CVE-2023 records published in October 2023
Page three of three: records 2,001 to 2,534 of the 2,534 published in October 2023, newest first. The first page carries the figures for October 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-45363 | MediaWiki denial of service | 7.5v3.1 | 23.8% | 2023-10-09 | Fix |
| CVE-2023-45356 | Atos Unify Openscape 4000 Assistant command injection | 8.8v3.1 | 1.3% | 2023-10-09 | Fix |
| CVE-2023-45355 | Atos Unify Openscape 4000 Assistant command injection | 8.8v3.1 | 1.3% | 2023-10-09 | Fix |
| CVE-2023-45354 | Atos Unify Openscape Common Management arbitrary code execution | 8.8v3.1 | 0.9% | 2023-10-09 | Fix |
| CVE-2023-45353 | Atos Unify Openscape Common Management unrestricted file upload | 8.8v3.1 | 0.7% | 2023-10-09 | Fix |
| CVE-2023-45352 | Atos Unify Openscape Common Management path traversal | 8.8v3.1 | 0.8% | 2023-10-09 | Fix |
| CVE-2023-45351 | Atos Unify Openscape 4000 Assistant command injection | 8.8v3.1 | 1.3% | 2023-10-09 | Fix |
| CVE-2023-45350 | Atos Unify Openscape 4000 Manager privilege escalation | 8.8v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-45349 | Atos Unify OpenScape 4000 Assistant and Manager AShbr information disclosure | 7.5v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-45248 | Acronis Cyber Protect Cloud Agent uncontrolled search path | 6.6CNA v3.0 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-45247 | Acronis Cyber Protect Cloud Agent missing authorization | 7.1CNA v3.0 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-44993 | ChatBot WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-44821 | Lcdf Gifsicle memory leak | 5.5v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2023-44813 | mooSocial cross-site scripting | 6.1v3.1 | 1.8% | 2023-10-09 | NucleiExploit code |
| CVE-2023-44812 | mooSocial cross-site scripting | 6.1NVD v3.1 | 2.0% | 2023-10-09 | Nuclei |
| CVE-2023-44811 | mooSocial cross-site request forgery | 8.8v3.1 | 0.9% | 2023-10-09 | Exploit code |
| CVE-2023-44473 | Table of Contents Plus WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-44467 | langchain-experimental langchain_experimental vulnerable to arbitrary code execution | 9.8v3.1 | 1.0% | 2023-10-09 | Fix |
| CVE-2023-44400 | louislam uptime-kuma Uptime Kuma has Persistentent User Sessions | 6.7CNA v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2023-44393 | Piwigo reflected XSS | 9.3CNA v3.1 | 1.3% | 2023-10-09 | NucleiFix |
| CVE-2023-44392 | garden arbitrary code execution vulnerability when using shared Kubernetes cluster | 8.3CNA v3.1 | 0.7% | 2023-10-09 | Fix |
| CVE-2023-44378 | gnark vulnerable to unsoundness in variable comparison/non-unique binary decomposition | 7.1CNA v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-44260 | Woocommerce ESTO WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-44246 | Shockingly Simple Favicon WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-44240 | Timthumb vulnerability Scanner WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-44238 | Joakim Ling Remove slug from custom post type cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-44237 | WP Site Protector WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-44236 | WP Captcha WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-44232 | WP Hide Pages WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-44231 | Contact Form WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-43899 | hansunCMS SQL injection | 9.8v3.1 | 0.5% | 2023-10-09 | |
| CVE-2023-43700 | SICK APU0200 RDT400 missing authorization | 7.7CNA v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-43699 | SICK APU0200 RDT400 missing brute-force protection | 7.5CNA v3.1 | 0.7% | 2023-10-09 | Fix |
| CVE-2023-43698 | SICK APU0200 cross-site scripting | 7.1CNA v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-43697 | SICK APU0200 RDT400 modification of assumed-immutable data | 6.5CNA v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-43696 | SICK APU0200 improper access control | 8.2CNA v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-43643 | AntiSamy HTML sanitizer cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-43641 | libcue vulnerable to out-of-bounds array access | 8.8CNA v3.1 | 18.1% | 2023-10-09 | Fix |
| CVE-2023-43271 | 70mai A500S missing authentication | 9.1v3.1 | 0.6% | 2023-10-09 | |
| CVE-2023-42455 | Wazuh vulnerable to user privilege escalation | 8.8CNA v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-41672 | Hide admin notices Admin Notification Center WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-41670 | Palasthotel Use Memcached cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-41669 | Live News WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-41668 | Leadster WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | Fix |
| CVE-2023-41667 | WP-dTree WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-41660 | WP Migration Plugin DB and Files WP Synchro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2023-41047 | Improper neutralization of special elements used in a template engine in OctoPrint | 6.2CNA v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-39854 | Atx Ucrypt server-side request forgery | 6.5v3.1 | 0.4% | 2023-10-09 | |
| CVE-2023-39194 | Kernel: Xfrm: Out-of-bounds read in __xfrm_state_filter_match | 4.4NVD v3.1 | 0.4% | 2023-10-09 | Fix |
| CVE-2023-39193 | Kernel: Netfilter: Xtables sctp out-of-bounds read in match_flags | 6.0NVD v3.1 | 0.4% | 2023-10-09 | Fix |
| CVE-2023-39192 | Kernel: Netfilter: Xtables out-of-bounds read in u32_match_it | 6.0NVD v3.1 | 0.4% | 2023-10-09 | Fix |
| CVE-2023-39189 | Kernel: Netfilter: Nftables out-of-bounds read in nf_osf_match_one | 6.0NVD v3.1 | 0.4% | 2023-10-09 | Fix |
| CVE-2023-36820 | Micronaut Security ID token audience validation improper access control | 4.8CNA v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-30910 | HPE MSA Controller HTTP request smuggling | 5.4CNA v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2023-25822 | ReportPortal DoS vulnerability on creating a Launch with too many recursively nested elements | 6.3CNA v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-5463 | XINJE XDPPro cfgmgr32.dll uncontrolled search path | 7.8v3.1 | 0.3% | 2023-10-09 | |
| CVE-2023-5462 | XINJE XD5E-30R-E Modbus denial of service | 7.5v3.1 | 0.9% | 2023-10-09 | |
| CVE-2023-5461 | Delta Electronics WPLSoft Modbus cleartext transmission | 5.9v3.1 | 0.4% | 2023-10-09 | |
| CVE-2023-5460 | Delta Electronics WPLSoft Modbus Data Packet heap-based overflow | 5.7v3.1 | 0.4% | 2023-10-09 | |
| CVE-2023-5459 | Delta Electronics DVP32ES2 PLC Password Transmission denial of service | 7.5v3.1 | 0.9% | 2023-10-09 | |
| CVE-2023-5365 | HP Life Android Mobile potential escalation of privilege, information disclosure | 9.8v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-5333 | Mattermost denial of service via multiple identical User IDs in /API/v4/users/ids | 4.3CNA v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-5331 | Mattermost file information leak via IDOR in file_id in Draft Posts | 4.3CNA v3.1 | 0.3% | 2023-10-09 | Fix |
