2 and RT-AC86U format string -17.2CNA v3.138.5%2023-07-21Exploit codeFix
CVE-2023-35077Ivanti Endpoint Manager out-of-bounds write7.5v3.12.2%2023-07-21Fix
CVE-2023-32625SAKURA internet TS Webfonts for SAKURA cross-site request forgery4.3v3.10.3%2023-07-21Fix
CVE-2023-32624SAKURA internet TS Webfonts for SAKURA cross-site scripting6.1v3.10.6%2023-07-21Fix
CVE-2023-32478Dell PowerStore sensitive information in log files9.0CNA v3.10.5%2023-07-21Fix
CVE-2023-28730Panasonic Control FPWIN Pro memory corruption7.8v3.10.2%2023-07-21Fix
CVE-2023-28729Panasonic Control FPWIN Pro type confusion7.8v3.10.2%2023-07-21Fix
CVE-2023-28728Panasonic Control FPWIN Pro stack-based buffer overflow7.8v3.10.3%2023-07-21Fix
CVE-2023-26301HP LaserJet Pro missing authorization9.8v3.10.8%2023-07-21Fix
CVE-2023-25841Bug-000158075 stored XSS issue in ArcGIS Server6.1CNA v3.10.6%2023-07-21Fix
CVE-2023-25840Bug-000154070 stored XSS issue in the ArcGIS REST services directory3.4CNA v3.10.5%2023-07-21Fix
CVE-2023-25837Bug-000133088 ArcGIS Enterprise site builder is subject to stored XSS8.4CNA v3.11.0%2023-07-21Fix
CVE-2023-25836Bug-000135364 XSS in sites builder iframe source5.4CNA v3.10.4%2023-07-21Fix
CVE-2023-25835Bug-000153659 ArcGIS Enterprise Sites has a stored XSS8.4CNA v3.10.9%2023-07-21Fix
CVE-2023-3822Cross-site scripting (XSS) Reflected in pimcore/pimcore6.1v3.10.5%2023-07-21Fix
CVE-2023-3821Cross-site scripting (XSS) Stored in pimcore/pimcore5.4v3.10.6%2023-07-21Fix
CVE-2023-3820SQL injection in pimcore/pimcore7.2v3.11.2%2023-07-21Fix
CVE-2023-3819Exposure of sensitive information to an unauthorized actor in pimcore/pimcore6.5NVD v3.10.7%2023-07-21Fix
CVE-2023-3815y_project RuoYi file upload uploadFilesPath cross-site scripting6.1v3.10.6%2023-07-21
CVE-2023-3813Jupiter X Core WordPress plugin unauthenticated arbitrary file download7.5CNA v3.11.2%2023-07-21Fix
CVE-2023-3811Hospital Management System patientprofile.php SQL injection9.8v3.10.7%2023-07-21
CVE-2023-3810Hospital Management System patientappointment.php SQL injection9.8v3.10.7%2023-07-21
CVE-2023-3809Hospital Management System patient.php SQL injection9.8v3.10.7%2023-07-21
CVE-2023-3808Hospital Management System patientforgotpassword.php SQL injection8.8v3.10.7%2023-07-21
CVE-2023-3807Campcodes Beauty Salon Management System edit_product.php SQL injection8.8v3.10.7%2023-07-21
CVE-2023-3806SourceCodester House Rental and Property Listing System btn_functions.php unrestricted upload9.8v3.10.9%2023-07-21
CVE-2023-3805Four-Faith Video Surveillance Management System login handler improper authorization9.8v3.10.9%2023-07-21
CVE-2023-3804Chengdu Flash Flood Disaster Monitoring and Warning System FileHandler.ashx unrestricted upload9.8v3.10.9%2023-07-21
CVE-2023-3803Chengdu Flash Flood Disaster Monitoring and Warning System insufficient randomness3.7v3.10.7%2023-07-21
CVE-2023-3802Chengdu Flash Flood Disaster Monitoring and Warning System Ajaxfileupload.ashx unrestricted upload9.8v3.11.0%2023-07-21
CVE-2023-3801IBOS OA Mobile Notification edit actionEdit SQL injection9.8v3.10.7%2023-07-21
CVE-2023-3776Linux kernel A use-after-free7.8NVD v3.10.5%2023-07-21Fix
CVE-2023-3611Out-of-bounds write in Linux Kernel's net/sched: Sch_qfq component7.8NVD v3.10.3%2023-07-21Fix
CVE-2023-3610Linux kernel A use-after-free7.8NVD v3.10.2%2023-07-21Fix
CVE-2023-3609Linux kernel A use-after-free7.8NVD v3.10.5%2023-07-21Fix
CVE-2023-3603libssh processing sftp server read may cause null dereference6.5NVD v3.10.9%2023-07-21Fix
CVE-2023-3484Incorrect authorization in GitLab8.0CNA v3.10.6%2023-07-21Fix
CVE-2023-3102Insertion of sensitive information into sent data in GitLab5.3CNA v3.10.6%2023-07-21Fix
CVE-2023-38617Mobisystems Office Suite cross-site scripting6.1v3.10.5%2023-07-20
CVE-2023-38523Samsung Fgn1115-wp-wh missing authentication5.3v3.11.0%2023-07-20Fix
CVE-2023-38408OpenBSD OpenSSH unquoted search path9.8NVD v3.179.7%2023-07-20Exploit codeKCVFix
CVE-2023-38335Omnis studio incorrect default permissions5.3v3.11.2%2023-07-20
CVE-2023-38334Omnis studio incorrect default permissions6.5v3.10.9%2023-07-20
CVE-2023-38203Adobe ColdFusion deserialization of untrusted data9.8CNA v3.197.1%2023-07-20KEVNucleiKCVFix
CVE-2023-37728IceWarp cross-site scripting6.1v3.11.2%2023-07-20Nuclei
CVE-2023-37650Cockpit CMS cross-site request forgery8.8v3.10.5%2023-07-20Fix
CVE-2023-37649Cockpit CMS vulnerable to incorrect access control7.5v3.10.9%2023-07-20Fix
CVE-2023-37645EyouCMS information disclosure5.3v3.124.9%2023-07-20Nuclei
CVE-2023-37602Alkacon OpenCMS arbitrary file upload6.1v3.10.6%2023-07-20
CVE-2023-37601Mobisystems Office Suite path traversal7.5v3.11.2%2023-07-20
CVE-2023-37600Mobisystems Office Suite cross-site scripting6.1v3.10.5%2023-07-20
CVE-2023-37471OpenIdentityPlatform OpenAM User impersonation using SAMLv1.x SSO in Open Access Management9.1CNA v3.11.3%2023-07-20Fix
CVE-2023-37290InfoDoc Document On-line Submission and Approval System server-side request forgery (SSRF)7.5CNA v3.10.7%2023-07-20
CVE-2023-37289InfoDoc Document On-line Submission and Approval System arbitrary file upload9.8v3.10.9%2023-07-20
CVE-2023-37165Millhouse Project SQL injection9.8v3.11.9%2023-07-20
CVE-2023-37164Diafan.cms cross-site scripting6.1v3.10.6%2023-07-20Exploit code
CVE-2023-34968Samba: Spotlight server-side share path disclosure5.3NVD v3.11.3%2023-07-20Fix
CVE-2023-34967Samba: Type confusion in mdssvc RPC service for spotlight5.3NVD v3.161.2%2023-07-20Fix
CVE-2023-34966Samba: Infinite loop in mdssvc RPC service for spotlight7.5NVD v3.162.4%2023-07-20Fix
CVE-2023-34625Showmojo Mojobox authentication bypass by replay8.1v3.11.0%2023-07-20
CVE-2023-32483Dell Wyse Management Suite cleartext storage of sensitive information4.4CNA v3.10.1%2023-07-20Fix
CVE-2023-32482Dell Wyse Management Suite improper authorization4.9CNA v3.10.5%2023-07-20Fix
CVE-2023-32481Dell Wyse Management Suite resource exhaustion4.9CNA v3.10.6%2023-07-20Fix
CVE-2023-32476Dell Hybrid Client (DHC) hard-coded credentials6.4CNA v3.10.2%2023-07-20Fix
CVE-2023-32455Dell Wyse Proprietary OS (Modern ThinOS) cleartext storage of sensitive information5.5CNA v3.10.1%2023-07-20Fix
CVE-2023-32447Dell Wyse Proprietary OS (Modern ThinOS) cleartext storage of sensitive information5.5CNA v3.10.1%2023-07-20Fix
CVE-2023-32446Dell Wyse Proprietary OS (Modern ThinOS) cleartext storage of sensitive information5.5CNA v3.10.1%2023-07-20Fix
CVE-2023-32265Micro Focus Enterprise Server ESCWA component information disclosure7.1CNA v3.10.5%2023-07-20Fix
CVE-2023-31753Endonesia diskusi.php SQL injection9.8v3.11.3%2023-07-20Exploit code
CVE-2023-31462Steelseries Gg incorrect default permissions8.8v3.11.0%2023-07-20
CVE-2023-31461Steelseries Gg path traversal7.5v3.11.0%2023-07-20
