CVE-2023 records published in October 2023
This page lists the 2,534 CVE-2023 records published in October 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 19 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 39315.5% of these records
- Listed in CISA KEV
- 190.7% of these records
- Reported exploited
- 1under 0.1% of these records
- Detection signal
- 512.0% of these records
- Exploit code
- 993.9% of these records
- Actionable vendor fix
- 1,76569.7% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in October 2023 have had from about 36 months to about 37 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-47174 | Thorntech SFTP Gateway deserialization of untrusted data | 9.8v3.1 | 1.0% | 2023-10-31 | Fix |
| CVE-2023-46993 | TOTOLINK A3300R command injection | 9.8v3.1 | 1.5% | 2023-10-31 | |
| CVE-2023-46992 | TOTOLINK A3300R incorrect authorization | 7.5v3.1 | 0.5% | 2023-10-31 | |
| CVE-2023-46979 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.5% | 2023-10-31 | |
| CVE-2023-46978 | TOTOLINK X6000R missing authentication | 7.5v3.1 | 0.5% | 2023-10-31 | |
| CVE-2023-46977 | TOTOLINK LR1200GB out-of-bounds write | 9.8v3.1 | 8.7% | 2023-10-31 | |
| CVE-2023-46976 | TOTOLINK A3300R command injection | 9.8v3.1 | 1.5% | 2023-10-31 | |
| CVE-2023-46723 | Lte-pic32-writer's sendto.txt may disclose URL and the API key | 8.9CNA v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-46722 | Pimcore Admin Classic Bundle cross-site scripting (XSS) in PDF previews | 6.1CNA v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-46622 | WPPizza WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-46485 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.2% | 2023-10-31 | |
| CVE-2023-46484 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.2% | 2023-10-31 | |
| CVE-2023-46451 | Mayuri K Best Courier Management System cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-31 | Exploit code |
| CVE-2023-46378 | 1234n MiniCMS stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-31 | |
| CVE-2023-46361 | Artifex JBIG2DEC resource exhaustion | 6.5v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-46356 | Blmodules CSV Feeds Pro SQL injection | 9.8v3.1 | 0.6% | 2023-10-31 | |
| CVE-2023-46313 | Zotpress WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-46312 | Smart Online Order for Clover WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-46256 | PX4-Autopilot heap buffer overflow Bug | 4.4CNA v3.1 | 0.6% | 2023-10-31 | |
| CVE-2023-46255 | authzed spicedb `SPICEDB_DATASTORE_CONN_URI` is leaked when URI cannot be parsed | 4.2CNA v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-46250 | pypdf possible infinite loop when PdfWriter(clone_from) is used with a PDF | 5.1CNA v3.1 | 0.2% | 2023-10-31 | Fix |
| CVE-2023-46249 | authentik potential installation takeover when default admin user is deleted | 9.7CNA v3.1 | 0.7% | 2023-10-31 | Fix |
| CVE-2023-46248 | Overwrite of builtin Cody commands facilitates RCE | 9.1CNA v3.1 | 1.1% | 2023-10-31 | Fix |
| CVE-2023-46245 | Kimai (Authenticated) SSTI to RCE by Uploading a Malicious Twig file | 7.2CNA v3.1 | 1.5% | 2023-10-31 | Fix |
| CVE-2023-46240 | CodeIgniter4 error handler information disclosure | 7.5CNA v3.1 | 0.6% | 2023-10-31 | Fix |
| CVE-2023-46239 | quic-go vulnerable to pointer dereference that can lead to panic | 7.5CNA v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-46237 | fogproject FOG path traversal via unauthenticated endpoint | 5.8CNA v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-46236 | fogproject FOG SSRF via unauthenticated endpoint(s) | 8.6CNA v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-46235 | fogproject FOG stored XSS on log screen via unsanitized request logging | 5.4CNA v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-46210 | WC Captcha WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-31 | |
| CVE-2023-46139 | KernelSU signature validation mismatch | 5.0CNA v3.1 | 0.2% | 2023-10-31 | Fix |
| CVE-2023-46138 | JumpServer default admin user email leak password reset | 3.7CNA v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-46129 | nats-io nkeys xkeys Seal encryption used fixed key for all encryption | 7.5CNA v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-46040 | GetSimpleCMS cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-31 | |
| CVE-2023-45996 | SLIMS Senayan Library Management System SQL injection | 8.8v3.1 | 1.1% | 2023-10-31 | |
| CVE-2023-45955 | Nanoleaf Light Strip denial of service | 7.5v3.1 | 0.6% | 2023-10-31 | |
| CVE-2023-45899 | Idnovate Superuser incorrect authorization | 7.5v3.1 | 0.8% | 2023-10-31 | |
| CVE-2023-45378 | Hdclic Prestablog SQL injection | 9.8v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-44484 | Online Blood Donation Management System stored cross-site scripting (XSS) | 6.1CNA v3.1 | 0.4% | 2023-10-31 | |
| CVE-2023-43796 | Synapse vulnerable to leak of remote user device information | 5.3CNA v3.1 | 0.9% | 2023-10-31 | Fix |
| CVE-2023-43295 | Click Studios Passwordstate cross-site request forgery | 3.5v3.1 | 0.2% | 2023-10-31 | |
| CVE-2023-43139 | Franfinance OS command injection | 9.8v3.1 | 0.9% | 2023-10-31 | |
| CVE-2023-42658 | InSpec Archive command vulnerable to Maliciously Crafted Profile | 8.8CNA v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-42425 | Turing Edge+ EVC5FD improper certificate validation | 9.8v3.1 | 0.8% | 2023-10-31 | |
| CVE-2023-40681 | Groundhogg WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-40050 | Automate vulnerable to Malicious Content Uploaded through Embedded Compliance application | 9.9CNA v3.1 | 1.2% | 2023-10-31 | Fix |
| CVE-2023-39695 | Elenos ETG150 insufficient session expiration | 5.3v3.1 | 0.4% | 2023-10-31 | |
| CVE-2023-39610 | TP-Link Tapo C100 denial of service | 6.5v3.1 | 0.3% | 2023-10-31 | |
| CVE-2023-38994 | Univention Corporate Server cleartext storage of sensitive information | 7.8v3.1 | 0.3% | 2023-10-31 | |
| CVE-2023-37966 | User Activity Log WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-10-31 | Fix |
| CVE-2023-37833 | Elenos ETG150 improper access control | 2.7v3.1 | 0.4% | 2023-10-31 | |
| CVE-2023-37832 | Elenos ETG150 missing brute-force protection | 7.5v3.1 | 0.5% | 2023-10-31 | |
| CVE-2023-37831 | Elenos ETG150 response discrepancy | 5.3v3.1 | 0.5% | 2023-10-31 | |
| CVE-2023-37243 | Atera Agent Package Availability insecure temporary file | 7.8NVD v3.1 | 0.2% | 2023-10-31 | |
| CVE-2023-36508 | Contact Form to DB by BestWebSoft WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-10-31 | Fix |
| CVE-2023-36263 | Store-opart Op'art LIMIT Quantity SQL injection | 9.8v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-35879 | WooCommerce Product Vendors WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-10-31 | Fix |
| CVE-2023-33927 | Multiple Page Generator Plugin MPG WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-10-31 | Fix |
| CVE-2023-31794 | Artifex MuPDF uncontrolled recursion | 5.5v3.1 | 0.2% | 2023-10-31 | Fix |
| CVE-2023-31212 | Contact Form Entries WordPress plugin SQL injection | 9.8v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-28777 | LearnDash LMS WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-10-31 | Fix |
| CVE-2023-27846 | Theme Volty Cms Blog PrestaShop SQL injection | 9.8v3.1 | 0.6% | 2023-10-31 | Fix |
| CVE-2023-25047 | RSVPMaker WordPress plugin SQL command improper neutralization | 7.2v3.1 | 0.7% | 2023-10-31 | Fix |
| CVE-2023-25045 | RSVPMaker WordPress plugin SQL command improper neutralization | 7.2v3.1 | 0.6% | 2023-10-31 | Fix |
| CVE-2023-24410 | Contact Form Plugin WordPress plugin SQL command improper neutralization | 9.8v3.1 | 0.7% | 2023-10-31 | Fix |
| CVE-2023-24000 | GamiPress WordPress plugin SQL injection | 9.8v3.1 | 2.6% | 2023-10-31 | NucleiFix |
| CVE-2023-22518 | Atlassian Confluence Data Center and Server improper authorization | 10.0CNA v3.0 | 100.0% | 2023-10-31 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-20886 | VMware Workspace ONE UEM console open redirect | 8.8CNA v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5873 | Cross-site scripting (XSS) Stored in pimcore/pimcore | 5.4v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-5867 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 5.4v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5866 | Sensitive Cookie in HTTPS Session without Secure attribute in thorsten/phpMyFAQ | 5.7v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-5865 | Insufficient session expiration in thorsten/phpMyFAQ | 9.8v3.1 | 0.6% | 2023-10-31 | Fix |
| CVE-2023-5864 | Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ | 4.8NVD v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-5863 | Cross-site scripting (XSS) Reflected in thorsten/phpMyFAQ | 6.1NVD v3.1 | 1.1% | 2023-10-31 | NucleiFix |
| CVE-2023-5862 | Missing authorization in hamza417/Inure | 3.3NVD v3.1 | 0.3% | 2023-10-31 | Fix |
| CVE-2023-5861 | Cross-site scripting (XSS) Stored in microweber/microweber | 4.8v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5739 | HP PC Hardware Diagnostics Windows improper privilege management | 7.8v3.1 | 0.2% | 2023-10-31 | Fix |
| CVE-2023-5519 | EventPrime for WordPress Booking creation via CSRF | 4.3NVD v3.1 | 0.2% | 2023-10-31 | Fix |
| CVE-2023-5464 | Jquery accordion slideshow WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5458 | CITS Support svg, webp Media and TTF,OTF File Upload WordPress plugin Author+ stored XSS via SVG | 5.4NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5439 | Wp photo text slider 50 WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5438 | wp image slideshow WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5437 | WP fade in text news WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5436 | Vertical marquee WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5435 | Up down image slideshow gallery WordPress plugin SQL injection | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5434 | Superb slideshow gallery WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5433 | Message ticker WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5431 | Left right image slideshow gallery WordPress plugin SQL injection | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5430 | Jquery news ticker WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5429 | Information Reel WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5428 | Image vertical reel scroll slideshow WordPress plugin SQL injection | 6.5NVD v3.1 | 0.8% | 2023-10-31 | Fix |
| CVE-2023-5412 | Image horizontal reel scroll slideshow WordPress plugin SQL injection | 6.5NVD v3.1 | 1.5% | 2023-10-31 | Exploit codeFix |
| CVE-2023-5360 | Royal Elementor Addons and Templates WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 85.7% | 2023-10-31 | NucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-5307 | Photos and Files Contest Gallery Contact Form WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-5243 | Login screen manager WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-10-31 | |
| CVE-2023-5238 | EventPrime WordPress plugin reflected HTML injection on keyword parameter | 6.1NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5237 | Memberlite Shortcodes WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5229 | E2Pdf WordPress plugin Admin+ stored Cross-Site Scriping | 4.8NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5211 | Fattura24 WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5116 | Live updates from Excel WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-5114 | idbbee WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-10-31 | |
| CVE-2023-5099 | HTML filter and csv-file search WordPress plugin local file inclusion | 8.8v3.1 | 0.9% | 2023-10-31 | Fix |
| CVE-2023-5098 | Campaign Monitor Forms WordPress plugin Subscriber+ arbitrary options update | 8.1NVD v3.1 | 0.6% | 2023-10-31 | Fix |
| CVE-2023-5073 | iframe forms WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-31 | |
| CVE-2023-4836 | WordPress File Sharing plugin Subscriber+ sensitive data and files exposure via IDOR | 4.3NVD v3.1 | 0.5% | 2023-10-31 | Fix |
| CVE-2023-4823 | WP Meta and Date Remover WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-4390 | Popup box WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-4251 | EventPrime WordPress plugin Booking creation via CSRF | 4.3NVD v3.1 | 0.2% | 2023-10-31 | Fix |
| CVE-2023-4250 | EventPrime WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2023-10-31 | Fix |
| CVE-2023-3955 | Kubernetes Windows nodes Insufficient input sanitization leads to privilege escalation | 8.8CNA v3.1 | 4.0% | 2023-10-31 | Fix |
| CVE-2023-3676 | Kubernetes Windows nodes Insufficient input sanitization leads to privilege escalation | 8.8CNA v3.1 | 13.2% | 2023-10-31 | Fix |
| CVE-2023-47104 | Vareille Tinyfiledialogs command injection | 9.8v3.1 | 0.7% | 2023-10-30 | |
| CVE-2023-47101 | Securepoint OpenVPN-Client improper privilege management | 7.8v3.1 | 0.2% | 2023-10-30 | |
| CVE-2023-47090 | Linux Foundation nats-server NATS.io: Adding accounts for just the system account adds auth bypass | 6.5v3.1 | 0.7% | 2023-10-30 | Fix |
| CVE-2023-46867 | Color Demoiccmax null pointer dereference | 6.5v3.1 | 0.5% | 2023-10-30 | |
| CVE-2023-46866 | Color Demoiccmax out-of-bounds write | 6.5v3.1 | 0.6% | 2023-10-30 | |
| CVE-2023-46865 | Craterapp crater code injection | 7.2v3.1 | 20.3% | 2023-10-30 | Exploit code |
| CVE-2023-46864 | peppermint path traversal | 5.3v3.1 | 0.7% | 2023-10-30 | |
