CVE-2023 records published in November 2023

This page lists the 2,324 CVE-2023 records published in November 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
31513.6% of these records
Listed in CISA KEV
110.5% of these records
Reported exploited
90.4% of these records
Detection signal
542.3% of these records
Exploit code
723.1% of these records
Actionable vendor fix
1,68872.6% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in November 2023 have had from about 35 months to about 36 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in November 2023, newest first: records 1 to 1,000 of 2,324
CVE Summary CVSS EPSS Published Signals
CVE-2023-49735Apache Tiles: Unvalidated input may lead to path traversal and XXE7.5v3.11.3%2023-11-30Fix
CVE-2023-49733Apache Cocoon's StreamGenerator is vulnerable to XXE injection9.8v3.11.3%2023-11-30Fix
CVE-2023-49701ASR Falcon out-of-bounds access a buffer in SIM management7.2CNA v3.10.5%2023-11-30Fix
CVE-2023-49700ASR Falcon buffer copy without checking size of input in IMS6.7CNA v3.10.4%2023-11-30Fix
CVE-2023-49699ASR Falcon out-of-bounds access a buffer in IMS6.7CNA v3.10.2%2023-11-30Fix
CVE-2023-49620Apache DolphinScheduler missing authorization6.5v3.11.1%2023-11-30Fix
CVE-2023-49097ZITADEL vulnerable account takeover via malicious host header injection8.1CNA v3.10.8%2023-11-30Fix
CVE-2023-49095nexkey allows arbitrary users to impersonate any remote user due to missing signature validation8.6CNA v3.10.6%2023-11-30Fix
CVE-2023-49094Symbolicator server side request forgery4.3CNA v3.10.7%2023-11-30Fix
CVE-2023-49087SimpleSAMLphp xml-security XML signature validation vulnerability6.8CNA v3.10.2%2023-11-30Fix
CVE-2023-49081Aiohttp's ClientSession is vulnerable to CRLF injection via version7.2CNA v3.10.9%2023-11-30Fix
CVE-2023-49077mailcow dockerized quarantine UI vulnerability8.3CNA v3.10.4%2023-11-30Fix
CVE-2023-49076Pimcore missing token/header to prevent CSRF4.3CNA v3.10.3%2023-11-30Fix
CVE-2023-49052Microweber file upload8.8v3.12.4%2023-11-30Exploit code
CVE-2023-48964Tenda i6 out-of-bounds write7.5v3.10.8%2023-11-30
CVE-2023-48963Tenda i6 out-of-bounds write7.5v3.10.8%2023-11-30
CVE-2023-48914iteachyou Dreamer CMS cross-site request forgery8.8v3.10.4%2023-11-30
CVE-2023-48913iteachyou Dreamer CMS cross-site request forgery8.8v3.10.4%2023-11-30
CVE-2023-48912iteachyou Dreamer CMS cross-site request forgery8.8v3.10.4%2023-11-30
CVE-2023-48894Huaxiaerp jshERP improper access control6.5v3.10.6%2023-11-30
CVE-2023-48812TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48811TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48810TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48808TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48807TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48806TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48805TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48804TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48803TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48802TOTOLINK X6000R OS command injection9.8v3.11.5%2023-11-30
CVE-2023-48754Delete Post Revisions In WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30
CVE-2023-48752Happyforms WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-48749Salient Core WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-48748Salient Core WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-48746Community by PeepSo WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-48744Availability Calendar WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-11-30
CVE-2023-48743Simply Exclude WordPress plugin cross-site scripting (XSS)6.1v3.10.4%2023-11-30
CVE-2023-48742License Manager for WooCommerce WordPress plugin SQL injection7.2v3.10.7%2023-11-30Fix
CVE-2023-48737TriPay Payment Gateway WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30Fix
CVE-2023-48336Easy Social Icons WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-48334League Table WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-48333Booster for WooCommerce WordPress plugin sensitive data exposure6.5v3.10.6%2023-11-30Fix