CVE-2023-30200Advancedplugins Ultimateimagetool path traversal7.5v3.10.7%2023-07-20Fix
CVE-2023-3800EasyAdmin8 file upload module index.html unrestricted upload6.6v3.10.6%2023-07-20
CVE-2023-3799IBOS OA Delete Category del SQL injection9.8v3.10.7%2023-07-20
CVE-2023-3798Chengdu Flash Flood Disaster Monitoring and Warning System upload.aspx unrestricted upload9.8v3.10.9%2023-07-20
CVE-2023-3797A vulnerability, which was classified as critical, was found in Gen Technology Four Mountain Torrent Disaster Prevention and Control of Monitoring and Early Warning System up to 20230712. This affects an unknown part of the file /Duty/AjaxHandle/UploadFloodPlanFileUpdate.ashx. The manipulation of th8.8v3.10.9%2023-07-20
CVE-2023-3796Bug Finder Foody Friend Profile Picture profile unrestricted upload8.8v3.10.5%2023-07-20
CVE-2023-3795Bug Finder ChainCity Real Estate Investment Platform GET parameter property SQL injection9.8v3.10.5%2023-07-20
CVE-2023-3794Bug Finder ChainCity Real Estate Investment Platform new ticket cross-site scripting6.1v3.10.4%2023-07-20
CVE-2023-3793Weaver e-cology HTTP POST request filelFileDownloadForOutDoc.class SQL injection9.8v3.10.5%2023-07-20
CVE-2023-3792Beijing Netcon NS-ASG test_status.php direct request6.5v3.10.7%2023-07-20
CVE-2023-3791IBOS OA Personal Office Address Book export actionExport SQL injection9.8v3.10.6%2023-07-20
CVE-2023-3790Boom CMS assets-manager add cross-site scripting5.4v3.10.6%2023-07-20
CVE-2023-3789PaulPrinting CMS Search delivery cross-site scripting6.1v3.10.6%2023-07-20
CVE-2023-3788ActiveITzone Active Super Shop CMS Manage Details page cross-site scripting5.4v3.10.6%2023-07-20
CVE-2023-3787CodeCanyon Tiva Events Calender cross-site scripting5.4v3.10.6%2023-07-20
CVE-2023-3786Aures Komet Kiosk Mode access control6.8v3.10.3%2023-07-20
CVE-2023-3785PaulPrinting CMS cross-site scripting5.4v3.10.6%2023-07-20
CVE-2023-3784Dooblou WiFi File Explorer cross-site scripting5.4v3.10.6%2023-07-20
CVE-2023-3783Webile HTTP POST request cross-site scripting5.4v3.10.6%2023-07-20
CVE-2023-3779Essential Addons For Elementor WordPress plugin unauthenticated MailChimp API key disclosure5.3CNA v3.10.6%2023-07-20Fix
CVE-2023-3347Samba: Smb2 packet signing is not enforced when server signing = required is set5.9NVD v3.10.4%2023-07-20Fix
CVE-2023-3300Nomad Search API leaks information About CSI plugins5.3CNA v3.10.6%2023-07-20Fix
CVE-2023-3299Nomad Caller ACL Token's Secret ID is Exposed to Sentinel3.4CNA v3.10.6%2023-07-20Fix
CVE-2023-3072Nomad ACL Policies without Label are Applied to Unexpected Resources4.1CNA v3.10.4%2023-07-20Fix
CVE-2023-37899feathersjs socket handler allows abusing implicit toString7.5CNA v3.11.2%2023-07-19Fix
CVE-2023-37748miniupnp project Ngiflib infinite loop5.5v3.10.3%2023-07-19
CVE-2023-37733TDuckCloud tduck-platform An arbitrary file upload6.1v3.10.4%2023-07-19
CVE-2023-37362Weintek Weincloud improper authentication8.8v3.10.6%2023-07-19Fix
CVE-2023-37276Aiohttp vulnerable to HTTP request smuggling5.3CNA v3.11.3%2023-07-19Fix
CVE-2023-36853Keysight Geolocation Server exposed dangerous method or function7.8v3.10.2%2023-07-19Fix
CVE-2023-35900IBM Robotic Process Automation information disclosure4.3CNA v3.10.5%2023-07-19Fix
CVE-2023-35898IBM InfoSphere Information Server information disclosure4.3CNA v3.10.5%2023-07-19Fix
CVE-2023-35134Weintek Weincloud weak password recovery mechanism for forgotten password5.9NVD v3.10.5%2023-07-19Fix
CVE-2023-34429Weintek Weincloud Improper Handling of Structural Elements7.5v3.10.7%2023-07-19Fix
CVE-2023-34394Keysight N6845A relative path traversal7.8v3.10.2%2023-07-19Fix
CVE-2023-34034Access Control Bypass in Spring Security9.1CNA v3.14.0%2023-07-19Exploit codeFix
CVE-2023-33876Foxit Reader way use-after-free8.8v3.11.0%2023-07-19Fix
CVE-2023-33866Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free8.8v3.10.9%2023-07-19Fix
CVE-2023-33832IBM Storage Protect denial of service6.2CNA v3.10.1%2023-07-19Fix
CVE-2023-32664Foxit Reader Javascript checkThisBox method as implemented type confusion7.8v3.11.0%2023-07-19Fix
CVE-2023-32657Weintek Weincloud improper restriction of excessive authentication attempts7.5v3.10.5%2023-07-19Fix
CVE-2023-32635Financial Services Agency XBRL data create application XML external entity injection5.5v3.10.2%2023-07-19Fix
CVE-2023-32263Potential leak of credentials in Micro Focus Dimensions CM Jenkins plugin2.6CNA v3.10.3%2023-07-19Fix
CVE-2023-32262Exposure of system-scoped credentials in Jenkins Dimensions plugin4.3CNA v3.10.8%2023-07-19Fix
CVE-2023-32261Missing permission check in Jenkins Dimensions plugin allows enumerating credentials IDs4.2CNA v3.10.6%2023-07-19Fix
CVE-2023-30799MikroTik RouterOS Administrator privilege escalation7.2NVD v3.11.4%2023-07-19Reported exploitedExploit codeFix
CVE-2023-30433IBM Security Verify Access HTTP open redirect6.5CNA v3.10.4%2023-07-19Fix
CVE-2023-29260IBM Sterling Connect:Express for UNIX server-side request forgery6.5CNA v3.10.3%2023-07-19Fix
CVE-2023-29259IBM Sterling Connect:Express for UNIX information disclosure3.7CNA v3.10.5%2023-07-19Fix
CVE-2023-28754ShardingSphere-Agent: Deserialization vulnerability in ShardingSphere agent8.8v3.11.5%2023-07-19Fix
CVE-2023-28744Foxit PDF Reader JavaScript engine of Foxit Software's use-after-free8.8v3.10.9%2023-07-19Fix
CVE-2023-28513IBM MQ denial of service5.9CNA v3.11.0%2023-07-19Fix
CVE-2023-27877IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure5.3CNA v3.10.5%2023-07-19Fix
CVE-2023-27379Foxit PDF Reader JavaScript engine of Foxit Software’s use-after-free8.8v3.11.1%2023-07-19Fix
CVE-2023-26217TIBCO EBX Add-ons SQL injection8.8CNA v3.10.7%2023-07-19
CVE-2023-26026IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure5.3CNA v3.10.6%2023-07-19Fix
CVE-2023-26023IBM Planning Analytics Cartridge for Cloud Pak for Data information disclosure6.5CNA v3.10.7%2023-07-19Fix
CVE-2023-25839Bug-000157278 ArcGIS Insights has a security vulnerability desktop7.0CNA v3.10.2%2023-07-19Fix
CVE-2023-25838Esri ArcGIS Insights SQL injection7.5CNA v3.10.7%2023-07-19Fix
CVE-2023-22506Atlassian Bamboo Data Center code injection7.5CNA v3.02.1%2023-07-19Fix
CVE-2023-3782Squareup Okhttp-brotli DoS of the OkHttp client when5.9NVD v3.10.7%2023-07-19
CVE-2023-3765Absolute path traversal in MLflow/MLflow10.0v3.167.3%2023-07-19NucleiFix
CVE-2023-3763Intergard SGS SQL Query cleartext transmission7.5v3.10.6%2023-07-19
CVE-2023-3762Intergard SGS sensitive information in memory7.5v3.10.4%2023-07-19
CVE-2023-3761Intergard SGS Password Change cleartext transmission7.5v3.10.5%2023-07-19
CVE-2023-3760Intergard SGS Change Password denial of service6.5v3.11.0%2023-07-19
CVE-2023-3759Intergard SGS improper permissions9.8v3.10.9%2023-07-19
CVE-2023-3757GZ Scripts Car Rental Script cross-site scripting6.1v3.10.4%2023-07-19