| CVE-2023-46863 | peppermint path traversal | 7.5v3.1 | 0.9% | 2023-10-30 | |
| CVE-2023-46502 | OpenCRX allows a remote attacker to execute arbitrary code via a crafted request | 9.8v3.1 | 0.7% | 2023-10-30 | Fix |
| CVE-2023-46478 | miniCal insecure direct object reference | 8.8v3.1 | 1.0% | 2023-10-30 | Exploit code |
| CVE-2023-45956 | Govee Led Strip denial of service | 7.5v3.1 | 0.5% | 2023-10-30 | |
| CVE-2023-45799 | MLSoft TCO!stream remote code execution | 9.8v3.1 | 0.3% | 2023-10-30 | Fix |
| CVE-2023-45798 | Yettiesoft VestCert remote code execution | 9.8v3.1 | 0.6% | 2023-10-30 | Fix |
| CVE-2023-45797 | DreamSecurity MagicLine buffer overflow | 9.8v3.1 | 0.8% | 2023-10-30 | Fix |
| CVE-2023-45780 | Google Android Print service privilege escalation | 7.3v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-45746 | Six Apart Movable Type Premium cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-45672 | Frigate unsafe deserialization in `load_config_with_no_duplicates` of `Frigate/util/builtin.py` | 7.5CNA v3.1 | 1.4% | 2023-10-30 | Fix |
| CVE-2023-45671 | Frigate camera name API endpoint reflected cross-site scripting | 4.7CNA v3.1 | 1.4% | 2023-10-30 | NucleiFix |
| CVE-2023-45670 | Frigate cross-site request forgery in `config_save` and `config_set` request handlers | 7.5CNA v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-44397 | CloudExplorer-Dev CloudExplorer-Lite CloudExplorer Lite permission bypass | 7.5CNA v3.1 | 0.6% | 2023-10-30 | Fix |
| CVE-2023-44323 | Adobe Acrobat for Edge PDF Jbig2 memory-corruption vulnerability MSFT T5 | 5.5CNA v3.1 | 1.4% | 2023-10-30 | Fix |
| CVE-2023-44141 | Takuya Matsuyama Inkdrop code injection | 7.8v3.1 | 0.3% | 2023-10-30 | Fix |
| CVE-2023-43798 | BigBlueButton blind SSRF when Uploading Presentation (mitigation bypass) | 5.6CNA v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-43797 | BigBlueButton stored cross-site scripting vulnerability at Guest Lobby | 6.3CNA v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-43792 | baserCMS code injection vulnerability in Mail form feature | 5.3CNA v3.0 | 0.6% | 2023-10-30 | Fix |
| CVE-2023-43649 | baserCMS CSRF vulnerability in Content preview feature | 4.7CNA v3.1 | 0.3% | 2023-10-30 | Fix |
| CVE-2023-43648 | baserCMS directory traversal vulnerability in form submission data management feature | 4.9CNA v3.1 | 1.0% | 2023-10-30 | Fix |
| CVE-2023-43647 | baserCMS cross-site scripting vulnerability in file upload feature | 6.1CNA v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-42804 | BigBlueButton path traversal Reading certain file extensions | 3.1CNA v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-42803 | BigBlueButton unrestricted file upload | 5.3CNA v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-42431 | Hallo Welt! BlueSpice potential XSS on user preferences page | 5.4v3.1 | 0.3% | 2023-10-30 | |
| CVE-2023-42323 | Mnbvcxz131421 Douhaocms cross-site request forgery | 8.8v3.1 | 0.4% | 2023-10-30 | |
| CVE-2023-41891 | FlyteAdmin SQL injection in List Filters | 3.5CNA v3.1 | 0.9% | 2023-10-30 | Fix |
| CVE-2023-40101 | Google Android canonicalize_md.c out-of-bounds read | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-36920 | Clickjacking vulnerability in SAP Enable Now | 6.1CNA v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-21398 | Google Android sdksandbox privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21397 | Google Android Setup Wizard privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21396 | Google Android Activity Manager privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21395 | Google Android Bluetooth out-of-bounds read | 6.5v3.1 | 0.2% | 2023-10-30 | Fix |
| CVE-2023-21394 | Google Android TelecomServiceImpl.java information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21393 | Google Android settings privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21392 | Google Android Bluetooth privilege escalation | 8.8v3.1 | 0.2% | 2023-10-30 | Fix |
| CVE-2023-21391 | Google Android Messaging denial of service | 7.5v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-21390 | Google Android Sim privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21389 | Google Android settings privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21388 | Google Android settings privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21387 | Google Android User Backup Manager information disclosure | 4.4v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21385 | Google Android Whitechapel out-of-bounds read | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21384 | Google Android Package Manager insecure permissions | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21383 | Google Android settings information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21382 | Google Android Content Resolver information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21381 | Google Android Media Resource Manager arbitrary code execution | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21380 | Google Android Bluetooth out-of-bounds write | 6.7v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21379 | Google Android Bluetooth out-of-bounds read | 4.4v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21378 | Google Android Telecomm privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21377 | Google Android SELinux Policy information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21376 | Google Android Telephony information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21375 | Google Android Sysproxy out-of-bounds write | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21374 | Google Android System UI privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21373 | Google Android Telephony privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21372 | Google Android libdexfile out-of-bounds read | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21371 | Google Android Secure Element out-of-bounds write | 6.7v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21370 | Google Android the Security Element API out-of-bounds write | 6.7v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21369 | Google Android Usage Access denial of service | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21368 | Google Android Audio out-of-bounds read | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21367 | Google Android Scudo out-of-bounds read | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21366 | Google Android Scudo information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21365 | Google Android Contacts crash | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21364 | Google Android ContactsProvider crash | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21362 | Google Android Usage denial of service | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21361 | Google Android use-after-free | 8.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21360 | Google Android Bluetooth out-of-bounds write | 6.7v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21359 | Google Android Bluetooth out-of-bounds read | 4.4v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21358 | Google Android improper certificate validation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21357 | Google Android NFC out-of-bounds read | 4.4v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21356 | Google Android Bluetooth out-of-bounds write | 8.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21355 | Google Android libaudioclient out-of-bounds write | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21354 | Google Android Package Manager service information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21353 | Google Android NFA out-of-bounds read | 7.5v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-21352 | Google Android NFA out-of-bounds read | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21351 | Google Android multiple locations privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21350 | Google Android Media Projection information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21349 | Google Android Package Manager information disclosure | 3.3v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21348 | Google Android Window Manager information disclosure | 3.3v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21347 | Google Android Bluetooth out-of-bounds read | 7.5v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-21346 | Google Android the Device Idle controller information disclosure | 3.3v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21345 | Google Android Game Manager service information disclosure | 3.3v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21344 | Google Android Job Scheduler information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21343 | Google Android ActivityStarter privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21342 | Google Android RemoteSpeechRecognitionService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21341 | Google Android Permission Manager privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21340 | Google Android Telecomm information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21339 | Google Android Minikin denial of service | 7.5v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-21338 | Google Android Input method privilege escalation | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21337 | Google Android InputMethod privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21336 | Google Android Input method information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21335 | Google Android settings information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21334 | Google Android App Ops service information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21333 | Google Android Text services information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21332 | Google Android Text services information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21331 | Google Android InputMethod information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21330 | Google Android Overlay Manager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21329 | Google Android Activity Manager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21328 | Google Android Package Installer privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21327 | Google Android Permission Manager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21326 | Google Android Package Manager service information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21325 | Google Android settings information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21324 | Google Android Package Installer privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21323 | Google Android Activity Manager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21321 | Google Android Package Manager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21320 | Google Android Device Policy information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21319 | Google Android UsageStatsService information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21318 | Google Android Content information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21317 | Google Android ContentService information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21316 | Google Android Content information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21315 | Google Android Bluetooth out-of-bounds read | 6.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21314 | Google Android Bluetooth out-of-bounds read | 4.4v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21313 | Google Android Core privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21312 | Google Android IntentResolver information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21311 | Google Android settings information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21310 | Google Android Bluetooth out-of-bounds write | 6.7v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21309 | Google Android libcore out-of-bounds read | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21308 | Google Android Composer out-of-bounds read | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21307 | Google Android Bluetooth information disclosure | 5.0v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21306 | Google Android ContentService information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21305 | Google Android Content information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21304 | Google Android Content service information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21303 | Google Android observable discrepancy | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21302 | Google Android Package Manager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21301 | Google Android ActivityManagerService privilege escalation | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21300 | Google Android PackageManager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21299 | Google Android Package Manager information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21298 | Google Android Slice privilege escalation | 7.8v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21297 | Google Android SEPolicy information disclosure | 4.4v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21296 | Google Android Permission privilege escalation | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21295 | Google Android SliceManagerService information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21294 | Google Android Slice information disclosure | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-21293 | Google Android PackageManagerNative privilege escalation | 5.5v3.1 | 0.1% | 2023-10-30 | Fix |