| CVE-2023-5330 | Mattermost denial of service via Opengraph Data Cache | 4.3CNA v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-5103 | SICK APU0200 RDT400 clickjacking | 4.3CNA v3.1 | 0.5% | 2023-10-09 | Fix |
| CVE-2023-5102 | SICK APU0200 RDT400 insufficient control flow management | 5.3CNA v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-5101 | SICK APU0200 RDT400 files accessible to external parties | 5.3CNA v3.1 | 0.6% | 2023-10-09 | Fix |
| CVE-2023-5100 | SICK APU0200 RDT400 cleartext transmission of sensitive information | 5.9CNA v3.1 | 0.4% | 2023-10-09 | Fix |
| CVE-2023-3589 | Cross-site request forgery vulnerability affecting Teamwork Cloud from No Magic Release 2021x | 6.8CNA v3.1 | 0.2% | 2023-10-09 | |
| CVE-2023-40654 | UNISOC chipsets FW-PackageManager missing authorization | 6.7v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40653 | UNISOC chipsets FW-PackageManager missing authorization | 6.7v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40652 | UNISOC chipsets jpg driver out-of-bounds write | 4.4v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40651 | UNISOC chipsets urild service out-of-bounds write | 4.4v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40650 | UNISOC chipsets Telecom service missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40649 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40648 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40647 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40646 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40645 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40644 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40643 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40642 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40641 | UNISOC SC9863A Messaging missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40640 | UNISOC chipsets SoundRecorder service missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40639 | UNISOC chipsets SoundRecorder service missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40638 | UNISOC chipsets Telecom service missing authorization | 4.4v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40637 | UNISOC chipsets telecom service missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40636 | UNISOC chipsets telecom service information disclosure | 4.4v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40635 | UNISOC chipsets linkturbo missing authorization | 7.8v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40634 | UNISOC chipsets phasechecksercer missing authorization | 7.8v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40633 | UNISOC chipsets phasecheckserver missing authorization | 5.5v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-40632 | UNISOC chipsets jpg driver use-after-free | 7.5v3.1 | 0.4% | 2023-10-08 | Fix |
| CVE-2023-40631 | UNISOC chipsets Dialer missing authorization | 4.4v3.1 | 0.1% | 2023-10-08 | Fix |
| CVE-2023-45199 | TrustedFirmware Mbed TLS buffer overflow | 9.8v3.1 | 1.1% | 2023-10-07 | Fix |
| CVE-2023-43615 | Arm mbed TLS buffer overflow | 7.5v3.1 | 0.8% | 2023-10-07 | Fix |
| CVE-2023-36123 | Plain Craft Launcher 2 Hex-Dragon Plain Craft Launcher path traversal | 7.8v3.1 | 0.7% | 2023-10-07 | Exploit code |
| CVE-2023-5182 | Canonical subiquity sensitive information in log files | 5.5CNA v3.1 | 0.2% | 2023-10-07 | |
| CVE-2023-45322 | libxml2 use-after-free | 6.5NVD v3.1 | 1.0% | 2023-10-06 | Fix |
| CVE-2023-45311 | Code injection in Fsevents | 9.8v3.1 | 1.5% | 2023-10-06 | Fix |
| CVE-2023-45303 | ThingsBoard server-side template injection | 8.8v3.1 | 0.9% | 2023-10-06 | Fix |
| CVE-2023-45282 | Prototype pollution in NASA Open MCT | 7.5v3.1 | 0.9% | 2023-10-06 | |
| CVE-2023-45246 | Acronis Cyber Protect Cloud Agent missing authorization | 7.1CNA v3.0 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-45245 | Acronis Agent missing authorization | 3.3CNA v3.0 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-45244 | Acronis Cyber Protect Cloud Agent missing authorization | 7.1CNA v3.0 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-45239 | Meta tac_plus remote code execution | 9.8NVD v3.1 | 2.2% | 2023-10-06 | Exploit codeFix |
| CVE-2023-44860 | Netis Systems N3M incorrect authorization | 7.5v3.1 | 22.7% | 2023-10-06 | |
| CVE-2023-44807 | D-Link DIR-820L out-of-bounds write | 9.8v3.1 | 1.1% | 2023-10-06 | |
| CVE-2023-44771 | Zenario CMS cross-site scripting | 5.4NVD v3.1 | 0.6% | 2023-10-06 | Fix |
| CVE-2023-44770 | Zenario CMS cross-site scripting | 5.4NVD v3.1 | 0.6% | 2023-10-06 | Fix |
| CVE-2023-44766 | Concrete CMS ConcreteCMS cross-site scripting | 4.8NVD v3.1 | 0.6% | 2023-10-06 | |
| CVE-2023-44765 | Concrete CMS ConcreteCMS cross-site scripting | 5.4NVD v3.1 | 0.6% | 2023-10-06 | Fix |
| CVE-2023-44764 | Concrete CMS ConcreteCMS cross-site scripting | 5.4NVD v3.1 | 0.6% | 2023-10-06 | |
| CVE-2023-44762 | Concrete CMS ConcreteCMS cross-site scripting | 5.4v3.1 | 0.6% | 2023-10-06 | Exploit code |
| CVE-2023-44761 | Concrete CMS ConcreteCMS cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-06 | Exploit codeFix |
| CVE-2023-44758 | Gdidees Cms cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-06 | Exploit code |
| CVE-2023-44384 | Discourse-Jira could make SSRF attack by setting Jira URL to an arbitrary location | 4.1CNA v3.1 | 0.4% | 2023-10-06 | Fix |
| CVE-2023-44243 | Instant CSS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-44233 | FooGallery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-44146 | Checkfront Online Booking System WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-44061 | Simple and Nice Shopping Cart Script file upload | 8.8NVD v3.1 | 1.6% | 2023-10-06 | |
| CVE-2023-43810 | opentelemetry-python-contrib resource exhaustion | 7.5CNA v3.1 | 0.8% | 2023-10-06 | Fix |
| CVE-2023-43058 | IBM Robotic Process Automation privilege escalation | 5.3CNA v3.1 | 0.7% | 2023-10-06 | Fix |
| CVE-2023-42445 | gradle possible local file exfiltration by XML external entity injection | 6.8CNA v3.1 | 0.7% | 2023-10-06 | Fix |
| CVE-2023-41950 | Laposta Signup Basic WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-41801 | AWP Classifieds WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-41732 | CP Blocks WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-41659 | Responsive Gallery Grid WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-41654 | authLdap WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-41650 | Venugopal Remove/hide Author, Date, Category Like Entry-Meta cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-06 | |
| CVE-2023-40671 | DX-auto-save-images WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-06 | |
| CVE-2023-40607 | CLUEVO LMS, E-Learning Platform WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-06 | Fix |
| CVE-2023-40556 | Schedule Posts Calendar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-06 | Fix |
| CVE-2023-40008 | Simple Org Chart WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | |
| CVE-2023-39928 | WebKitGTK MediaRecorder API use-after-free | 8.8v3.1 | 1.4% | 2023-10-06 | Fix |