CVE-2023-3756Creativeitem Atlas Business Directory Listing search cross-site scripting6.1v3.10.4%2023-07-19
CVE-2023-3755Creativeitem Atlas Business Directory Listing filter_listings cross-site scripting6.1v3.10.4%2023-07-19
CVE-2023-3754Creativeitem Ekushey Project Manager CRM xxxxxxxx[random-msg-hash] cross-site scripting6.1v3.10.4%2023-07-19
CVE-2023-3753Creativeitem Mastery LMS browse cross-site scripting6.1v3.10.4%2023-07-19
CVE-2023-3752Creativeitem Academy LMS courses cross-site scripting6.1v3.10.4%2023-07-19
CVE-2023-3751Super Store Finder POST parameter index.php SQL injection9.8v3.10.5%2023-07-19
CVE-2023-3722Avaya Aura Device Services remote code execution8.6CNA v3.13.9%2023-07-19NucleiExploit codeFix
CVE-2023-3674Keylime: Attestation failure when the quote's signature does not validate2.3CNA v3.10.2%2023-07-19Fix
CVE-2023-3638GeoVision GV-ADR2701 improper authentication9.8v3.10.7%2023-07-19
CVE-2023-3519Citrix NetScaler ADC and NetScaler Gateway code injection9.8CNA v3.199.7%2023-07-19KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-3467Citrix NetScaler ADC improper privilege management8.0CNA v3.11.3%2023-07-19Fix
CVE-2023-3466Citrix NetScaler ADC reflected cross-site scripting8.3CNA v3.12.6%2023-07-19Fix
CVE-2023-3463GE Digital CIMPLICITY heap-based buffer overflow9.8v3.10.4%2023-07-19Fix
CVE-2023-3446OpenSSL excessive time spent checking DH keys and parameters5.3NVD v3.16.5%2023-07-19Fix
CVE-2023-38434Xhttp close_connection double free7.5v3.11.1%2023-07-18Exploit code
CVE-2023-38432Linux kernel out-of-bounds read9.1v3.12.5%2023-07-18Fix
CVE-2023-38431Linux kernel out-of-bounds read9.1v3.11.2%2023-07-18Fix
CVE-2023-38430Linux kernel out-of-bounds read9.1v3.11.2%2023-07-18Fix
CVE-2023-38429Linux kernel off-by-one error9.8v3.11.2%2023-07-18Fix
CVE-2023-38428Linux kernel out-of-bounds read9.1v3.13.2%2023-07-18Fix
CVE-2023-38427Linux kernel out-of-bounds read9.8v3.11.2%2023-07-18Fix
CVE-2023-38426Linux kernel out-of-bounds read9.1v3.13.0%2023-07-18Fix
CVE-2023-38257Iagona ScrutisWeb insecure direct object reference7.5v3.10.7%2023-07-18Fix
CVE-2023-37973David Pokorny Replace Word cross-site request forgery8.8v3.10.2%2023-07-18
CVE-2023-37897Server-side template injection (SSTI) in grav7.2CNA v3.12.8%2023-07-18Fix
CVE-2023-37892Shortcode IMDB WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-18
CVE-2023-37889WPAdmin AWS CDN WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-18Fix
CVE-2023-37788goproxy denial of service7.5v3.11.0%2023-07-18Fix
CVE-2023-37758D-Link DIR-815 buffer overflow7.5v3.11.4%2023-07-18
CVE-2023-37481Fides Webserver vulnerable to SVG Bomb File Uploads2.7CNA v3.10.7%2023-07-18Fix
CVE-2023-37480Fides Webserver vulnerable to zip bomb File Uploads2.7CNA v3.10.7%2023-07-18Fix
CVE-2023-37477Command injection in firewall ip functionality in 1Panel7.2CNA v3.15.8%2023-07-18Fix
CVE-2023-37387Classified Listing WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-18Fix
CVE-2023-37386Media Library Helper by Codexin WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-18Fix
CVE-2023-37259matrix-org matrix-react-sdk cross-site scripting in Export Chat feature6.1CNA v3.10.5%2023-07-18Fix
CVE-2023-37143Microsoft ChakraCore resource exhaustion5.5v3.10.8%2023-07-18
CVE-2023-37142Microsoft ChakraCore resource exhaustion5.5v3.10.8%2023-07-18
CVE-2023-37141Microsoft ChakraCore resource exhaustion5.5v3.10.8%2023-07-18
CVE-2023-37140Microsoft ChakraCore resource exhaustion5.5v3.10.8%2023-07-18
CVE-2023-37139Microsoft ChakraCore out-of-bounds write5.5v3.10.9%2023-07-18
CVE-2023-36670Kratosdefense Ngc Indoor Unit OS command injection9.8v3.11.5%2023-07-18Fix
CVE-2023-36669Kratosdefense Ngc Indoor Unit missing authentication9.8v3.10.9%2023-07-18Fix
CVE-2023-36384Booking Calendar Contact Form WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-18Fix
CVE-2023-36383Event Manager for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-07-18Fix
CVE-2023-35763Iagona ScrutisWeb use of hard-coded cryptographic key5.5v3.10.2%2023-07-18Fix
CVE-2023-35189Iagona ScrutisWeb unrestricted upload of file with dangerous type9.8v3.11.0%2023-07-18Fix
CVE-2023-34330AMI MegaRAC SPx12 code injection via Dynamic Redfish extension interface8.2CNA v3.10.6%2023-07-18Fix
CVE-2023-34329AMI MegaRAC SPx12 authentication bypass via HTTP header spoofing9.1CNA v3.11.2%2023-07-18Emerging ThreatsFix
CVE-2023-34143Improper validation of Certificate vulnerability in Hitachi Device Manager5.6CNA v3.10.2%2023-07-18Fix
CVE-2023-34142Cleartext transmission vulnerability in Hitachi Device Manager9.0CNA v3.10.3%2023-07-18Fix
CVE-2023-34035Spring Security's authorization rules can be misconfigured when using multiple servlets7.3CNA v3.10.7%2023-07-18Fix
CVE-2023-33871Iagona ScrutisWeb absolute path traversal7.5v3.11.3%2023-07-18Fix
CVE-2023-33329Custom Post Type Generator WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-07-18
CVE-2023-33312Easy Captcha WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-18
CVE-2023-33265Hazelcast Executor services don't check client permissions properly8.8v3.10.7%2023-07-18Fix
CVE-2023-33231XSS in SolarWinds Database Performance Analyzer6.1CNA v3.10.5%2023-07-18Fix
CVE-2023-32965Jazz Popups WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-07-18
CVE-2023-31998Ubiquiti EdgeRouter A heap-based buffer overflow7.5v3.10.8%2023-07-18Fix
CVE-2023-31441Ncia Advisor Network null pointer dereference5.5v3.10.3%2023-07-18
CVE-2023-30906HPE Intelligent Provisioning (IP) for Gen9 privilege escalation7.5CNA v3.10.2%2023-07-18Fix
CVE-2023-30383TP-Link Archer C2 V1 buffer overflow7.5v3.11.4%2023-07-18Exploit code
CVE-2023-30153PrestaShop Payplug An SQL injection9.8v3.11.0%2023-07-18
CVE-2023-28023HCL BigFix WebUI Software Distribution cross-site request forgery4.9CNA v3.10.2%2023-07-18
CVE-2023-28021BigFix WebUI is vulnerable to use of a risky cryptographic algorithm5.9CNA v3.10.3%2023-07-18Fix
CVE-2023-28020URL redirection affects BigFix WebUI4.7CNA v3.10.4%2023-07-18Fix
CVE-2023-28019An SQL injection affects BigFix WebUI API5.5CNA v3.10.4%2023-07-18Fix
CVE-2023-25482WP Tiles WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-18
CVE-2023-25475Smart YouTube PRO WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-18
CVE-2023-25473Flickr Justified Gallery WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-18
CVE-2023-25036Social Media Icons Widget WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-18
CVE-2023-24390WeSecur Security WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-07-18
CVE-2023-23660MainWP Maintenance Extension WordPress plugin SQL injection8.8v3.10.8%2023-07-18Fix
CVE-2023-22508Atlassian Confluence Data Center remote code execution8.5CNA v3.02.2%2023-07-18Fix