| CVE-2023-5844 | Unverified password change in pimcore/admin-ui-classic-bundle | 7.2v3.1 | 0.6% | 2023-10-30 | Fix |
| CVE-2023-5843 | Ads by datafeedr.com WordPress plugin unauthenticated (limited) remote code execution | 9.8v3.1 | 2.2% | 2023-10-30 | Fix |
| CVE-2023-5842 | Cross-site scripting (XSS) Stored in Dolibarr/Dolibarr | 4.8v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-5833 | Improper access control in mintplex-labs/anything-llm | 8.8v3.1 | 0.6% | 2023-10-30 | Fix |
| CVE-2023-5832 | Improper input validation in mintplex-labs/anything-llm | 9.1v3.1 | 0.7% | 2023-10-30 | Fix |
| CVE-2023-5666 | Accordion WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-5583 | WP Simple Galleries WordPress plugin authenticated (Contributor+) PHP object injection | 8.8v3.1 | 1.0% | 2023-10-30 | |
| CVE-2023-5566 | Simple Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-10-30 | |
| CVE-2023-5565 | Shortcode Menu WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-30 | |
| CVE-2023-5362 | Carousel, Recent Post Slider and Banner Slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-5349 | rmagick draw while calling getdrawinfo | 3.3NVD v3.1 | 0.7% | 2023-10-30 | Fix |
| CVE-2023-5335 | Buzzsprout Podcasting WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-5315 | Google Maps made Simple WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 8.8v3.1 | 0.6% | 2023-10-30 | Fix |
| CVE-2023-5252 | FareHarbor for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-30 | Fix |
| CVE-2023-5251 | Grid Plus WordPress plugin missing authorization authenticated Grid Layout Add/Update/Delete | 5.4v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-5250 | Grid Plus WordPress plugin authenticated (Subscriber+) local file inclusion via shortcode | 8.8v3.1 | 1.1% | 2023-10-30 | Fix |
| CVE-2023-5199 | PHP to Page WordPress plugin local file inclusion to remote code execution | 8.8NVD v3.1 | 1.4% | 2023-10-30 | |
| CVE-2023-5164 | Bellows Accordion Menu WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-5049 | Giveaways and Contests by RafflePress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-30 | Fix |
| CVE-2023-4964 | Potential open redirect vulnerability in OpenText SMAX and AMX product | 8.2CNA v3.1 | 0.3% | 2023-10-30 | Fix |
| CVE-2023-4393 | HTML and SMTP injection in LiquidFiles | 6.1v3.1 | 0.3% | 2023-10-30 | Fix |
| CVE-2023-46862 | Linux kernel null pointer dereference | 4.7NVD v3.1 | 0.2% | 2023-10-29 | Fix |
| CVE-2023-46858 | Moodle cross-site scripting | 5.4v3.1 | 0.6% | 2023-10-29 | Fix |
| CVE-2023-43041 | IBM QRadar information disclosure | 6.5CNA v3.1 | 0.5% | 2023-10-29 | Fix |
| CVE-2023-40686 | IBM i privilege escalation | 4.9CNA v3.1 | 0.1% | 2023-10-29 | Fix |
| CVE-2023-40685 | IBM i privilege escalation | 7.4CNA v3.1 | 0.2% | 2023-10-29 | Fix |
| CVE-2023-5840 | Weak password recovery mechanism for forgotten password in LinkStackOrg/Linkstack | 8.8v3.1 | 0.7% | 2023-10-29 | Fix |
| CVE-2023-5839 | Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9. | 7.8v3.1 | 0.3% | 2023-10-29 | Fix |
| CVE-2023-5838 | Insufficient session expiration in LinkStackOrg/Linkstack | 9.8v3.1 | 0.5% | 2023-10-29 | Fix |
| CVE-2023-46854 | Proxmox-widget-toolkit cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-28 | Fix |
| CVE-2023-46570 | radare2 An out-of-bounds read | 9.8v3.1 | 0.9% | 2023-10-28 | Fix |
| CVE-2023-46569 | radare2 An out-of-bounds read | 9.8v3.1 | 0.9% | 2023-10-28 | Fix |
| CVE-2023-46468 | Juzaweb Cms juzawebCMS injection | 7.8v3.1 | 0.5% | 2023-10-28 | |
| CVE-2023-46467 | juzaweb CMS cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-28 | |
| CVE-2023-46215 | Apache Airflow Celery Provider insertion of sensitive information into log file | 7.5v3.1 | 1.2% | 2023-10-28 | Fix |
| CVE-2023-45897 | Namjaejeon Exfatprogs out-of-bounds read | 5.5v3.1 | 0.4% | 2023-10-28 | Fix |
| CVE-2023-43322 | Zpesystems Nodegrid OS command injection | 8.8v3.1 | 1.1% | 2023-10-28 | Fix |
| CVE-2023-5837 | AlexanderLivanov FotosCMS2 Cookie profile.php cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-28 | |
| CVE-2023-5836 | SourceCodester Task Reminder System SQL injection | 9.8v3.1 | 0.4% | 2023-10-28 | |
| CVE-2023-5835 | hu60t hu60wap6 ubbparser.php markdown cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-28 | |
| CVE-2023-5426 | Post Meta Data Manager WordPress plugin missing authorization to user, Term, and post Meta deletion | 7.5v3.1 | 0.5% | 2023-10-28 | Fix |
| CVE-2023-5425 | Post Meta Data Manager WordPress plugin missing authorization authenticated privilege escalation | 8.8v3.1 | 0.5% | 2023-10-28 | Fix |
| CVE-2023-46853 | Memcached off-by-one error | 9.8v3.1 | 0.8% | 2023-10-27 | Fix |
| CVE-2023-46852 | Memcached buffer overflow | 7.5v3.1 | 0.8% | 2023-10-27 | Fix |
| CVE-2023-46818 | ISPConfig code injection | 7.2v3.1 | 15.7% | 2023-10-27 | NucleiMetasploitExploit codeFix |
| CVE-2023-46816 | SugarCRM code injection | 8.8v3.1 | 0.6% | 2023-10-27 | Fix |
| CVE-2023-46815 | SugarCRM unrestricted file upload | 8.8v3.1 | 0.6% | 2023-10-27 | Fix |
| CVE-2023-46813 | Linux kernel race condition | 7.0v3.1 | 0.7% | 2023-10-27 | Exploit codeFix |
| CVE-2023-46604 | Apache ActiveMQ deserialization of untrusted data | 10.0CNA v3.1 | 99.9% | 2023-10-27 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-46587 | XnView buffer overflow | 7.8v3.1 | 0.2% | 2023-10-27 | |
| CVE-2023-46510 | Zioncom A7000R OS command injection | 9.8v3.1 | 0.8% | 2023-10-27 | |
| CVE-2023-46509 | Contec SolarView Compact code injection | 9.8v3.1 | 0.8% | 2023-10-27 | |
| CVE-2023-46505 | Pwncyn Fancms cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-46504 | Pwncyn Yxbookcms cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-46503 | Pwncyn Yxbookcms cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-27 | |
| CVE-2023-46491 | Zentao Biz cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-46490 | Cacti managers.php SQL injection | 6.5v3.1 | 1.4% | 2023-10-27 | Fix |
| CVE-2023-46407 | FFmpeg out-of-bounds read | 5.5v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-46394 | gougucms /home/user/edit_submit stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-27 | |
| CVE-2023-46393 | gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet. | 7.5v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-46376 | Zentao Biz cleartext storage of sensitive information | 7.5v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-46375 | Zentao Biz cross-site request forgery | 8.8v3.1 | 0.3% | 2023-10-27 | |
| CVE-2023-46374 | Zentao Biz cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-46290 | Rockwell Automation FactoryTalk Services Platform Elevated Privileges vulnerability | 8.1CNA v3.1 | 2.7% | 2023-10-27 | Fix |
| CVE-2023-46289 | Rockwell Automation FactoryTalk® View Site Edition vulnerable to improper input validation | 7.5CNA v3.1 | 0.9% | 2023-10-27 | Fix |
| CVE-2023-46246 | Integer overflow in :history command in Vim | 4.0CNA v3.1 | 0.4% | 2023-10-27 | Fix |
| CVE-2023-46211 | Ultimate Addons for WPBakery Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-46209 | Grid Plus WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-46208 | Motors Car Dealer and Classified Ads WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-46200 | Smart App Banner WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-46199 | Triberr WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-46194 | Archivist Custom Archive Templates WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-10-27 | |
| CVE-2023-46192 | Internal Link Building WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-27 | |
| CVE-2023-46153 | User Feedback WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-27 | Fix |
| CVE-2023-46093 | Webmaster Tools WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-27 | |
| CVE-2023-46091 | Category SEO Meta Tags WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-27 | |
| CVE-2023-45499 | Vinchin Backup And Recovery hard-coded credentials | 9.8v3.1 | 7.9% | 2023-10-27 | MetasploitExploit codeKCV |
| CVE-2023-45498 | Vinchin Backup And Recovery command injection | 9.8v3.1 | 20.5% | 2023-10-27 | MetasploitExploit codeKCV |
| CVE-2023-44480 | Leave Management System Project multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.6% | 2023-10-27 | |
| CVE-2023-44220 | SonicWall NetExtender uncontrolled search path | 7.3v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-44219 | SonicWall Directory Services Connector local privilege escalation | 7.8v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2023-42188 | Macwk IceCMS cross-site request forgery | 6.5v3.1 | 0.2% | 2023-10-27 | |
| CVE-2023-40140 | Google Android android_view_InputDevice.cpp privilege escalation | 7.8v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2023-40139 | Google Android FillUi.java information disclosure | 5.5v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40138 | Google Android FillUi.java information disclosure | 3.3v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40137 | Google Android DialogFillUi.java information disclosure | 3.3v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40136 | Google Android DialogFillUi.java information disclosure | 3.3v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40135 | Google Android SaveUi.java information disclosure | 3.3v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40134 | Google Android FillUi.java information disclosure | 3.3v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40133 | Google Android DialogFillUi.java information disclosure | 5.5v3.1 | 0.2% | 2023-10-27 | Exploit codeFix |
| CVE-2023-40131 | Google Android GpuService.cpp use-after-free | 7.0v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40130 | Google Android CallRedirectionProcessor insecure permissions | 7.8v3.1 | 0.1% | 2023-10-27 | Exploit codeFix |
| CVE-2023-40129 | Google Android gatt_sr.cc out-of-bounds write | 8.8v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2023-40128 | Google Android xmlregexp.c out-of-bounds write | 7.8v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40127 | Google Android multiple locations information disclosure | 3.3v3.1 | 0.2% | 2023-10-27 | Exploit codeFix |
| CVE-2023-40125 | Google Android ApnEditor.java privilege escalation | 7.8v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40123 | Google Android PipMenuView.java information disclosure | 5.5v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40121 | Google Android DatabaseUtils.java SQL injection | 5.5v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2023-40120 | Google Android multiple locations privilege escalation | 7.8v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40117 | Google Android SettingsProvider.java privilege escalation | 7.8v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-40116 | Google Android PipTaskOrganizer.java privilege escalation | 7.8v3.1 | 0.1% | 2023-10-27 | Fix |
| CVE-2023-35794 | Cassia Networks Access Controller improper authentication | 8.8NVD v3.1 | 0.9% | 2023-10-27 | KCV |
| CVE-2023-34059 | open-vm-tools improper resource release | 7.4CNA v3.1 | 0.4% | 2023-10-27 | Fix |
| CVE-2023-34058 | VMware Tools improper signature verification | 7.1CNA v3.1 | 0.7% | 2023-10-27 | Fix |
| CVE-2023-34057 | VMware Tools improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2023-32738 | Eonet Manual User Approve WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-27 | |
| CVE-2023-29009 | Basercms XSS vulnerability via Favorites feature | 6.1CNA v3.1 | 0.5% | 2023-10-27 | Fix |
| CVE-2023-27858 | Rockwell Automation Arena® Simulation uninitialized pointer | 7.8CNA v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2023-27854 | Rockwell Automation Arena® Simulation out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-5834 | Vagrant’s Windows Installer Allowed Directory Junction Write | 3.8CNA v3.1 | 0.2% | 2023-10-27 | Fix |
| CVE-2023-5830 | ColumbiaSoft Document Locator WebTools login improper authentication | 9.8v3.1 | 61.0% | 2023-10-27 | Nuclei |
| CVE-2023-5829 | code-projects Admission Management System student_avatar.php unrestricted upload | 8.8v3.1 | 0.8% | 2023-10-27 | |
| CVE-2023-5828 | A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file login.aspx. The manipulation of the argume | 9.8v3.1 | 0.7% | 2023-10-27 | |
| CVE-2023-5827 | Shanghai CTI Navigation CTI Monitoring and Early Warning System UserEdit.aspx SQL injection | 9.8v3.1 | 0.7% | 2023-10-27 | |
| CVE-2023-5826 | Netentsec NS-ASG Application Security Gateway list_onlineuser.php SQL injection | 8.8v3.1 | 0.7% | 2023-10-27 | |
| CVE-2023-5821 | Thumbnail carousel slider WordPress plugin cross-site request forgery | 6.5v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-5820 | Thumbnail Slider With Lightbox WordPress plugin cross-site request forgery | 8.8NVD v3.1 | 0.3% | 2023-10-27 | Fix |
| CVE-2023-5817 | Neon text WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-27 | Fix |
| CVE-2023-5814 | SourceCodester Task Reminder System SQL injection | 8.8v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-5813 | SourceCodester Task Reminder System SQL injection | 8.8v3.1 | 0.4% | 2023-10-27 | |