| CVE-2023-38703 | PJSIP has use-after-free vulnerability in SRTP media transport | 9.8CNA v3.1 | 1.3% | 2023-10-06 | Fix |
| CVE-2023-36465 | Decidim has broken access control in templates | 9.1CNA v3.1 | 0.5% | 2023-10-06 | Fix |
| CVE-2023-35897 | IBM Spectrum Protect code execution | 8.4CNA v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-32972 | QNAP QTS, QuTS hero and QuTScloud buffer overflow | 3.8CNA v3.1 | 0.5% | 2023-10-06 | Fix |
| CVE-2023-32971 | QNAP QTS, QuTS hero and QuTScloud buffer overflow | 3.8CNA v3.1 | 0.5% | 2023-10-06 | Fix |
| CVE-2023-29235 | Maintenance Switch WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | |
| CVE-2023-28791 | Simple Org Chart WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-06 | Fix |
| CVE-2023-27615 | WP Super Minify WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-27448 | MakeStories (for Google Web Stories) WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-26153 | geokit-rails command injection | 9.8v3.1 | 3.2% | 2023-10-06 | Fix |
| CVE-2023-25480 | Post and Page Builder by BoldGrid WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-10-06 | Fix |
| CVE-2023-25033 | Social Share Boost WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-06 | |
| CVE-2023-23371 | QNAP QVPN Device Client cleartext transmission of sensitive information | 5.2CNA v3.1 | 0.1% | 2023-10-06 | Fix |
| CVE-2023-23370 | QNAP QVPN Device Client insufficiently protected credentials | 6.7CNA v3.1 | 0.2% | 2023-10-06 | Fix |
| CVE-2023-23366 | QNAP Music Station path traversal | 7.7CNA v3.1 | 0.6% | 2023-10-06 | Fix |
| CVE-2023-23365 | QNAP Music Station path traversal | 7.7CNA v3.1 | 0.6% | 2023-10-06 | Fix |
| CVE-2023-21291 | Google Android Notification.java information disclosure | 5.5v3.1 | 0.1% | 2023-10-06 | Fix |
| CVE-2023-21266 | Google Android ActivityManagerService.java privilege escalation | 7.8v3.1 | 0.1% | 2023-10-06 | Fix |
| CVE-2023-21253 | Google Android multiple locations crash | 5.5v3.1 | 0.1% | 2023-10-06 | Fix |
| CVE-2023-21252 | Google Android WifiConfigurationUtil.java denial of service | 5.5v3.1 | 0.1% | 2023-10-06 | Fix |
| CVE-2023-21244 | Google Android Notification.java privilege escalation | 6.7v3.1 | 0.1% | 2023-10-06 | Fix |
| CVE-2023-5452 | Cross-site scripting (XSS) Stored in snipe/Snipe-IT | 5.4v3.1 | 0.5% | 2023-10-06 | Fix |
| CVE-2023-5366 | Openvswitch don't match packets on nd_target field | 5.5NVD v3.1 | 0.4% | 2023-10-06 | Fix |
| CVE-2023-5214 | Privilege escalation in Puppet Bolt | 9.8v3.1 | 0.4% | 2023-10-06 | Fix |
| CVE-2023-4530 | SQLi in Turna Media's Advertising Administration Panel | 9.8CNA v3.1 | 0.5% | 2023-10-06 | Fix |
| CVE-2023-4469 | Profile Extra Fields by BestWebSoft WordPress plugin unauthorized access | 5.3CNA v3.1 | 0.5% | 2023-10-06 | Fix |
| CVE-2023-3725 | Potential buffer overflow vulnerability in the Zephyr CANbus subsystem | 7.6CNA v3.1 | 1.1% | 2023-10-06 | |
| CVE-2023-45243 | Acronis Cyber Protect Cloud Agent missing authorization | 5.5CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-45242 | Acronis Cyber Protect Cloud Agent missing authorization | 5.5CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-45241 | Acronis Cyber Protect Cloud Agent sensitive information in log files | 4.4CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-45240 | Acronis Agent missing authorization | 5.5CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-45198 | NetBSD Tnftpd information disclosure | 7.5v3.1 | 0.5% | 2023-10-05 | Fix |
| CVE-2023-45160 | Elevated Temp Directory Execution in 1E Client | 8.8v3.1 | 0.7% | 2023-10-05 | Fix |
| CVE-2023-45159 | 1E Client installer can perform arbitrary file deletion on protected files | 8.4v3.1 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-44839 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 9.3% | 2023-10-05 | Emerging Threats |
| CVE-2023-44838 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44837 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44836 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44835 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44834 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44833 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44832 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.8% | 2023-10-05 | |
| CVE-2023-44831 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44830 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44829 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.9% | 2023-10-05 | |
| CVE-2023-44828 | D-Link DIR-823G buffer overflow | 7.5v3.1 | 0.8% | 2023-10-05 | |
| CVE-2023-44390 | HtmlSanitizer vulnerable to cross-site scripting in Foreign Content | 6.1CNA v3.1 | 0.4% | 2023-10-05 | Fix |
| CVE-2023-44387 | Gradle has incorrect permission assignment for symlinked files used in copy or archiving operations | 3.2CNA v3.1 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-44386 | Incorrect request error handling triggers server crash in Vapor | 5.3CNA v3.1 | 0.6% | 2023-10-05 | Fix |
| CVE-2023-44214 | Acronis Agent missing authorization | 5.5CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-44213 | Acronis Cyber Protect Cloud Agent personal information exposure | 3.3CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-44212 | Acronis Agent missing authorization | 7.3CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-44211 | Acronis Cyber Protect Cloud Agent missing authorization | 7.1CNA v3.0 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-44024 | Knowband One Page Checkout, Social Login & Mailchimp SQL injection | 9.8v3.1 | 0.8% | 2023-10-05 | Fix |
| CVE-2023-43983 | Presto-changeo Attribute Grid SQL injection | 9.8v3.1 | 0.5% | 2023-10-05 | Fix |
| CVE-2023-43981 | Presto-changeo Test Site Creator deserialization of untrusted data | 9.8v3.1 | 0.6% | 2023-10-05 | Fix |
| CVE-2023-43343 | OpenSolution QuickCMS cross-site scripting | 5.4v3.1 | 0.7% | 2023-10-05 | Exploit code |
| CVE-2023-43284 | D-Link DIR-846 arbitrary code execution | 8.8v3.1 | 1.9% | 2023-10-05 | Exploit code |
| CVE-2023-43269 | Pigcms unrestricted file upload | 9.8v3.1 | 0.6% | 2023-10-05 | |
| CVE-2023-43260 | Milesight UR32L cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-05 | |
| CVE-2023-43073 | Dell SmartFabric Storage Software improper input validation | 4.3CNA v3.1 | 0.4% | 2023-10-05 | Fix |
| CVE-2023-43072 | Dell SmartFabric Storage Software improper access control | 4.4CNA v3.1 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-43071 | Dell SmartFabric Storage Software CSV injection | 4.4CNA v3.1 | 0.3% | 2023-10-05 | Fix |
| CVE-2023-43070 | Dell SmartFabric Storage Software path traversal | 6.3CNA v3.1 | 0.5% | 2023-10-05 | Fix |
| CVE-2023-43069 | Dell SmartFabric Storage Software OS command injection | 7.8CNA v3.1 | 0.5% | 2023-10-05 | Fix |
| CVE-2023-43068 | Dell SmartFabric Storage Software OS command injection | 7.8CNA v3.1 | 0.8% | 2023-10-05 | Fix |
| CVE-2023-42755 | Kernel: Rsvp: Out-of-bounds read in rsvp_classify | 5.5NVD v3.1 | 0.4% | 2023-10-05 | Fix |
| CVE-2023-42754 | Kernel: Ipv4: Null pointer dereference in ipv4_send_dest_unreach | 5.5NVD v3.1 | 0.4% | 2023-10-05 | Fix |