CVE-2023-22505Atlassian Confluence Data Center remote code execution8.0CNA v3.02.1%2023-07-18Fix
CVE-2023-22062Oracle Hyperion Financial Reporting Repository component unauthorized data access8.5CNA v3.10.6%2023-07-18Fix
CVE-2023-22061Oracle Business Intelligence Enterprise Edition unauthorized data modification5.4CNA v3.10.4%2023-07-18Fix
CVE-2023-22060Oracle Hyperion Workspace UI and Visualization component unauthorized data access7.6CNA v3.10.6%2023-07-18Fix
CVE-2023-22058Oracle MySQL Server DDL component denial of service4.4CNA v3.11.7%2023-07-18Fix
CVE-2023-22057Oracle MySQL Server Replication component denial of service4.9CNA v3.11.4%2023-07-18Fix
CVE-2023-22056Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.8%2023-07-18Fix
CVE-2023-22055Oracle JD Edwards EnterpriseOne Tools Web Runtime SEC component unauthorized data modification6.1CNA v3.10.4%2023-07-18Fix
CVE-2023-22054Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.4%2023-07-18Fix
CVE-2023-22053Oracle MySQL Server client programs component denial of service5.9CNA v3.11.3%2023-07-18Fix
CVE-2023-22052Oracle Database Java VM vulnerability3.1CNA v3.10.4%2023-07-18Fix
CVE-2023-22051Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK information disclosure3.7CNA v3.10.5%2023-07-18Fix
CVE-2023-22050Oracle JD Edwards EnterpriseOne Orchestrator unauthorized data modification5.4CNA v3.10.4%2023-07-18Fix
CVE-2023-22049Oracle Java SE Libraries vulnerability3.7CNA v3.11.5%2023-07-18Fix
CVE-2023-22048Oracle MySQL Server Pluggable Auth component information disclosure3.1CNA v3.11.0%2023-07-18Fix
CVE-2023-22047Oracle PeopleSoft Enterprise PeopleTools portal component unauthorized data access7.5CNA v3.177.0%2023-07-18NucleiEmerging ThreatsExploit codeFix
CVE-2023-22046Oracle MySQL Server Optimizer component denial of service4.9CNA v3.11.3%2023-07-18Fix
CVE-2023-22045Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK information disclosure3.7CNA v3.11.3%2023-07-18Fix
CVE-2023-22044Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK information disclosure3.7CNA v3.11.4%2023-07-18Fix
CVE-2023-22043Oracle Java SE JavaFX vulnerability5.9CNA v3.11.1%2023-07-18Fix
CVE-2023-22042Oracle E-Business Suite Applications Framework Diagnostics component unauthorized data modification6.1CNA v3.10.4%2023-07-18Fix
CVE-2023-22041Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unauthorized data access5.1CNA v3.10.5%2023-07-18Fix
CVE-2023-22040Oracle WebLogic Server Core component unauthorized data modification6.5CNA v3.10.7%2023-07-18Fix
CVE-2023-22039Oracle Supply Chain Agile PLM WebClient component unauthorized data modification5.4CNA v3.10.4%2023-07-18Fix
CVE-2023-22038Oracle MySQL Server Security Privileges component unauthorized data modification2.7CNA v3.10.9%2023-07-18Fix
CVE-2023-22037Oracle Web Applications Desktop Integrator unauthorized data modification6.5CNA v3.10.3%2023-07-18Fix
CVE-2023-22036Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK denial of service3.7CNA v3.11.3%2023-07-18Fix
CVE-2023-22035Oracle E-Business Suite Scripting iSurvey module component unauthorized data modification6.1CNA v3.10.4%2023-07-18Fix
CVE-2023-22034Oracle Database Unified Audit vulnerability4.9CNA v3.10.5%2023-07-18Fix
CVE-2023-22033Oracle MySQL Server InnoDB component denial of service4.4CNA v3.11.2%2023-07-18Fix
CVE-2023-22031Oracle WebLogic Server Core component denial of service4.4CNA v3.10.6%2023-07-18Fix
CVE-2023-22027Oracle Business Intelligence Enterprise Edition Analytics Server component denial of service4.3CNA v3.10.6%2023-07-18Fix
CVE-2023-22023Oracle Solaris Device driver interface component takeover7.8CNA v3.10.2%2023-07-18Fix
CVE-2023-22022Oracle Health Sciences Sciences Data Management Workbench unauthorized data access6.5CNA v3.10.6%2023-07-18Fix
CVE-2023-22021Oracle Business Intelligence Enterprise Edition Analytics Server component denial of service4.3CNA v3.10.6%2023-07-18Fix
CVE-2023-22020Oracle Business Intelligence Enterprise Edition unauthorized data modification5.4CNA v3.10.4%2023-07-18Fix
CVE-2023-22018Oracle VM VirtualBox Core component takeover8.1CNA v3.11.0%2023-07-18Fix
CVE-2023-22017Oracle VM VirtualBox Core component denial of service5.5CNA v3.10.3%2023-07-18Fix
CVE-2023-22016Oracle VM VirtualBox Core component denial of service4.2CNA v3.10.3%2023-07-18Fix
CVE-2023-22014Oracle PeopleSoft Enterprise PeopleTools portal component takeover8.4CNA v3.10.2%2023-07-18Fix
CVE-2023-22013Oracle Business Intelligence Enterprise Edition unauthorized data modification4.3CNA v3.10.4%2023-07-18Fix
CVE-2023-22012Oracle Business Intelligence Enterprise Edition unauthorized data modification4.3CNA v3.10.4%2023-07-18Fix
CVE-2023-22011Oracle Business Intelligence Enterprise Edition unauthorized data modification5.4CNA v3.10.5%2023-07-18Fix
CVE-2023-22010Oracle Essbase Security and Provisioning information disclosure2.2CNA v3.10.4%2023-07-18Fix
CVE-2023-22009Oracle E-Business Suite Self-Service Human Resources information disclosure4.3CNA v3.10.4%2023-07-18Fix
CVE-2023-22008Oracle MySQL Server InnoDB component denial of service4.9CNA v3.11.3%2023-07-18Fix
CVE-2023-22007Oracle MySQL Server Replication component denial of service4.9CNA v3.11.1%2023-07-18Fix
CVE-2023-22006Oracle Java SE Networking vulnerability3.1CNA v3.10.9%2023-07-18Fix
CVE-2023-22005Oracle MySQL Server Replication component denial of service4.4CNA v3.11.3%2023-07-18Fix
CVE-2023-22004Oracle E-Business Suite Applications Technology unauthorized data modification4.3CNA v3.10.5%2023-07-18Fix
CVE-2023-21994Oracle Mobile Security Suite Android Mobile Authenticator App component unauthorized data access6.5CNA v3.10.4%2023-07-18Fix
CVE-2023-21983Oracle Application Express Administration None component unauthorized data modification5.6CNA v3.10.4%2023-07-18Fix
CVE-2023-21975Oracle Application Express Customers Plugin User Account component takeover9.0CNA v3.10.6%2023-07-18Fix
CVE-2023-21974Oracle Application Express Team Calendar Plugin User Account component takeover9.0CNA v3.10.6%2023-07-18Fix
CVE-2023-21961Oracle Hyperion Essbase Administration Services unauthorized data access6.0CNA v3.10.2%2023-07-18Fix
CVE-2023-21950Oracle MySQL Server Replication component denial of service4.9CNA v3.11.0%2023-07-18Fix
CVE-2023-21949Oracle Database Advanced Networking Option vulnerability3.7CNA v3.10.4%2023-07-18Fix
CVE-2023-3743SQL injection vulnerability in LeoTheme's Ap Page Builder7.5v3.10.8%2023-07-18Fix
CVE-2023-3714ProfileGrid WordPress plugin unauthorized access8.8v3.10.9%2023-07-18Fix
CVE-2023-3713ProfileGrid WordPress plugin authenticated (Subscriber+) arbitrary option update8.8CNA v3.10.8%2023-07-18Fix
CVE-2023-3709Royal Elementor Addons WordPress plugin unauthenticated MailChimp API key disclosure5.3CNA v3.10.6%2023-07-18Fix