| CVE-2023-5812 | Flusity CMS upload.php handleFileUpload unrestricted upload | 8.8v3.1 | 0.7% | 2023-10-27 | |
| CVE-2023-5811 | Flusity CMS posts.php loadPostAddForm cross-site scripting | 4.8v3.1 | 0.5% | 2023-10-27 | |
| CVE-2023-5810 | Flusity CMS posts.php loadPostAddForm cross-site scripting | 4.8v3.1 | 0.5% | 2023-10-27 | |
| CVE-2023-5807 | SQLi in TRtek Software's Education Portal | 9.8v3.1 | 0.5% | 2023-10-27 | Fix |
| CVE-2023-5774 | Animated Counters WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-27 | Fix |
| CVE-2023-5705 | VK Filter Search WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-27 | Fix |
| CVE-2023-5570 | User Enumeration in Inohom's Home Manager Gateway | 7.5v3.1 | 0.5% | 2023-10-27 | Fix |
| CVE-2023-5443 | User Enumeration in EDM Informatic's E-invoice software | 7.5v3.1 | 0.5% | 2023-10-27 | Fix |
| CVE-2023-5051 | CallRail Phone Call Tracking WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-27 | Fix |
| CVE-2023-4967 | Cloud Software Group NetScaler ADC denial of service | 8.2CNA v3.1 | 0.9% | 2023-10-27 | Fix |
| CVE-2023-46754 | Obl.ong admin incorrect authorization | 5.3v3.1 | 0.4% | 2023-10-26 | Fix |
| CVE-2023-46753 | FRRouting incorrect authorization | 5.9v3.1 | 0.8% | 2023-10-26 | Fix |
| CVE-2023-46752 | FRRouting MP_REACH_NLRI parser denial of service | 5.9v3.1 | 0.8% | 2023-10-26 | Fix |
| CVE-2023-46748 | F5 BIG-IP Configuration Utility SQL injection | 8.8CNA v3.1 | 4.5% | 2023-10-26 | KEVKCVFix |
| CVE-2023-46747 | F5 BIG-IP Configuration Utility authentication bypass | 9.8CNA v3.1 | 96.5% | 2023-10-26 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-46668 | Elastic Endpoint insertion of sensitive information into log file | 4.6CNA v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-46667 | Fleet Server insertion of sensitive information into log file | 8.1CNA v3.1 | 0.6% | 2023-10-26 | Fix |
| CVE-2023-46666 | Elastic Sharepoint Online Python Connector improper access control | 5.3CNA v3.1 | 0.4% | 2023-10-26 | Fix |
| CVE-2023-46665 | Improper access control in Sielco PolyEco1000 | 9.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-46664 | Improper access control in Sielco PolyEco1000 | 9.1v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-46663 | Improper access control in Sielco PolyEco1000 | 8.1v3.1 | 0.4% | 2023-10-26 | |
| CVE-2023-46662 | Improper access control in Sielco PolyEco1000 | 7.5v3.1 | 0.6% | 2023-10-26 | |
| CVE-2023-46661 | Improper access control in Sielco PolyEco1000 | 9.8v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-46450 | Mayuri K Inventory Management System cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-26 | Exploit code |
| CVE-2023-46449 | Mayuri K Inventory Management System incorrect permission assignment | 8.8v3.1 | 0.8% | 2023-10-26 | Exploit code |
| CVE-2023-46435 | oretnom23 Packers And Movers Management System SQL injection | 9.8v3.1 | 0.6% | 2023-10-26 | |
| CVE-2023-46345 | Fossies catdoc null pointer dereference | 7.5v3.1 | 0.6% | 2023-10-26 | |
| CVE-2023-46238 | XSS with User Avatar image in ZITADEL | 8.7CNA v3.1 | 0.4% | 2023-10-26 | Fix |
| CVE-2023-46234 | browserify-sign upper bound check issue in `dsaVerify` leads to a signature forgery attack | 6.5CNA v3.1 | 0.5% | 2023-10-26 | Fix |
| CVE-2023-46094 | Conversios Google Analytics Integration for WooCommerce reflected cross-site scripting | 6.1NVD v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-46090 | WebDorado WDSocialWidgets reflected cross-site scripting | 6.1NVD v3.1 | 0.3% | 2023-10-26 | |
| CVE-2023-46088 | WP Full Stripe Free WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-46081 | Lava Directory Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-26 | |
| CVE-2023-46077 | The Awesome Feed Custom Feed WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-26 | |
| CVE-2023-46076 | WooCommerce PDF Invoice Builder WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-46075 | Contact Form Builder, Contact Widget WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-10-26 | |
| CVE-2023-46074 | FreshMail For WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.3% | 2023-10-26 | |
| CVE-2023-46072 | Michael Simpson Add Shortcodes Actions And Filters reflected cross-site scripting | 6.1NVD v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-45869 | ILIAS cross-site scripting | 9.0v3.1 | 0.8% | 2023-10-26 | |
| CVE-2023-45868 | ILIAS path traversal | 8.1v3.1 | 1.1% | 2023-10-26 | |
| CVE-2023-45867 | ILIAS path traversal | 6.5v3.1 | 0.9% | 2023-10-26 | |
| CVE-2023-45317 | Sielco Radio Link and Analog FM Transmitters cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-26 | |
| CVE-2023-45228 | Sielco Radio Link and Analog FM Transmitters improper access control | 6.5v3.1 | 0.4% | 2023-10-26 | |
| CVE-2023-44267 | Online Art Gallery multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-43906 | Onworks Xolo Cms cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-26 | |
| CVE-2023-43905 | Writercms insufficiently protected credentials | 7.5v3.1 | 0.4% | 2023-10-26 | |
| CVE-2023-43352 | CMS Made Simple code injection | 7.8v3.1 | 0.5% | 2023-10-26 | Exploit code |
| CVE-2023-43208 | NextGen Healthcare Mirth Connect deserialization of untrusted data | 9.8NVD v3.1 | 82.7% | 2023-10-26 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-42769 | Sielco Radio Link and Analog FM Transmitters improper access control | 9.8v3.1 | 0.8% | 2023-10-26 | |
| CVE-2023-42406 | D-Link DAR-7000 D-Link Online behavior audit gateway SQL injection | 9.8v3.1 | 1.9% | 2023-10-26 | |
| CVE-2023-41966 | Sielco Radio Link and Analog FM Transmitters privilege defined with unsafe actions | 8.8v3.1 | 0.6% | 2023-10-26 | |
| CVE-2023-41096 | Keys Stored in Plaintext on Secure Vault High for Silabs Ember ZNet devices | 6.8CNA v3.1 | 0.1% | 2023-10-26 | |
| CVE-2023-41095 | Keys Stored in Plaintext on Secure Vault High for Silabs OpenThread devices | 6.8CNA v3.1 | 0.2% | 2023-10-26 | |
| CVE-2023-39936 | Ashlar-Vellum Graphite out-of-bounds read | 7.8v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-39726 | Mintty static code injection | 9.8v3.1 | 1.0% | 2023-10-26 | |
| CVE-2023-39427 | Ashlar-Vellum Cobalt, Xenon, Argon, Lithium out-of-bounds write | 7.8v3.1 | 0.2% | 2023-10-26 | Fix |
| CVE-2023-38328 | egroupware insufficiently protected credentials | 4.9v3.1 | 0.6% | 2023-10-26 | Fix |
| CVE-2023-33559 | OcoMon inclusion of untrusted functionality | 8.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-33558 | OcoMon component users-grid-data.php information disclosure | 7.5v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-32116 | Custom post types WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-31422 | Kibana insertion of sensitive information into log file | 9.0CNA v3.1 | 0.8% | 2023-10-26 | Fix |
| CVE-2023-31421 | Beats, Elastic Agent, APM Server, and Fleet Server improper certificate validation issue | 5.9CNA v3.1 | 0.3% | 2023-10-26 | Fix |
| CVE-2023-31419 | Elasticsearch vulnerable to stack overflow in the search API | 6.5CNA v3.1 | 61.7% | 2023-10-26 | Exploit codeFix |
| CVE-2023-31418 | Elasticsearch uncontrolled resource consumption | 7.5CNA v3.1 | 2.1% | 2023-10-26 | Fix |
| CVE-2023-31417 | Elasticsearch Insertion of sensitive information in audit logs | 4.1CNA v3.1 | 0.2% | 2023-10-26 | Fix |
| CVE-2023-31416 | Elastic Cloud on Kubernetes (ECK) secret token configuration issue | 5.3CNA v3.1 | 0.4% | 2023-10-26 | Fix |
| CVE-2023-30969 | Palantir Tiles missing authentication on API endpoints | 8.2CNA v3.1 | 0.4% | 2023-10-26 | Fix |
| CVE-2023-30967 | Gotham Orbital Simulator path traversal | 9.8CNA v3.1 | 0.6% | 2023-10-26 | Fix |
| CVE-2023-30492 | Minimum Purchase for WooCommerce WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-26 | |
| CVE-2023-27170 | Xpand-it Write-back Manager path traversal | 7.5v3.1 | 0.9% | 2023-10-26 | |
| CVE-2023-5805 | SourceCodester Simple Real Estate Portal System view_estate.php SQL injection | 9.8v3.1 | 0.6% | 2023-10-26 | |
| CVE-2023-5804 | PHPGurukul Nipah Virus Testing Management System login.php SQL injection | 9.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5802 | WP Knowledgebase WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-26 | |
| CVE-2023-5798 | Assistant WordPress plugin Editor+ SSRF | 8.8NVD v3.1 | 0.7% | 2023-10-26 | Fix |
| CVE-2023-5796 | CodeAstro POS System Logo setting unrestricted upload | 8.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5795 | CodeAstro POS System Profile Picture profil unrestricted upload | 8.8v3.1 | 0.8% | 2023-10-26 | |
| CVE-2023-5794 | PHPGurukul Online Railway Catering System Login index.php SQL injection | 9.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5793 | Flusity CMS Dashboard customblock.php loadCustomBlocCreateForm cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-26 | |
| CVE-2023-5792 | SourceCodester Sticky Notes App delete-note.php SQL injection | 9.8v3.1 | 0.6% | 2023-10-26 | |
| CVE-2023-5791 | SourceCodester Sticky Notes App add-note.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-5790 | SourceCodester File Manager App add-file.php unrestricted upload | 9.8v3.1 | 0.8% | 2023-10-26 | |
| CVE-2023-5789 | Dragon Path 707GR1 Ping Diagnostics cross-site scripting | 4.8v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-5787 | Shaanxi Chanming Education Technology Score Query System SQL injection | 8.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5786 | GeoServer GeoWebCache rest.html direct request | 8.8v3.1 | 0.8% | 2023-10-26 | |
| CVE-2023-5785 | Netentsec NS-ASG Application Security Gateway addaddress_interpret.php SQL injection | 7.5v3.1 | 0.6% | 2023-10-26 | |
| CVE-2023-5784 | Netentsec NS-ASG Application Security Gateway uploadfirewall.php SQL injection | 9.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5783 | Tongda OA 2017 delete.php SQL injection | 7.5v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-5782 | Tongda OA 2017 General News delete_query.php SQL injection | 9.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5781 | Tongda OA 2017 delete_webmail.php DELETE_STR SQL injection | 9.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5780 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.7% | 2023-10-26 | |
| CVE-2023-5754 | Improper restriction of excessive authentication attempts in Sielco PolyEco1000 | 9.8v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-5624 | Tenable Nessus Network Monitor blind SQL injection | 7.2CNA v3.1 | 0.5% | 2023-10-26 | Fix |
| CVE-2023-5623 | Tenable Nessus Network Monitor privilege escalation | 7.0CNA v3.1 | 0.2% | 2023-10-26 | Fix |
| CVE-2023-5622 | Tenable Nessus Network Monitor privilege escalation | 7.1CNA v3.1 | 0.5% | 2023-10-26 | Fix |
| CVE-2023-5139 | Potential buffer overflow vulnerability in the Zephyr STM32 Crypto driver | 4.4CNA v3.1 | 0.4% | 2023-10-26 | |
| CVE-2023-0897 | Session fixation in Sielco PolyEco1000 | 9.8v3.1 | 0.5% | 2023-10-26 | |
| CVE-2023-46660 | Non-constant time webhook token hash comparison in Jenkins Zanata Plugin | 5.3v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-46659 | Jenkins Edgewall Trac Plugin vulnerable to stored XSS | 5.4v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-46658 | Jenkins MSTeams Webhook Trigger Plugin uses non-constant time webhook token comparison | 5.3v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46657 | Jenkins Gogs Plugin uses non-constant time webhook token comparison | 5.3v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46656 | Jenkins Multibranch Scan Webhook Trigger Plugin uses non-constant time webhook token comparison | 5.3v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46655 | Jenkins CloudBees CD Plugin vulnerable to arbitrary file read | 6.5v3.1 | 1.2% | 2023-10-25 | Fix |
| CVE-2023-46654 | Jenkins CloudBees CD Plugin vulnerable to arbitrary file deletion | 8.1v3.1 | 1.4% | 2023-10-25 | Fix |
| CVE-2023-46653 | Jenkins Lambdatest-automation Plugin may expose Credentials access token | 6.5v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-46652 | Jenkins Lambdatest-automation Plugin missing permission check | 4.3v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-46651 | Jenkins Warnings Plugin exposures system-scoped credentials | 6.5v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46650 | Stored XSS vulnerability in Jenkins GitHub Plugin | 5.4v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46584 | PHPGurukul Nipah Virus Testing Management System SQL injection | 9.8v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-46583 | PHPGurukul Nipah Virus Testing Management System cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-46574 | TOTOLINK A3700R command injection | 9.8v3.1 | 65.4% | 2023-10-25 | Nuclei |