CVE-2023-48331MyBookTable Bookstore WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-48330Bulk Comment Remove WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30
CVE-2023-48329Fast Custom Social Share by CodeBard WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30
CVE-2023-48328NextGEN Gallery WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-48326Events Manager WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-48323Awesome Support WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-11-30Fix
CVE-2023-48322eDoc Employee Job Application WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30
CVE-2023-48321magazine3 AMP for WP stored cross-site scripting5.4v3.10.4%2023-11-30Fix
CVE-2023-48320WebDorado SpiderVPlayer stored cross-site scripting4.8v3.10.4%2023-11-30
CVE-2023-48317Display Custom Post WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30
CVE-2023-48289Import Spreadsheets from Microsoft Excel WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-48284Decorator WooCommerce Email Customizer WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-48283Simple Testimonials Showcase WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-11-30
CVE-2023-48282Taxonomy filter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-48281Broken Link Checker for YouTube WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30
CVE-2023-48279Seraphinite Post .DOCX Source WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-48278WP Forms Puzzle Captcha WordPress plugin cross-site request forgery (CSRF) leading to XSS6.1NVD v3.10.2%2023-11-30
CVE-2023-48272Maspik Spam blacklist WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-47877Perfmatters WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-47876Perfmatters WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-47875Perfmatters WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-11-30Fix
CVE-2023-47872wpForo Forum WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-47870wpForo Forum WordPress plugin broken access control and cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-47854Parallax Image WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-47853myCred WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-47851Bootstrap Shortcodes Ultimate WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-11-30
CVE-2023-47850Community by PeepSo WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-47848Tainacan WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-47844Grab and Save WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30
CVE-2023-47827Events Addon for Elementor WordPress plugin broken access control7.5v3.10.5%2023-11-30Fix
CVE-2023-47777WordPress WooCommerce and WooCommerce Blocks plugins Auth. cross-site scripting (XSS)5.4v3.10.8%2023-11-30Fix
CVE-2023-47645RegistrationMagic WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-47521Q2W3 Post Order WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30
CVE-2023-47505Elementor Website Builder WordPress plugin cross-site scripting (XSS)5.4v3.125.3%2023-11-30Fix
CVE-2023-47464GL.iNet Gl-ax1800 insecure permissions8.8v3.122.6%2023-11-30Exploit code
CVE-2023-47463GL.iNet Gl-ax1800 insecure permissions9.8v3.11.3%2023-11-30
CVE-2023-47454NetEase Cloudmusic untrusted search path7.8v3.10.3%2023-11-30
CVE-2023-47453sohu video-player An untrusted search path7.8v3.10.3%2023-11-30
CVE-2023-47452notepad-plus-plus Notepad++ An untrusted search path7.8v3.10.5%2023-11-30
CVE-2023-47418Zoneland O2OA remote code execution9.8v3.11.5%2023-11-30
CVE-2023-47307Szlbt LBT-T300-T310 buffer overflow7.5v3.10.8%2023-11-30
CVE-2023-47279Delta Electronics InfraSuite Device Master path traversal7.5v3.11.1%2023-11-30Fix
CVE-2023-47207Delta Electronics InfraSuite Device Master deserialization of untrusted data9.8v3.116.6%2023-11-30Fix
CVE-2023-46956oretnom23 Packers And Movers Management System SQL injection7.2v3.11.2%2023-11-30
CVE-2023-46820Image Regenerate and Select Crop WordPress plugin sensitive data exposure5.3v3.10.6%2023-11-30Fix
CVE-2023-46690Delta Electronics InfraSuite Device Master path traversal8.8v3.11.9%2023-11-30Fix