CVE-2023-3708Amela WordPress theme cross-site scripting6.1CNA v3.10.6%2023-07-18Fix
CVE-2023-3527Avaya Call Management System CSV injection6.8CNA v3.10.6%2023-07-18Fix
CVE-2023-3459Export and Import Users and Customers WordPress plugin unauthorized access7.2CNA v3.10.9%2023-07-18Fix
CVE-2023-3403ProfileGrid WordPress plugin missing authorization to user import4.3v3.10.6%2023-07-18Fix
CVE-2023-2913Rockwell Automation ThinManager ThinServer path traversal7.5CNA v3.12.4%2023-07-18Fix
CVE-2023-2433YARPP Yet Another Related Posts WordPress plugin stored cross-site scripting5.4v3.10.5%2023-07-18Fix
CVE-2023-2263Rockwell Automation Kinetix 5700 DC Bus Power Supply Series A denial of service7.5CNA v3.11.2%2023-07-18Fix
CVE-2023-0160kernel possibility of deadlock in libbpf function sock_hash_delete_elem5.5NVD v3.10.3%2023-07-18Fix
CVE-2023-38409Linux kernel race condition5.5v3.10.2%2023-07-17Fix
CVE-2023-38405Crestron Cp3-gv 6506034 resource exhaustion7.5v3.10.6%2023-07-17Fix
CVE-2023-38404Veritas Infoscale Operations Manager unrestricted file upload8.8v3.10.9%2023-07-17Fix
CVE-2023-38403ES iperf3 integer overflow7.5v3.12.0%2023-07-17Fix
CVE-2023-37985Five Star Restaurant Menu WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-37974WP Social AutoConnect WordPress plugin Justin Klein cross-site request forgery8.8v3.10.2%2023-07-17Fix
CVE-2023-37968Falang multilanguage WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-17Fix
CVE-2023-37791D-Link DIR-619L out-of-bounds write9.8v3.112.7%2023-07-17
CVE-2023-37781EMQX emqx_sn plugin path traversal6.5v3.10.9%2023-07-17
CVE-2023-37770Grame Faust out-of-bounds write5.5v3.10.3%2023-07-17
CVE-2023-37769pixman divide by zero6.5v3.10.6%2023-07-17
CVE-2023-37479Improper sanitization of MXCSR and RFLAGS in OpenEnclave5.3CNA v3.10.7%2023-07-17Fix
CVE-2023-37476OpenRefine vulnerable to zip slip in project import5.5CNA v3.10.6%2023-07-17Fix
CVE-2023-37475Attacker-controlled parameter can cause denial of service in hamba avro7.5CNA v3.11.0%2023-07-17Fix
CVE-2023-37461Path traversal in metersphere5.6CNA v3.10.6%2023-07-17Fix
CVE-2023-37266Weak json web token (JWT) secrets in CasaOS9.8CNA v3.16.8%2023-07-17NucleiFix
CVE-2023-37265Incorrect identification of source IP addresses in CasaOS9.8CNA v3.17.4%2023-07-17NucleiFix
CVE-2023-36656Jaegertracing Jaeger UI cross-site scripting5.4v3.11.1%2023-07-17
CVE-2023-36514WooCommerce Ship to Multiple Addresses WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-36513AutomateWoo WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-17Fix
CVE-2023-36511WooCommerce Order Barcodes WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-35901IBM Robotic Process Automation improper authentication2.7CNA v3.10.5%2023-07-17Fix
CVE-2023-35880WooCommerce Brands WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-35818espressif Esp-eye unauthorized access6.8v3.10.2%2023-07-17Fix
CVE-2023-35096myCred WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-17Fix
CVE-2023-35089Recipe Maker For Your Food Blog from Zip Recipes WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-35038WP PDF Generator WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-17Fix
CVE-2023-35012IBM Db2 code execution6.7CNA v3.10.2%2023-07-17Fix
CVE-2023-34669TOTOLINK Cp300+ observable discrepancy7.5v3.10.8%2023-07-17
CVE-2023-34141Zyxel ATP series firmware access point command injection8.0CNA v3.10.7%2023-07-17Fix
CVE-2023-34140Zyxel ATP series firmware buffer overflow6.5CNA v3.10.3%2023-07-17Fix
CVE-2023-34139Zyxel USG FLEX series firmware command injection8.8CNA v3.10.8%2023-07-17Fix
CVE-2023-34138Zyxel ATP series firmware hotspot management feature of the Zyxel command injection8.0CNA v3.10.7%2023-07-17Fix
CVE-2023-34036Forwarded header exploit with Spring HATEOAS on WebFlux5.3CNA v3.10.5%2023-07-17Fix
CVE-2023-34005Front End Users WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-33857IBM InfoSphere Information Server information disclosure5.3CNA v3.10.7%2023-07-17Fix
CVE-2023-33012Zyxel ATP series firmware configuration parser of the Zyxel command injection8.8CNA v3.19.9%2023-07-17MetasploitExploit codeFix
CVE-2023-33011Zyxel ATP series firmware format string8.8CNA v3.10.3%2023-07-17Fix
CVE-2023-31853Cudy LT400 cross-site scripting6.1v3.10.5%2023-07-17Exploit code
CVE-2023-31852Cudy LT400 cross-site scripting6.1v3.10.7%2023-07-17Exploit code
CVE-2023-31851Cudy LT400 cross-site scripting6.1v3.10.5%2023-07-17Exploit code
CVE-2023-31216Ultimate Member WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-28864Progress Chef Infra Server insecure storage of sensitive information5.5v3.10.3%2023-07-17Fix
CVE-2023-28767Zyxel ATP series firmware OS command injection8.8CNA v3.10.4%2023-07-17Fix
CVE-2023-27606WP Reroute Email WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-17Fix
CVE-2023-27424Inactive User Deleter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-07-17Fix
CVE-2023-26512Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data9.8v3.11.4%2023-07-17Fix
CVE-2023-23719Premmerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-23646Album Gallery WordPress Gallery plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17Fix
CVE-2023-22672vSlider Multi Image Slider for WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-07-17
CVE-2023-3724wolfSSL TLS 1.3 client issue handling malicious server when not including a KSE and PSK extension9.1CNA v3.10.7%2023-07-17Fix
CVE-2023-3700Authorization bypass through user-controlled key in alextselegidis/easyappointments4.3v3.10.4%2023-07-17Fix
CVE-2023-3696Prototype pollution in Automattic/Mongoose9.8v3.11.2%2023-07-17Fix
CVE-2023-3695Campcodes Beauty Salon Management System add-product.php SQL injection9.8v3.10.6%2023-07-17
CVE-2023-3694SourceCodester/Projectworlds House Rental and Property Listing index.php SQL injection9.8v3.10.8%2023-07-17
CVE-2023-3615Mattermost iOS app lack of server certificate validation in websockets connection8.1CNA v3.10.3%2023-07-17
CVE-2023-3614Mattermost denial of service via specially crafted gif image4.3CNA v3.10.4%2023-07-17Fix
CVE-2023-3613Mattermost Plugins guest accounts invited and added to channels by Welcomebot plugin3.5CNA v3.10.3%2023-07-17Fix
CVE-2023-3593Mattermost server crash via a specially crafted markdown input4.3CNA v3.10.6%2023-07-17Fix
CVE-2023-3591Mattermost lack of previous password reset tokens on new token creation4.8CNA v3.10.3%2023-07-17Fix
CVE-2023-3590Mattermost deleted attachments in Boards remain accessible3.1CNA v3.10.4%2023-07-17Fix
CVE-2023-3587Mattermost inconsistent state in UI after boards permission change by system admin2.7CNA v3.10.4%2023-07-17Fix
CVE-2023-3586Mattermost disabling publicly-shared boards does not disable existing publicly available board links4.2CNA v3.10.3%2023-07-17Fix
