CVE-2023 records published in July 2023
Page two of three: records 1,001 to 2,000 of the 2,030 published in July 2023, newest first. The first page carries the figures for July 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-21255 | Google Android binder.c memory corruption | 7.8v3.1 | 0.2% | 2023-07-13 | Fix |
| CVE-2023-21254 | Google Android OneTimePermissionUserManager.java privilege escalation | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21251 | Google Android ConfirmDialog.java privilege escalation | 7.3v3.1 | 0.2% | 2023-07-13 | Exploit codeFix |
| CVE-2023-21250 | Google Android gatt_utils.cc out-of-bounds write | 9.8v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-21249 | Google Android OneTimePermissionUserManager.java privilege escalation | 5.5v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21248 | Google Android privilege escalation | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21247 | Google Android privilege escalation | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21246 | Google Android ShortcutInfo.java privilege escalation | 3.3v3.1 | 0.2% | 2023-07-13 | Exploit codeFix |
| CVE-2023-21245 | Google Android KeyguardSecurityContainerController.java privilege escalation | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21243 | Google Android PasspointConfiguration.java denial of service | 5.5v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21241 | Google Android rw_i93.cc out-of-bounds write | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21240 | Google Android Policy.java denial of service | 5.5v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21239 | Google Android Notification.java information disclosure | 5.5v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-21238 | Google Android RemoteViews.java information disclosure | 5.5v3.1 | 0.2% | 2023-07-13 | Exploit codeFix |
| CVE-2023-21145 | Google Android ActivityRecord.java privilege escalation | 7.8v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-20942 | Google Android AudioFlinger.cpp privilege escalation | 5.5v3.1 | 0.1% | 2023-07-13 | Fix |
| CVE-2023-20918 | Google Android ActivityOptions.java elevation of privilege | 9.8v3.1 | 0.8% | 2023-07-13 | Exploit codeFix |
| CVE-2023-3661 | SourceCodester AC Repair and Services System SQL injection | 9.8v3.1 | 0.5% | 2023-07-13 | |
| CVE-2023-3660 | Campcodes Retro Cellphone Online Store add_user_modal.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-13 | |
| CVE-2023-3659 | SourceCodester AC Repair and Services System cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-13 | |
| CVE-2023-3658 | SourceCodester AC Repair and Services System HTTP POST request SQL injection | 9.8v3.1 | 0.5% | 2023-07-13 | |
| CVE-2023-3657 | SourceCodester AC Repair and Services System HTTP POST request SQL injection | 9.8v3.1 | 0.5% | 2023-07-13 | |
| CVE-2023-3444 | Incorrect authorization in GitLab | 5.7CNA v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-3424 | Inefficient regular expression complexity in GitLab | 7.5CNA v3.1 | 0.9% | 2023-07-13 | Fix |
| CVE-2023-3363 | Insertion of sensitive information into log file in GitLab | 3.9CNA v3.1 | 0.2% | 2023-07-13 | Fix |
| CVE-2023-3362 | Generation of error message containing sensitive information in GitLab | 5.3CNA v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-3343 | User Registration WordPress plugin authenticated (Subscriber+) PHP object injection | 8.8CNA v3.1 | 1.1% | 2023-07-13 | Fix |
| CVE-2023-3342 | User Registration WordPress plugin authenticated (Subscriber+) arbitrary file upload | 9.9CNA v3.1 | 1.7% | 2023-07-13 | Fix |
| CVE-2023-3319 | XSS in iDisplays PlatPlay DS | 5.4v3.1 | 0.3% | 2023-07-13 | Fix |
| CVE-2023-2957 | SQLi in Lisa Softwares Florist Site | 9.8CNA v3.1 | 0.6% | 2023-07-13 | Fix |
| CVE-2023-2620 | Insertion of sensitive information into sent data in GitLab | 5.5CNA v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-2576 | Incorrect authorization in GitLab | 4.3CNA v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-2200 | Improper encoding or escaping of output in GitLab | 4.1CNA v3.1 | 0.5% | 2023-07-13 | Fix |
| CVE-2023-2190 | Authorization bypass through user-controlled key in GitLab | 6.5CNA v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-2003 | Embedded malicious code vulnerability in Unitronics Vision1210 | 9.8v3.1 | 0.9% | 2023-07-13 | |
| CVE-2023-1547 | SQLi in Elra Computers Parkmatik | 9.8v3.1 | 0.7% | 2023-07-13 | Fix |
| CVE-2023-38069 | JetBrains IntelliJ IDEA improper check for exceptional conditions | 3.3CNA v3.1 | 0.2% | 2023-07-12 | Fix |
| CVE-2023-38068 | JetBrains YouTrack improper interaction frequency control | 6.5CNA v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-38067 | JetBrains TeamCity sensitive information in log files | 4.3CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-38066 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-07-12 | Fix |
| CVE-2023-38065 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-07-12 | Fix |
| CVE-2023-38064 | JetBrains TeamCity sensitive information in log files | 4.3CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-38063 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-07-12 | Fix |
| CVE-2023-38062 | JetBrains TeamCity information disclosure | 4.3CNA v3.1 | 1.4% | 2023-07-12 | Fix |
| CVE-2023-38061 | JetBrains TeamCity cross-site scripting | 4.6CNA v3.1 | 1.0% | 2023-07-12 | Fix |
| CVE-2023-38046 | PAN-OS: Read System files and Resources during Configuration Commit | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37965 | Jenkins ElasticBox CI Plugin missing permission check | 7.1v3.1 | 0.7% | 2023-07-12 | Fix |
| CVE-2023-37964 | Jenkins ElasticBox CI Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-37963 | Jenkins Benchmark Evaluator Plugin missing permission check | 5.4v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37962 | Jenkins Benchmark Evaluator Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37961 | Jenkins Assembla Auth Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37960 | Jenkins MathWorks Polyspace Plugin vulnerable to arbitrary file read | 6.5v3.1 | 1.2% | 2023-07-12 | Fix |
| CVE-2023-37959 | Jenkins Sumologic Publisher Plugin missing permission check | 6.5v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37958 | Jenkins Sumologic Publisher Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37957 | Jenkins Pipeline restFul API Plugin vulnerable to cross-site request forgery | 8.8v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-37956 | Jenkins Test Results Aggregator Plugin missing permission check | 6.5v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-37955 | Jenkins Test Results Aggregator Plugin vulnerable to cross-site request forgery | 6.5v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-37954 | Jenkins Rebuilder Plugin vulnerable to cross-site request forgery | 4.3v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2023-37953 | Jenkins Mabl Plugin missing permission check | 6.5v3.1 | 0.7% | 2023-07-12 | Fix |
| CVE-2023-37952 | Jenkins Mabl Plugin vulnerable to cross-site request forgery | 6.5v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-37951 | Jenkins Mabl Plugin vulnerable to exposure of system-scooped credentials | 6.5v3.1 | 0.7% | 2023-07-12 | Fix |
| CVE-2023-37950 | Jenkins Mabl Plugin missing permission check | 4.3v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37949 | Jenkins Orka by MacStadium Plugin missing permission check | 7.1v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-37948 | Jenkins Oracle Cloud Infrastructure Compute Plugin missing SSH host key validation | 3.7v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37947 | Jenkins OpenShift Login Plugin vulnerable to open redirect | 6.1v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-37946 | Jenkins OpenShift Login Plugin session fixation | 8.8v3.1 | 0.8% | 2023-07-12 | Fix |
| CVE-2023-37945 | Jenkins SAML Single Sign On(SSO) Plugin missing permission check | 4.3v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-37944 | Jenkins Datadog Plugin does not perform a permission check in an HTTP endpoint | 6.5v3.1 | 0.8% | 2023-07-12 | Fix |
| CVE-2023-37943 | Jenkins Active Directory Plugin vulnerable to Active Directory credential disclosure | 5.9v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-37942 | Jenkins External Monitor Job Type Plugin XML external entity | 6.5v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-37630 | Simple Online Piggery Management System cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-12 | |
| CVE-2023-37629 | Simple Online Piggery Management System unrestricted file upload | 9.8v3.1 | 23.3% | 2023-07-12 | NucleiExploit code |
| CVE-2023-37628 | Simple Online Piggery Management System SQL injection | 9.8v3.1 | 1.0% | 2023-07-12 | |
| CVE-2023-37627 | code-projects Online Restaurant Management System SQL injection | 9.8v3.1 | 0.9% | 2023-07-12 | |
| CVE-2023-37582 | Apache RocketMQ: Possible remote code execution when using the update configuration function | 9.8v3.1 | 90.4% | 2023-07-12 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2023-37579 | Apache Pulsar Function Worker incorrect authorization | 8.2CNA v3.1 | 0.8% | 2023-07-12 | Fix |
| CVE-2023-37456 | Mozilla Firefox null pointer dereference | 6.5v3.1 | 0.5% | 2023-07-12 | Exploit codeFix |
| CVE-2023-37455 | Mozilla Firefox clickjacking | 5.4v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2023-37200 | Schneider Electric EcoStruxure OPC UA Server Expert XML external entity injection | 5.5CNA v3.1 | 0.2% | 2023-07-12 | Fix |
| CVE-2023-37199 | Schneider Electric StruxureWare Data Center Expert code injection | 6.8CNA v3.1 | 0.9% | 2023-07-12 | Fix |
| CVE-2023-37198 | Schneider Electric StruxureWare Data Center Expert code injection | 6.8CNA v3.1 | 0.9% | 2023-07-12 | Fix |
| CVE-2023-37197 | Schneider Electric StruxureWare Data Center Expert SQL injection | 8.8CNA v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-37196 | Schneider Electric StruxureWare Data Center Expert SQL injection | 8.8CNA v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-36543 | Apache Airflow: ReDoS via dags function | 6.5v3.1 | 1.6% | 2023-07-12 | Fix |
| CVE-2023-36266 | Keepersecurity Keeperfill insufficiently protected credentials | 5.5v3.1 | 0.8% | 2023-07-12 | Exploit code |
| CVE-2023-35908 | Apache Airflow: Access to DAGs without relevant permission | 6.5v3.1 | 1.0% | 2023-07-12 | Fix |
| CVE-2023-33905 | UNISOC chipsets iwnpi server out-of-bounds write | 4.4v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33904 | UNISOC chipsets hci_server out-of-bounds read | 4.4v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33903 | UNISOC chipsets FM service denial of service | 4.4v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33902 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.2% | 2023-07-12 | Fix |
| CVE-2023-33901 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33900 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33899 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33898 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.2% | 2023-07-12 | Fix |
| CVE-2023-33897 | UNISOC chipsets libimpl-ril out-of-bounds write | 4.4v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33896 | UNISOC chipsets libimpl-ril out-of-bounds write | 4.4v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33895 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33894 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33893 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33892 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33891 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33890 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33889 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33888 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33887 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33886 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33885 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33884 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33883 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33882 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33881 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33880 | UNISOC chipsets missing authorization | 3.3v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33879 | UNISOC chipsets missing authorization | 3.3v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-33668 | Digiexam improper integrity check validation | 9.8v3.1 | 0.5% | 2023-07-12 | Exploit code |
| CVE-2023-33274 | Voltronic Power SNMP Web Pro improper authentication | 9.8v3.1 | 1.1% | 2023-07-12 | |
| CVE-2023-32789 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-32788 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-32200 | Apache Jena: Exposure of execution in script engine expressions | 8.8v3.1 | 1.5% | 2023-07-12 | Fix |
| CVE-2023-31007 | Apache Pulsar: Broker does not always disconnect client when authentication data expires | 0.0CNA v3.1 | 1.0% | 2023-07-12 | Fix |