CVE-2023-46389Loytec Linx-151 information disclosure7.5v3.12.0%2023-11-30Fix
CVE-2023-46388Loytec Linx-151 cleartext storage of sensitive information7.5v3.11.5%2023-11-30Fix
CVE-2023-46387Loytec Linx-151 information disclosure7.5v3.12.0%2023-11-30Fix
CVE-2023-46386Loytec Linx-151 cleartext storage of sensitive information7.5v3.11.6%2023-11-30Fix
CVE-2023-46385Loytec L-inx Configurator cleartext transmission of sensitive information7.5v3.10.8%2023-11-30Fix
CVE-2023-46384Loytec L-inx Configurator cleartext storage of sensitive information7.5v3.11.5%2023-11-30Fix
CVE-2023-46383Loytec L-inx Configurator cleartext transmission of sensitive information7.5v3.11.4%2023-11-30Fix
CVE-2023-46326zstack insufficient session expiration8.8v3.10.7%2023-11-30
CVE-2023-46086affiliate-toolkit WordPress Affiliate plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-45834Libsyn Publisher Hub WordPress plugin sensitive data exposure5.3v3.10.5%2023-11-30
CVE-2023-45609Powr Pack WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30Fix
CVE-2023-45066Export All Posts for WordPress Smackcoders information disclosure7.5v3.10.5%2023-11-30
CVE-2023-45050Jetpack WordPress plugin cross-site scripting (XSS)5.4v3.10.6%2023-11-30Fix
CVE-2023-44150ProfilePress WordPress plugin sensitive data exposure7.5v3.10.7%2023-11-30Fix
CVE-2023-44143Bamboo Columns WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-30
CVE-2023-42917Apple Multiple Products WebKit memory corruption8.8v3.19.3%2023-11-30KEVKCVFix
CVE-2023-42916Apple Multiple Products WebKit out-of-bounds read6.5v3.117.8%2023-11-30KEVKCVFix
CVE-2023-41735Email posts to subscribers WordPress plugin sensitive data exposure7.5v3.10.6%2023-11-30
CVE-2023-41136Simple Long Form WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30
CVE-2023-41128WP Roadmap WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30Fix
CVE-2023-41127Evergreen Content Poster WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30Fix
CVE-2023-40680Yoast SEO WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30Fix
CVE-2023-40674Simple URLs WordPress plugin cross-site scripting (XSS)5.4v3.10.5%2023-11-30Fix
CVE-2023-40662Cookies and Content Security Policy WordPress plugin sensitive data exposure7.5v3.10.7%2023-11-30Fix
CVE-2023-40600EWWW Image Optimizer WordPress plugin sensitive data exposure7.5v3.12.0%2023-11-30NucleiExploit codeFix
CVE-2023-40211Post Grid WordPress plugin sensitive data exposure7.5v3.12.2%2023-11-30NucleiFix
CVE-2023-39921Molongui WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30Fix
CVE-2023-39226Delta Electronics InfraSuite Device Master exposed dangerous method or function9.8v3.11.2%2023-11-30Fix
CVE-2023-38474Campaign Monitor for WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-38400Enfold WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-30Fix
CVE-2023-37972WooCommerce Product Stock Alert WordPress plugin sensitive data exposure7.5v3.10.7%2023-11-30Fix
CVE-2023-37928Zyxel NAS326 firmware WSGI server of the Zyxel command injection8.8CNA v3.160.2%2023-11-30Fix
CVE-2023-37927Zyxel NAS326 firmware CGI program of the Zyxel improper neutralization8.8CNA v3.11.8%2023-11-30Fix
CVE-2023-37890KB Support WordPress plugin broken access control4.3v3.10.5%2023-11-30Fix
CVE-2023-37868Premium Addons PRO WordPress plugin sensitive data exposure6.5v3.10.7%2023-11-30Fix
CVE-2023-37867Yet Another Stars Rating WordPress plugin race condition8.1v3.10.4%2023-11-30Fix
CVE-2023-36685CartFlows Pro WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-36682Schema Pro WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-36523Email download link WordPress plugin sensitive data exposure5.3v3.10.6%2023-11-30
CVE-2023-36507BookingPress WordPress plugin sensitive data exposure5.3v3.10.6%2023-11-30Fix
CVE-2023-35138Zyxel NAS326 firmware command injection9.8CNA v3.140.0%2023-11-30Fix
CVE-2023-35137Zyxel NAS326 firmware authentication module of the Zyxel improper authentication7.5CNA v3.10.9%2023-11-30Fix
CVE-2023-34390Schweitzer Engineering Laboratories SEL-451 denial of service4.5CNA v3.10.7%2023-11-30Fix