CVE-2023-3585Mattermost channel DoS by sharing a boards link4.3CNA v3.10.5%2023-07-17Fix
CVE-2023-3584Mattermost member can create team with team override scheme3.1CNA v3.10.4%2023-07-17Fix
CVE-2023-3582Mattermost lack of channel membership check when linking a board to a channel4.3CNA v3.10.4%2023-07-17Fix
CVE-2023-3581Mattermost WebSockets accept connections from HTTPS origin6.2CNA v3.10.3%2023-07-17Fix
CVE-2023-3577Mattermost limited blind SSRF to localhost/intranet in interactive dialog implementation3.5CNA v3.10.4%2023-07-17Fix
CVE-2023-3376SQLi in Digital Strategys Zekiweb9.8CNA v3.10.6%2023-07-17Fix
CVE-2023-3245Floating Chat Widget WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2023-07-17Fix
CVE-2023-3186Supsystic Popup WordPress plugin prototype pollution9.8NVD v3.11.5%2023-07-17Fix
CVE-2023-3182Membership Plugin - Restrict Content WordPress plugin reflected XSS6.1NVD v3.10.5%2023-07-17Fix
CVE-2023-3179POST SMTP Mailer WordPress plugin account takeover via CSRF8.8NVD v3.10.4%2023-07-17Fix
CVE-2023-3041Autochat WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-07-17
CVE-2023-2963SQLi in Oliva Expertise9.8CNA v3.10.6%2023-07-17Fix
CVE-2023-2960XSS in Oliva Expertise6.1CNA v3.10.4%2023-07-17Fix
CVE-2023-2959Authentication bypass by primary weakness in Oliva Expertise7.5v3.10.6%2023-07-17Fix
CVE-2023-2958Origin Software ATS Pro insecure direct object reference9.8v3.10.8%2023-07-17Fix
CVE-2023-2912Secomea SiteManager Embedded use-after-free5.9CNA v3.10.5%2023-07-17Fix
CVE-2023-2760TAPHOME SQL injection in Core Platform7.6v3.10.4%2023-07-17Fix
CVE-2023-2759TAPHOME improper authentication in Core Platform8.8CNA v3.10.6%2023-07-17Fix
CVE-2023-2701Gravity Forms WordPress plugin reflected XSS6.1NVD v3.10.5%2023-07-17Fix
CVE-2023-2636AN_GradeBook WordPress plugin Subscriber+ SQLi8.8NVD v3.16.9%2023-07-17Exploit code
CVE-2023-2579InventoryPress WordPress plugin Author+ stored XSS5.4NVD v3.11.1%2023-07-17Exploit code
CVE-2023-2330Caldera Forms Google Sheets Connector WordPress plugin access code update via CSRF8.8NVD v3.10.4%2023-07-17Fix
CVE-2023-2329WooCommerce Google Sheet Connector WordPress plugin access code update via CSRF8.8NVD v3.10.4%2023-07-17Fix
CVE-2023-2143Enable SVG, WebP and ICO Upload WordPress plugin Author+ stored XSS5.4NVD v3.10.3%2023-07-17Fix
CVE-2023-1893Login Configurator WordPress plugin reflected cross-site scripting6.1NVD v3.10.7%2023-07-17Nuclei
CVE-2023-0439NEX-Forms WordPress plugin authenticated stored XSS5.4NVD v3.10.4%2023-07-17Fix
CVE-2023-38379Rigol MSO5000 missing authentication7.5v3.10.8%2023-07-16
CVE-2023-38378Rigol MSO5000 OS command injection9.8v3.11.5%2023-07-16
CVE-2023-30989IBM i privilege escalation8.4CNA v3.10.2%2023-07-16Fix
CVE-2023-30988IBM i privilege escalation8.4CNA v3.10.2%2023-07-16Fix
CVE-2023-3693SourceCodester Life Insurance Management System login.php SQL injection9.8v3.10.8%2023-07-16
CVE-2023-3692Unrestricted upload of file with dangerous type in Admidio/Admidio7.2v3.11.0%2023-07-16Fix
CVE-2023-3691layui HTML attribute cross-site scripting6.1v3.10.5%2023-07-16Fix
CVE-2023-3690Bylancer QuickOrder GET parameter blog SQL injection9.8v3.10.5%2023-07-16
CVE-2023-3689Bylancer QuickQR GET parameter blog SQL injection9.8v3.10.5%2023-07-16
CVE-2023-3688Bylancer QuickJob GET parameter SQL injection9.8v3.10.5%2023-07-16
CVE-2023-3687Bylancer QuickVCard GET parameter blog SQL injection9.8v3.10.5%2023-07-16
CVE-2023-3686Bylancer QuickAI OpenAI GET parameter blog SQL injection9.8v3.10.5%2023-07-16
CVE-2023-3685Nesote Inout Search Engine AI Edition index.php cross-site scripting5.4v3.10.4%2023-07-16
CVE-2023-3684LivelyWorks Articart Base64 Encoding de_DE redirect6.1v3.10.3%2023-07-16KCV
CVE-2023-3683LivelyWorks Articart search cross-site scripting5.4v3.10.4%2023-07-16
CVE-2023-38350PNP4NAGIOS cross-site scripting5.4v3.10.5%2023-07-15
CVE-2023-38349PNP4NAGIOS cross-site request forgery8.8v3.10.3%2023-07-15
CVE-2023-35802Extreme Networks AP1130 buffer overflow9.8v3.11.1%2023-07-15Fix
CVE-2023-30791Plane insecure file upload4.6NVD v3.10.5%2023-07-15
CVE-2023-3682Nesote Inout Blockchain EasyPayments POST parameter getcoinaddress SQL injection9.8v3.10.5%2023-07-15
CVE-2023-3681Campcodes Retro Cellphone Online Store modal_add_product.php cross-site scripting6.1v3.10.6%2023-07-15
CVE-2023-3680SourceCodester Lost and Found Information System HTTP POST request SQL injection9.8v3.10.5%2023-07-15
CVE-2023-3679SourceCodester Lost and Found Information System HTTP POST request SQL injection9.8v3.10.5%2023-07-15
CVE-2023-3678SourceCodester AC Repair and Services System HTTP POST request SQL injection9.8v3.10.5%2023-07-15
CVE-2023-2507CleverTap Cordova Plugin reflected XSS6.1NVD v3.10.9%2023-07-15Fix
CVE-2023-2268Plane unauthorized access to files7.5v3.10.7%2023-07-15
CVE-2023-38337Rswag vulnerable to arbitrary JSON and YAML file read via directory traversal7.5v3.11.3%2023-07-14Fix
CVE-2023-38336Netkit command injection9.8v3.12.1%2023-07-14
CVE-2023-38325cryptography mishandles SSH certificates7.5v3.10.7%2023-07-14Fix
CVE-2023-38286Spring-boot-admin sandbox bypass via crafted HTML7.5v3.11.0%2023-07-14Fix
CVE-2023-38253W3m: Out-of-bounds read in growbuf_to_str at w3m/indep.c5.5NVD v3.10.4%2023-07-14Fix
CVE-2023-38252W3m: Out-of-bounds read in strnew_size at w3m/str.c5.5NVD v3.10.4%2023-07-14Fix
CVE-2023-37794WAYOS Fbm-291w command injection9.8v3.12.4%2023-07-14
CVE-2023-37793WAYOS Fbm-291w buffer overflow9.8v3.10.9%2023-07-14
CVE-2023-37723Tenda FH1202 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37722Tenda FH1202 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37721Tenda FH1202 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37719Tenda FH1202 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37718Tenda FH1202 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37717Tenda AC1206 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37716Tenda AC1206 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37715Tenda FH1202 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37714Tenda FH1202 out-of-bounds write9.8v3.10.9%2023-07-14
CVE-2023-37474Path traversal in copyparty7.5CNA v3.044.9%2023-07-14NucleiFix
CVE-2023-37473Limited code execution in zenstruck/collections8.6CNA v3.10.9%2023-07-14Fix
CVE-2023-37472Query injection in Knowage server7.7CNA v3.10.7%2023-07-14Fix
CVE-2023-37466vm2 Promise handler sanitization code injection9.8CNA v3.13.9%2023-07-14Fix
CVE-2023-37464Incorrect Authentication Tag length usage in AES GCM decryption in OpenIDC/cjose8.6CNA v3.10.7%2023-07-14Fix
CVE-2023-37462xwiki-platform org.Xwiki.platform:xwiki-platform-skin-ui eval injection10.0CNA v3.191.6%2023-07-14Reported exploitedNucleiFix
CVE-2023-37268User login confusion with SSO in warpgate6.4CNA v3.10.5%2023-07-14Fix