| CVE-2023-41175 | LibTIFF: Potential integer overflow in raw2tiff.c | 6.5NVD v3.1 | 1.3% | 2023-10-05 | Fix |
| CVE-2023-40920 | Prixanconnect SQL injection | 9.8v3.1 | 0.6% | 2023-10-05 | |
| CVE-2023-40745 | LibTIFF: Integer overflow in tiffcp.c | 6.5NVD v3.1 | 1.4% | 2023-10-05 | Fix |
| CVE-2023-39323 | Arbitrary code execution during build via line directives in cmd/go | 8.1v3.1 | 1.8% | 2023-10-05 | Fix |
| CVE-2023-32485 | Dell SmartFabric Storage Software improper input validation | 9.8CNA v3.1 | 0.7% | 2023-10-05 | Fix |
| CVE-2023-26239 | WatchGuard EPDR management console authentication vulnerability | 5.5v3.1 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-26238 | WatchGuard EPDR named pipe interface vulnerability | 5.5v3.1 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-26237 | WatchGuard Epdr insecure direct object reference | 6.7v3.1 | 0.2% | 2023-10-05 | Fix |
| CVE-2023-26236 | WatchGuard Epdr improper privilege management | 7.8v3.1 | 0.1% | 2023-10-05 | Fix |
| CVE-2023-5441 | Null pointer dereference in Vim/Vim | 5.5v3.1 | 0.4% | 2023-10-05 | Fix |
| CVE-2023-5423 | SourceCodester Online Pizza Ordering System SQL injection | 9.8v3.1 | 0.4% | 2023-10-05 | |
| CVE-2023-5346 | Google Chrome V8 type confusion | 8.8v3.1 | 1.8% | 2023-10-05 | Fix |
| CVE-2023-4570 | Improper Restriction in NI MeasurementLink Python services | 8.8CNA v3.1 | 0.3% | 2023-10-05 | Fix |
| CVE-2023-4401 | Dell SmartFabric Storage Software command injection | 7.8CNA v3.1 | 0.7% | 2023-10-05 | Fix |
| CVE-2023-2306 | Qognify NiceVision use of hard-coded credentials | 9.1v3.1 | 0.5% | 2023-10-05 | Fix |
| CVE-2023-44389 | Zope management interface vulnerable to stored cross-site scripting via the title property | 3.1CNA v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-44272 | Citadel cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-44210 | Acronis Cyber Protect Cloud Agent missing authorization | 7.3CNA v3.0 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-44209 | Acronis Cyber Protect Cloud Agent externally controlled resource reference | 5.6CNA v3.0 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-44208 | Acronis Cyber Protect Home Office missing authorization | 7.8CNA v3.0 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-44075 | Small CRM cross-site scripting | 5.4v3.1 | 0.5% | 2023-10-04 | |
| CVE-2023-43877 | Ritecms cross-site scripting | 4.8v3.1 | 0.5% | 2023-10-04 | Exploit code |
| CVE-2023-43838 | personal-management-system Personal Management System v1.4.64 arbitrary file upload | 7.8NVD v3.1 | 0.6% | 2023-10-04 | |
| CVE-2023-43809 | Charm Soft Serve SSH keyboard-interactive authentication authentication bypass | 7.5CNA v3.1 | 1.2% | 2023-10-04 | Fix |
| CVE-2023-43805 | Nexkey allows users to bypass authentication of Bull dashboard | 7.5CNA v3.1 | 0.8% | 2023-10-04 | Fix |
| CVE-2023-43804 | urllib3 `Cookie` HTTP header isn't stripped on cross-origin redirects | 5.9CNA v3.1 | 1.4% | 2023-10-04 | Fix |
| CVE-2023-43799 | altair-graphql altair improper input validation | 5.0CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-43793 | Misskey allows users to bypass authentication of Bull dashboard | 7.5CNA v3.1 | 0.8% | 2023-10-04 | Fix |
| CVE-2023-43321 | Dcnetworks Dcfw-1800-sdc Digital China Networks file upload | 8.8v3.1 | 0.9% | 2023-10-04 | |
| CVE-2023-43261 | Milesight UR32L An information disclosure | 7.5v3.1 | 63.7% | 2023-10-04 | Reported exploitedNucleiExploit code |
| CVE-2023-42824 | Apple iOS and iPadOS Kernel privilege escalation | 7.8v3.1 | 0.9% | 2023-10-04 | KEVExploit codeFix |
| CVE-2023-42809 | Redisson unsafe deserialization | 8.8NVD v3.1 | 1.1% | 2023-10-04 | Fix |
| CVE-2023-42808 | Mozilla common-voice common Voice cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-10-04 | |
| CVE-2023-42449 | IOHK Hydra head token minting policy improper input validation | 8.1CNA v3.1 | 1.1% | 2023-10-04 | Fix |
| CVE-2023-42448 | IOHK Hydra Close transaction validator improper input validation | 8.1CNA v3.1 | 1.0% | 2023-10-04 | Fix |
| CVE-2023-41094 | Silicon Labs EmberZNet TouchLink authentication bypass | 10.0CNA v3.1 | 0.7% | 2023-10-04 | |
| CVE-2023-40684 | IBM Content Navigator cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-40561 | Enhanced Ecommerce Google Analytics for WooCommerce WordPress plugin cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-40559 | WooCommerce Dynamic Pricing and Discount Rules WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-40376 | IBM UrbanCode Deploy (UCD) improper authentication controls | 5.3CNA v3.1 | 0.6% | 2023-10-04 | Fix |
| CVE-2023-40299 | Kong Insomnia 2023.4.0 on macOS allows attackers to execute code and access restricted files, or make requests for TCC permissions, by using the DYLD_INSERT_LIBRARIES environment variable. | 7.8v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-39191 | Kernel: Ebpf: Insufficient stack type checks in dynptr | 8.2NVD v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-38701 | IOHK Hydra commit validator improper input validation | 9.1CNA v3.1 | 1.1% | 2023-10-04 | Fix |
| CVE-2023-38538 | Facebook WhatsApp Desktop race condition | 5.0CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-38537 | Facebook WhatsApp Desktop race condition | 5.6CNA v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-37995 | WP-CopyProtect [Protect your blog posts] WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-04 | |
| CVE-2023-37404 | IBM Observability with Instana code execution | 6.4CNA v3.1 | 0.8% | 2023-10-04 | Fix |
| CVE-2023-36619 | Unify Session Border Controller improper input validation | 9.8v3.1 | 3.6% | 2023-10-04 | Fix |
| CVE-2023-36618 | Unify Session Border Controller OS command injection | 8.8v3.1 | 3.4% | 2023-10-04 | Fix |
| CVE-2023-35905 | IBM FileNet Content Manager cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-35803 | Extreme Networks AP1130 buffer overflow | 9.8v3.1 | 1.5% | 2023-10-04 | Exploit codeFix |
| CVE-2023-30738 | Samsung Mobile Galaxy Book UEFI firmware improper input validation | 5.5CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-30737 | Samsung Mobile Samsung Health improper access control | 4.0CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-30736 | Samsung Mobile Samsung Assistant PushMsgReceiver improper authorization | 4.4CNA v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-30735 | Samsung Mobile S Assistant improper preservation of permissions | 5.1CNA v3.1 | 0.1% | 2023-10-04 | Fix |
| CVE-2023-30734 | Samsung Mobile Samsung Health improper access control | 4.0CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-30733 | Samsung Mobile Devices vulnerability HDCP trustlet stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-30732 | Samsung Mobile Devices system property improper access control | 5.5CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-30731 | Samsung Mobile Devices package installation logic flaw | 5.7CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-30727 | Samsung Mobile Devices SecSettings improper access control | 6.7CNA v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-30692 | Samsung Mobile Devices Evaluator improper input validation | 8.5CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-30690 | Samsung Mobile Devices Duo improper input validation | 8.5CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-27433 | YAS Global Team Make Paths Relative cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-27121 | Pleasantsolutions Pleasant Password Server cross-site scripting | 6.1v3.1 | 23.2% | 2023-10-04 | |