CVE-2023-34389Schweitzer Engineering Laboratories SEL-451 An resource exhaustion4.5CNA v3.10.7%2023-11-30Fix
CVE-2023-34388Schweitzer Engineering Laboratories SEL-451 improper authentication could lead to session hijacking6.5CNA v3.10.9%2023-11-30Fix
CVE-2023-34030WordPress Complianz and Complianz Premium plugins cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-34018SoundCloud Shortcode WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-30Fix
CVE-2023-33333Really Simple Plugins Complianz cross-site request forgery8.8v3.10.3%2023-11-30Fix
CVE-2023-32291MonsterInsights Pro WordPress plugin cross-site scripting (XSS)5.4v3.10.5%2023-11-30Fix
CVE-2023-31177Schweitzer Engineering Laboratories SEL-451 cross-site scripting4.3CNA v3.10.5%2023-11-30Fix
CVE-2023-31176Schweitzer Engineering Laboratories SEL-451 An insufficient entropy7.5CNA v3.10.9%2023-11-30Fix
CVE-2023-26533Zippy WordPress plugin sensitive data exposure6.5v3.10.7%2023-11-30Fix
CVE-2023-25057Libsyn Publisher Hub WordPress plugin sensitive data exposure5.3v3.10.6%2023-11-30Fix
CVE-2023-6442PHPGurukul Nipah Virus Testing Management System add-phlebotomist.php cross-site scripting5.4v3.10.6%2023-11-30
CVE-2023-6440SourceCodester Book Borrower System add-book.php cross-site scripting5.4v3.10.6%2023-11-30
CVE-2023-6439ZenTao PMS cross-site scripting6.1v3.10.7%2023-11-30
CVE-2023-6438Thecosy IceCMS Like improper enforcement of a single, unique action5.3v3.10.7%2023-11-30
CVE-2023-6435Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6434Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6433Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6432Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6431Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6430Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6429Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6428Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6427Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6426Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6425Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6424Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6423Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6422Cross-site scripting vulnerability in BigProf products5.4v3.10.4%2023-11-30
CVE-2023-6420Cross-site scripting vulnerability in Voovi Social Networking Script6.1v3.10.5%2023-11-30
CVE-2023-6419Cross-site scripting vulnerability in Voovi Social Networking Script6.1v3.10.5%2023-11-30
CVE-2023-6418SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6417SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6416SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6415SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6414SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6413SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6412SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6411SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6410SQL injection in Voovi Social Networking Script7.5NVD v3.10.8%2023-11-30
CVE-2023-6402PHPGurukul Nipah Virus Testing Management System add-phlebotomist.php SQL injection8.8v3.10.8%2023-11-30
CVE-2023-6401NotePad++ dbghelp.exe uncontrolled search path7.8v3.10.3%2023-11-30Exploit code
CVE-2023-6376Henschen and Associates Court Document Management software cache uses predictable file names7.5v3.11.1%2023-11-30Fix
CVE-2023-6375Tyler Technologies Magistrate Court Case Management Plus stores backups insecurely7.5v3.11.0%2023-11-30
CVE-2023-6360joedolson My Calendar SQL injection9.8NVD v3.163.1%2023-11-30Reported exploitedNucleiExploit codeFix
CVE-2023-6354Tyler Technologies Magistrate Court Case Management Plus PDFViewer.aspx allows authentication bypass9.4v3.11.0%2023-11-30
CVE-2023-6353Tyler Technologies Civil and Criminal Electronic Filing Upload.aspx allows authentication bypass9.4v3.11.0%2023-11-30
CVE-2023-6352Aquaforest TIFF Server default configuration allows access to arbitrary files5.3v3.11.1%2023-11-30Fix
CVE-2023-6344Tyler Technologies Court Case Management Plus Aquaforest TIFF Server authentication bypass5.3v3.10.9%2023-11-30Fix