| CVE-2023-30942 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30941 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30940 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30939 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30938 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30937 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30936 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30935 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30934 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30933 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30932 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30931 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30930 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30929 | UNISOC chipsets telephony service missing authorization | 7.8v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30928 | UNISOC chipsets telephony service missing authorization | 7.8v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30927 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30926 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30925 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30924 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30923 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30922 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30921 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30920 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30919 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30918 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30917 | UNISOC chipsets DMService missing authorization | 7.8v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30916 | UNISOC chipsets DMService missing authorization | 7.8v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30913 | UNISOC chipsets missing authorization | 5.5v3.1 | 0.1% | 2023-07-12 | Fix |
| CVE-2023-30429 | Apache Pulsar: Incorrect authorization for Function Worker when | 9.6CNA v3.1 | 1.0% | 2023-07-12 | Fix |
| CVE-2023-30428 | Apache Pulsar Broker: Incorrect authorization Validation for Rest Producer | 8.2CNA v3.1 | 0.8% | 2023-07-12 | Fix |
| CVE-2023-30226 | rizin excessive iteration | 5.5NVD v3.1 | 0.4% | 2023-07-12 | |
| CVE-2023-29414 | Schneider Electric Accutech Manager buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-07-12 | Fix |
| CVE-2023-29319 | Adobe InDesign 2023 out-of-bound read vulnerability VII Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29318 | Adobe InDesign 2023 out-of-bound read vulnerability VIII Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29317 | Adobe InDesign 2023 out-of-bound read vulnerability III Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29316 | Adobe InDesign 2023 out-of-bound read vulnerability IX Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29315 | Adobe InDesign 2023 out-of-bound read vulnerability VI Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29314 | Adobe InDesign 2023 out-of-bound read vulnerability X Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29313 | Adobe InDesign 2023 out-of-bound read vulnerability XI Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29312 | Adobe InDesign 2023 out-of-bound read vulnerability II Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29311 | Adobe InDesign 2023 out-of-bound read vulnerability IV Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29310 | Adobe InDesign 2023 out-of-bound read vulnerability V Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29309 | Adobe InDesign 2023 out-of-bound read vulnerability Notification | 5.5CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-29308 | Adobe InDesign 2023 arbitrary code execution vulnerability Notification | 7.8CNA v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-29301 | Adobe ColdFusion improper restriction of excessive authentication attempts security feature bypass | 7.5CNA v3.1 | 34.7% | 2023-07-12 | Fix |
| CVE-2023-29300 | Adobe ColdFusion deserialization of untrusted data | 9.8CNA v3.1 | 100.0% | 2023-07-12 | KEVNucleiEmerging ThreatsFix |
| CVE-2023-29298 | Adobe ColdFusion improper access control | 7.5CNA v3.1 | 99.8% | 2023-07-12 | KEVNucleiKCVFix |
| CVE-2023-26564 | syncfusion EJ2 Aspcore File Provider path traversal | 9.8v3.1 | 1.7% | 2023-07-12 | |
| CVE-2023-26563 | syncfusion Nodejs File System Provider path traversal | 9.8v3.1 | 1.9% | 2023-07-12 | Exploit code |
| CVE-2023-22888 | Apache Airflow: Scheduler remote DoS | 6.5v3.1 | 1.4% | 2023-07-12 | Fix |
| CVE-2023-22887 | Apache Airflow path traversal by authenticated user | 6.5v3.1 | 1.8% | 2023-07-12 | Fix |
| CVE-2023-20210 | Cisco BroadWorks execution with unnecessary privileges | 6.0CNA v3.1 | 0.2% | 2023-07-12 | Fix |
| CVE-2023-20207 | Cisco Duo Authentication Proxy sensitive information in log files | 4.9CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-20185 | Cisco NX-OS System Software in ACI Mode insufficient randomness | 7.4CNA v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2023-3644 | SourceCodester Service Provider Management System SQL injection | 9.8v3.1 | 0.5% | 2023-07-12 | |
| CVE-2023-3643 | Boss Mini document file inclusion | 9.8v3.1 | 75.4% | 2023-07-12 | NucleiExploit codeFix |
| CVE-2023-3642 | GZ Scripts Vacation Rental Website HTTP POST request cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-12 | |
| CVE-2023-3641 | khodakhah NodCMS POST request blog-comment-4 cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-12 | |
| CVE-2023-3635 | Okio GzipSource unhandled exception denial of service | 7.5NVD v3.1 | 1.3% | 2023-07-12 | Fix |
| CVE-2023-3618 | Segmentation fault in fax3encode in LibTIFF/tif_fax3.c | 6.5NVD v3.1 | 1.2% | 2023-07-12 | Fix |
| CVE-2023-3600 | Mozilla Firefox use-after-free in workers | 8.8v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-3596 | Rockwell Automation Allen-Bradley ControlLogix Communication modules vulnerable to denial of service | 7.5CNA v3.1 | 3.7% | 2023-07-12 | Fix |
| CVE-2023-3595 | Rockwell Automation ControlLogix Communication modules vulnerable to remote code execution | 9.8CNA v3.1 | 5.5% | 2023-07-12 | Fix |
| CVE-2023-3525 | Getnet Argentina para Woocommerce WordPress plugin authorization bypass | 7.5CNA v3.1 | 0.8% | 2023-07-12 | Fix |
| CVE-2023-3369 | About Me 3000 widget WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-3202 | MStore API WordPress plugin cross-site request forgery to Firebase server Key update | 4.3CNA v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2023-3199 | MStore API WordPress plugin cross-site request forgery to order Title update | 4.3CNA v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2023-3168 | WP Reroute Email WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3167 | Mail Queue WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-3166 | Lana Email Logger WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3158 | Mail Control WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-3135 | Mailtree Log Mail WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3122 | GD Mail Queue WordPress plugin unauthenticated stored cross-site scripting via email | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3106 | Kernel: Netlink socket crash (null pointer deref) in netlink_dump function | 7.8NVD v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2023-3105 | LearnDash LMS WordPress plugin insecure direct object reference to arbitrary user password Change | 8.8CNA v3.1 | 2.2% | 2023-07-12 | Fix |
| CVE-2023-3093 | YaySMTP WordPress plugin unauthenticated stored cross-site scripting via email | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3092 | SMTP Mail WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.5% | 2023-07-12 | |
| CVE-2023-3088 | WP Mail Log WordPress plugin unauthenticated stored cross-site scripting via email | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3087 | FluentSMTP WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-3082 | Post SMTP WordPress plugin unauthenticated stored cross-site scripting via email | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3081 | WP Mail Logging WordPress plugin unauthenticated stored cross-site scripting via email | 6.1NVD v3.1 | 0.6% | 2023-07-12 | Fix |
| CVE-2023-3080 | WP Mail Catcher WordPress plugin unauthenticated stored cross-site scripting via email Subject | 6.1NVD v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-3023 | WP EasyCart WordPress plugin authenticated (Administrator+) SQL injection via orderby | 7.2CNA v3.1 | 0.7% | 2023-07-12 | Fix |
| CVE-2023-3011 | ARMember WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-12 | Fix |
| CVE-2023-2869 | WP-Members Membership WordPress plugin missing authorization to settings update | 4.3CNA v3.1 | 0.5% | 2023-07-12 | Fix |
| CVE-2023-2763 | Dassault Systèmes SOLIDWORKS Desktop DWG and DXF file reader vulnerability | 7.8CNA v3.1 | 0.4% | 2023-07-12 | |
| CVE-2023-2762 | Dassault Systèmes SOLIDWORKS Desktop SLDPRT file reading procedure exists use-after-free | 7.8CNA v3.1 | 0.4% | 2023-07-12 | |
| CVE-2023-2562 | Gallery Metabox WordPress plugin missing authorization via refresh_metabox | 4.3CNA v3.1 | 0.5% | 2023-07-12 | |
| CVE-2023-2561 | Gallery Metabox WordPress plugin missing authorization via gallery_remove | 4.3CNA v3.1 | 0.4% | 2023-07-12 | |
| CVE-2023-2517 | Metform Elementor Contact Form Builder WordPress plugin cross-site request forgery | 4.3v3.1 | 0.4% | 2023-07-12 | Fix |
| CVE-2023-37767 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-37766 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-37765 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-37659 | Xalpha vulnerable to remote code execution | 9.8v3.1 | 1.7% | 2023-07-11 | Fix |
| CVE-2023-37658 | Fast-poster cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-11 | |
| CVE-2023-37657 | LM21 Twonav cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-11 | |
| CVE-2023-37656 | Websiteguide unrestricted file upload | 9.8v3.1 | 1.6% | 2023-07-11 | |
| CVE-2023-37597 | Issabel PBX cross-site request forgery | 8.1v3.1 | 0.6% | 2023-07-11 | Exploit code |
| CVE-2023-37596 | Issabel PBX cross-site request forgery | 8.1v3.1 | 0.6% | 2023-07-11 | Exploit code |
| CVE-2023-37391 | WordPress Mobile Pack plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-37376 | Siemens Tecnomatix Plant Simulation V2201 type confusion | 7.8CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-37375 | Siemens Tecnomatix Plant Simulation V2201 stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-37374 | Siemens Tecnomatix Plant Simulation V2201 stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-37280 | Pimcore admin UI vulnerable to cross-site scripting in two factor authentication setup page | 5.0CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-37271 | RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escape | 8.4CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-37248 | Siemens Tecnomatix Plant Simulation V2201 out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-37247 | Siemens Tecnomatix Plant Simulation V2201 heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-37246 | Siemens Tecnomatix Plant Simulation V2201 heap-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-37191 | Issabel PBX stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2023-07-11 | |
| CVE-2023-37190 | Issabel PBX stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-07-11 | Exploit code |
| CVE-2023-37189 | Issabel PBX index.php?menu=billing_rates stored cross-site scripting | 4.8v3.1 | 0.7% | 2023-07-11 | Exploit code |
| CVE-2023-37174 | gpac out-of-bounds write | 5.5v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-36925 | Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) | 7.2CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-36924 | Log injection vulnerability in SAP ERP Defense Forces and Public Security | 4.9CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-36922 | OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL) | 9.1CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-36921 | Header injection in SAP Solution Manager (Diagnostic agent) | 7.2CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-36919 | Information disclosure in SAP Enable Now | 5.3CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-36918 | Cross-site scripting vulnerability in SAP Enable Now | 6.1CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-36917 | Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform | 5.9CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-36884 | Microsoft Windows Search remote code execution | 7.5CNA v3.1 | 98.9% | 2023-07-11 | KEVEmerging ThreatsExploit codeKCVFix |
| CVE-2023-36874 | Microsoft Windows Error Reporting service privilege escalation | 7.8CNA v3.1 | 42.6% | 2023-07-11 | KEVExploit codeFix |
| CVE-2023-36872 | Microsoft VP9 Video Extensions information disclosure | 5.5CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-36871 | Microsoft Windows azure Active Directory security feature bypass | 6.5CNA v3.1 | 1.2% | 2023-07-11 | Fix |
| CVE-2023-36868 | Microsoft Azure Service Fabric on Windows information disclosure | 6.5CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-36867 | Microsoft Visual Studio Code GitHub Pull Requests And Issues extension remote code execution | 7.8CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-36825 | Orchid deserialization of untrusted data vulnerability leads to remote code execution | 9.7CNA v3.1 | 1.1% | 2023-07-11 | Fix |
| CVE-2023-36824 | Heap overflow in command GETKEYS and ACL evaluation in Redis | 7.4CNA v3.1 | 77.4% | 2023-07-11 | Fix |
| CVE-2023-36755 | Siemens RUGGEDCOM ROX MX5000 command injection | 9.1CNA v3.1 | 1.0% | 2023-07-11 | Fix |