| CVE-2023-46564 | TOTOLINK X2000R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46563 | TOTOLINK X2000R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46562 | TOTOLINK X2000R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46560 | TOTOLINK X2000R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46559 | TOTOLINK X2000R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46558 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46557 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46556 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46555 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46554 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46553 | TOTOLINK X2000R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46552 | TOTOLINK X2000R stack-based buffer overflow | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46551 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46550 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46549 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46548 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46547 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46546 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46545 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46544 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46543 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46542 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46541 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46540 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46539 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46538 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46537 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46536 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46535 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46534 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46527 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.3% | 2023-10-25 | |
| CVE-2023-46526 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46525 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46523 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46522 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.3% | 2023-10-25 | |
| CVE-2023-46521 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46520 | TP-Link Tl-wr886n out-of-bounds write | 9.8v3.1 | 1.0% | 2023-10-25 | |
| CVE-2023-46518 | Mercurycom A15 out-of-bounds write | 9.8v3.1 | 1.8% | 2023-10-25 | |
| CVE-2023-46424 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46423 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46422 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46421 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46420 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46419 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46418 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46417 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46416 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46415 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46414 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.9% | 2023-10-25 | |
| CVE-2023-46413 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.4% | 2023-10-25 | |
| CVE-2023-46412 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.4% | 2023-10-25 | |
| CVE-2023-46411 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.4% | 2023-10-25 | |
| CVE-2023-46410 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.4% | 2023-10-25 | |
| CVE-2023-46409 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.4% | 2023-10-25 | |
| CVE-2023-46408 | TOTOLINK X6000R command injection | 9.8v3.1 | 1.4% | 2023-10-25 | |
| CVE-2023-46396 | Web-audimex Audimex cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-46373 | TP-Link Tl-wdr7660 out-of-bounds write | 9.8v3.1 | 0.9% | 2023-10-25 | |
| CVE-2023-46371 | TP-Link Tl-wdr7660 out-of-bounds write | 9.8v3.1 | 1.1% | 2023-10-25 | Exploit code |
| CVE-2023-46370 | Tenda W18E command injection | 9.8v3.1 | 18.1% | 2023-10-25 | |
| CVE-2023-46369 | Tenda W18E out-of-bounds write | 9.8v3.1 | 0.9% | 2023-10-25 | |
| CVE-2023-46358 | Snegurka Referralbyphone SQL injection | 9.8v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-46347 | Ndkdesign Ndk Steppingpack SQL injection | 9.8v3.1 | 49.9% | 2023-10-25 | Nuclei |
| CVE-2023-46346 | Myprestamodules Exportproducts path traversal | 7.5v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-46316 | Traceroute wrapper scripts vulnerability | 5.5v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-46233 | crypto-js PBKDF2 1,000 times weaker than specified in 1993 and times weaker than current standard | 9.1CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46232 | era-compiler-vyper First Immutable Variable Initialization vulnerability | 5.3CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46204 | Duplicate WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46202 | Auto Login New User After Registration WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46198 | Appointment Calendar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46193 | Internal Link Building WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46191 | Open Graph Metabox WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46190 | Novo-Map: your WP posts on custom google maps WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46189 | Google Calendar Events WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-46158 | IBM WebSphere Application Server session fixation | 4.9CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-46152 | WOLF WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-46151 | Product Category Tree WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46150 | WP Radio WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-25 | |
| CVE-2023-46137 | twisted twisted.web has disordered HTTP pipeline response | 5.3CNA v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-46136 | Pallets Werkzeug multipart form data parser denial of service | 8.0CNA v3.1 | 1.1% | 2023-10-25 | Exploit codeFix |
| CVE-2023-46135 | stellar rs-stellar-strkey panic in SignedPayload::from_payload | 5.3CNA v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-46134 | man-group dtale D-Tale vulnerable to remote code execution through the Custom Filter Input | 6.1CNA v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-46133 | crypto-es PBKDF2 1,000 times weaker than specified in 1993 and times weaker than current standard | 9.1CNA v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-46128 | Exposure of hashed user passwords via REST API in Nautobot | 6.5CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-46126 | Fides JavaScript injection vulnerability in Privacy Center URL | 3.9CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-46125 | Fides information disclosure vulnerability in Config API endpoint | 6.5CNA v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-46124 | ethyca fides server-side request forgery vulnerability in Custom Integration upload | 8.2CNA v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-46123 | jumpserver is vulnerable to password brute-force protection bypass via arbitrary IP values | 5.3CNA v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-46120 | RabbitMQ Java client's lack of message size limitation leads to remote DoS attack | 4.9CNA v3.1 | 1.1% | 2023-10-25 | Fix |
| CVE-2023-46119 | parse-community parse-server parse Server may crash when uploading file without extension | 7.5CNA v3.1 | 1.1% | 2023-10-25 | Fix |
| CVE-2023-46118 | rabbitmq-server denial of service by publishing large messages over the HTTP API | 4.9CNA v3.1 | 1.1% | 2023-10-25 | Fix |
| CVE-2023-46102 | Bosch Rexroth ctrlX HMI Web Panel hard-coded credentials | 8.8CNA v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-46071 | Protección de Datos RGPD WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-46070 | EG-Attachments WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-46069 | Ajax Archive Calendar WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-46068 | Maileon WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-46010 | Seacms code injection | 9.8v3.1 | 1.2% | 2023-10-25 | |
| CVE-2023-45990 | Wenwenai Cms WenwenaiCMS v.1.0 insecure permissions | 8.0v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-45851 | Bosch Rexroth ctrlX HMI Web Panel missing authentication | 8.8CNA v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45844 | Rexroth ctrlX HMI Web Panel improper access control | 7.3CNA v3.0 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-45837 | Ultimate Taxonomy Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45835 | Libsyn Publisher Hub WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45833 | LeadSquared Suite WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45832 | WP GoToWebinar WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45829 | Newsletter and Bulk Email Sender WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45772 | Proofreading WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45770 | Fast WP Speed WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45769 | WP Report Post WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-45768 | Next Page WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45767 | Simple Tweet WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45764 | Scroll post excerpt WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45761 | Sendle Shipping WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45759 | Peter’s Custom Anti-Spam WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45758 | Amministrazione Trasparente WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45756 | ApplyOnline Application Form Builder and Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45755 | BuddyPress Global Search WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45754 | Easy Testimonial Slider and Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45750 | Nexter Extension WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45747 | WP Lightbox 2 WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45646 | PDF Block WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45644 | CPT Shortcode Generator WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45640 | WP ULike WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45637 | EventPrime WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45634 | Copy Or Move Comments WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-45555 | ZZZCMS unrestricted file upload | 7.8v3.1 | 0.9% | 2023-10-25 | |
| CVE-2023-45554 | ZZZCMS unrestricted file upload | 9.8v3.1 | 1.5% | 2023-10-25 | |
| CVE-2023-45321 | Bosch Rexroth ctrlX HMI Web Panel cleartext transmission of sensitive information | 8.3CNA v3.1 | 0.1% | 2023-10-25 | Fix |
| CVE-2023-45220 | Rexroth ctrlX HMI Web Panel missing authentication | 8.8CNA v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-45137 | XWiki Platform XSS with edit right in the create document form for existing pages | 9.1CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-45136 | XWiki Platform document creation form reflected cross-site scripting | 9.7CNA v3.1 | 5.1% | 2023-10-25 | NucleiFix |
| CVE-2023-45135 | XWiki Platform page creation action improper output encoding | 9.1CNA v3.1 | 1.7% | 2023-10-25 | Fix |
| CVE-2023-45134 | XWiki Platform XSS vulnerability from account in the create page form via template provider | 9.1CNA v3.1 | 1.8% | 2023-10-25 | Fix |
| CVE-2023-44794 | dromara Sa-Token SaToken privilege escalation | 9.8v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-44769 | Zenario CMS cross-site scripting | 5.4v3.1 | 0.7% | 2023-10-25 | Exploit codeFix |
| CVE-2023-44767 | Ritecms A file upload | 4.8v3.1 | 0.5% | 2023-10-25 | Exploit code |
| CVE-2023-43961 | dromara Sa-Token SaToken authentication bypass | 8.8v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-43795 | WPS server side request forgery in GeoServer | 8.6CNA v3.1 | 67.7% | 2023-10-25 | NucleiFix |
| CVE-2023-43510 | Aruba ClearPass Policy Manager web-based management interface command injection | 4.7CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-43509 | Aruba ClearPass Policy Manager OnGuard notification endpoint vulnerability | 5.8CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-43508 | Aruba ClearPass Policy Manager web-based management interface authorization bypass | 6.3CNA v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-43507 | Authenticated SQL injection vulnerability in ClearPass Policy Manager Web-based Management interface | 7.2CNA v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-43506 | Local privilege escalation in ClearPass OnGuard Linux agent | 7.8CNA v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2023-43488 | Rexroth ctrlX HMI Web Panel missing authorization | 7.9CNA v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2023-43360 | CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-43281 | nothings Stb Image.h double free | 6.5v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-42861 | Apple macOS incorrect permission assignment | 6.5v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-42857 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-42856 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-42854 | Apple macOS denial of service | 5.5v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-42852 | Apple Safari logic flaw | 8.8v3.1 | 1.7% | 2023-10-25 | Fix |
| CVE-2023-42850 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-42849 | Apple macOS code execution | 6.5v3.1 | 1.4% | 2023-10-25 | Fix |
| CVE-2023-42847 | Apple macOS logic flaw | 7.5v3.1 | 0.9% | 2023-10-25 | Fix |
| CVE-2023-42846 | Apple tvOS information disclosure | 5.3v3.1 | 1.2% | 2023-10-25 | Fix |
| CVE-2023-42845 | Apple macOS missing authentication | 5.3v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-42844 | Apple macOS link following | 7.5v3.1 | 1.5% | 2023-10-25 | Fix |