| CVE-2023-25980 | Optimize Database after Deleting Revisions WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-25788 | Saphali Woocommerce Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-25489 | Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Update Theme and Plugins from Zip File plugin <= 2.0.0 versions. | 8.8v3.1 | 0.3% | 2023-10-04 | |
| CVE-2023-25025 | WP-CopyProtect [Protect your blog posts] WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-04 | |
| CVE-2023-22618 | Nokia Wavelite Metro 200 Ne Ops And F2B Fans improper access control | 7.8v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-22515 | Atlassian Confluence Data Center and Server broken access control | 10.0CNA v3.0 | 99.2% | 2023-10-04 | KEVNucleiMetasploitEmerging ThreatsSnortExploit codeFix |
| CVE-2023-20259 | Cisco Emergency Responder resource exhaustion | 8.6CNA v3.1 | 0.8% | 2023-10-04 | Fix |
| CVE-2023-20235 | Cisco IOS XE Software files accessible to external parties | 6.5CNA v3.1 | 0.7% | 2023-10-04 | Fix |
| CVE-2023-20101 | Cisco Emergency Responder hard-coded credentials | 9.8CNA v3.1 | 2.8% | 2023-10-04 | Fix |
| CVE-2023-5402 | Schneider Electric C-Bus Toolkit improper privilege management | 9.8CNA v3.1 | 0.7% | 2023-10-04 | Fix |
| CVE-2023-5399 | Schneider Electric C-Bus Toolkit path traversal | 9.8CNA v3.1 | 35.5% | 2023-10-04 | Fix |
| CVE-2023-5391 | Schneider Electric EcoStruxure Power Monitoring Expert deserialization of untrusted data | 9.8CNA v3.1 | 0.9% | 2023-10-04 | Fix |
| CVE-2023-5377 | Out-of-bounds read in gpac/gpac | 7.1v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-5375 | Open redirect in mosparo/mosparo | 6.1v3.1 | 35.1% | 2023-10-04 | NucleiFix |
| CVE-2023-5374 | SourceCodester Online Computer and Laptop Store products.php SQL injection | 9.8v3.1 | 0.7% | 2023-10-04 | |
| CVE-2023-5373 | SourceCodester Online Computer and Laptop Store Master.php register SQL injection | 9.8v3.1 | 0.8% | 2023-10-04 | |
| CVE-2023-5371 | Memory allocation with excessive size value in Wireshark | 5.3CNA v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-5370 | FreeBSD arm64 boot CPUs may lack speculative execution protections | 5.5v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-5369 | FreeBSD copy_file_range insufficient capability rights check | 7.1v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-5368 | FreeBSD msdosfs data disclosure | 6.5v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-5357 | Instagram for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-5291 | Blog Filter WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-5113 | HP Enterprise LaserJet and LaserJet Managed printers jQuery-UI cross-site scripting | 6.1v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-4997 | ProIntegra UptimeDC improper authorisation in Uptime DC | 8.8v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-4586 | Infinispan Hot Rod client improper input validation | 7.4CNA v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-4497 | Easy Chat Server XSS | 6.1v3.1 | 0.4% | 2023-10-04 | |
| CVE-2023-4496 | Easy Chat Server XSS | 6.1v3.1 | 0.4% | 2023-10-04 | |
| CVE-2023-4495 | Easy Chat Server XSS | 6.1v3.1 | 0.4% | 2023-10-04 | |
| CVE-2023-4494 | Easy Chat Server stack-based buffer overflow | 9.8v3.1 | 1.0% | 2023-10-04 | |
| CVE-2023-4493 | Easy Address Book Web Server stored XSS | 5.4v3.1 | 0.5% | 2023-10-04 | |
| CVE-2023-4492 | Easy Address Book Web Server XSS | 6.1v3.1 | 0.4% | 2023-10-04 | |
| CVE-2023-4491 | Easy Address Book Web Server buffer overflow | 9.8v3.1 | 1.0% | 2023-10-04 | |
| CVE-2023-4380 | Red Hat Ansible Automation Platform platform: Token exposed at importing project | 6.3CNA v3.1 | 0.6% | 2023-10-04 | Fix |
| CVE-2023-4237 | Ansible may expose private key | 7.3CNA v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-4090 | Cross-site scripting (XSS) vulnerability on WideStand CMS of Acilia | 6.1v3.1 | 0.3% | 2023-10-04 | |
| CVE-2023-4037 | SQL injection in Setelsa Security ConacWin | 5.5NVD v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-3971 | Controller: Html injection in custom login info | 7.3CNA v3.1 | 0.8% | 2023-10-04 | Exploit codeFix |
| CVE-2023-3701 | Relative path traversal in Aqua eSolutions | 8.8NVD v3.1 | 0.8% | 2023-10-04 | Fix |
| CVE-2023-3665 | Trellix Endpoint Security A code injection | 5.5CNA v3.1 | 0.2% | 2023-10-04 | Fix |
| CVE-2023-3576 | LibTIFF: Memory leak in tiffcrop.c | 5.5NVD v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-3512 | Relative path traversal in Setelsa Security ConacWin CB | 7.5v3.1 | 0.6% | 2023-10-04 | |
| CVE-2023-3428 | ImageMagick: Heap-buffer-overflow in coders/tiff.c | 5.5NVD v3.1 | 0.3% | 2023-10-04 | Fix |
| CVE-2023-3361 | odh-dashboard S3 credentials included when exporting elyra notebook | 7.7CNA v3.1 | 0.5% | 2023-10-04 | |
| CVE-2023-3213 | WP Mail SMTP Pro WordPress plugin missing authorization to information Dislcosure via is_print_page | 5.3CNA v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-3153 | ovn service monitor mac flow is not rate limited | 5.3NVD v3.1 | 1.0% | 2023-10-04 | Fix |
| CVE-2023-3038 | HelpDezk Community improper authorization | 7.5NVD v3.1 | 0.8% | 2023-10-04 | |
| CVE-2023-3037 | HelpDezk Community improper authorization | 8.6v3.1 | 0.6% | 2023-10-04 | |
| CVE-2023-2809 | Sage 200 Spain database credential storage cleartext storage of sensitive information | 9.8v3.1 | 0.4% | 2023-10-04 | Fix |
| CVE-2023-2422 | Keycloak: Oauth client impersonation | 5.5CNA v3.1 | 0.5% | 2023-10-04 | Fix |
| CVE-2023-1832 | candlepin-4.3.7 improper authorization check in the server component | 6.8CNA v3.1 | 0.6% | 2023-10-04 | |
| CVE-2023-1584 | quarkus quarkus-oidc: Id and access tokens leak via the authorization code flow | 7.5CNA v3.1 | 1.0% | 2023-10-04 | Fix |
| CVE-2023-44974 | emlog component /admin/plugin.php arbitrary file upload | 9.8v3.1 | 20.4% | 2023-10-03 | |
| CVE-2023-44973 | emlog component /content/templates/ arbitrary file upload | 9.8v3.1 | 1.0% | 2023-10-03 | |
| CVE-2023-44218 | SonicWall NetExtender unsafe privilege definition | 8.8CNA v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-44217 | SonicWall NetExtender local privilege escalation | 7.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-43976 | Cato Client time-of-check time-of-use race condition | 8.1v3.1 | 0.5% | 2023-10-03 | |
| CVE-2023-43953 | SSCMS cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-43952 | SSCMS cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-43951 | SSCMS cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-43898 | nothings Stb Image.h null pointer dereference | 5.5v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-43627 | FURUNO SYSTEMS ACERA 1320 path traversal | 5.7v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-43176 | Afterlogic Aurora Files deserialization of untrusted data | 8.8v3.1 | 1.4% | 2023-10-03 | |