| CVE-2023-36754 | Siemens RUGGEDCOM ROX MX5000 command injection | 9.1CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-36753 | Siemens RUGGEDCOM ROX MX5000 command injection | 9.1CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-36752 | Siemens RUGGEDCOM ROX MX5000 command injection | 9.1CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-36751 | Siemens RUGGEDCOM ROX MX5000 command injection | 9.1CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-36750 | Siemens RUGGEDCOM ROX MX5000 command injection | 9.1CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-36749 | Siemens RUGGEDCOM ROX MX5000 weak cryptographic algorithm | 7.4CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-36748 | Siemens RUGGEDCOM ROX MX5000 inadequate encryption strength | 5.9CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-36693 | WP RSS Images WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-36690 | WPLMS WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-36687 | Menubar WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-36538 | Zoom Video Communications Zoom Rooms improper access control | 8.4CNA v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-36537 | Zoom Video Communications Zoom Rooms improper privilege management | 7.3CNA v3.1 | 0.1% | 2023-07-11 | |
| CVE-2023-36536 | Zoom Video Communications Zoom Rooms installer untrusted search path | 8.2CNA v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-36522 | Quiz Expert Easy Quiz Maker, Exam and Test Manager WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-36521 | Siemens SIMATIC MV540 H resource exhaustion | 8.6CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-36517 | WP Abstracts WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-36390 | Siemens RUGGEDCOM ROX MX5000 cross-site scripting | 8.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-36389 | Siemens RUGGEDCOM ROX MX5000 cross-site scripting | 8.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-36386 | Siemens RUGGEDCOM ROX MX5000 cross-site scripting | 8.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-36293 | Wmanager SQL injection | 7.5v3.1 | 0.8% | 2023-07-11 | |
| CVE-2023-36163 | Buildagate IP-DOT cross-site scripting | 6.1v3.1 | 4.1% | 2023-07-11 | Exploit code |
| CVE-2023-35921 | Siemens SIMATIC MV540 H resource exhaustion | 7.5CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-35920 | Siemens SIMATIC MV540 H resource exhaustion | 7.5CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-35913 | OOPSpam Anti-Spam WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-35874 | Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform | 6.0CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-35873 | Missing authentication check in SAP NetWeaver Process Integration (Runtime Workbench) | 6.5CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-35872 | Missing authentication check in SAP NetWeaver Process Integration (Message Display tool) | 6.5CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-35871 | Memory corruption vulnerability in SAP Web Dispatcher | 7.7CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-35870 | Improper access control in SAP S/4HANA (Manage Journal Entry template) | 6.3CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-35781 | LWS Cleaner WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-35780 | Galleria WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-35778 | Recent Posts Slider WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-35774 | LWS Tools WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-35773 | Template Debugger WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-35374 | Microsoft Paint 3D remote code execution | 7.8CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35373 | Microsoft Mono Authenticode Validation spoofing | 5.3CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-35367 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 9.8CNA v3.1 | 1.7% | 2023-07-11 | Fix |
| CVE-2023-35366 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 9.8CNA v3.1 | 1.7% | 2023-07-11 | Fix |
| CVE-2023-35365 | Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution | 9.8CNA v3.1 | 1.8% | 2023-07-11 | Fix |
| CVE-2023-35364 | Microsoft Windows Kernel elevation of privilege | 8.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35363 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35362 | Microsoft Windows Clip service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-35361 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-35360 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-35358 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-35357 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-35356 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 1.2% | 2023-07-11 | Fix |
| CVE-2023-35353 | Microsoft Windows Connected User Experiences and Telemetry elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35352 | Microsoft Windows Remote Desktop security feature bypass | 7.5CNA v3.1 | 1.4% | 2023-07-11 | Fix |
| CVE-2023-35351 | Microsoft Windows Active Directory Certificate Services (AD CS) remote code execution | 6.6CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35350 | Microsoft Windows Active Directory Certificate Services (AD CS) remote code execution | 7.2CNA v3.1 | 1.2% | 2023-07-11 | Fix |
| CVE-2023-35348 | Microsoft Windows active Directory Federation service security feature bypass | 6.5CNA v3.1 | 1.0% | 2023-07-11 | Fix |
| CVE-2023-35347 | Microsoft Install service elevation of privilege | 7.1CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35346 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35345 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35344 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35343 | Microsoft Windows Geolocation service remote code execution | 7.8CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35342 | Microsoft Windows Image Acquisition elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35341 | Microsoft DirectMusic information disclosure | 6.2CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35340 | Microsoft Windows CNG Key Isolation service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-35339 | Microsoft Windows CryptoAPI denial of service | 7.5CNA v3.1 | 1.9% | 2023-07-11 | Fix |
| CVE-2023-35338 | Microsoft Windows Peer Name Resolution protocol denial of service | 7.5CNA v3.1 | 2.0% | 2023-07-11 | Fix |
| CVE-2023-35337 | Microsoft Windows win32k elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-35336 | Microsoft Windows MSHTML Platform security feature bypass | 6.5CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-35335 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 8.2CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-35333 | Microsoft MediaWiki PandocUpload extension remote code execution | 8.8CNA v3.1 | 1.2% | 2023-07-11 | Fix |
| CVE-2023-35332 | Microsoft Windows Remote Desktop protocol security feature bypass | 6.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35331 | Microsoft Windows Local Security Authority (LSA) denial of service | 6.5CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35330 | Microsoft Windows Extended Negotiation denial of service | 7.5CNA v3.1 | 1.9% | 2023-07-11 | Fix |
| CVE-2023-35329 | Microsoft Windows Authentication denial of service | 6.5CNA v3.1 | 1.8% | 2023-07-11 | Fix |
| CVE-2023-35328 | Microsoft Windows Transaction Manager elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-35326 | Microsoft Windows CDP User components information disclosure | 5.5CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35325 | Microsoft Windows Print Spooler information disclosure | 7.5CNA v3.1 | 1.8% | 2023-07-11 | Fix |
| CVE-2023-35324 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 5.5CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35323 | Microsoft Windows OLE remote code execution | 7.8CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35322 | Microsoft Windows Deployment services remote code execution | 8.8CNA v3.1 | 1.4% | 2023-07-11 | Fix |
| CVE-2023-35321 | Microsoft Windows Deployment services denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-35320 | Microsoft Windows Connected User Experiences and Telemetry elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35319 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-35318 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-35317 | Microsoft Windows Server Update Service (WSUS) elevation of privilege | 7.8CNA v3.1 | 1.8% | 2023-07-11 | Emerging ThreatsExploit codeFix |
| CVE-2023-35316 | Microsoft Windows Remote Procedure Call Runtime information disclosure | 6.5CNA v3.1 | 1.4% | 2023-07-11 | Fix |
| CVE-2023-35315 | Microsoft Windows Layer-2 Bridge Network driver remote code execution | 8.8CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35314 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-35313 | Microsoft Windows Online Certificate Status Protocol (OCSP) SnapIn remote code execution | 7.8CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35312 | Microsoft VOLSNAP.SYS elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35311 | Microsoft Outlook security feature bypass | 8.8CNA v3.1 | 15.5% | 2023-07-11 | KEVFix |
| CVE-2023-35310 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-35309 | Microsoft Message Queuing (MSMQ) remote code execution | 7.5CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-35308 | Microsoft Windows MSHTML Platform security feature bypass | 6.5CNA v3.1 | 1.1% | 2023-07-11 | Fix |
| CVE-2023-35306 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 5.5CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-35305 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-35304 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-35303 | Microsoft Windows USB Audio Class System driver remote code execution | 8.8CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-35302 | Microsoft PostScript and PCL6 Class Printer driver remote code execution | 8.8CNA v3.1 | 1.4% | 2023-07-11 | Fix |
| CVE-2023-35300 | Microsoft Windows remote Procedure Call Runtime remote code execution | 8.8CNA v3.1 | 1.4% | 2023-07-11 | Fix |
| CVE-2023-35299 | Microsoft Windows Common Log File System driver elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-35298 | Microsoft Windows HTTP.sys denial of service | 7.5CNA v3.1 | 1.8% | 2023-07-11 | Fix |
| CVE-2023-35297 | Microsoft Windows Pragmatic General Multicast (PGM) remote code execution | 8.1CNA v3.1 | 1.1% | 2023-07-11 | Fix |
| CVE-2023-35296 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 6.5CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-35091 | WooCommerce Stock Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-35047 | All Bootstrap Blocks WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-35044 | Securimage-WP WordPress plugin cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-34561 | Robtopgames Geometry Dash buffer overflow | 9.8v3.1 | 1.6% | 2023-07-11 | |
| CVE-2023-34185 | NextGen GalleryView WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-34119 | Zoom Video Communications Zoom Rooms installer insecure temporary file | 8.2CNA v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-34118 | Zoom Video Communications Zoom Rooms improper privilege management | 7.3CNA v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-34117 | Zoom Video Communications Zoom Client SDK relative path traversal | 3.3CNA v3.1 | 0.2% | 2023-07-11 | |
| CVE-2023-34116 | Zoom Video Communications Zoom Desktop Client improper input validation | 8.2CNA v3.1 | 1.0% | 2023-07-11 | |
| CVE-2023-34090 | Decidim vulnerable to sensitive data disclosure | 7.5CNA v3.1 | 1.3% | 2023-07-11 | Fix |
| CVE-2023-34089 | Decidim cross-site scripting vulnerability in the processes filter | 8.1CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-34029 | Prem Tiwari Disable WordPress Update Notifications plugin cross-site request forgery | 6.5v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-34015 | Advanced Flat rate shipping Woocommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-33992 | Missing authorization Check in SAP Business Warehouse and SAP Bw/4hana | 4.5CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-33990 | Denial of service (DoS) vulnerability in SAP SQL Anywhere | 7.8CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-33989 | Directory traversal vulnerability in SAP NetWeaver (BI CONT ADD ON) | 8.7CNA v3.1 | 1.0% | 2023-07-11 | Fix |
| CVE-2023-33988 | Cross-site scripting vulnerability in SAP Enable Now | 6.1CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-33987 | Request smuggling and request concatenation in SAP Web Dispatcher | 8.6CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-33174 | Microsoft Windows Cryptographic information disclosure | 5.5CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-33173 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-33172 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-33171 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 8.2CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-33170 | ASP.NET and Visual Studio security feature bypass | 8.1CNA v3.1 | 2.0% | 2023-07-11 | Fix |
| CVE-2023-33169 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-33168 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-33167 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-33166 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-33165 | Microsoft SharePoint server security feature bypass | 4.3CNA v3.1 | 1.1% | 2023-07-11 | Fix |