| CVE-2023-42842 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-42841 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-42494 | EisBaer Scada exposed dangerous method or function | 9.8v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-42493 | EisBaer Scada plaintext storage of a password | 9.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-42492 | EisBaer Scada use of hard-coded cryptographic key | 9.8v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-42491 | EisBaer Scada improper authorization | 9.8v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-42490 | EisBaer Scada exposure of sensitive information to an unauthorized actor | 7.5v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-42489 | EisBaer Scada incorrect permission assignment for critical resource | 9.8v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-42488 | EisBaer Scada improper limitation of a pathname to a restricted directory (path traversal) | 7.5v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-42438 | Apple macOS spoofing | 4.3v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-42031 | IBM CICS TX denial of service | 4.9CNA v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-41997 | Apple macOS information disclosure | 4.6v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-41989 | Apple macOS arbitrary code execution | 6.8v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-41988 | Apple macOS information disclosure | 6.8v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-41983 | Apple Safari denial of service | 6.5v3.1 | 1.3% | 2023-10-25 | Fix |
| CVE-2023-41982 | Apple macOS information disclosure | 4.6v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-41977 | Apple macOS, iOS and iPadOS browser cache vulnerability | 4.3v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-41976 | Apple Safari use-after-free | 8.8v3.1 | 1.5% | 2023-10-25 | Fix |
| CVE-2023-41975 | Apple macOS microphone use indicator vulnerability | 4.3v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-41960 | Rexroth ctrlX HMI Web Panel improper export of Android application components | 7.1CNA v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2023-41721 | Ubiquiti UniFi Network Application improper access control | 5.3NVD v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-41372 | Rexroth ctrlX HMI Web Panel hard-coded credentials | 7.8CNA v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2023-41339 | OSGeo GeoServer WMS dynamic styling server-side request forgery | 8.6CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-41255 | Rexroth ctrlX HMI Web Panel missing authentication | 8.8CNA v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-41254 | Apple macOS sensitive information in log files | 5.5v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-41077 | Apple macOS incorrect authorization | 5.5v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-41072 | Apple macOS information disclosure | 5.5v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-40449 | Apple macOS denial of service | 5.5v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-40447 | Apple Safari arbitrary code execution | 8.8v3.1 | 1.5% | 2023-10-25 | Fix |
| CVE-2023-40445 | Apple iOS and iPadOS improperly implemented security check | 7.5v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-40444 | Apple macOS insecure permissions | 5.5v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-40425 | Apple macOS sensitive information in log files | 4.4v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-40423 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-40421 | Apple macOS insecure permissions | 5.5v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-40416 | Apple macOS memory corruption | 6.5v3.1 | 1.3% | 2023-10-25 | Fix |
| CVE-2023-40413 | Apple macOS information disclosure | 5.5v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-40408 | Apple macOS resource exhaustion | 5.3v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-40405 | Apple macOS sensitive information in log files | 3.3v3.1 | 0.3% | 2023-10-25 | Fix |
| CVE-2023-40404 | Apple macOS use-after-free | 7.8v3.1 | 1.1% | 2023-10-25 | Exploit codeFix |
| CVE-2023-40401 | Apple macOS missing authentication | 7.5v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-39930 | PingFederate PingID Radius PCV authentication bypass | 7.5CNA v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-39924 | Simple File List WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-39740 | Linecorp Onigiriya-musubee improper privilege management | 8.2v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-39739 | Linecorp Regina Sweets&bakery information disclosure | 8.2v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-39737 | Linecorp Matsuya information disclosure | 8.2v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-39736 | Linecorp Fukunaga Memberscard information disclosure | 8.2v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-39735 | Linecorp Uomasa Saiji New information disclosure | 8.2v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-39734 | Linecorp Trackdiner10/10 Mc improper privilege management | 8.2v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-39733 | Linecorp Tonton-tei improper privilege management | 8.2v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-39732 | Linecorp Tokueimaru Waiting improper privilege management | 8.2v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-39619 | Teomantuncer Node Email Check inefficient regular expression complexity in node-email-check | 7.5v3.1 | 1.1% | 2023-10-25 | |
| CVE-2023-39231 | PingFederate PingOne MFA IK Device Pairing Second Factor authentication bypass | 7.3CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-39219 | Ping Identity PingFederate admin console denial of service via Java class enumeration | 7.5CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-38849 | Linecorp line information disclosure | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-38848 | Linecorp line information disclosure | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-38847 | Linecorp line information disclosure | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-38846 | Linecorp line information disclosure | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-38845 | Linecorp line information disclosure | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-38041 | Ivanti Secure Access Client time-of-check time-of-use race condition | 7.0v3.1 | 0.7% | 2023-10-25 | Exploit codeFix |
| CVE-2023-37913 | XWiki Platform office converter path traversal | 10.0CNA v3.1 | 1.1% | 2023-10-25 | Fix |
| CVE-2023-37912 | XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro | 10.0CNA v3.1 | 1.2% | 2023-10-25 | Fix |
| CVE-2023-37911 | xwiki-platform org.Xwiki.platform:xwiki-platform-oldcore may leak data | 6.5CNA v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-37910 | XWiki Platform attachment move missing authorization | 8.1CNA v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-37909 | xwiki-platform privilege escalation/remote code execution from account | 10.0CNA v3.1 | 1.6% | 2023-10-25 | Fix |
| CVE-2023-37908 | XWiki Rendering XHTML attribute sanitization cross-site scripting | 9.1CNA v3.1 | 1.1% | 2023-10-25 | Fix |
| CVE-2023-37283 | Ping Identity PingFederate authentication bypass via HTML form and Identifier First Adapter | 8.1CNA v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-36085 | Sisqualwfm open redirect | 6.1NVD v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-34447 | iTop XSS vulnerability on pages/UI.php | 8.8CNA v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-34446 | iTop XSS vulnerability on pages/preferences.php | 8.8CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-34085 | Ping Identity PingFederate User Attribute Disclosure via DynamoDB Data Stores | 2.6CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-34056 | VMware vCenter Server partial information disclosure | 4.3CNA v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-34048 | VMware vCenter Server out-of-bounds write | 9.8CNA v3.1 | 99.4% | 2023-10-25 | KEVNucleiFix |
| CVE-2023-32359 | Apple iOS and iPadOS VoiceOver vulnerability | 7.5v3.1 | 0.9% | 2023-10-25 | Fix |
| CVE-2023-31582 | JOSE4J uses weak cryptographic algorithm | 7.5v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-31581 | Sureness uses hard-coded key | 9.8v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-31580 | Light-oauth2 missing public key verification | 5.9v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-30912 | HPE OneView A remote code execution | 7.2CNA v3.1 | 1.2% | 2023-10-25 | Fix |
| CVE-2023-29973 | pfSense resource exhaustion | 4.9v3.1 | 1.6% | 2023-10-25 | |
| CVE-2023-27377 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-27376 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-27375 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-27262 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-27261 | Missing authentication in IDAttend’s IDWeb application | 6.5v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-27260 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-27259 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-27258 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-27257 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-27256 | Missing authentication in IDAttend’s IDWeb application | 5.3v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-27255 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-27254 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-26584 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-26583 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-26582 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-26581 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-26580 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-26579 | Missing authentication in IDAttend’s IDWeb application | 5.3v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-26578 | Arbitrary file upload to Web Root in IDAttend’s IDWeb application | 8.8v3.1 | 1.5% | 2023-10-25 | |
| CVE-2023-26577 | Stored cross-site scripting in IDAttend’s IDWeb application | 5.4NVD v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-26576 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-26575 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-26574 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-26573 | Missing authentication in IDAttend’s IDWeb application | 9.1v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-26572 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-26571 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.6% | 2023-10-25 | |
| CVE-2023-26570 | Missing authentication in IDAttend’s IDWeb application | 7.5v3.1 | 0.7% | 2023-10-25 | |
| CVE-2023-26569 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-26568 | Unauthenticated SQL injection in IDAttend’s IDWeb application | 9.1v3.1 | 0.8% | 2023-10-25 | |
| CVE-2023-26219 | TIBCO Operational Intelligence Hawk RedTail credential exposure | 7.4CNA v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-25032 | Print, PDF, Email by PrintFriendly WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-20273 | Cisco IOS XE Web UI command injection | 7.2CNA v3.1 | 93.0% | 2023-10-25 | KEVMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-5758 | Mozilla Firefox cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-5753 | Potential buffer overflow vulnerabilities in the Zephyr Bluetooth subsystem | 6.3CNA v3.1 | 0.9% | 2023-10-25 | |
| CVE-2023-5752 | Mercurial configuration injectable in repo revision when installing via pip | 5.5CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-5746 | Synology Camera Firmware format string | 9.8CNA v3.1 | 1.7% | 2023-10-25 | Fix |
| CVE-2023-5745 | Reusable Text Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-5744 | Very Simple Google Maps WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-5740 | Live Chat with Facebook Messenger WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-25 | |
| CVE-2023-5732 | Mozilla Firefox address bar spoofing via bidirectional characters | 6.5v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-5731 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 1.0% | 2023-10-25 | Fix |
| CVE-2023-5730 | Mozilla Firefox memory safety bugs | 9.8v3.1 | 1.5% | 2023-10-25 | Fix |
| CVE-2023-5729 | Mozilla Firefox spoofing | 4.3v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-5728 | Mozilla Firefox use-after-free | 7.5v3.1 | 1.2% | 2023-10-25 | Fix |
| CVE-2023-5727 | Mozilla Firefox and Thunderbird executable file download warning vulnerability | 6.5v3.1 | 0.9% | 2023-10-25 | Fix |
| CVE-2023-5726 | Mozilla Firefox spoofing | 4.3v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-5725 | A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to collect sensitive user data. This vulnerability affects Firefox < 119, Firefox ESR < 115.4, and Thunderbird < 115.4.1. | 4.3v3.1 | 0.9% | 2023-10-25 | Fix |
| CVE-2023-5724 | Mozilla Firefox crash | 7.5v3.1 | 1.6% | 2023-10-25 | Fix |
| CVE-2023-5723 | Mozilla Firefox document.cookie handling vulnerability | 5.3v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-5722 | Mozilla Firefox observable discrepancy | 5.3v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-5721 | Mozilla Firefox clickjacking | 4.3v3.1 | 0.8% | 2023-10-25 | Fix |
| CVE-2023-5717 | Out-of-bounds write in Linux Kernel's Linux Kernel Performance Events (perf) component | 7.8NVD v3.1 | 0.9% | 2023-10-25 | Fix |