| CVE-2023-42771 | FURUNO SYSTEMS ACERA 1320 authentication bypass | 8.8v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-42508 | jfrog artifactory improper input validation | 6.5CNA v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-41693 | MyCryptoCheckout WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-41244 | Localize Remote Images WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-41086 | FURUNO SYSTEMS ACERA 1210 cross-site request forgery | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-40830 | Tenda AC6 buffer overflow | 9.8v3.1 | 0.7% | 2023-10-03 | |
| CVE-2023-40558 | Video Gallery and Management WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-40519 | Broadpeak Centralized Accounts Management Auth Agent cross-site scripting | 6.1v3.1 | 0.4% | 2023-10-03 | |
| CVE-2023-40212 | WooCommerce Product Attachment WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-40210 | SB Child List WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-40202 | WP HTML Mail WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-40201 | Futurio Extra WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-40199 | WP Like Button WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-40198 | Easy Cookie Law WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-40009 | WP Pipes WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-39989 | Header Footer Code Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-39923 | The Post Grid WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-39917 | Photo Gallery by Ays WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-39651 | Theme Volty Cms Brandlist improper neutralization | 9.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-39649 | Theme Volty Cms Category Slider improper neutralization | 9.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-39648 | Theme Volty Cms Testimonial improper neutralization | 9.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-39647 | Theme Volty Cms Category Product improper neutralization | 9.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-39646 | Theme Volty Cms Category Chain Slider improper neutralization | 9.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-39645 | Themevolty Cms Payment Icon improper neutralization | 9.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-39429 | FURUNO SYSTEMS ACERA 1210 cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-39222 | FURUNO SYSTEMS ACERA 1320 OS command injection | 8.8v3.1 | 1.3% | 2023-10-03 | Fix |
| CVE-2023-39165 | Sign-up Sheets WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-39159 | Fraud Prevention For Woocommerce WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-39158 | Woocommerce Category Banner Management WordPress plugin cross-site request forgery (CSRF) | 6.5v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-38398 | Taboola WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-38396 | Google Map Shortcode WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-38390 | Mobile Address Bar Changer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-38381 | WP-FlyBox WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-37998 | Disabler WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-37996 | GTmetrix for WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-37992 | Smarty for WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-37991 | WP Emoji One WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-37990 | Perelink Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-37891 | Exit Popups and Onsite Retargeting by OptiMonk WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-36628 | Pure Storage FlashArray Purity privilege escalation in VASA | 8.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-34970 | Mali GPU Kernel Driver allows Improper GPU Memory Processing Operations | 4.7v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-33273 | Dts Monitoring OS command injection | 9.8v3.1 | 2.5% | 2023-10-03 | |
| CVE-2023-33272 | Dts Monitoring OS command injection | 9.8v3.1 | 2.5% | 2023-10-03 | |
| CVE-2023-33271 | Dts Monitoring OS command injection | 9.8v3.1 | 1.6% | 2023-10-03 | |
| CVE-2023-33270 | Dts Monitoring OS command injection | 9.8v3.1 | 2.5% | 2023-10-03 | |
| CVE-2023-33269 | Dts Monitoring OS command injection | 9.8v3.1 | 2.0% | 2023-10-03 | |
| CVE-2023-33268 | Dts Monitoring OS command injection | 9.8v3.1 | 1.2% | 2023-10-03 | |
| CVE-2023-33200 | Mali GPU Kernel Driver allows Improper GPU Memory Processing Operations | 4.7v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-33039 | Qualcomm Snapdragon use-after-free in Automotive Display | 8.4CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-33035 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 7.8CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-33034 | Qualcomm Snapdragon signed-to-unsigned conversion error in Audio | 7.8CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-33029 | Qualcomm Snapdragon use-after-free in DSP service | 8.4CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-33028 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN firmware | 9.8CNA v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-33027 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-33026 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-32792 | Cross-site request forgery on NXLog Manager | 6.5v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-32791 | Cross-site request forgery on NXLog Manager | 6.5v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-32790 | XSS on NXLog Manager | 6.1v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-32671 | BuddyBoss Platform invitation feature stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-32670 | BuddyBoss cross-site scripting | 5.4NVD v3.1 | 0.4% | 2023-10-03 | |
| CVE-2023-32669 | Authorization bypass on BuddyBoss | 5.4v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-32572 | FlashArray pgroup Retention Lock SafeMode Protection | 4.9v3.1 | 0.4% | 2023-10-03 | |
| CVE-2023-32091 | POEditor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-28571 | Qualcomm Snapdragon buffer over-read in WLAN host | 6.1CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-28540 | Improper authentication in Data Modem | 9.1CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-28539 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN host | 6.6CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-28373 | Pure Storage FlashArray Purity SafeMode vulnerability | 2.7NVD v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-27435 | HTTP Auth WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-26152 | static-server path traversal | 7.5v3.1 | 1.1% | 2023-10-03 | |
| CVE-2023-26151 | asyncua vulnerable to denial of service via infinite loop | 7.5v3.1 | 1.0% | 2023-10-03 | Fix |