| CVE-2023-33164 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-33163 | Microsoft Windows Network Load Balancing remote code execution | 7.5CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-33162 | Microsoft Excel information disclosure | 5.5CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-33161 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-33160 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 4.3% | 2023-07-11 | Fix |
| CVE-2023-33159 | Microsoft SharePoint server spoofing | 8.8CNA v3.1 | 1.3% | 2023-07-11 | Fix |
| CVE-2023-33158 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-33157 | Microsoft SharePoint remote code execution | 8.8CNA v3.1 | 38.2% | 2023-07-11 | Fix |
| CVE-2023-33156 | Microsoft Defender elevation of privilege | 6.3CNA v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-33155 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-33154 | Microsoft Windows Partition Management driver elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-33153 | Microsoft Outlook remote code execution | 6.8CNA v3.1 | 1.0% | 2023-07-11 | Fix |
| CVE-2023-33152 | Microsoft ActiveX remote code execution | 7.0CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-33151 | Microsoft Outlook spoofing | 6.5CNA v3.1 | 3.4% | 2023-07-11 | Fix |
| CVE-2023-33150 | Microsoft Office security feature bypass | 9.6CNA v3.1 | 2.1% | 2023-07-11 | Fix |
| CVE-2023-33149 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-33148 | Microsoft Office elevation of privilege | 7.8CNA v3.1 | 2.1% | 2023-07-11 | Exploit codeFix |
| CVE-2023-33134 | Microsoft SharePoint server remote code execution | 8.8CNA v3.1 | 2.6% | 2023-07-11 | Fix |
| CVE-2023-33127 | Microsoft .NET and Visual Studio elevation of privilege | 8.1CNA v3.1 | 1.9% | 2023-07-11 | Fix |
| CVE-2023-32693 | Decidim cross-site scripting vulnerability in the external link redirections | 8.1CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-32104 | MyCurator Content Curation WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-32085 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 5.5CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-32084 | Microsoft Windows HTTP.sys denial of service | 7.5CNA v3.1 | 1.8% | 2023-07-11 | Fix |
| CVE-2023-32083 | Microsoft Failover Cluster information disclosure | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-32057 | Microsoft Message Queuing (MSMQ) remote code execution | 9.8CNA v3.1 | 2.2% | 2023-07-11 | Fix |
| CVE-2023-32056 | Microsoft Windows Server Update Service (WSUS) elevation of privilege | 7.8CNA v3.1 | 1.2% | 2023-07-11 | Fix |
| CVE-2023-32055 | Microsoft Windows active template library elevation of privilege | 6.7CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-32054 | Microsoft Windows Volume Shadow Copy elevation of privilege | 7.3CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-32053 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-32052 | Microsoft Power Apps (online) spoofing | 5.4CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-32051 | Microsoft Raw Image Extension remote code execution | 7.8CNA v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-32050 | Microsoft Windows Installer elevation of privilege | 7.0CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-32049 | Microsoft Windows Defender SmartScreen security feature bypass | 8.8CNA v3.1 | 4.2% | 2023-07-11 | KEVFix |
| CVE-2023-32047 | Microsoft Paint 3D remote code execution | 7.8CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-32046 | Microsoft Windows MSHTML Platform privilege escalation | 7.8CNA v3.1 | 10.0% | 2023-07-11 | KEVFix |
| CVE-2023-32045 | Microsoft Message Queuing (MSMQ) denial of service | 7.5CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-32044 | Microsoft Message Queuing (MSMQ) denial of service | 7.5CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-32043 | Microsoft Windows Remote Desktop security feature bypass | 6.8CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-32042 | Microsoft Windows OLE Automation information disclosure | 6.5CNA v3.1 | 1.3% | 2023-07-11 | Fix |
| CVE-2023-32041 | Microsoft Windows Update Orchestrator service information disclosure | 5.5CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-32040 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 5.5CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-32039 | Microsoft PostScript and PCL6 Class Printer driver information disclosure | 5.5CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-32038 | Microsoft ODBC driver remote code execution | 8.8CNA v3.1 | 1.2% | 2023-07-11 | Fix |
| CVE-2023-32037 | Microsoft Windows Layer-2 Bridge Network driver information disclosure | 6.5CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-32035 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-32034 | Microsoft Windows Remote Procedure Call Runtime denial of service | 6.5CNA v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-32033 | Microsoft Failover Cluster remote code execution | 6.6CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-31818 | Marukyu Line resource exposure | 7.5v3.1 | 1.0% | 2023-07-11 | |
| CVE-2023-31405 | Log injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) | 5.3CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-31191 | DroneScout ds230 Remote ID receiver denial of service | 8.1NVD v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-31190 | DroneScout ds230 firmware update process improper certificate validation | 8.1NVD v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-29984 | Brother Dcp-1610w multiple vendors MFPs and printers null pointer dereference | 7.5v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-29406 | Insufficient sanitization of host header in net/http | 6.5v3.1 | 1.5% | 2023-07-11 | Exploit codeFix |
| CVE-2023-29347 | Microsoft Windows Admin Center spoofing | 8.7CNA v3.1 | 1.9% | 2023-07-11 | Fix |
| CVE-2023-29156 | DroneScout ds230 Remote ID receiver denial of service | 6.8NVD v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-29131 | Siemens SIMATIC CN 4100 incorrect default permissions | 7.4CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-29130 | Siemens SIMATIC CN 4100 privilege escalation | 9.9CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-28001 | Fortinet FortiOS An insufficient session expiration | 4.1CNA v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-26861 | Viva Wallet PrestaShop SQL injection | 9.8v3.1 | 1.1% | 2023-07-11 | Fix |
| CVE-2023-25706 | Robots.txt optimization WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-25606 | Fortinet FortiManager path traversal | 6.2CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-25487 | PixTypes WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-25468 | Reservation.Studio widget WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-25443 | Button Generator easily Button Builder WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-25051 | Comment Reply Notification WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-24881 | Microsoft Teams information disclosure | 6.5CNA v3.1 | 1.5% | 2023-07-11 | Fix |
| CVE-2023-24492 | Citrix Secure Access client for Ubuntu code injection | 9.6CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-24491 | Citrix Secure Access Client improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-24421 | PHP Compatibility Checker WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-24417 | Worthy VG WORT Integration für WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-23997 | Database Collation Fix WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-23803 | JustTables WooCommerce Product Table WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-23792 | Swatchly WooCommerce Variation Swatches for Products WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-23791 | HT Menu WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-23777 | Fortinet FortiWeb OS command injection | 7.2CNA v3.1 | 1.3% | 2023-07-11 | Fix |
| CVE-2023-23756 | Extension Advcomsys.com XSS in oneVote component for Joomla | 6.1NVD v3.1 | 0.4% | 2023-07-11 | |
| CVE-2023-23731 | WishSuite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-23704 | Comments Ratings WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-23671 | Layer Slider WordPress plugin cross-site request forgery (CSRF) | 6.5NVD v3.1 | 0.3% | 2023-07-11 | |
| CVE-2023-21756 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-21526 | Microsoft Windows Netlogon information disclosure | 7.4CNA v3.1 | 1.1% | 2023-07-11 | Fix |
| CVE-2023-20575 | AMD 1st Gen AMD EPYC™ Processors some side-channel information leak | 6.5v3.1 | 0.8% | 2023-07-11 | Fix |
| CVE-2023-3627 | Cross-site request forgery (CSRF) in salesagility/suitecrm-core | 8.8v3.1 | 0.4% | 2023-07-11 | Fix |
| CVE-2023-3626 | A vulnerability, which was classified as critical, has been found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This issue affects some unknown processing of the file /Duty/AjaxHandle/UpLoadFloodPlanFile.ashx of the component UpLoadFloodPlanFile. | 9.8v3.1 | 1.0% | 2023-07-11 | |
| CVE-2023-3625 | A vulnerability classified as critical was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This vulnerability affects unknown code of the file /Duty/AjaxHandle/Write/UploadFile.ashx of the component Duty Write-UploadFile. The manipulation of | 9.8v3.1 | 1.0% | 2023-07-11 | |
| CVE-2023-3624 | Nesote Inout Blockchain FiatExchanger POST parameter update_marketboxslider SQL injection | 9.8v3.1 | 0.5% | 2023-07-11 | |
| CVE-2023-3623 | A vulnerability was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230704. It has been rated as critical. Affected by this issue is some unknown functionality of the file /Duty/AjaxHandle/UploadHandler.ashx of the component Duty Module. The manipula | 9.8v3.1 | 0.9% | 2023-07-11 | |
| CVE-2023-3621 | IBOS OA Delete Packet delete createDeleteCommand SQL injection | 8.8v3.1 | 0.7% | 2023-07-11 | |
| CVE-2023-3620 | Cross-site scripting (XSS) Stored in AmauriC/Tarteaucitron.js | 5.4v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-3619 | SourceCodester AC Repair and Services System HTTP POST request SQL injection | 9.8v3.1 | 0.5% | 2023-07-11 | |
| CVE-2023-3617 | SourceCodester Best POS Management System Login page admin_class.php SQL injection | 9.8v3.1 | 0.8% | 2023-07-11 | |
| CVE-2023-3354 | QEMU VNC server null pointer dereference | 7.5NVD v3.1 | 1.6% | 2023-07-11 | Fix |
| CVE-2023-3269 | kernel distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal | 7.8NVD v3.1 | 1.3% | 2023-07-11 | Exploit codeKCVFix |
| CVE-2023-3127 | Improper authentication in iSTAR | 7.5CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-3108 | Kernel: A race condition in crypto module in the function skcipher_recvmsg | 4.7NVD v3.1 | 0.2% | 2023-07-11 | Fix |
| CVE-2023-2746 | Rockwell Automation Enhanced HIM vulnerable to cross-site request forgery Attack | 9.6CNA v3.1 | 0.7% | 2023-07-11 | Fix |
| CVE-2023-2079 | Buy Me a Coffee Button and Widget WordPress plugin cross-site request forgery | 5.3NVD v3.1 | 0.3% | 2023-07-11 | Fix |
| CVE-2023-2078 | Buy Me a Coffee Button and Widget WordPress plugin missing authorization | 4.3NVD v3.1 | 0.5% | 2023-07-11 | Fix |
| CVE-2023-2072 | Rockwell Automation PowerMonitor 1000 cross-site scripting | 8.8CNA v3.1 | 0.9% | 2023-07-11 | Fix |
| CVE-2023-1936 | Exposure of private personal information to an unauthorized actor in GitLab | 3.5CNA v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-1672 | tang race condition exists in the key generation and rotation functionality | 5.3NVD v3.1 | 0.6% | 2023-07-11 | Fix |
| CVE-2023-37712 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-07-10 | |
| CVE-2023-37711 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-07-10 | |
| CVE-2023-37710 | Tenda AC1206 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-07-10 | |
| CVE-2023-37707 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-07-10 | |
| CVE-2023-37706 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-07-10 | |
| CVE-2023-37705 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-07-10 | |
| CVE-2023-37704 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-07-10 | |
| CVE-2023-37703 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-07-10 | |
| CVE-2023-37702 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.2% | 2023-07-10 | |
| CVE-2023-37701 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-07-10 | |
| CVE-2023-37700 | Tenda FH1203 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-07-10 | |
| CVE-2023-37392 | WP Dummy Content Generator WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-37288 | SmartBPM.NET path traversal | 7.5v3.1 | 0.9% | 2023-07-10 | |
| CVE-2023-37287 | SmartBPM.NET use of hard-coded credentials 2 | 9.1CNA v3.1 | 0.9% | 2023-07-10 | |
| CVE-2023-37286 | SmartBPM.NET use of hard-coded credentials 1 | 9.8CNA v3.1 | 1.0% | 2023-07-10 | |
| CVE-2023-37277 | XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API | 9.7CNA v3.1 | 0.7% | 2023-07-10 | Fix |
| CVE-2023-37153 | kodcloud KodExplorer cross-site scripting | 6.1v3.1 | 0.7% | 2023-07-10 | |
| CVE-2023-37152 | Online Art Gallery unrestricted file upload | 9.8v3.1 | 2.0% | 2023-07-10 | |
| CVE-2023-37150 | Online Pizza Ordering System cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-10 | |
| CVE-2023-36940 | PHPGurukul Online Fire Reporting System cross-site scripting | 4.8v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-36939 | PHPGurukul Hostel Management System cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-10 | |