CVE-2023-6343Tyler Technologies Court Case Management Plus Aquaforest TIFF Server authentication bypass5.3v3.10.9%2023-11-30Fix
CVE-2023-6342Tyler Technologies Court Case Management Plus pay for print allows authentication bypass9.8v3.11.1%2023-11-30Fix
CVE-2023-6341Catalis CM360 allows authentication bypass5.3v3.10.9%2023-11-30Fix
CVE-2023-6137Frontier Post WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30
CVE-2023-6136Debug Log Manager WordPress plugin sensitive data exposure7.5v3.10.6%2023-11-30Fix
CVE-2023-6071Trellix ESM command injection8.4CNA v3.10.9%2023-11-30Fix
CVE-2023-6027Cross-site scripting vulnerability in PHPMemcachedAdmin5.4v3.10.4%2023-11-30
CVE-2023-6026Improper limitation of a pathname to a restricted directory (path traversal) in PHPMemcachedAdmin9.1v3.10.9%2023-11-30
CVE-2023-5966Unrestricted upload of file with dangerous type in EspoCRM7.2v3.11.0%2023-11-30Fix
CVE-2023-5965Unrestricted upload of file with dangerous type in EspoCRM7.2v3.11.0%2023-11-30Exploit codeFix
CVE-2023-5909Improper validation of certificate with host mismatch in PTC KEPServerEx7.5v3.10.4%2023-11-30Fix
CVE-2023-5908Heap based buffer overflow in PTC KEPServerEx9.1v3.11.0%2023-11-30Fix
CVE-2023-5803Business Directory WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-30Fix
CVE-2023-5772Debug Log Manager WordPress plugin cross-site request forgery4.3v3.10.3%2023-11-30Fix
CVE-2023-5275Mitsubishi Electric GX Works2 simulation function improper input validation2.5CNA v3.10.3%2023-11-30
CVE-2023-5274Mitsubishi Electric GX Works2 simulation function improper input validation2.5CNA v3.10.3%2023-11-30
CVE-2023-5247Mitsubishi Electric GX Works3 external control of a file path7.8CNA v3.10.3%2023-11-30
CVE-2023-4770Uncontrolled search path element vulnerability in 4D and 4D Windows Server7.8v3.10.3%2023-11-30
CVE-2023-4474Zyxel NAS326 firmware WSGI server of the Zyxel improper neutralization9.8CNA v3.129.7%2023-11-30Emerging ThreatsFix
CVE-2023-4473Zyxel NAS326 firmware web server of the Zyxel command injection9.8CNA v3.141.3%2023-11-30Emerging ThreatsFix
CVE-2023-3741NEC Platforms ITK-6DGS-1(BK) TEL An OS command injection9.8v3.11.5%2023-11-30
CVE-2023-2267Schweitzer Engineering Laboratories SEL-411L An improper input validation4.3CNA v3.10.4%2023-11-30Fix
CVE-2023-2266Schweitzer Engineering Laboratories SEL-411L An cross-site scripting4.3CNA v3.10.4%2023-11-30Fix
CVE-2023-2265Schweitzer Engineering Laboratories SEL-411L An clickjacking4.3CNA v3.10.4%2023-11-30Fix
CVE-2023-2264Schweitzer Engineering Laboratories SEL-411L improper input validition could lead to code injection4.0CNA v3.10.2%2023-11-30Fix
CVE-2023-49694NETGEAR ProSAFE Network Management System privilege escalation via MySQL Server7.8NVD v3.10.5%2023-11-29Fix
CVE-2023-49693NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire protocol9.8NVD v3.11.2%2023-11-29Fix
CVE-2023-49674Jenkins NeuVector vulnerability Scanner Plugin missing permission check4.3v3.10.5%2023-11-29Fix
CVE-2023-49673Jenkins NeuVector vulnerability Scanner Plugin cross-site request forgery8.8v3.10.4%2023-11-29Fix
CVE-2023-49656Jenkins Matlab Plugin XML external entity9.8v3.10.8%2023-11-29Fix
CVE-2023-49655Jenkins Matlab Plugin cross-site request forgery8.8v3.10.4%2023-11-29Fix
CVE-2023-49654Jenkins Matlab Plugin missing permission checks9.8v3.10.8%2023-11-29Fix
CVE-2023-49653Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials6.5v3.10.6%2023-11-29Fix
CVE-2023-49652Jenkins Google Compute Engine Plugin has incorrect permission checks2.7v3.10.5%2023-11-29Fix
CVE-2023-49091azukaar Cosmos-Server jwttoken in Cosmos server never expires after password changed and logging out8.8CNA v3.10.8%2023-11-29Fix
CVE-2023-49090CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS6.8CNA v3.10.6%2023-11-29Fix
CVE-2023-49083cryptography vulnerable to null-dereference when loading PKCS7 certificates5.9CNA v3.11.0%2023-11-29Fix
CVE-2023-49082Aiohttp's ClientSession is vulnerable to CRLF injection via method5.3CNA v3.10.9%2023-11-29Fix
CVE-2023-49079Misskey's missing signature validation allows arbitrary users to impersonate any remote user9.3CNA v3.10.4%2023-11-29Fix