| CVE-2023-26150 | asyncua improper authentication | 7.5v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-25989 | Cross-site request forgery (CSRF) vulnerability in multiple WordPress plugins by Meks | 8.8v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-25463 | wp tell a friend popup form WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-10-03 | |
| CVE-2023-24855 | Qualcomm Snapdragon use of out-of-range pointer offset in Modem | 9.8CNA v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-24853 | Qualcomm Snapdragon improper input validation in HLOS | 8.4CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-24850 | Qualcomm Snapdragon improper validation of array index in HLOS | 7.8CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-24849 | Buffer over-read in Data Modem | 8.2CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-24848 | Buffer over-read in Data Modem | 8.2CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-24847 | Null pointer dereference in Modem | 7.5CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-24844 | Qualcomm Snapdragon improper access control in Core | 8.4CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-24843 | Reachable assertion in Modem | 7.5CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-24518 | Artica PFMS Pandora FMS disabling the administrator's account through cross-site request forgery | 7.1v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-22385 | Buffer over-read in Data Modem | 8.2CNA v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-22384 | Qualcomm Snapdragon buffer copy without checking size of input in VR service | 6.7CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-22382 | Qualcomm Snapdragon improper input validation in Automotive | 7.4CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-21673 | Qualcomm Snapdragon improper access control in Kernel | 8.7CNA v3.1 | 0.1% | 2023-10-03 | Fix |
| CVE-2023-5353 | Improper access control in salesagility/SuiteCRM | 6.5NVD v3.1 | 0.7% | 2023-10-03 | Fix |
| CVE-2023-5351 | Cross-site scripting (XSS) Stored in salesagility/SuiteCRM | 5.4NVD v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-5350 | SQL injection in salesagility/SuiteCRM | 9.1v3.1 | 1.9% | 2023-10-03 | MetasploitExploit codeFix |
| CVE-2023-5345 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-5334 | WP Responsive header image slider WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-5255 | Puppet Enterprise denial of service for Revocation of Auto Renewed Certificates | 7.5v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-4929 | NPort 5000 Series firmware improper validation of Integrity Check | 6.5CNA v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-4911 | GNU C Library buffer overflow | 7.8NVD v3.1 | 63.8% | 2023-10-03 | KEVExploit codeFix |
| CVE-2023-4886 | Foreman: World readable file containing secrets | 6.7CNA v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-4885 | Open5GS VNF communications information disclosure | 5.9v3.1 | 0.3% | 2023-10-03 | |
| CVE-2023-4884 | Open5GS HTTP API endpoint missing authentication | 7.5v3.1 | 0.4% | 2023-10-03 | |
| CVE-2023-4883 | Open5GS SBI message handler vulnerability | 7.5v3.1 | 0.5% | 2023-10-03 | |
| CVE-2023-4882 | Open5GS VNF registration handler denial of service | 7.5v3.1 | 0.5% | 2023-10-03 | |
| CVE-2023-4817 | Unrestricted file upload vulnerability in ICP DAS ET-7060 | 8.8v3.1 | 0.6% | 2023-10-03 | |
| CVE-2023-4732 | Linux kernel memory management subsystem race condition | 4.7NVD v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-4564 | Capensis Canopsis broadcast message field vulnerability | 4.8v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-4103 | IDM Sistemas QSige statistics module SQL injection | 8.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-4102 | IDM Sistemas QSige login SSO SQL injection | 8.8v3.1 | 0.6% | 2023-10-03 | Fix |
| CVE-2023-4101 | IDM Sistemas QSige login SSO insecure direct object reference | 6.5NVD v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-4100 | IDM Sistemas QSige QSige cross-site scripting | 8.2v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-4099 | IDM Sistemas QSige Monitor application insecure direct object reference | 6.5NVD v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-4098 | IDM Sistemas QSige SQL injection | 8.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-4097 | IDM Sistemas QSige file upload functionality vulnerability | 8.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-3967 | DoS vulnerability in Hitachi Ops Center Common Services | 5.3CNA v3.1 | 0.6% | 2023-10-03 | Fix |
| CVE-2023-3656 | PoS/ Dienstleistung, Entwicklung & Vertrieb cashIT! unauthenticated remote code execution | 9.8NVD v3.1 | 1.2% | 2023-10-03 | |
| CVE-2023-3655 | PoS/ Dienstleistung, Entwicklung & Vertrieb cashIT! Unauthenticated Remote Database Exfiltration | 7.5NVD v3.1 | 0.6% | 2023-10-03 | |
| CVE-2023-3654 | PoS/ Dienstleistung, Entwicklung & Vertrieb cashIT! Origin Check Bypass | 9.8NVD v3.1 | 0.4% | 2023-10-03 | |
| CVE-2023-3440 | File and Directory Permission vulnerability in JP1/Performance Management | 8.4CNA v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-3350 | Ayesa Ibermatica RPS log file information disclosure | 7.5v3.1 | 0.2% | 2023-10-03 | KCV |
| CVE-2023-3349 | Information exposure on Ibermatica Rps | 7.5v3.1 | 0.4% | 2023-10-03 | KCV |
| CVE-2023-3335 | Information exposure vulnerability in Hitachi Ops Center Administrator | 6.5CNA v3.1 | 0.2% | 2023-10-03 | Fix |
| CVE-2023-3196 | Capensis Canopsis login page fields vulnerability | 4.8v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-2830 | WP Testimonials WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-2681 | SQL injection on Jorani | 8.8v3.1 | 0.6% | 2023-10-03 | Fix |
| CVE-2023-2544 | Authorization bypass on UPV Peix | 6.5v3.1 | 0.4% | 2023-10-03 | Fix |
| CVE-2023-0828 | Artica PFMS Pandora FMS stored cross-site scripting in syslog section | 6.1v3.1 | 0.3% | 2023-10-03 | Fix |
| CVE-2023-0506 | ByDemes Group Airspace CCTV Web Service improper access control | 8.8v3.1 | 0.5% | 2023-10-03 | Fix |
| CVE-2023-44479 | WP Jump Menu WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-44477 | Cooked WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-44474 | Tiger Forms WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-02 | Fix |
| CVE-2023-44463 | pretix potential IP address spoofing | 5.3v3.1 | 0.5% | 2023-10-02 | Fix |
| CVE-2023-44266 | WP Adminify WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-44265 | Popup contact form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-44264 | The Awesome Feed Custom Feed WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-44263 | Social Metrics WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-44262 | Blocks WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-44245 | Contractor Contact Form Website to Workflow Tool WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-02 | Fix |
| CVE-2023-44244 | FooGallery WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-02 | Fix |
| CVE-2023-44242 | Images Slideshow by 2J WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-44239 | WWM Social Share On Image Hover WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-44230 | Popup contact form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-44228 | Onclick Show Popup WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-10-02 | |