| CVE-2023-36936 | PHPGurukul Online Security Guards Hiring System cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-10 | |
| CVE-2023-36691 | WebwinkelKeur WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-36376 | PHPGurukul Hostel Management System cross-site scripting | 4.8v3.1 | 0.6% | 2023-07-10 | |
| CVE-2023-36375 | PHPGurukul Hostel Management System cross-site scripting | 5.4v3.1 | 0.9% | 2023-07-10 | |
| CVE-2023-35912 | Potent Donations for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-35887 | Apache MINA Sshd: Information disclosure bugs with RootedFilesystem | 5.0CNA v3.1 | 1.3% | 2023-07-10 | Fix |
| CVE-2023-35699 | SICK ICR890-4 cleartext storage of sensitive information | 5.3CNA v3.1 | 0.2% | 2023-07-10 | Fix |
| CVE-2023-35698 | SICK ICR890-4 response discrepancy | 5.3CNA v3.1 | 0.8% | 2023-07-10 | Fix |
| CVE-2023-35697 | SICK ICR890-4 missing brute-force protection | 5.3CNA v3.1 | 0.9% | 2023-07-10 | Fix |
| CVE-2023-35696 | SICK ICR890-4 resource exposure | 7.5CNA v3.1 | 0.9% | 2023-07-10 | Fix |
| CVE-2023-34442 | Apache Camel JIRA: Temporary file information disclosure in Camel-Jira | 3.3v3.1 | 0.4% | 2023-07-10 | Fix |
| CVE-2023-34432 | sox heap-buffer-overflow in src/formats_i.c | 7.8NVD v3.1 | 0.4% | 2023-07-10 | Fix |
| CVE-2023-34347 | Delta Electronics InfraSuite Device Master deserialization of untrusted data | 9.8v3.1 | 1.0% | 2023-07-10 | Fix |
| CVE-2023-34318 | sox heap-buffer-overflow in src/hcom.c | 7.8NVD v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-34316 | Delta Electronics InfraSuite Device Master improper access control | 7.5v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-32627 | sox floating point exception in src/voc.c | 5.5NVD v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-32254 | kernel tree connection race condition remote code execution | 8.1NVD v3.1 | 2.9% | 2023-07-10 | Fix |
| CVE-2023-32250 | kernel session race condition remote code execution | 8.1NVD v3.1 | 2.6% | 2023-07-10 | Fix |
| CVE-2023-30963 | Stored XSS in Foundry Slate Query Dropdown menu | 5.4CNA v3.1 | 0.4% | 2023-07-10 | Fix |
| CVE-2023-30960 | Insecure direct object reference (IDOR) in Foundry Job-tracker | 4.3CNA v3.1 | 0.4% | 2023-07-10 | Fix |
| CVE-2023-30956 | IDOR in Foundry Comments allows retrieval of attachments | 5.3CNA v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-30765 | Delta Electronics InfraSuite Device Master improper access control | 9.8v3.1 | 2.0% | 2023-07-10 | Exploit codeFix |
| CVE-2023-30449 | IBM Db2 denial of service | 7.5CNA v3.1 | 1.4% | 2023-07-10 | Fix |
| CVE-2023-30448 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.4% | 2023-07-10 | Fix |
| CVE-2023-30447 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.3% | 2023-07-10 | Fix |
| CVE-2023-30446 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.3% | 2023-07-10 | Fix |
| CVE-2023-30445 | IBM Db2 denial of service | 7.5CNA v3.1 | 1.4% | 2023-07-10 | Fix |
| CVE-2023-30442 | IBM Db2 denial of service | 5.9CNA v3.1 | 1.3% | 2023-07-10 | Fix |
| CVE-2023-30431 | IBM Db2 buffer overflow | 8.4CNA v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-29256 | IBM Db2 information disclosure | 5.3CNA v3.1 | 0.8% | 2023-07-10 | Fix |
| CVE-2023-29095 | David F. Carr RSVPMaker SQL injection | 7.2v3.1 | 0.9% | 2023-07-10 | Fix |
| CVE-2023-28995 | Configurable Tag Cloud WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-28989 | Happy Addons for Elementor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-28986 | Affiliates Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-28958 | IBM Watson Knowledge Catalog CSV injection | 7.0CNA v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-28955 | IBM Watson Knowledge Catalog denial of service | 6.5CNA v3.1 | 1.0% | 2023-07-10 | Fix |
| CVE-2023-28953 | IBM Cognos Analytics on Cloud Pak for data improper access control | 3.1CNA v3.1 | 0.7% | 2023-07-10 | Fix |
| CVE-2023-27869 | IBM Db2 code execution | 6.3CNA v3.1 | 1.6% | 2023-07-10 | Fix |
| CVE-2023-27868 | IBM Db2 code execution | 6.3CNA v3.1 | 1.6% | 2023-07-10 | Fix |
| CVE-2023-27867 | IBM Db2 code execution | 6.3CNA v3.1 | 1.6% | 2023-07-10 | Fix |
| CVE-2023-27558 | IBM Db2 privilege escalation | 8.4CNA v3.1 | 0.2% | 2023-07-10 | Fix |
| CVE-2023-27540 | IBM Watson CP4D Data Stores denial of service | 5.9CNA v3.1 | 1.3% | 2023-07-10 | Fix |
| CVE-2023-26590 | sox floating point exception in src/aiff.c | 5.5NVD v3.1 | 0.2% | 2023-07-10 | Fix |
| CVE-2023-25478 | Weather Station WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-24490 | Citrix Virtual Delivery Agents improper access control | 6.3CNA v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-24489 | Citrix Content Collaboration ShareFile improper access control | 9.8CNA v3.1 | 97.3% | 2023-07-10 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-24488 | Citrix ADC and Citrix Gateway cross-site scripting | 6.1CNA v3.1 | 81.2% | 2023-07-10 | NucleiEmerging ThreatsExploit codeFix |
| CVE-2023-24487 | Citrix ADC and Citrix Gateway arbitrary file read | 6.3CNA v3.1 | 1.1% | 2023-07-10 | Fix |
| CVE-2023-24486 | Citrix Workspace app ICA session improper access control | 5.5v3.1 | 0.2% | 2023-07-10 | Fix |
| CVE-2023-24405 | Contact Form 7 PayPal and Stripe Add-on WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-24395 | Contact Form 7 Redirect and Thank You Page WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-23993 | IP Blocker Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | |
| CVE-2023-23897 | Simple Mobile URL Redirect WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 1.6% | 2023-07-10 | Nuclei |
| CVE-2023-23869 | Google XML Sitemap for Mobile WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | |
| CVE-2023-23804 | HT Feed WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-23787 | Premmerce Redirect Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-23487 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to insufficient audit logging. IBM X-Force ID: 245918. | 4.3CNA v3.1 | 0.8% | 2023-07-10 | Fix |
| CVE-2023-23348 | HCL Launch is vulnerable to sensitive information disclosure | 5.1CNA v3.1 | 0.2% | 2023-07-10 | Fix |
| CVE-2023-22835 | Denial of service in Foundry Issues | 7.7CNA v3.1 | 0.7% | 2023-07-10 | Fix |
| CVE-2023-22695 | Custom Field Template WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-22694 | BigContact WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | |
| CVE-2023-22673 | Website Monetization by MageNet WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-3608 | Ruijie BCR810W Tracert page os command injection | 8.8v3.1 | 12.3% | 2023-07-10 | |
| CVE-2023-3607 | kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection | 8.0v3.1 | 6.4% | 2023-07-10 | |
| CVE-2023-3606 | TamronOS ping os command injection | 8.8v3.1 | 7.1% | 2023-07-10 | |
| CVE-2023-3605 | PHPGurukul Online Shopping Portal Registration page excessive authentication | 9.1v3.1 | 0.7% | 2023-07-10 | |
| CVE-2023-3599 | SourceCodester Best Fee Management System Add User admin_class.php save_user access control | 9.8v3.1 | 0.7% | 2023-07-10 | |
| CVE-2023-3580 | Improper Handling of Additional Special Element in Squidex/Squidex | 4.3v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3579 | HadSky user cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3578 | DedeCMS co_do.php server-side request forgery | 9.8v3.1 | 3.6% | 2023-07-10 | Nuclei |
| CVE-2023-3574 | Improper authorization in pimcore/customer-data-framework | 6.5v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-3568 | Open redirect in alextselegidis/easyappointments | 4.8v3.1 | 0.4% | 2023-07-10 | Fix |
| CVE-2023-3566 | wallabag Profile Config config allocation of resources | 6.5v3.1 | 1.4% | 2023-07-10 | Fix |
| CVE-2023-3565 | Cross-site scripting (XSS) Generic in nilsteampassnet/TeamPass | 5.4v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3564 | GZ Scripts GZ Multi Hotel Booking System index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3563 | GZ Scripts GZ E Learning Platform URL parameter cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3562 | GZ Scripts PHP CRM Platform index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3561 | GZ Scripts PHP GZ Hotel Booking Script load.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3560 | GZ Scripts Ticket Booking Script load.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-10 | |
| CVE-2023-3559 | GZ Scripts PHP GZ Appointment Scheduling Script load.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-10 | |
| CVE-2023-3558 | GZ Scripts Event Booking Calendar load.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3557 | GZ Scripts Property Listing Script preview.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3556 | GZ Scripts Car Listing Script PHP preview.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3555 | GZ Scripts PHP Vacation Rental Script preview.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3554 | GZ Scripts GZ Forum Script preview.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-3273 | SICK ICR890-4 improper access control | 7.5CNA v3.1 | 1.1% | 2023-07-10 | Fix |
| CVE-2023-3272 | SICK ICR890-4 cleartext transmission of sensitive information | 7.5CNA v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3271 | SICK ICR890-4 improper access control | 8.2CNA v3.1 | 0.9% | 2023-07-10 | Fix |
| CVE-2023-3270 | SICK ICR890-4 information disclosure | 8.6CNA v3.1 | 1.0% | 2023-07-10 | Fix |
| CVE-2023-3225 | Float menu WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3219 | EventON WordPress plugin unauthenticated post access via IDOR | 5.3NVD v3.1 | 7.5% | 2023-07-10 | NucleiExploit codeFix |
| CVE-2023-3209 | MStore API for WordPress settings update via CSRF | 3.5NVD v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-3175 | AI ChatBot WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3131 | MStore API WordPress plugin Subscriber+ unauthorized settings update | 4.3NVD v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3129 | URL Shortify WordPress plugin Admin+ cross-site scripting | 4.8NVD v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3118 | Export All URLs WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-3077 | MStore API WordPress plugin unauthenticated blind SQLi | 9.8NVD v3.1 | 5.5% | 2023-07-10 | NucleiFix |
| CVE-2023-3076 | MStore API WordPress plugin unauthenticated privilege escalation | 9.8NVD v3.1 | 2.2% | 2023-07-10 | Exploit codeFix |
| CVE-2023-3045 | SQLi in Tise Technology's Parking Web Report | 9.8CNA v3.1 | 0.9% | 2023-07-10 | Fix |
| CVE-2023-2967 | TinyMCE Custom Styles WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-2964 | Simple Iframe WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-2853 | XSS in SoftMed's SelfPatron | 6.1v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-2852 | SQLi in SoftMed's SelfPatron | 9.8CNA v3.1 | 0.9% | 2023-07-10 | Fix |
| CVE-2023-2796 | EventON WordPress plugin unauthenticated Event access | 5.3NVD v3.1 | 42.7% | 2023-07-10 | NucleiExploit codeFix |
| CVE-2023-2709 | AN_GradeBook WordPress plugin Admin+ XSS | 4.8NVD v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-2635 | StPeteDesign Call Now Accessibility Button plugin plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-2578 | Buy Me a Coffee WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-2529 | Enable SVG Uploads WordPress plugin Author+ stored XSS via SVG | 5.4NVD v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-2495 | Greeklish-permalink WordPress plugin unauthenticated post Slug update | 4.3NVD v3.1 | 0.3% | 2023-07-10 | Fix |
| CVE-2023-2493 | All In One Redirection WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 1.1% | 2023-07-10 | Fix |
| CVE-2023-2234 | zephyrproject-rtos Zephyr BT HCI host union variant confusion | 6.8CNA v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-2046 | SQLi in Yontem Vehicle TrackingSsystem | 9.8CNA v3.1 | 0.9% | 2023-07-10 | Fix |
| CVE-2023-2029 | PrePost SEO WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.6% | 2023-07-10 | |
| CVE-2023-2028 | StPeteDesign Call Now Accessibility Button stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-2026 | Image Protector WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-07-10 | |
| CVE-2023-1902 | zephyrproject-rtos Zephyr HCI Connection Creation Dangling State Reference Re-use | 5.9CNA v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-1901 | zephyrproject-rtos Zephyr HCI send_sync Dangling Semaphore Reference Re-use | 5.9CNA v3.1 | 0.6% | 2023-07-10 | Fix |
| CVE-2023-1780 | Companion Sitemap Generator WordPress plugin reflected XSS | 6.1NVD v3.1 | 1.0% | 2023-07-10 | NucleiFix |
| CVE-2023-1597 | tagDiv Cloud Library privilege escalation | 8.8NVD v3.1 | 0.5% | 2023-07-10 | Fix |
| CVE-2023-1208 | HTTP Headers WordPress plugin Admin+ remote code execution | 7.2NVD v3.1 | 1.7% | 2023-07-10 | Fix |
| CVE-2023-1183 | libreoffice arbitrary file write | 5.5NVD v3.1 | 64.6% | 2023-07-10 | Fix |
| CVE-2023-1119 | WP-Optimize WordPress plugin multiple plugins cross-site scripting from Third-party library | 6.1NVD v3.1 | 1.2% | 2023-07-10 | NucleiFix |
| CVE-2023-0359 | zephyrproject-rtos Zephyr ipv6: Missing ipv6 nullptr-check in handle_ra_input | 5.9CNA v3.1 | 0.9% | 2023-07-10 | |
| CVE-2023-32000 | Ubiquiti UniFi Network Application cross-site scripting | 4.8v3.1 | 0.3% | 2023-07-08 | Fix |
| CVE-2023-3553 | Exposure of sensitive information to an unauthorized actor in nilsteampassnet/TeamPass | 7.5v3.1 | 0.8% | 2023-07-08 | Fix |