| CVE-2023-5671 | HP Print and Scan Doctor improper privilege management | 7.8v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2023-5574 | Red Hat Enterprise Linux 9 xorg-x11-server: Use-after-free bug in damagedestroy | 7.0NVD v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-5568 | Samba: Heap buffer overflow with freshness tokens in the heimdal kdc | 6.5NVD v3.1 | 1.6% | 2023-10-25 | Fix |
| CVE-2023-5472 | Google Chrome Profiles use-after-free | 8.8v3.1 | 1.2% | 2023-10-25 | Fix |
| CVE-2023-5380 | X.Org X server xorg-x11-server: Use-after-free bug in destroywindow | 4.7NVD v3.1 | 0.7% | 2023-10-25 | Fix |
| CVE-2023-5367 | Red Hat Enterprise Linux 6 Extended Lifecycle Support xorg-x11-server out-of-bounds write | 7.8NVD v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-5311 | WP EXtra WordPress plugin missing authorization to .htaccess file modification | 8.8v3.1 | 1.5% | 2023-10-25 | Fix |
| CVE-2023-5127 | WP Font Awesome WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-10-25 | Fix |
| CVE-2023-5126 | Delete Me WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-5110 | BSK PDF Manager WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-5085 | Advanced Menu Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-5044 | Kubernetes ingress-nginx code injection | 7.6CNA v3.1 | 56.6% | 2023-10-25 | Emerging ThreatsExploit codeFix |
| CVE-2023-5043 | Kubernetes ingress-nginx ingress nginx annotation injection causes arbitrary command execution | 7.6CNA v3.1 | 2.2% | 2023-10-25 | Exploit codeFix |
| CVE-2023-4693 | GRUB2: Out-of-bounds read at fs/ntfs.c | 4.6NVD v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-4692 | GRUB2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution | 7.8NVD v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-4608 | Lenovo XClarity Controller (XCC) SQL injection | 4.1CNA v3.1 | 0.4% | 2023-10-25 | Fix |
| CVE-2023-4607 | Lenovo XClarity Controller (XCC) improper privilege management | 7.5CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-4606 | Lenovo XClarity Controller (XCC) missing authorization | 8.1CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-3112 | Lenovo Elliptic Labs Virtual Lock Sensor incorrect default permissions | 7.8CNA v3.1 | 0.2% | 2023-10-25 | Fix |
| CVE-2023-3010 | Grafana worldmap-panel cross-site scripting | 7.3CNA v3.1 | 0.5% | 2023-10-25 | Fix |
| CVE-2023-1356 | Reflected cross-site scripting in IDAttend’s IDWeb application | 6.1NVD v3.1 | 0.4% | 2023-10-25 | |
| CVE-2023-46059 | Geeklog cross-site scripting | 4.8v3.1 | 0.6% | 2023-10-24 | |
| CVE-2023-46058 | Geeklog cross-site scripting | 4.8v3.1 | 0.6% | 2023-10-24 | |
| CVE-2023-5363 | OpenSSL incorrect cipher key and IV length processing | 7.5NVD v3.1 | 3.3% | 2023-10-24 | Fix |
| CVE-2023-46603 | Color Demoiccmax out-of-bounds read | 8.8v3.1 | 0.5% | 2023-10-23 | |
| CVE-2023-46602 | Color Demoiccmax out-of-bounds write | 8.8v3.1 | 0.5% | 2023-10-23 | |
| CVE-2023-46332 | Webassembly Binary Toolkit out-of-bounds write | 5.5v3.1 | 0.3% | 2023-10-23 | |
| CVE-2023-46331 | Webassembly Binary Toolkit out-of-bounds read | 5.5v3.1 | 0.2% | 2023-10-23 | |
| CVE-2023-46324 | free5GC udm vulnerable to Invalid Curve Attack | 7.5v3.1 | 0.4% | 2023-10-23 | Fix |
| CVE-2023-46322 | iTerm2 log injection | 9.8v3.1 | 0.7% | 2023-10-23 | Fix |
| CVE-2023-46321 | iTerm2 log injection | 9.8v3.1 | 0.7% | 2023-10-23 | Fix |
| CVE-2023-46319 | Wallix Bastion authentication bypass | 7.5v3.1 | 0.5% | 2023-10-23 | Fix |
| CVE-2023-46288 | Apache Airflow: Sensitive parameters exposed in API when non-sensitive-only configuration is set | 4.3v3.1 | 1.4% | 2023-10-23 | Fix |
| CVE-2023-46127 | Frappe vulnerable to HTML injection by any Desk user | 5.4CNA v3.1 | 41.3% | 2023-10-23 | Fix |
| CVE-2023-46122 | Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt | 3.9CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-45998 | kodcloud kodbox cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-23 | |
| CVE-2023-45966 | remark42 server-side request forgery | 7.5v3.1 | 0.6% | 2023-10-23 | Exploit code |
| CVE-2023-45802 | Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST | 5.9v3.1 | 3.0% | 2023-10-23 | Exploit codeFix |
| CVE-2023-44760 | Concrete CMS cross-site scripting | 4.8NVD v3.1 | 0.6% | 2023-10-23 | |
| CVE-2023-43624 | OMRON CX-Designer XML external entity injection | 5.5v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2023-43622 | Apache HTTP Server: DoS in HTTP/2 with initial windows size 0 | 7.5v3.1 | 68.8% | 2023-10-23 | Exploit codeFix |
| CVE-2023-43358 | CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-10-23 | |
| CVE-2023-43074 | Dell Unity external control of a file path | 5.2CNA v3.1 | 0.5% | 2023-10-23 | Fix |
| CVE-2023-43067 | Dell Unity XML external entity injection | 4.9CNA v3.1 | 0.4% | 2023-10-23 | Fix |
| CVE-2023-43066 | Dell Unity OS command injection | 5.1CNA v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2023-43065 | Dell Unity cross-site scripting | 5.5CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-43045 | IBM Sterling Partner Engagement Manager security bypass | 5.9CNA v3.1 | 0.7% | 2023-10-23 | Fix |
| CVE-2023-42295 | OpenImageIO integer overflow | 8.8v3.1 | 0.9% | 2023-10-23 | Fix |
| CVE-2023-38722 | IBM Sterling Partner Engagement Manager cross-site scripting | 6.4CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-37636 | Webkul Uvdesk A stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-23 | |
| CVE-2023-37635 | uvdesk community-skeleton missing brute-force protection | 9.8v3.1 | 1.2% | 2023-10-23 | Exploit code |
| CVE-2023-37532 | A path traversal vulnerability affects HCL Commerce | 5.8CNA v3.1 | 0.5% | 2023-10-23 | Fix |
| CVE-2023-33840 | IBM Security Verify Governance cross-site scripting | 4.8CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-33839 | IBM Security Verify Governance command execution | 7.2CNA v3.1 | 1.1% | 2023-10-23 | Fix |
| CVE-2023-33837 | IBM Security Verify Governance information disclosure | 4.1CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-33517 | carRental files accessible to external parties | 7.5v3.1 | 0.7% | 2023-10-23 | Exploit code |
| CVE-2023-31122 | Apache HTTP Server: Mod_macro buffer over-read | 7.5v3.1 | 3.0% | 2023-10-23 | Fix |
| CVE-2023-28805 | Zscaler Client Connector ZCC on Linux privilege escalation | 6.7CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-28804 | Zscaler Client Connector linux ZCC allows unsigned updates, allowing elevated code execution | 8.2CNA v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2023-28803 | Zscaler Client Connector local network detection authentication bypass | 5.9CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-28797 | Zscaler Client Connector LPE using arbitrary file delete with Symlinks | 6.3CNA v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2023-28796 | Zscaler Client Connector IPC Bypass through PLT Section in ELF | 7.1CNA v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2023-28795 | Zscaler Client Connector client IPC validation bypass | 7.8CNA v3.1 | 0.1% | 2023-10-23 | Fix |
| CVE-2023-28793 | Zscaler Client Connector heap based buffer overflow in library | 7.8CNA v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-27152 | OPNsense missing brute-force protection | 9.8v3.1 | 0.9% | 2023-10-23 | |
| CVE-2023-27149 | Enhancesoft osTicket stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-10-23 | |
| CVE-2023-27148 | Enhancesoft osTicket Admin panel stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-10-23 | |
| CVE-2023-5718 | Vue.js devtools information disclosure | 4.3v3.1 | 0.2% | 2023-10-23 | Fix |
| CVE-2023-5702 | Viessmann Vitogate 300 cgi-bin interface forced browsing | 6.5v3.1 | 19.4% | 2023-10-23 | Emerging ThreatsExploit codeFix |
| CVE-2023-5701 | vnotex vnote Markdown file cross-site scripting | 6.1v3.1 | 0.7% | 2023-10-23 | |
| CVE-2023-5700 | Netentsec NS-ASG Application Security Gateway uploadiscgwrouteconf.php SQL injection | 9.8v3.1 | 0.6% | 2023-10-23 | |
| CVE-2023-5699 | CodeAstro Internet Banking System pages_view_client.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-23 | |
| CVE-2023-5698 | CodeAstro Internet Banking System pages_deposit_money.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-23 | |
| CVE-2023-5697 | CodeAstro Internet Banking System pages_withdraw_money.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-23 | |
| CVE-2023-5633 | Linux kernel vmwgfx driver use-after-free | 7.8NVD v3.1 | 0.3% | 2023-10-23 | Fix |
| CVE-2023-5246 | SICK FX0-GMOD00000 authentication bypass by replay | 8.8CNA v3.1 | 0.8% | 2023-10-23 | |
| CVE-2023-46317 | Knot Resolver TCP reconnection handling vulnerability | 7.5v3.1 | 0.6% | 2023-10-22 | Fix |
| CVE-2023-46315 | zanllp Stable Diffusion Webui Infinite Image Browsing information disclosure | 7.5v3.1 | 0.6% | 2023-10-22 | |
| CVE-2023-46306 | Netmodule Router Software OS command injection | 6.6NVD v3.1 | 1.0% | 2023-10-22 | Fix |
| CVE-2023-46303 | Calibre-ebook calibre server-side request forgery | 7.5v3.1 | 1.4% | 2023-10-22 | Fix |
| CVE-2023-46301 | iTerm2 code execution | 9.8v3.1 | 1.2% | 2023-10-22 | Fix |
| CVE-2023-46300 | iTerm2 code execution | 9.8v3.1 | 1.2% | 2023-10-22 | Fix |
| CVE-2023-46298 | Next.js missing cache-control header may lead to CDN caching empty reply | 7.5v3.1 | 1.3% | 2023-10-22 | Fix |
| CVE-2023-46095 | Smooth Scroll Links WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-22 | |
| CVE-2023-46089 | Userback WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-22 | Fix |
| CVE-2023-46085 | Wp Ultimate Review WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-22 | Fix |
| CVE-2023-38735 | IBM Cognos Dashboards improper authentication | 5.7CNA v3.1 | 0.5% | 2023-10-22 | Fix |
| CVE-2023-38276 | IBM Cognos Dashboards information disclosure | 5.9CNA v3.1 | 0.4% | 2023-10-22 | Fix |
| CVE-2023-38275 | IBM Cognos Dashboards information disclosure | 5.9CNA v3.1 | 0.4% | 2023-10-22 | Fix |
| CVE-2023-5696 | CodeAstro Internet Banking System pages_transfer_money.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-22 | |
| CVE-2023-5695 | CodeAstro Internet Banking System pages_reset_pwd.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-22 | |
| CVE-2023-5694 | CodeAstro Internet Banking System pages_system_settings.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-22 | |
| CVE-2023-5693 | CodeAstro Internet Banking System pages_reset_pwd.php SQL injection | 9.8v3.1 | 0.6% | 2023-10-22 | |
| CVE-2023-46078 | Serial Numbers for WooCommerce License Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-21 | Fix |
| CVE-2023-46067 | Rocket Font WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-21 | |
| CVE-2023-46055 | Thingnario Photon code injection | 8.8v3.1 | 1.2% | 2023-10-21 | |
| CVE-2023-46054 | WBCE_CMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-21 | |
| CVE-2023-46003 | I-doit cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-21 | Exploit code |
| CVE-2023-45682 | nothings stb wild address read in vorbis_decode_packet_rest in stb_vorbis | 7.1NVD v3.1 | 0.6% | 2023-10-21 | Fix |
| CVE-2023-45681 | nothings stb out-of-bounds heap buffer write in stb_vorbis | 7.8NVD v3.1 | 0.5% | 2023-10-21 | Fix |
| CVE-2023-45680 | nothings stb null pointer dereference in vorbis_deinit in stb_vorbis | 5.5NVD v3.1 | 0.5% | 2023-10-21 | Fix |
| CVE-2023-45679 | nothings stb attempt to free an uninitialized memory pointer in vorbis_deinit in stb_vorbis | 7.8NVD v3.1 | 0.5% | 2023-10-21 | Fix |
| CVE-2023-45678 | nothings stb off-by-one heap buffer write in start_decoder in stb_vorbis | 7.8NVD v3.1 | 0.7% | 2023-10-21 | |
| CVE-2023-45677 | nothings stb heap buffer out-of-bounds write in start_decoder in stb_vorbis | 7.8NVD v3.1 | 0.5% | 2023-10-21 | Fix |
| CVE-2023-45676 | nothings stb multi-byte write heap buffer overflow in start_decoder in stb_vorbis | 7.8NVD v3.1 | 0.5% | 2023-10-21 | Fix |
| CVE-2023-45675 | nothings stb 0 byte write heap buffer overflow in start_decoder in stb_vorbis | 7.8NVD v3.1 | 0.8% | 2023-10-21 | |
| CVE-2023-45667 | nothings stb null pointer dereference because of an uninitialized variable in stb_image | 7.5NVD v3.1 | 1.1% | 2023-10-21 | |
| CVE-2023-45666 | nothings stb possible double free or memory leak in stbi__load_gif_main in stb_image | 9.8NVD v3.1 | 1.0% | 2023-10-21 | |
| CVE-2023-45664 | nothings stb double free in stbi__load_gif_main_outofmem in stb_image | 8.8NVD v3.1 | 0.9% | 2023-10-21 | |
| CVE-2023-45663 | nothings stb disclosure of uninitialized memory in stbi__tga_load in stb_image | 5.5NVD v3.1 | 0.7% | 2023-10-21 | |
| CVE-2023-45662 | nothings stb multi-byte read heap buffer overflow in stbi__vertical_flip in stb_image | 8.1NVD v3.1 | 0.7% | 2023-10-21 | |
| CVE-2023-45661 | nothings stb wild address read in stbi__gif_load_next in stb_image | 7.1NVD v3.1 | 0.6% | 2023-10-21 | |
| CVE-2023-38194 | Superwebmailer cross-site scripting | 6.1v3.1 | 1.1% | 2023-10-21 | Nuclei |
| CVE-2023-38193 | Superwebmailer command injection | 8.8v3.1 | 1.3% | 2023-10-21 | |
| CVE-2023-38192 | Superwebmailer cross-site scripting | 6.1v3.1 | 1.1% | 2023-10-21 | Nuclei |
| CVE-2023-38190 | Superwebmailer SQL injection | 8.8v3.1 | 0.7% | 2023-10-21 | |
| CVE-2023-5684 | Byzoro Smart S85F Management Platform importexport.php os command injection | 9.8v3.1 | 26.6% | 2023-10-21 | |
| CVE-2023-5683 | Byzoro Smart S85F Management Platform importconf.php os command injection | 9.8v3.1 | 9.1% | 2023-10-21 | |
| CVE-2023-5205 | The Add Custom Body Class plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'add_custom_body_class' value in versions up to, and including, 1.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-l | 5.4v3.1 | 0.3% | 2023-10-21 | |