CVE-2023-37224Archerirm Archer sensitive information in log files5.5v3.10.2%2023-07-14Fix
CVE-2023-37223Archerirm Archer cross-site scripting5.4v3.10.5%2023-07-14Fix
CVE-2023-36888Microsoft Edge for Android (Chromium-based) tampering6.3CNA v3.10.6%2023-07-14Fix
CVE-2023-36887Microsoft Edge (Chromium-based) remote code execution7.8CNA v3.11.4%2023-07-14Fix
CVE-2023-36883Microsoft Edge for iOS spoofing4.3CNA v3.10.6%2023-07-14Fix
CVE-2023-36850Junos OS: MX Series: An MPC will crash upon receipt of a malformed CFM packet6.5CNA v3.10.3%2023-07-14Fix
CVE-2023-36849Junos OS and Junos OS Evolved: The l2cpd will crash when a malformed LLDP packet is received6.5CNA v3.10.3%2023-07-14Fix
CVE-2023-36848Junos OS: MX Series: The FPC will crash on receiving a malformed CFM packet6.5CNA v3.10.3%2023-07-14Fix
CVE-2023-36840Junos OS and Junos OS Evolved: An rpd crash occurs when a specific L2VPN command is run5.5CNA v3.10.2%2023-07-14Fix
CVE-2023-36838Junos OS: SRX Series: A flowd core occurs when running a low privileged CLI command5.5CNA v3.10.2%2023-07-14Fix
CVE-2023-36836Juniper Networks Junos OS routing protocol daemon uninitialized resource use4.7CNA v3.10.2%2023-07-14Fix
CVE-2023-36835Juniper Networks Junos OS Packet Forwarding Engine improper check for exceptional conditions7.5CNA v3.10.6%2023-07-14Fix
CVE-2023-36834Juniper Networks Junos OS packet forwarding engine denial of service6.5CNA v3.10.3%2023-07-14Fix
CVE-2023-36833Juniper Networks Junos OS Evolved packet forwarding engine use-after-free6.5CNA v3.10.3%2023-07-14Fix
CVE-2023-36832Junos OS: MX Series: PFE crash upon receipt of specific packet destined to an AMS interface7.5CNA v3.10.6%2023-07-14Fix
CVE-2023-36831Junos OS: SRX Series: Jbuf memory leak when SSL Proxy and UTM Web-Filtering is applied7.5CNA v3.10.6%2023-07-14Fix
CVE-2023-36818Denial of service via User Custom Sidebar Section Unlimited Link Creation in discourse6.5CNA v3.10.7%2023-07-14Fix
CVE-2023-36466Topic Title Validation Skipped when Changing Category in Discourse3.5CNA v3.10.4%2023-07-14Fix
CVE-2023-35692Google Android GeoLocation.java privilege escalation7.8v3.10.1%2023-07-14Fix
CVE-2023-34236Information disclosure vulnerability in Weave GitOps Terraform Controller8.5CNA v3.11.0%2023-07-14Fix
CVE-2023-32761Archerirm Archer cross-site request forgery8.0v3.10.4%2023-07-14Fix
CVE-2023-32760Archerirm Archer information disclosure6.5NVD v3.10.5%2023-07-14Fix
CVE-2023-32759Archerirm Archer information disclosure6.5NVD v3.10.6%2023-07-14Fix
CVE-2023-28985Juniper Networks Junos OS Intrusion Detection and Prevention improper syntax validation7.5CNA v3.10.6%2023-07-14Fix
CVE-2023-24896Microsoft Dynamics 365 Finance spoofing5.4CNA v3.10.7%2023-07-14Fix
CVE-2023-3673SQL injection in pimcore/pimcore7.2v3.10.9%2023-07-14Fix
CVE-2023-3672Cross-site scripting (XSS) DOM in plaidweb/Webmention.js6.1NVD v3.10.5%2023-07-14Fix
CVE-2023-3668Improper encoding or escaping of output in froxlor/froxlor7.2NVD v3.11.0%2023-07-14Fix
CVE-2023-3649Buffer over-read in Wireshark5.3CNA v3.10.2%2023-07-14Fix
CVE-2023-3648Mismatched Memory Management Routines in Wireshark5.3CNA v3.10.3%2023-07-14Fix
CVE-2023-3633Bitdefender Engines out-of-bounds memory corruption issue in CEVA Engine8.1CNA v3.10.6%2023-07-14Fix
CVE-2023-3514Razer Central RazerCentralSerivce Unsafe Named Pipe permission escalation of Privilege7.8v3.10.2%2023-07-14
CVE-2023-3513Razer Central RazerCentralService unsafe deserialization escalation of privilege7.8v3.10.3%2023-07-14
CVE-2023-3434QRC handler without Input Validation in Jami5.4v3.10.4%2023-07-14Fix
CVE-2023-3433Local denial of service in Jami5.5v3.10.2%2023-07-14Fix
CVE-2023-2975OpenSSL AES-SIV implementation ignores empty associated data entries5.3v3.10.6%2023-07-14Fix
CVE-2023-2082Buy Me a Coffee Button and Widget WordPress plugin stored cross-site scripting5.4v3.10.6%2023-07-14Fix
CVE-2023-38199OWASP coreruleset content-type confusion9.8v3.10.7%2023-07-13Fix
CVE-2023-38198acme.sh code injection9.8v3.11.1%2023-07-13Fix
CVE-2023-38197Qt XML entity expansion infinite loop7.5v3.11.3%2023-07-13Fix
CVE-2023-37849WatchGuard Panda Security VPN DLL hijacking6.5v3.10.4%2023-07-13Fix
CVE-2023-37839DedeCMS /dede/file_manage_control.php arbitrary file upload9.8v3.11.2%2023-07-13
CVE-2023-37837JPEG Libjpeg out-of-bounds write6.5v3.10.6%2023-07-13Fix
CVE-2023-37836JPEG Libjpeg reachable assertion6.5v3.10.6%2023-07-13Fix
CVE-2023-37787Geeklog Multiple cross-site scripting4.8v3.10.5%2023-07-13
CVE-2023-37786Geeklog Multiple cross-site scripting4.8v3.10.5%2023-07-13Exploit code
CVE-2023-37785ImpressCMS cross-site scripting4.8v3.10.5%2023-07-13
CVE-2023-37746PHPGurukul Maid Hiring Management System cross-site scripting6.1v3.10.4%2023-07-13
CVE-2023-37745PHPGurukul Maid Hiring Management System cross-site scripting6.1v3.10.4%2023-07-13
CVE-2023-37744PHPGurukul Maid Hiring Management System cross-site scripting6.1v3.10.4%2023-07-13
CVE-2023-37743PHPGurukul Teacher Subject Allocation System cross-site scripting6.1v3.10.4%2023-07-13
CVE-2023-37599Issabel PBX information disclosure7.5v3.13.6%2023-07-13NucleiExploit code
CVE-2023-37598Issabel PBX cross-site request forgery4.5v3.10.6%2023-07-13Exploit code
CVE-2023-37568ELECOM WRC-1167GHBK-S command injection8.0v3.10.4%2023-07-13Fix
CVE-2023-37567LOGITEC LAN-W301NR ELECOM and command injection9.8v3.12.4%2023-07-13Fix
CVE-2023-37566LOGITEC LAN-W301NR ELECOM and command injection8.0v3.11.1%2023-07-13Fix
CVE-2023-37565ELECOM WRC-1167GHBK-S code injection8.0v3.10.5%2023-07-13Fix
CVE-2023-37564ELECOM WRC-1167GHBK-S OS command injection8.0v3.10.9%2023-07-13Fix
CVE-2023-37563ELECOM WRC-1167GHBK-S insecure storage of sensitive information6.5v3.10.3%2023-07-13Fix
CVE-2023-37562ELECOM WTC-C1167GC-B exists cross-site request forgery8.8v3.10.3%2023-07-13Fix
CVE-2023-37561ELECOM WRH-300WH-H open redirect6.1v3.10.5%2023-07-13Fix
CVE-2023-37560ELECOM WRH-300WH-H cross-site scripting6.1v3.10.5%2023-07-13Fix
CVE-2023-37468Storing unencrypted LDAP passwords in feedbacksystem6.0CNA v3.10.2%2023-07-13Fix
CVE-2023-37463GitHub cmark-gfm quadratic complexity bugs may lead to a denial of service6.4CNA v3.10.7%2023-07-13Fix
CVE-2023-37415Apache Airflow Apache Hive Provider: Improper input validation in Hive Provider with proxy_user8.8v3.11.6%2023-07-13Fix
CVE-2023-37278GLPI vulnerable to SQL injection via dashboard administration6.8CNA v3.10.7%2023-07-13Fix
CVE-2023-37275Significant-Gravitas AutoGPT system logs spoofable in Auto-GPT via ANSI control sequences3.1CNA v3.10.4%2023-07-13Fix
CVE-2023-37274Significant-Gravitas AutoGPT python code execution sandbox escape in non-docker version in Auto-GPT7.6CNA v3.10.4%2023-07-13Fix
CVE-2023-37273Significant-Gravitas Auto-GPT docker-compose setup code injection8.1CNA v3.10.4%2023-07-13Exploit codeFix