| CVE-2023-3552 | Improper encoding or escaping of output in nilsteampassnet/TeamPass | 5.4NVD v3.1 | 0.5% | 2023-07-08 | Fix |
| CVE-2023-3551 | Code injection in nilsteampassnet/TeamPass | 7.2NVD v3.1 | 1.1% | 2023-07-08 | Fix |
| CVE-2023-37308 | Zoho ManageEngine ADAudit Plus cross-site scripting | 5.4v3.1 | 1.9% | 2023-07-07 | Fix |
| CVE-2023-37270 | Piwigo SQL injection vulnerability in User-Agent | 7.6CNA v3.1 | 4.5% | 2023-07-07 | NucleiFix |
| CVE-2023-37269 | Winter CMS vulnerable to stored XSS through privileged upload of SVG file | 2.0CNA v3.1 | 2.7% | 2023-07-07 | Exploit codeFix |
| CVE-2023-37264 | Pipelines do not validate child UIDs | 3.7CNA v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-37262 | CC: Tweaked SSRF to Cloud Services Metadata services not Blocked by Default | 9.6CNA v3.1 | 0.9% | 2023-07-07 | Fix |
| CVE-2023-37261 | MightyPirates OpenComputers Internet Card server-side request forgery | 9.6CNA v3.1 | 0.8% | 2023-07-07 | Fix |
| CVE-2023-37192 | Bitcoin Core missing encryption | 7.5v3.1 | 0.6% | 2023-07-07 | Fix |
| CVE-2023-37173 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 2.0% | 2023-07-07 | |
| CVE-2023-37172 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 2.0% | 2023-07-07 | |
| CVE-2023-37171 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 2.0% | 2023-07-07 | |
| CVE-2023-37170 | TOTOLINK A3300R OS command injection | 9.8v3.1 | 1.7% | 2023-07-07 | |
| CVE-2023-37149 | TOTOLINK LR350 command injection | 9.8v3.1 | 2.0% | 2023-07-07 | |
| CVE-2023-37148 | TOTOLINK LR350 command injection | 9.8v3.1 | 2.0% | 2023-07-07 | |
| CVE-2023-37146 | TOTOLINK LR350 command injection | 9.8v3.1 | 2.0% | 2023-07-07 | |
| CVE-2023-37145 | TOTOLINK LR350 command injection | 9.8v3.1 | 2.0% | 2023-07-07 | |
| CVE-2023-37144 | Tenda AC10 command injection | 9.8v3.1 | 2.4% | 2023-07-07 | |
| CVE-2023-37067 | Chamilo cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-37066 | Chamilo cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-37065 | Chamilo cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-37064 | Chamilo cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-37063 | Chamilo cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-37062 | Chamilo cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-37061 | Chamilo cross-site scripting | 4.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-36994 | Travianz incorrect authorization | 9.8v3.1 | 0.9% | 2023-07-07 | |
| CVE-2023-36993 | Travianz weak random number generator | 9.8v3.1 | 1.0% | 2023-07-07 | |
| CVE-2023-36992 | Travianz PHP injection | 7.2v3.1 | 1.3% | 2023-07-07 | |
| CVE-2023-36256 | Online Examination System cross-site request forgery | 6.5v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-36201 | JerryScript out-of-bounds read | 7.5v3.1 | 0.6% | 2023-07-07 | |
| CVE-2023-35890 | IBM WebSphere Application Server information disclosure | 5.1CNA v3.1 | 0.1% | 2023-07-07 | Fix |
| CVE-2023-35765 | PiiGAB M-Bus plaintext storage of a password | 6.5v3.1 | 0.5% | 2023-07-07 | Fix |
| CVE-2023-35120 | PiiGAB M-Bus cross-site request forgery | 8.8v3.1 | 0.3% | 2023-07-07 | Fix |
| CVE-2023-34995 | PiiGAB M-Bus weak password requirements | 9.8v3.1 | 0.6% | 2023-07-07 | Fix |
| CVE-2023-34433 | PiiGAB M-Bus use of password hash with insufficient computational effort | 9.8v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-34197 | Zoho ManageEngine ServiceDesk Plus incorrect authorization | 5.4v3.1 | 3.5% | 2023-07-07 | Fix |
| CVE-2023-33664 | Ai-dev Declinaisons A La Volee SQL injection | 8.8v3.1 | 0.9% | 2023-07-07 | |
| CVE-2023-33008 | Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale | 5.3v3.1 | 1.5% | 2023-07-07 | Fix |
| CVE-2023-32652 | PiiGAB M-Bus cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-07-07 | Fix |
| CVE-2023-32183 | openSUSE Tumbleweed incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2023-07-07 | |
| CVE-2023-29998 | GIS3W G3w-suite content editor cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-07 | |
| CVE-2023-27845 | Kerawen Omnichannel Stocks PrestaShop le SQL injection | 9.8v3.1 | 1.0% | 2023-07-07 | |
| CVE-2023-25201 | Multitech Conduit Ap Mtcap2-l4e1 cross-site request forgery | 8.8v3.1 | 0.5% | 2023-07-07 | |
| CVE-2023-20180 | Cisco Webex Meetings cross-site request forgery | 4.3CNA v3.1 | 0.4% | 2023-07-07 | Fix |
| CVE-2023-20133 | Cisco Webex Meetings cross-site scripting | 5.4CNA v3.1 | 0.6% | 2023-07-07 | Fix |
| CVE-2023-3544 | GZ Scripts Time Slot Booking Calendar PHP load.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3543 | GZ Scripts Availability Booking Calendar PHP HTTP POST request load.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3542 | ThinuTech ThinuCMS contact.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3541 | ThinuTech ThinuCMS author_posts.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3540 | SimplePHPscripts NewsLetter Script PHP URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3539 | SimplePHPscripts Simple Forum PHP URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3538 | SimplePHPscripts Photo Gallery PHP URL parameter preview.php cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3537 | SimplePHPscripts News Script PHP Pro URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3536 | SimplePHPscripts Funeral Script PHP URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3535 | SimplePHPscripts FAQ Script PHP URL parameter preview.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-07 | |
| CVE-2023-3534 | SourceCodester Shopping Website check_availability.php SQL injection | 7.5v3.1 | 0.6% | 2023-07-07 | |
| CVE-2023-3532 | Cross-site scripting (XSS) Stored in Outline/Outline | 5.4NVD v3.1 | 0.5% | 2023-07-07 | Fix |
| CVE-2023-37454 | Linux kernel use-after-free | 5.5v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-37453 | Linux kernel out-of-bounds read | 4.6NVD v3.1 | 0.6% | 2023-07-06 | Fix |
| CVE-2023-37260 | The PHP League oauth2-server information disclosure through error messages | 8.2CNA v3.1 | 1.0% | 2023-07-06 | Fix |
| CVE-2023-37245 | Huawei HarmonyOS buffer overflow vulnerability in the modem pinctrl module | 9.1v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2023-37242 | Huawei HarmonyOS insecure direct object reference | 9.8v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2023-37241 | Huawei HarmonyOS input verification vulnerability in the WMS API | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-37240 | Huawei HarmonyOS vulnerability of input length not verified in the distributed file system | 9.1v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2023-37239 | Huawei HarmonyOS string formatting vulnerability in the distributed file system | 7.5v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2023-37238 | Huawei HarmonyOS permission weakness | 5.3v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2023-37136 | EyouCMS Basic Website Information module stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-37135 | EyouCMS Image upload module stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-07-06 | |
| CVE-2023-37134 | EyouCMS Basic Information module stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-37133 | EyouCMS Column management module stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-07-06 | |
| CVE-2023-37132 | EyouCMS custom variables module stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-07-06 | |
| CVE-2023-37131 | Yzncms component /public/admin/profile/update.html cross-site request forgery | 6.5v3.1 | 0.2% | 2023-07-06 | |
| CVE-2023-37125 | Seacms Management Custom label module stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-37124 | Seacms Site Setup module stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-37122 | Bagesoft Bagecms stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-07-06 | |
| CVE-2023-36995 | Travianz cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-06 | |
| CVE-2023-36970 | CMS Made Simple cross-site scripting | 5.4v3.1 | 0.6% | 2023-07-06 | |
| CVE-2023-36969 | CMS Made Simple unrestricted file upload | 8.8v3.1 | 49.3% | 2023-07-06 | MetasploitExploit code |
| CVE-2023-36968 | Food Ordering System A SQL injection | 7.2v3.1 | 0.9% | 2023-07-06 | |
| CVE-2023-36859 | PiiGAB M-Bus code injection | 9.8v3.1 | 0.8% | 2023-07-06 | Fix |
| CVE-2023-36830 | SQLFluff users with access to config file, using `libary_path` may call arbitrary python code | 6.3CNA v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-36829 | Sentry CORS configuration incorrect authorization | 6.8CNA v3.1 | 0.7% | 2023-07-06 | Fix |
| CVE-2023-36823 | Sanitize vulnerable to cross-site scripting | 7.1CNA v3.1 | 0.7% | 2023-07-06 | Fix |
| CVE-2023-36462 | Mastodon's verified profile links can be formatted in a misleading way | 5.4CNA v3.1 | 0.6% | 2023-07-06 | Fix |
| CVE-2023-36461 | Mastodon vulnerable to denial of service through slow HTTP responses | 7.5CNA v3.1 | 1.3% | 2023-07-06 | Fix |
| CVE-2023-36460 | Mastodon vulnerable to arbitrary file creation through media attachments | 10.0CNA v3.1 | 40.1% | 2023-07-06 | Fix |
| CVE-2023-36459 | Mastodon vulnerable to cross-site scripting through oEmbed preview cards | 9.3CNA v3.1 | 1.2% | 2023-07-06 | Fix |
| CVE-2023-36456 | Authentik lacks Proxy IP headers validation | 8.3CNA v3.1 | 0.8% | 2023-07-06 | Fix |
| CVE-2023-36189 | langchain SQL injection | 7.5v3.1 | 1.2% | 2023-07-06 | Fix |
| CVE-2023-36188 | langchain vulnerable to arbitrary code execution | 9.8v3.1 | 1.9% | 2023-07-06 | Fix |
| CVE-2023-35987 | PiiGAB M-Bus use of hard-coded credentials | 9.8v3.1 | 0.8% | 2023-07-06 | Fix |
| CVE-2023-35948 | Novu open redirect vulnerability in Sign-In with GitHub Functionality | 5.4CNA v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-35937 | Metersphere missing permission check | 6.0CNA v3.1 | 0.7% | 2023-07-06 | Fix |
| CVE-2023-35934 | yt-dlp File Downloader cookie leak | 6.1CNA v3.1 | 1.0% | 2023-07-06 | Fix |
| CVE-2023-34193 | Zimbra Collaboration file upload | 8.8v3.1 | 1.2% | 2023-07-06 | Fix |
| CVE-2023-34192 | Synacor Zimbra Collaboration Suite (ZCS) cross-site scripting (XSS) | 9.0v3.1 | 77.3% | 2023-07-06 | KEVNucleiFix |
| CVE-2023-34164 | Huawei HarmonyOS null pointer dereference | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-33868 | PiiGAB M-Bus improper restriction of excessive authentication attempts | 9.8v3.1 | 0.7% | 2023-07-06 | Fix |
| CVE-2023-31277 | PiiGAB M-Bus unprotected transport of credentials | 7.5v3.1 | 0.6% | 2023-07-06 | Fix |
| CVE-2023-30678 | Samsung Mobile Calendar Potential zip path traversal | 5.1CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30677 | Samsung Mobile Samsung Pass improper access control | 6.1CNA v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2023-30676 | Samsung Mobile Samsung Pass improper access control | 4.6CNA v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2023-30675 | Samsung Mobile Samsung Pass improper authentication | 6.2CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30674 | Samsung Internet SameSite cookie handling vulnerability | 6.5CNA v3.1 | 0.6% | 2023-07-06 | Fix |
| CVE-2023-30673 | Samsung Mobile Smart Switch PC improper input validation | 5.5CNA v3.1 | 0.1% | 2023-07-06 | Fix |
| CVE-2023-30672 | Samsung Mobile Samsung Smart Switch improper privilege management | 6.8CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30671 | Samsung Mobile Devices package installation logic flaw | 6.3CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30670 | Samsung Mobile Devices BuildIpcFactoryDeviceTestEvent of libsec-ril out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30669 | Samsung Mobile Devices out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30668 | Samsung Mobile Devices BuildOemSecureSimLockResponse of libsec-ril out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30667 | Samsung Mobile Devices Audio system service improper access control | 5.1CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30666 | Samsung Mobile Devices DoOemImeiSetPreconfig in libsec-ril improper input validation | 5.3CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30665 | Samsung Mobile Devices OnOemServiceMode in libsec-ril improper input validation | 4.4CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30664 | Samsung Mobile Devices RegisteredMSISDN improper input validation | 8.5CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30663 | Samsung Mobile Devices OemPersonalizationSetLock in libsec-ril improper input validation | 5.3CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30662 | Samsung Mobile Devices getChipIds in UwbAospAdapterService information disclosure | 6.2CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30661 | Samsung Mobile Devices getChipInfos in UwbAospAdapterService information disclosure | 6.2CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30660 | Samsung Mobile Devices getDefaultChipId in UwbAospAdapterService information disclosure | 6.2CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30659 | Samsung Mobile Devices Transaction improper input validation | 6.2CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30658 | Samsung Mobile Devices DataProfile improper input validation | 8.5CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30657 | Samsung Mobile Devices EnhancedAttestationResult improper input validation | 6.2CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30656 | Samsung Mobile Devices LSOItemData improper input validation | 8.5CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30655 | Samsung Mobile Devices SCEPProfile improper input validation | 8.5CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30653 | Samsung Mobile Devices enableTspDevice of sysinput HAL service out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30652 | Samsung Mobile Devices callrunTspCmdNoRead of sysinput HAL service out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30651 | Samsung Mobile Devices callgetTspsysfs of sysinput HAL service out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30650 | Samsung Mobile Devices callrunTspCmd of sysinput HAL service out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30649 | Samsung Mobile Devices RmtUimNeedApdu of RILD out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30648 | Samsung Mobile Devices Stack out-of-bounds write | 3.3CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30647 | Samsung Mobile Devices IpcRxUsimPhoneBookCapa of RILD out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30646 | Samsung Mobile Devices BroadcastSmsConfig of RILD out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30645 | Samsung Mobile Devices IpcRxIncomingCBMsg of RILD out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30644 | Samsung Mobile Devices CdmaSmsParser of RILD out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30643 | Samsung Mobile Devices Galaxy Themes service missing authentication | 7.7CNA v3.1 | 0.2% | 2023-07-06 | Fix |