| CVE-2023-44145 | Anchor Episodes Index (Spotify for Podcasters) WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-44144 | Dreamfox Media Payment gateway per Product for Woocommerce WordPress plugin cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-10-02 | Fix |
| CVE-2023-44012 | Mojoportal cross-site scripting | 6.1v3.1 | 1.3% | 2023-10-02 | Nuclei |
| CVE-2023-44011 | Mojoportal code injection | 9.8v3.1 | 1.4% | 2023-10-02 | |
| CVE-2023-44009 | Mojoportal file upload | 9.8v3.1 | 1.4% | 2023-10-02 | |
| CVE-2023-44008 | Mojoportal file upload | 9.8v3.1 | 1.3% | 2023-10-02 | |
| CVE-2023-43980 | Presto-changeo Testsitecreator SQL injection | 9.8v3.1 | 0.5% | 2023-10-02 | |
| CVE-2023-43893 | Netis Systems N3M OS command injection | 9.8v3.1 | 1.9% | 2023-10-02 | |
| CVE-2023-43892 | Netis Systems N3M OS command injection | 9.8v3.1 | 1.9% | 2023-10-02 | |
| CVE-2023-43891 | Netis Systems N3M command injection | 9.8v3.1 | 1.9% | 2023-10-02 | |
| CVE-2023-43890 | Netis Systems N3M OS command injection | 8.8v3.1 | 2.5% | 2023-10-02 | |
| CVE-2023-43836 | jizhiCMS There is a SQL injection | 6.5v3.1 | 0.6% | 2023-10-02 | |
| CVE-2023-43835 | Super Store Finder code injection | 8.8v3.1 | 1.4% | 2023-10-02 | |
| CVE-2023-43361 | Xiph Vorbis-tools buffer overflow | 7.8v3.1 | 0.4% | 2023-10-02 | Fix |
| CVE-2023-43297 | Linecorp line improper message integrity enforcement | 5.4v3.1 | 0.2% | 2023-10-02 | |
| CVE-2023-43268 | Deyue Remote Vehicle Management System deserialization of untrusted data | 8.8v3.1 | 0.9% | 2023-10-02 | |
| CVE-2023-43267 | emlog publish article function cross-site scripting | 5.4v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-42132 | Ministry of Health, Labour and Welfare FD Application XML external entity injection | 5.5v3.1 | 0.2% | 2023-10-02 | Fix |
| CVE-2023-41859 | Order Delivery Date for WP e-Commerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-41856 | Click To Tweet WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-02 | |
| CVE-2023-41855 | Regpack WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-41847 | Notice Bar WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-41800 | UniConsent Cookie Consent CMP for GDPR / CCPA WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-41797 | Locations WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-41737 | Swifty Bar, sticky bar by WPGens WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-41736 | Email posts to subscribers WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-41734 | Insert Estimated Reading Time WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-41733 | Back To The Top Button WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-41731 | wordpress publish post email notification plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-41729 | SendPress Newsletters WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-10-02 | |
| CVE-2023-41728 | Rescue Shortcodes WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-41692 | Attorney WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-10-02 | |
| CVE-2023-41580 | phpipam LDAP injection | 7.5v3.1 | 0.7% | 2023-10-02 | |
| CVE-2023-37605 | baramundi Enterprise Mobility Management improper exception handling | 5.5v3.1 | 0.2% | 2023-10-02 | |
| CVE-2023-36627 | Pure Storage FlashBlade Purity snapshot scheduler vulnerability | 2.7NVD v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-32830 | MediaTek chipsets out-of-bounds write in TVAPI | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32829 | MediaTek chipsets out-of-bounds write in apusys | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32828 | MediaTek chipsets integer overflow or wraparound in vpu | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32827 | MediaTek chipsets out-of-bounds write in camera middleware | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32826 | MediaTek chipsets out-of-bounds write in camera middleware | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32824 | MediaTek chipsets double free in rpmb | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32823 | MediaTek chipsets integer overflow or wraparound in rpmb | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32822 | MediaTek chipsets improper input validation in ftm | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32821 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in video | 6.7v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-32820 | MediaTek chipsets denial of service in wlan firmware | 7.5v3.1 | 0.4% | 2023-10-02 | Fix |
| CVE-2023-32819 | MediaTek chipsets exposure of sensitive information to an unauthorized actor in display | 4.4v3.1 | 0.1% | 2023-10-02 | Fix |
| CVE-2023-31042 | FlashBlade Object Store protocol | 4.3NVD v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-28372 | FlashBlade Object Store Privileged Access | 2.7NVD v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-20819 | MediaTek chipsets out-of-bounds write in CDMA PPP protocol | 9.8v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-5344 | Heap-based buffer overflow in Vim/Vim | 7.5v3.1 | 1.2% | 2023-10-02 | Fix |
| CVE-2023-5329 | Field Logic DataCube4 Web API improper authentication | 7.5v3.1 | 0.8% | 2023-10-02 | |
| CVE-2023-5328 | SATO CL4NX-J Plus Cookie improper authentication | 8.8v3.1 | 0.5% | 2023-10-02 | |
| CVE-2023-5160 | Mattermost full name disclosure via team top membership with Show Full Name option disabled | 4.3CNA v3.1 | 0.4% | 2023-10-02 | |
| CVE-2023-5106 | Incorrect authorization in GitLab | 8.2CNA v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-4659 | Cross-site request forgery in Free5Gc | 9.8v3.1 | 0.3% | 2023-10-02 | Fix |
| CVE-2023-3770 | Ingeteam INGEPAC DA3451 discovery port protocol information disclosure | 4.3v3.1 | 0.4% | 2023-10-02 | |
| CVE-2023-3769 | Ingeteam INGEPAC FC5066 MMS protocol improper input validation | 7.5v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-3768 | Ingeteam INGEPAC DA3451 improper input validation | 7.5v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-3744 | Server-side request forgery in SLiMS | 8.8NVD v3.1 | 0.6% | 2023-10-02 | Fix |
| CVE-2023-3592 | eclipse Mosquitto memory leak | 5.8CNA v3.1 | 0.8% | 2023-10-02 | Fix |
| CVE-2023-0809 | eclipse Mosquitto excessive memory allocation | 5.8CNA v3.1 | 0.7% | 2023-10-02 | Fix |
| CVE-2023-43907 | Optipng buffer overflow | 7.8v3.1 | 0.5% | 2023-10-01 | Fix |
| CVE-2023-5327 | SATO CL4NX-J Plus path traversal | 6.5v3.1 | 0.4% | 2023-10-01 | |
| CVE-2023-5326 | SATO CL4NX-J Plus WebConfig improper authentication | 8.8v3.1 | 0.5% | 2023-10-01 | |
| CVE-2023-5324 | eeroOS Ethernet interface denial of service | 6.5v3.1 | 0.8% | 2023-10-01 | Exploit code |
| CVE-2023-5323 | Cross-site scripting (XSS) Generic in Dolibarr/Dolibarr | 6.1v3.1 | 0.4% | 2023-10-01 | Fix |
| CVE-2023-5322 | D-Link DAR-7000 edit_manageadmin.php SQL injection | 8.8v3.1 | 16.7% | 2023-10-01 | Fix |
| CVE-2023-4211 | Arm Mali GPU Kernel Driver use-after-free | 5.5v3.1 | 1.1% | 2023-10-01 | KEVFix |