| CVE-2023-5132 | Soisy Pagamento Rateale WordPress plugin missing authorization to sensitive information exposure | 7.5v3.1 | 0.6% | 2023-10-21 | Fix |
| CVE-2023-4939 | SALESmanago WordPress plugin log injection via weak authentication Token | 5.3v3.1 | 0.5% | 2023-10-21 | Fix |
| CVE-2023-4635 | EventON WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-10-21 | Fix |
| CVE-2023-46287 | Nagvis cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-46277 | Edneville Please pleaser privilege escalation | 7.8v3.1 | 0.3% | 2023-10-20 | |
| CVE-2023-46117 | Inadequate validation of retrieved subdomains may lead to a remote code execution in reconFTW | 9.6CNA v3.0 | 0.8% | 2023-10-20 | Fix |
| CVE-2023-46115 | tauri Updater Private Keys Possibly Leaked via Vite Environment variables in tauri-cli | 8.4CNA v3.1 | 0.2% | 2023-10-20 | Fix |
| CVE-2023-45805 | pdm lockfile parsing vulnerability | 7.8CNA v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-45471 | Qad Search Server cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | |
| CVE-2023-45394 | Small CRM stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | |
| CVE-2023-44483 | Apache Santuario: Private key disclosure in debug-log output | 6.5v3.1 | 1.2% | 2023-10-20 | Fix |
| CVE-2023-44256 | Fortinet FortiAnalyzer path traversal | 6.4CNA v3.1 | 1.2% | 2023-10-20 | Fix |
| CVE-2023-43357 | CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-10-20 | |
| CVE-2023-43356 | CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-20 | Exploit code |
| CVE-2023-43355 | CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-20 | Exploit code |
| CVE-2023-43354 | CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-20 | Exploit code |
| CVE-2023-43353 | CMS Made Simple CMSmadesimple v.2.2.18 cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-10-20 | |
| CVE-2023-43346 | OpenSolution QuickCMS cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-20 | Exploit code |
| CVE-2023-41894 | Local-only webhooks externally accessible via SniTun in Home Assistant Core | 5.3CNA v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-41893 | Account takeover via auth_callback login in Home Assistant Core | 4.3CNA v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-40361 | Secudos Qiata incorrect permission assignment | 7.8v3.1 | 0.3% | 2023-10-20 | Exploit code |
| CVE-2023-39731 | LINE Kaibutsunosato improper access control | 5.3v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-39680 | Sollace Unicopia deserialization of untrusted data | 9.8v3.1 | 0.6% | 2023-10-20 | |
| CVE-2023-38191 | Superwebmailer cross-site scripting | 6.1v3.1 | 0.5% | 2023-10-20 | |
| CVE-2023-37824 | Sitolog Application Connect SQL injection | 9.8v3.1 | 0.5% | 2023-10-20 | |
| CVE-2023-34052 | VMware Aria Operations for Logs deserialization of untrusted data | 7.8v3.1 | 0.2% | 2023-10-20 | Fix |
| CVE-2023-34051 | VMware Aria Operations for Logs incorrect authorization | 9.8v3.1 | 48.8% | 2023-10-20 | Exploit codeFix |
| CVE-2023-34046 | VMware Fusion TOCTOU local privilege escalation | 6.7CNA v3.1 | 0.1% | 2023-10-20 | Fix |
| CVE-2023-34045 | VMware Fusion installer local privilege escalation | 6.6CNA v3.1 | 0.2% | 2023-10-20 | Fix |
| CVE-2023-34044 | VMware Workstation information disclosure vulnerability in bluetooth device-sharing functionality | 7.1CNA v3.1 | 0.2% | 2023-10-20 | Fix |
| CVE-2023-32786 | Langchain server-side request forgery | 7.5v3.1 | 0.7% | 2023-10-20 | Fix |
| CVE-2023-23373 | QNAP QUSBCam2 OS command injection | 8.8CNA v3.1 | 1.1% | 2023-10-20 | Fix |
| CVE-2023-5690 | Cross-site request forgery (CSRF) in modoboa/modoboa | 8.8v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5689 | Cross-site scripting (XSS) DOM in modoboa/modoboa | 5.4NVD v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-5688 | Cross-site scripting (XSS) DOM in modoboa/modoboa | 5.4NVD v3.1 | 0.6% | 2023-10-20 | Fix |
| CVE-2023-5687 | Cross-site request forgery (CSRF) in mosparo/mosparo | 8.8v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-5686 | Heap-based buffer overflow in radareorg/radare2 | 8.8v3.1 | 0.8% | 2023-10-20 | Fix |
| CVE-2023-5682 | Tongda OA delete.php SQL injection | 9.8v3.1 | 0.7% | 2023-10-20 | |
| CVE-2023-5681 | Netentsec NS-ASG Application Security Gateway list_addr_fwresource_ip.php SQL injection | 7.2v3.1 | 0.6% | 2023-10-20 | |
| CVE-2023-5668 | WhatsApp Share Button WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-5618 | Modern Footnotes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5615 | Skype Legacy Buttons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | |
| CVE-2023-5614 | Theme Switcha WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5613 | Super Testimonials WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5602 | Social Media Share Buttons and Social Sharing Icons WordPress plugin cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-20 | Fix |
| CVE-2023-5576 | Migration, Backup, Staging WPvivid WordPress plugin Google Drive client secret exposure | 9.3v3.1 | 0.8% | 2023-10-20 | Fix |
| CVE-2023-5534 | WPBot WordPress plugin AI ChatBot and cross-site request forgery on AJAX actions | 5.4v3.1 | 0.2% | 2023-10-20 | Fix |
| CVE-2023-5533 | WPBot WordPress plugin AI ChatBot and missing authorization on AJAX actions | 9.8v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-5524 | M-Files Web Companion allows remote code execution for some filetypes | 8.2CNA v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-5523 | M-Files Web Companion allows remote code execution | 8.6CNA v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-5414 | Icegram Express WordPress plugin directory traversal to arbitrary file read | 7.2NVD v3.1 | 1.0% | 2023-10-20 | Fix |
| CVE-2023-5337 | Contact form Form For All WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-20 | |
| CVE-2023-5308 | Podcast Subscribe Buttons WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5292 | Advanced Custom Fields: Extended WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5231 | Magic Action Box WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-20 | |
| CVE-2023-5200 | flowpaper WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-5121 | Migration, Backup, Staging WPvivid WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-5120 | Migration, Backup, Staging WPvivid WordPress plugin authenticated stored cross-site scripting | 4.8v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-5109 | WP Mailto Links Protect Email Addresses WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5086 | Copy Anything to Clipboard WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-5071 | Sitekit WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-5070 | Social Media Share Buttons and Social Sharing Icons WordPress plugin information exposure | 6.5v3.1 | 1.2% | 2023-10-20 | Exploit codeFix |
| CVE-2023-5050 | Leaflet Map WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-4999 | Horizontal scrolling announcement WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-10-20 | |
| CVE-2023-4975 | Website Builder by SeedProd WordPress plugin cross-site request forgery to settings update | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4968 | WPLegalPages WordPress plugin authenticated (Author+) stored cross-site scripting via shortcode | 4.8v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-4961 | Poptin WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-4947 | WooCommerce EAN Payment Gateway WordPress plugin missing authorization authenticated EAN update | 4.3v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-4943 | BEAR WordPress plugin missing authorization to Product manipulation | 4.3v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-4942 | BEAR WordPress plugin cross-site request forgery to Product manipulation | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4941 | BEAR WordPress plugin missing authorization to Product manipulation | 4.3v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-4940 | BEAR WordPress plugin cross-site request forgery to Product manipulation | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4937 | BEAR WordPress plugin cross-site request forgery to Product manipulation | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4935 | BEAR WordPress plugin cross-site request forgery to Profile creation | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4926 | BEAR WordPress plugin cross-site request forgery to Product deletion | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4924 | BEAR WordPress plugin missing authorization to Product deletion | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4923 | BEAR WordPress plugin cross-site request forgery to Product deletion | 4.3v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4920 | BEAR WordPress plugin cross-site request forgery to stored cross-site scripting | 8.8v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4919 | iframe WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-4796 | Booster for WooCommerce WordPress plugin information disclosure | 4.3v3.1 | 0.6% | 2023-10-20 | Fix |
| CVE-2023-4668 | Ad Inserter WordPress plugin unauthenticated sensitive information exposure | 7.5v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-4648 | WP Customer Reviews WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4598 | Slimstat Analytics WordPress plugin authenticated (Contributor+) blind SQL injection via shortcode | 6.5NVD v3.1 | 1.1% | 2023-10-20 | Fix |
| CVE-2023-4488 | Dropbox Folder Share WordPress plugin unauthenticated local file inclusion | 9.8v3.1 | 1.0% | 2023-10-20 | Fix |
| CVE-2023-4482 | Auto Amazon Links WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-4402 | Essential Blocks WordPress plugin unauthenticated PHP object injection via products | 9.8v3.1 | 1.3% | 2023-10-20 | Fix |
| CVE-2023-4386 | Essential Blocks WordPress plugin unauthenticated PHP object injection via queries | 8.1v3.1 | 0.8% | 2023-10-20 | Fix |
| CVE-2023-4274 | Migration WordPress plugin path traversal | 6.5NVD v3.1 | 1.5% | 2023-10-20 | Fix |
| CVE-2023-4271 | Photospace Responsive WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-4021 | Modern Events Calendar lite WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2023-10-20 | Fix |
| CVE-2023-3998 | wpDiscuz WordPress plugin insecure direct object reference to post Rating Increase/Decrease | 5.3v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-3996 | ARMember Lite - Membership WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-10-20 | Fix |
| CVE-2023-3965 | nsc WordPress theme prototype pollution to reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-20 | |
| CVE-2023-3962 | Winters WordPress theme prototype pollution to reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-20 | |
| CVE-2023-3933 | Your Journey WordPress theme prototype pollution to reflected cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-20 | |
| CVE-2023-3869 | wpDiscuz WordPress plugin insecure direct object reference to comment Rating Increase/Decrease | 5.3v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-3487 | Integer overflow in Silicon Labs Gecko Bootloader leads to unbounded memory access | 7.7CNA v3.1 | 0.2% | 2023-10-20 | Fix |
| CVE-2023-2325 | Stored XSS vulnerability in M-Files Classic Web | 7.3CNA v3.1 | 0.4% | 2023-10-20 | Fix |
| CVE-2023-46229 | LangChain server side request forgery | 8.8v3.1 | 47.6% | 2023-10-19 | Exploit codeFix |
| CVE-2023-46228 | Zchunk integer overflow | 7.8v3.1 | 0.3% | 2023-10-19 | Fix |
| CVE-2023-46227 | Apache InLong has an arbitrary file read | 7.5v3.1 | 1.0% | 2023-10-19 | Fix |
| CVE-2023-46042 | GetSimpleCMS code injection | 9.8v3.1 | 25.3% | 2023-10-19 | |
| CVE-2023-46033 | D-Link DSL-2730U improper access control | 6.8v3.1 | 0.3% | 2023-10-19 | |
| CVE-2023-45992 | CommScope Ruckus Cloudpath Enrollment System cross-site request forgery | 9.6v3.1 | 0.6% | 2023-10-19 | Exploit codeFix |
| CVE-2023-45883 | Enghouse Qumu improper privilege management | 7.8v3.1 | 0.2% | 2023-10-19 | |
| CVE-2023-45826 | Authenticated SQL injection in Leantime | 6.5CNA v3.1 | 1.9% | 2023-10-19 | NucleiFix |
| CVE-2023-45825 | Token in custom credentials object can leak through logs in ydb-go-sdk | 5.5CNA v3.1 | 0.2% | 2023-10-19 | Fix |
| CVE-2023-45823 | Arbitrary file read in Artifact Hub | 7.5CNA v3.1 | 0.6% | 2023-10-19 | Fix |
| CVE-2023-45822 | Unsafe rego built-in allowed in Artifact Hub | 3.7CNA v3.1 | 0.5% | 2023-10-19 | Fix |
| CVE-2023-45821 | Incorrect Docker Hub registry check in Artifact Hub | 5.4CNA v3.1 | 0.2% | 2023-10-19 | Fix |
| CVE-2023-45820 | Directus crashes on invalid WebSocket message | 5.9CNA v3.1 | 0.7% | 2023-10-19 | Fix |
| CVE-2023-45819 | Cross-site scripting vulnerability in TinyMCE notificationManager.open API | 6.1CNA v3.1 | 0.6% | 2023-10-19 | Fix |
| CVE-2023-45818 | TinyMCE mXSS vulnerability in undo/redo, getContent API, resetContent API, and Autosave plugin | 6.1CNA v3.1 | 0.6% | 2023-10-19 | Fix |
| CVE-2023-45815 | ArchiveBox wget extractor output vulnerability | 6.4CNA v3.1 | 0.7% | 2023-10-19 | Fix |
| CVE-2023-45809 | Disclosure of user names via admin bulk action views in wagtail | 2.7CNA v3.1 | 0.5% | 2023-10-19 | Fix |
| CVE-2023-45384 | Knowband Supercheckout unrestricted file upload | 9.8v3.1 | 0.6% | 2023-10-19 | |
| CVE-2023-45381 | Webshopworks Creativepopup SQL injection | 9.8v3.1 | 0.5% | 2023-10-19 |