| CVE-2023-30642 | Samsung Mobile Devices Galaxy Themes service improper privilege management | 6.2CNA v3.1 | 0.1% | 2023-07-06 | Fix |
| CVE-2023-30641 | Samsung Mobile Devices settings improper access control | 4.3CNA v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2023-30640 | Samsung Mobile Devices PersonaManagerService improper access control | 4.3CNA v3.1 | 0.1% | 2023-07-06 | Fix |
| CVE-2023-30326 | Chatengine cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-30325 | Chatengine SQL injection | 7.5v3.1 | 0.6% | 2023-07-06 | |
| CVE-2023-30323 | Chatengine SQL injection | 7.5v3.1 | 0.6% | 2023-07-06 | |
| CVE-2023-30322 | Chatengine cross-site scripting | 5.4v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-30321 | Chatengine cross-site scripting | 9.0v3.1 | 0.9% | 2023-07-06 | |
| CVE-2023-30320 | Chatengine cross-site scripting | 9.0v3.1 | 0.9% | 2023-07-06 | |
| CVE-2023-30319 | Chatengine cross-site scripting | 9.6v3.1 | 0.9% | 2023-07-06 | |
| CVE-2023-30195 | Lineagrafica Lgdetailedorder missing authorization | 7.5v3.1 | 0.5% | 2023-07-06 | |
| CVE-2023-29824 | SciPy Py_FindObjects function use-after-free | 9.8v3.1 | 1.3% | 2023-07-06 | Fix |
| CVE-2023-29656 | Darktrace Threat Visualizer An improper authorization | 6.1v3.1 | 0.3% | 2023-07-06 | |
| CVE-2023-29382 | Zimbra Collaboration code injection | 9.8v3.1 | 1.0% | 2023-07-06 | Fix |
| CVE-2023-29381 | Zimbra Collaboration incorrect authorization | 9.8v3.1 | 1.0% | 2023-07-06 | Fix |
| CVE-2023-27225 | User Registration & Login And User Management System With Admin Panel cross-site scripting | 5.4v3.1 | 0.5% | 2023-07-06 | |
| CVE-2023-26138 | drogonframework/drogon CRLF injection | 4.3v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-26137 | drogonframework/drogon HTTP response splitting | 6.1NVD v3.1 | 0.4% | 2023-07-06 | |
| CVE-2023-25583 | Milesight UR32L zebra vlan_name functionality OS command injection | 7.2v3.1 | 3.5% | 2023-07-06 | |
| CVE-2023-25582 | Milesight UR32L zebra vlan_name functionality OS command injection | 7.2v3.1 | 3.5% | 2023-07-06 | |
| CVE-2023-25124 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25123 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25122 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25121 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25120 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25119 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25118 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25117 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25116 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25115 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25114 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25113 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25112 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25111 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25110 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25109 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25108 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25107 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25106 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25105 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25104 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25103 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25102 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25101 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25100 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25099 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25098 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25097 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25096 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25095 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25094 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25093 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25092 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25091 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25090 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25089 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25088 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25087 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25086 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25085 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25084 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25083 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25082 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-25081 | Milesight UR32L vtysh_ubus binary buffer overflow | 7.2v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-24595 | Milesight UR32L OS command injection | 7.2v3.1 | 3.7% | 2023-07-06 | |
| CVE-2023-24583 | Milesight UR32L urvpn_client cmd_name_action functionality OS command injection | 8.8v3.1 | 3.0% | 2023-07-06 | |
| CVE-2023-24582 | Milesight UR32L urvpn_client cmd_name_action functionality OS command injection | 8.8v3.1 | 3.0% | 2023-07-06 | |
| CVE-2023-24520 | Milesight UR32L OS command injection | 8.8v3.1 | 3.6% | 2023-07-06 | |
| CVE-2023-24519 | Milesight UR32L OS command injection | 8.8v3.1 | 3.6% | 2023-07-06 | |
| CVE-2023-24497 | MilesightVPN cross-site scripting | 4.7v3.1 | 0.6% | 2023-07-06 | |
| CVE-2023-24496 | MilesightVPN cross-site scripting | 4.7v3.1 | 0.6% | 2023-07-06 | |
| CVE-2023-24256 | Nio Aspen path traversal | 7.8v3.1 | 0.3% | 2023-07-06 | |
| CVE-2023-24019 | Milesight UR32L stack-based buffer overflow | 8.1v3.1 | 1.0% | 2023-07-06 | |
| CVE-2023-24018 | Milesight UR32L stack-based buffer overflow | 8.8v3.1 | 1.5% | 2023-07-06 | |
| CVE-2023-23907 | MilesightVPN server.js start functionality path traversal | 7.5v3.1 | 1.2% | 2023-07-06 | |
| CVE-2023-23902 | Milesight UR32L uhttpd login functionality buffer overflow | 9.8v3.1 | 2.2% | 2023-07-06 | |
| CVE-2023-23571 | Milesight UR32L buffer over-read | 7.5v3.1 | 1.1% | 2023-07-06 | |
| CVE-2023-23550 | Milesight UR32L ys_thirdparty user_delete functionality OS command injection | 7.2v3.1 | 3.6% | 2023-07-06 | |
| CVE-2023-23547 | Milesight UR32L luci2-io file-export mib functionality path traversal | 6.5v3.1 | 1.3% | 2023-07-06 | |
| CVE-2023-23546 | Milesight UR32L improper certificate validation | 8.1v3.1 | 0.6% | 2023-07-06 | |
| CVE-2023-22844 | MilesightVPN requestHandlers.js verifyToken functionality authentication bypass | 9.8v3.1 | 0.8% | 2023-07-06 | |
| CVE-2023-22659 | Milesight UR32L libzebra.so change_hostname functionality OS command injection | 7.2v3.1 | 3.7% | 2023-07-06 | |
| CVE-2023-22653 | Milesight UR32L vtysh_ubus tcpdump_start_cb functionality OS command injection | 8.8v3.1 | 5.8% | 2023-07-06 | |
| CVE-2023-22371 | MilesightVPN liburvpn.so create_private_key functionality OS command injection | 8.1v3.1 | 3.4% | 2023-07-06 | |
| CVE-2023-22365 | Milesight UR32L ys_thirdparty check_system_user functionality OS command injection | 7.2v3.1 | 2.2% | 2023-07-06 | |
| CVE-2023-22319 | MilesightVPN requestHandlers.js LoginAuth functionality SQL injection | 9.8v3.1 | 0.9% | 2023-07-06 | |
| CVE-2023-22306 | Milesight UR32L libzebra.so bridge_group functionality OS command injection | 7.2v3.1 | 3.6% | 2023-07-06 | |
| CVE-2023-22299 | Milesight UR32L vtysh_ubus _get_fw_logs functionality OS command injection | 8.8v3.1 | 3.6% | 2023-07-06 | |
| CVE-2023-20899 | VMware SD-WAN Edge missing authorization | 7.5v3.1 | 0.6% | 2023-07-06 | Fix |
| CVE-2023-3531 | Cross-site scripting (XSS) Stored in nilsteampassnet/TeamPass | 5.4NVD v3.1 | 0.5% | 2023-07-06 | Fix |
| CVE-2023-3529 | Rotem Dynamics Rotem CRM OTP URI interface information exposure | 7.5v3.1 | 0.5% | 2023-07-06 | |
| CVE-2023-3528 | ThinuTech ThinuCMS category.php SQL injection | 9.8v3.1 | 0.5% | 2023-07-06 | |
| CVE-2023-3523 | Out-of-bounds read in gpac/gpac | 7.1v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-3521 | Cross-site scripting (XSS) Reflected in FOSSBilling/FOSSBilling | 6.1v3.1 | 0.9% | 2023-07-06 | NucleiFix |
| CVE-2023-3520 | Sensitive Cookie in HTTPS Session without Secure attribute in it-novum/openITCOCKPIT | 4.6v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2023-3456 | Huawei HarmonyOS vulnerability of kernel raw address leakage in the hang detector module | 5.3v3.1 | 0.3% | 2023-07-06 | Fix |
| CVE-2023-1695 | Huawei HarmonyOS vulnerability of failures to capture exceptions in the communication framework | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-1691 | Huawei HarmonyOS vulnerability of failures to capture exceptions in the communication framework | 7.5v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-1298 | ServiceNow Now User Experience cross-site scripting | 4.3CNA v3.1 | 0.4% | 2023-07-06 | Fix |
| CVE-2023-37212 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-37211 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.8% | 2023-07-05 | Fix |
| CVE-2023-37210 | Mozilla Firefox origin validation error | 6.5v3.1 | 0.3% | 2023-07-05 | Fix |
| CVE-2023-37209 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-37208 | Mozilla Firefox unrestricted file upload | 7.8v3.1 | 0.2% | 2023-07-05 | Fix |
| CVE-2023-37207 | Mozilla Firefox unsafe reflection | 6.5v3.1 | 0.7% | 2023-07-05 | Fix |
| CVE-2023-37206 | Mozilla Firefox link following | 6.5v3.1 | 0.7% | 2023-07-05 | Fix |
| CVE-2023-37205 | Mozilla Firefox spoofing | 6.5v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-37204 | Mozilla Firefox spoofing | 6.5v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-37203 | Mozilla Firefox arbitrary code execution | 7.8v3.1 | 0.3% | 2023-07-05 | Fix |
| CVE-2023-37202 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.8% | 2023-07-05 | Fix |
| CVE-2023-37201 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.8% | 2023-07-05 | Fix |
| CVE-2023-36934 | Progress MOVEit Transfer SQL injection | 9.1v3.1 | 95.0% | 2023-07-05 | NucleiFix |
| CVE-2023-36933 | Progress MOVEit Transfer improper exception handling | 7.5v3.1 | 72.2% | 2023-07-05 | Fix |
| CVE-2023-36932 | Progress MOVEit Transfer SQL injection | 8.1v3.1 | 81.1% | 2023-07-05 | Fix |
| CVE-2023-36828 | Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG | 5.5CNA v3.1 | 0.7% | 2023-07-05 | Fix |
| CVE-2023-36827 | Fides vulnerable to path traversal in Webserver API | 7.5CNA v3.1 | 1.5% | 2023-07-05 | Fix |
| CVE-2023-36822 | louislam uptime-kuma uptime Kuma authenticated path traversal | 6.5CNA v3.1 | 1.2% | 2023-07-05 | Fix |
| CVE-2023-36821 | louislam uptime-kuma uptime Kuma vulnerable to authenticated remote code execution | 8.8CNA v3.1 | 2.0% | 2023-07-05 | Fix |
| CVE-2023-36813 | Kanboard Authenticated SQL Injections vulnerability | 7.1CNA v3.1 | 0.9% | 2023-07-05 | Fix |
| CVE-2023-36809 | Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox | 8.1CNA v3.1 | 0.7% | 2023-07-05 | Fix |
| CVE-2023-36808 | GLPI vulnerable to SQL injection through Computer Virtual Machine information | 8.6CNA v3.1 | 51.7% | 2023-07-05 | Exploit codeFix |
| CVE-2023-36665 | protobufjs prototype pollution | 9.8v3.1 | 1.7% | 2023-07-05 | Fix |
| CVE-2023-36624 | Loxone Miniserver GO Gen 2 missing authorization | 7.8v3.1 | 0.3% | 2023-07-05 | |
| CVE-2023-36623 | Loxone Miniserver GO Gen 2 hard-coded credentials | 7.8v3.1 | 0.3% | 2023-07-05 | |
| CVE-2023-36622 | Loxone Miniserver GO Gen 2 OS command injection | 7.2v3.1 | 1.4% | 2023-07-05 | |
| CVE-2023-36458 | 1Panel vulnerable to ommand injection when entering the container terminal | 6.3CNA v3.1 | 2.3% | 2023-07-05 | Fix |
| CVE-2023-36457 | 1Panel vulnerable to command injection when adding container repositories | 6.3CNA v3.1 | 2.3% | 2023-07-05 | Fix |
| CVE-2023-35979 | ArubaOS web-based management interface buffer overflow | 5.3CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-35978 | ArubaOS web-based management interface reflected cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-35977 | ArubaOS command line interface information disclosure | 6.5CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-35976 | ArubaOS command line interface information disclosure | 6.5CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-35975 | HPE Aruba Mobility Conductor authenticated path traversal | 6.5CNA v3.1 | 0.7% | 2023-07-05 | Fix |