CVE-2023-37272sos-berlin joc-cockpit XSS vulnerability in JOC Cockpit branch6.3CNA v3.10.4%2023-07-13Fix
CVE-2023-37267Umbraco allows possible Admin-level access to backoffice without Auth under rare conditions7.5CNA v3.10.7%2023-07-13Fix
CVE-2023-36473CSP nonce reuse vulnerability in Discourse6.8CNA v3.10.4%2023-07-13Fix
CVE-2023-35945Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec7.5CNA v3.11.7%2023-07-13Fix
CVE-2023-35833YSoft Safeq Server cleartext transmission of sensitive information6.5v3.10.3%2023-07-13Fix
CVE-2023-35694Google Android DMPixelLogger.cpp out-of-bounds read7.5v3.10.4%2023-07-13Fix
CVE-2023-35693Google Android vfs.c memory corruption6.7v3.10.1%2023-07-13Fix
CVE-2023-35691Google Android out-of-bounds read7.2v3.10.5%2023-07-13Fix
CVE-2023-35070VegaGroup Web Collection SQL command improper neutralization9.8CNA v3.10.6%2023-07-13Fix
CVE-2023-35069Path traversal in Bullwark7.5v3.10.7%2023-07-13Fix
CVE-2023-34458Mx-chain-go's relayed transactions always increment nonce7.1CNA v3.11.3%2023-07-13Fix
CVE-2023-34137SonicWall GMS authentication bypass9.8v3.11.0%2023-07-13Fix
CVE-2023-34136SonicWall GMS unrestricted file upload9.8v3.10.8%2023-07-13Fix
CVE-2023-34135SonicWall Analytics SonicWall GMS and path traversal6.5v3.11.6%2023-07-13Fix
CVE-2023-34134SonicWall Analytics SonicWall GMS and information disclosure6.5v3.11.1%2023-07-13Fix
CVE-2023-34133SonicWall GMS SQL command improper neutralization7.5v3.172.2%2023-07-13Reported exploitedNucleiMetasploitExploit codeKCVFix
CVE-2023-34132Use of password hash instead of password for authentication vulnerability in SonicWall GMS and Analytics allows Pass-the-Hash attacks. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions.9.8v3.17.7%2023-07-13Reported exploitedMetasploitExploit codeKCVFix
CVE-2023-34131SonicWall Analytics SonicWall GMS and information disclosure5.3v3.10.8%2023-07-13Fix
CVE-2023-34130SonicWall GMS weak cryptographic algorithm9.8v3.10.3%2023-07-13Fix
CVE-2023-34129SonicWall GMS path traversal8.8v3.141.2%2023-07-13Fix
CVE-2023-34128SonicWall GMS and Analytics configuration file vulnerability9.8v3.10.7%2023-07-13Fix
CVE-2023-34127SonicWall GMS OS command improper neutralization8.8v3.186.5%2023-07-13MetasploitExploit codeKCVFix
CVE-2023-34126SonicWall GMS unrestricted file upload8.8v3.10.8%2023-07-13Fix
CVE-2023-34125SonicWall Analytics GMS and path traversal6.5v3.123.6%2023-07-13Fix
CVE-2023-34124SonicWall GMS authentication bypass9.8v3.150.5%2023-07-13Reported exploitedNucleiMetasploitExploit codeKCVFix
CVE-2023-34123SonicWall GMS hard-coded cryptographic key7.5v3.10.8%2023-07-13Fix
CVE-2023-33768Belkin Wemo Smart Plug WSP080 improper signature verification6.5v3.11.1%2023-07-13Exploit code
CVE-2023-31825Inageya missing encryption7.5v3.10.6%2023-07-13
CVE-2023-31824Dericia Delicia insufficiently protected credentials7.5v3.11.0%2023-07-13
CVE-2023-31823Marui cleartext transmission of sensitive information7.5v3.10.6%2023-07-13
CVE-2023-31822Entetsu Store missing encryption7.5v3.10.6%2023-07-13
CVE-2023-31821Albis cleartext storage of sensitive information7.5v3.10.6%2023-07-13
CVE-2023-31820Shizutetsu Store missing encryption7.5v3.10.6%2023-07-13
CVE-2023-31819Keisei Store Livre missing encryption7.5v3.10.6%2023-07-13
CVE-2023-31705Task Reminder System Sourcecodester reflected cross-site scripting5.4v3.10.5%2023-07-13Exploit code
CVE-2023-31704oretnom23 Online Computer and Laptop Store incorrect authorization9.8v3.11.3%2023-07-13Exploit code
CVE-2023-30565Becton Dickinson Guardrails CQI Reporter cleartext transmission of sensitive information3.5CNA v3.10.1%2023-07-13Fix
CVE-2023-30564Becton Dickinson Alaris Systems Manager device import function improper input validation6.9CNA v3.10.3%2023-07-13Fix
CVE-2023-30563Becton Dickinson Alaris Systems Manager user import function stored cross-site scripting8.2CNA v3.10.4%2023-07-13Fix
CVE-2023-30562Becton Dickinson & BD Alarisâ„¢ Guardrailsâ„¢ Editor Lack of Dataset Integrity Checking6.7CNA v3.10.2%2023-07-13Fix
CVE-2023-30561Becton Dickinson Alaris Point-of-Care Unit IUI bus missing encryption6.1CNA v3.10.2%2023-07-13Fix
CVE-2023-30560Becton Dickinson Alaris Point-of-Care Unit configuration interface missing authentication6.8CNA v3.10.3%2023-07-13Fix
CVE-2023-30559Wireless Card Firmware improperly Signed5.2CNA v3.10.2%2023-07-13Fix
CVE-2023-30151Boxtal Envoimoinscher SQL injection9.8v3.11.4%2023-07-13
CVE-2023-29458Zabbix duktape bug crashes JavaScript putting too many values in valstack5.9CNA v3.10.8%2023-07-13Fix
CVE-2023-29457Zabbix insufficient validation of action form input fields6.3CNA v3.10.6%2023-07-13Fix
CVE-2023-29456Zabbix inefficient URL schema validation5.7CNA v3.10.6%2023-07-13Fix
CVE-2023-29455Zabbix reflected XSS in several fields of graph form5.4CNA v3.10.6%2023-07-13Fix
CVE-2023-29454Zabbix persistent XSS in the user form5.4CNA v3.10.6%2023-07-13Fix
CVE-2023-29452Zabbix remove possibility to add html into Geomap attribution field5.5CNA v3.164.1%2023-07-13Fix
CVE-2023-29451Zabbix denial of service caused by a bug in the JSON parser4.7CNA v3.10.8%2023-07-13Fix
CVE-2023-29450Zabbix unauthorized limited filesystem access from preprocessing8.5CNA v3.11.3%2023-07-13Fix
CVE-2023-29449Zabbix limited control of resource utilization in JS preprocessing5.9CNA v3.11.2%2023-07-13Fix
CVE-2023-26597Honeywell C300 controller DOS on sending error response7.5CNA v3.10.6%2023-07-13Fix
CVE-2023-25948Honeywell Experion Server server data type confusion info leak7.5CNA v3.10.6%2023-07-13Fix
CVE-2023-25770Honeywell C300 controller stack overflow on decoding messages from the server9.8CNA v3.10.7%2023-07-13Fix
CVE-2023-25178Controller design flaw unsigned firmware9.8CNA v3.10.5%2023-07-13Fix
CVE-2023-25078Honeywell Experion Server DoS due to heap overflow9.8CNA v3.10.7%2023-07-13Fix
CVE-2023-24480Honeywell C300 controller stack overflow when decoding messages from the server9.8CNA v3.10.7%2023-07-13Fix
CVE-2023-24474Honeywell Experion server-controller communication heap-based buffer overflow7.5CNA v3.10.7%2023-07-13Fix
CVE-2023-23585Honeywell Experion Server server DoS due to heap overflow9.8CNA v3.10.7%2023-07-13Fix
CVE-2023-22435Honeywell Experion Server message parser stack overflow7.5CNA v3.10.6%2023-07-13Fix
CVE-2023-21400Google Android io_uring.c memory corruption6.7v3.10.3%2023-07-13Fix
CVE-2023-21399Google Android weak cryptographic algorithm7.8v3.10.1%2023-07-13Fix
CVE-2023-21262Google Android race condition3.1v3.10.1%2023-07-13Fix
CVE-2023-21260Google Android origin validation error5.5v3.10.1%2023-07-13Fix
CVE-2023-21257Google Android InstallPackageHelper.java privilege escalation7.8v3.10.1%2023-07-13Fix
CVE-2023-21256Google Android SettingsHomepageActivity.java privilege escalation7.8v3.10.1%2023-07-13Fix