| CVE-2023-35974 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.4% | 2023-07-05 | Fix |
| CVE-2023-35973 | HPE Aruba Mobility Conductor Authenticated command injection | 7.2CNA v3.1 | 1.4% | 2023-07-05 | Fix |
| CVE-2023-35972 | HPE Aruba Mobility Conductor authenticated remote command injection | 7.2CNA v3.1 | 1.6% | 2023-07-05 | Fix |
| CVE-2023-35971 | ArubaOS web-based management interface stored cross-site scripting | 8.8CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-35940 | GLPI vulnerable to unauthenticated access to Dashboard data | 7.5CNA v3.1 | 0.7% | 2023-07-05 | Fix |
| CVE-2023-35939 | GLPI vulnerable to unauthorized access to Dashboard data | 8.1CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-35936 | Arbitrary file write is possible in Pandoc when | 6.0CNA v3.1 | 0.4% | 2023-07-05 | Fix |
| CVE-2023-35924 | GLPI vulnerable to SQL injection via inventory agent request | 8.6CNA v3.1 | 52.4% | 2023-07-05 | Fix |
| CVE-2023-35863 | Madefornet HTTP Debugger race condition | 5.3v3.1 | 0.3% | 2023-07-05 | |
| CVE-2023-35786 | Zoho ManageEngine ADManager Plus XML external entity injection | 4.9v3.1 | 3.0% | 2023-07-05 | Fix |
| CVE-2023-35001 | Linux kernel nftables out-of-bounds read/Write | 7.8NVD v3.1 | 1.5% | 2023-07-05 | Exploit codeFix |
| CVE-2023-34654 | Taogogo taoCMS cross-site scripting | 6.1v3.1 | 0.5% | 2023-07-05 | |
| CVE-2023-34473 | AMI MegaRAC_SPx usage of hard-coded credentials | 6.6CNA v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-34472 | AMI MegaRAC_SPx CRLF injection | 5.7CNA v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-34471 | AMI MegaRAC_SPx missing cryptographic step | 6.3CNA v3.1 | 0.3% | 2023-07-05 | Fix |
| CVE-2023-34457 | MechanicalSoup form submission information disclosure | 5.9CNA v3.1 | 1.1% | 2023-07-05 | Fix |
| CVE-2023-34338 | AMI MegaRAC_SPx hard coded cryptographic key | 7.1CNA v3.1 | 0.3% | 2023-07-05 | Fix |
| CVE-2023-34337 | AMI MegaRAC_SPx inadequate encryption strength | 7.6CNA v3.1 | 0.2% | 2023-07-05 | Fix |
| CVE-2023-34244 | GLPI vulnerable to reflected XSS in search pages | 6.5CNA v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-34150 | Apache ANY23: Possible excessive allocation of resources reading input | 6.5CNA v3.1 | 1.5% | 2023-07-05 | Fix |
| CVE-2023-34107 | GLPI vulnerable to unauthorized access to KnowbaseItem data | 6.5CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-34106 | GLPI vulnerable to unauthorized access to User data | 6.5CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-33335 | Sophos iView cross-site scripting | 6.1v3.1 | 0.6% | 2023-07-05 | |
| CVE-2023-33201 | Bouncycastle BC-JAVA Bouncy Castle for Java LDAP injection | 5.3v3.1 | 0.8% | 2023-07-05 | Fix |
| CVE-2023-31248 | Linux kernel nftables use-after-free local privilege escalation | 7.8NVD v3.1 | 1.9% | 2023-07-05 | Fix |
| CVE-2023-31194 | Diagon GraphPlanar::Write functionality improper array index validation | 7.8v3.1 | 0.4% | 2023-07-05 | |
| CVE-2023-30607 | icingaweb2-module-jira template and field configuration are susceptible to CSRF | 5.0CNA v3.1 | 0.3% | 2023-07-05 | Fix |
| CVE-2023-30207 | Kodi A divide by zero | 5.5v3.1 | 0.3% | 2023-07-05 | Fix |
| CVE-2023-27390 | Diagon Sequence::DrawText functionality heap-based buffer overflow | 7.8v3.1 | 0.5% | 2023-07-05 | |
| CVE-2023-27199 | Paxtechnology Pax A930 authentication bypass by spoofing | 6.7v3.1 | 0.2% | 2023-07-05 | |
| CVE-2023-27198 | Paxtechnology Pax A930 OS command injection | 6.8v3.1 | 0.6% | 2023-07-05 | |
| CVE-2023-27197 | PAX Technology A930 shared library exported function privilege escalation | 6.7v3.1 | 0.2% | 2023-07-05 | |
| CVE-2023-25399 | SciPy Py_FindObjects function memory leak | 5.5v3.1 | 0.4% | 2023-07-05 | Fix |
| CVE-2023-3515 | Open redirect in go-gitea/Gitea | 4.4v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-3482 | Mozilla Firefox missing authorization | 6.5v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-3455 | Huawei HarmonyOS key management vulnerability in the system | 9.1v3.1 | 0.4% | 2023-07-05 | Fix |
| CVE-2023-3336 | Tn-5900 Series User Enumeration vulnerability | 5.3CNA v3.1 | 0.6% | 2023-07-05 | Fix |
| CVE-2023-3089 | Openshift ocp and fips mode | 7.0CNA v3.1 | 0.5% | 2023-07-05 | Fix |
| CVE-2023-2880 | Frauscher Sensortechnik Diagnostic System FDS001 for FAdC/FAdCi path traversal | 7.5CNA v3.1 | 1.0% | 2023-07-05 | |
| CVE-2023-2538 | tyan s5552_bmc TLS Private Key Accessible to External Parties | 4.2NVD v3.1 | 0.2% | 2023-07-05 | |
| CVE-2023-31999 | @fastify/oauth2 vulnerable to cross-site request forgery due to reused Oauth2 state | 8.8v3.1 | 0.7% | 2023-07-04 | Fix |
| CVE-2023-30990 | IBM i command execution | 8.6CNA v3.1 | 1.0% | 2023-07-04 | Exploit codeFix |
| CVE-2023-28542 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.8CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-28541 | Qualcomm Snapdragon buffer over-read in WLAN host | 7.8CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-25523 | NVIDIA CUDA Toolkit null pointer dereference | 3.3CNA v3.1 | 0.2% | 2023-07-04 | Fix |
| CVE-2023-25522 | NVIDIA DGX A100/A800 improper input validation | 7.5CNA v3.1 | 0.2% | 2023-07-04 | Fix |
| CVE-2023-25521 | NVIDIA DGX A100/A800 execution with unnecessary privileges | 7.5CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-25517 | NVIDIA vGPU software improper authorization | 7.1CNA v3.1 | 0.2% | 2023-07-04 | Fix |
| CVE-2023-25516 | NVIDIA GPU Display Driver integer overflow | 7.1CNA v3.1 | 0.2% | 2023-07-04 | Fix |
| CVE-2023-24854 | Qualcomm Snapdragon stack-based buffer overflow in WLAN host | 7.8CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-24851 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN host | 7.8CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-22906 | Heroelectronix Qubo HCD01 missing authentication | 8.8v3.1 | 0.8% | 2023-07-04 | Exploit code |
| CVE-2023-22667 | Qualcomm Snapdragon integer overflow or wraparound in Audio | 8.4CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-22387 | Qualcomm Snapdragon IPC vulnerability | 7.8CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-22386 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN host | 7.8CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21672 | Qualcomm Snapdragon use-after-free in Audio | 8.4CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21641 | Qualcomm Snapdragon Permissions, Privileges, and Access Controls in Display | 6.6CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21640 | Qualcomm Snapdragon buffer copy without checking size of input in Linux | 6.7CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21639 | Qualcomm Snapdragon Buffer Copy without Checking the Size of Input in Audio | 6.7CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21638 | Qualcomm Snapdragon incorrect type conversion or cast in Video | 6.7CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21637 | Qualcomm Snapdragon memory corruption | 6.7CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21635 | Qualcomm Snapdragon Data Network Stack & Connectivity memory corruption | 6.7CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21633 | Qualcomm Snapdragon improper restriction of operations within the bounds of a memory buffer in Linux | 6.7CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-21631 | Qualcomm Snapdragon improper input validation in Modem | 7.5CNA v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2023-21629 | Qualcomm Snapdragon double free in Modem | 6.8CNA v3.1 | 0.2% | 2023-07-04 | Fix |
| CVE-2023-21624 | Qualcomm Snapdragon information exposure in DSP services | 6.2CNA v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20775 | MediaTek chipsets buffer copy without checking size of input (classic buffer overflow) in display | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20774 | MediaTek chipsets improper input validation in display | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20773 | MediaTek chipsets improper authentication in vow | 7.8v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20772 | MediaTek chipsets improper authentication in vow | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20771 | MediaTek chipsets display memory corruption | 6.4v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20768 | MediaTek chipsets access of resource using incompatible type (type confusion) in ion | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20767 | MediaTek chipsets improper input validation in pqframework | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20766 | MediaTek chipsets improper input validation in gps | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20761 | MediaTek chipsets improper input validation in ril | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20760 | MediaTek chipsets improper input validation in apu | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20759 | MediaTek chipsets improper input validation in cmdq | 4.4v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20758 | MediaTek chipsets improper input validation in cmdq | 4.4v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20757 | MediaTek chipsets improper input validation in cmdq | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20756 | MediaTek chipsets integer overflow or wraparound in keyinstall | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20755 | MediaTek chipsets improper input validation in keyinstall | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20754 | MediaTek chipsets integer overflow or wraparound in keyinstall | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20753 | MediaTek chipsets out-of-bounds write in rpmb | 6.7v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20748 | MediaTek chipsets improper input validation in display | 4.4v3.1 | 0.1% | 2023-07-04 | Fix |
| CVE-2023-20693 | MediaTek chipsets null pointer dereference in wlan | 7.5v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2023-20692 | MediaTek chipsets null pointer dereference in wlan | 7.5v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2023-20691 | MediaTek chipsets integer overflow to buffer overflow in wlan | 7.5v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2023-20690 | MediaTek chipsets integer overflow to buffer overflow in wlan | 7.5v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2023-20689 | MediaTek chipsets integer overflow to buffer overflow in wlan | 7.5v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2023-3506 | ActiveITzone Active eCommerce CMS Create Ticket page cross-site scripting | 6.1v3.1 | 0.3% | 2023-07-04 | |
| CVE-2023-3505 | Onest CRM Project List 2 cross-site scripting | 6.1v3.1 | 0.4% | 2023-07-04 | |
| CVE-2023-3504 | SmartWeb Infotech Job Board My Profile page account unrestricted upload | 9.8v3.1 | 0.5% | 2023-07-04 | |
| CVE-2023-3503 | SourceCodester Shopping Website insert-product.php unrestricted upload | 8.8v3.1 | 0.9% | 2023-07-04 | |
| CVE-2023-3502 | SourceCodester Shopping Website search-result.php SQL injection | 7.5v3.1 | 0.7% | 2023-07-04 | |
| CVE-2023-3460 | Ultimate Member WordPress plugin unauthenticated privilege escalation | 9.8NVD v3.1 | 72.3% | 2023-07-04 | NucleiExploit codeFix |
| CVE-2023-3139 | WPExperts Protect WP Admin open redirect | 6.1NVD v3.1 | 0.7% | 2023-07-04 | NucleiFix |
| CVE-2023-3133 | Tutor LMS WordPress plugin unauthenticated access to Tutor LMS Lesson Resources via REST API | 7.5NVD v3.1 | 1.0% | 2023-07-04 | Fix |
| CVE-2023-2974 | Red Hat build of Quarkus quarkus-core vulnerable to client driven TLS cipher downgrading | 6.5CNA v3.1 | 0.9% | 2023-07-04 | Fix |
| CVE-2023-2333 | Ninja Forms Google Sheet Connector WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.7% | 2023-07-04 | Fix |
| CVE-2023-2324 | Elementor Forms Google Sheet Connector WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-07-04 | Fix |
| CVE-2023-2321 | WPForms Google Sheet Connector WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-07-04 | Fix |
| CVE-2023-2320 | CF7 Google Sheets Connector WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2023-07-04 | Fix |
| CVE-2023-2010 | Forminator WordPress plugin unauthenticated race condition on poll vote | 3.1NVD v3.1 | 0.4% | 2023-07-04 | Fix |
| CVE-2023-1273 | ND Shortcodes WordPress plugin Subscriber+ LFI | 8.8NVD v3.1 | 1.7% | 2023-07-04 | Fix |
| CVE-2023-37378 | Nullsoft Scriptable Install System uninstaller directory vulnerability | 5.3v3.1 | 0.9% | 2023-07-03 | Fix |
| CVE-2023-36819 | Knowage-Server vulnerable to path traversal in download functionalities | 6.5CNA v3.1 | 0.8% | 2023-07-03 | Fix |
| CVE-2023-36817 | The King's Temple Church Website Leaked Stripe API Key in Public Code Repository | 7.5CNA v3.1 | 0.6% | 2023-07-03 | |
| CVE-2023-36816 | Cross-site scripting (XSS) at Account creation in 2FAuth | 6.1CNA v3.1 | 0.5% | 2023-07-03 | Fix |
| CVE-2023-36815 | Sealos billing system permission control defect | 7.3CNA v3.1 | 0.5% | 2023-07-03 | |
| CVE-2023-36814 | Zopefoundation's Products.CMFCore vulnerable to unauthenticated denial of service and crash | 7.5CNA v3.1 | 0.7% | 2023-07-03 | Fix |
| CVE-2023-36611 | Ovarro TBox MS-CPU32 improper authorization | 6.5v3.1 | 0.5% | 2023-07-03 | Fix |
| CVE-2023-36610 | Ovarro TBox MS-CPU32 insufficient entropy | 5.9v3.1 | 0.5% | 2023-07-03 | Fix |