CVE-2023-48952Openlinksw Virtuoso deserialization of untrusted data7.5v3.11.0%2023-11-29Fix
CVE-2023-48951Openlinksw Virtuoso denial of service7.5v3.10.8%2023-11-29Fix
CVE-2023-48950Openlinksw Virtuoso denial of service7.5v3.10.9%2023-11-29Fix
CVE-2023-48949Openlinksw Virtuoso denial of service7.5v3.10.8%2023-11-29Fix
CVE-2023-48948Openlinksw Virtuoso denial of service7.5v3.10.9%2023-11-29Fix
CVE-2023-48947Openlinksw Virtuoso denial of service7.5v3.10.9%2023-11-29Fix
CVE-2023-48946Openlinksw Virtuoso denial of service7.5v3.10.9%2023-11-29Fix
CVE-2023-48945Openlinksw Virtuoso stack-based buffer overflow7.5v3.10.9%2023-11-29Fix
CVE-2023-48882EyouCMS A stored cross-site scripting4.8v3.10.4%2023-11-29
CVE-2023-48881EyouCMS A stored cross-site scripting4.8v3.10.4%2023-11-29
CVE-2023-48880EyouCMS A stored cross-site scripting4.8v3.10.4%2023-11-29
CVE-2023-47462GL.iNet Gl-ax1800 insecure permissions9.8v3.11.3%2023-11-29
CVE-2023-46887iteachyou Dreamer CMS download without integrity check7.5v3.10.3%2023-11-29
CVE-2023-46886iteachyou Dreamer CMS path traversal9.1v3.11.0%2023-11-29
CVE-2023-45484Tenda AC10 out-of-bounds write9.8v3.11.0%2023-11-29
CVE-2023-45483Tenda AC10 out-of-bounds write9.8v3.11.0%2023-11-29
CVE-2023-45482Tenda AC10 out-of-bounds write9.8v3.11.0%2023-11-29
CVE-2023-45481Tenda AC10 stack-based buffer overflow9.8v3.11.0%2023-11-29
CVE-2023-45480Tenda AC10 out-of-bounds write9.8v3.11.0%2023-11-29
CVE-2023-45479Tenda AC10 out-of-bounds write9.8v3.11.0%2023-11-29
CVE-2023-44383October CMS stored XSS by authenticated backend user with improper configuration5.4CNA v3.10.4%2023-11-29Fix
CVE-2023-40626Joomla! CMS core Exposure of environment variables7.5NVD v3.10.8%2023-11-29Fix
CVE-2023-40458Sierra Wireless ALEOS AceManager DOS7.5v3.10.8%2023-11-29Fix
CVE-2023-24294Zumtobel Netlink Ccd buffer overflow7.5v3.10.8%2023-11-29
CVE-2023-23325Zumtobel Netlink Ccd OS command injection9.8v3.11.7%2023-11-29
CVE-2023-23324Zumtobel Netlink Ccd hard-coded credentials9.8v3.10.8%2023-11-29
CVE-2023-6378Logback receiver DOS7.5v3.10.9%2023-11-29Fix
CVE-2023-6351Google Chrome libavif use-after-free8.8v3.10.9%2023-11-29Fix
CVE-2023-6350Google Chrome libavif use-after-free8.8v3.11.3%2023-11-29Exploit codeFix
CVE-2023-6348Google Chrome Spellcheck type confusion8.8v3.11.1%2023-11-29Fix
CVE-2023-6347Google Chrome Mojo use-after-free8.8v3.11.1%2023-11-29Fix
CVE-2023-6346Google Chrome WebAudio use-after-free8.8v3.11.0%2023-11-29Fix
CVE-2023-6345Google Skia integer overflow9.6v3.116.5%2023-11-29KEVFix
CVE-2023-6218MOVEit Transfer Group Admin privilege escalation7.2CNA v3.10.7%2023-11-29Fix
CVE-2023-6217MOVEit Transfer XSS via MOVEit Gateway7.1CNA v3.10.5%2023-11-29Fix
CVE-2023-6070Trellix Enterprise Security Manager (ESM) server-side request forgery4.3CNA v3.10.2%2023-11-29Fix
CVE-2023-49314Asana Desktop code injection7.8NVD v3.14.3%2023-11-28
CVE-2023-49313horsicq Xmachoviewer dylib injection9.8NVD v3.11.3%2023-11-28
CVE-2023-49092RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels5.9CNA v3.10.6%2023-11-28Fix
CVE-2023-49078Cross-site scripting vulnerability in raptor-web5.4CNA v3.10.5%2023-11-28Fix
CVE-2023-49075Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls8.5CNA v3.11.4%2023-11-28Fix
CVE-2023-49062Facebook Katran improper initialization7.5v3.10.6%2023-11-28Fix
CVE-2023-48848Ureport arbitrary file read7.5v3.10.9%2023-11-28
CVE-2023-48713Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler6.5CNA v3.10.9%2023-11-28Fix
CVE-2023-48193fit2cloud jumpserver insecure permissions9.8v3.12.0%2023-11-28
CVE-2023-48121EZVIZ Cs-c3n-a0-3h2wfrl Direct Connection module authentication bypass5.3v3.10.8%2023-11-28Fix
CVE-2023-48042Communitydeveloper Amazzing Filter Search filters in Prestashop cross-site scripting6.1v3.10.5%2023-11-28
CVE-2023-48023Anyscale Ray server-side request forgery9.1v3.135.1%2023-11-28NucleiFix
CVE-2023-48022Ray has arbitrary code execution via jobs submission API9.8v3.183.9%2023-11-28Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-47503jflyfox jfinal_cms arbitrary code execution9.8v3.11.3%2023-11-28
CVE-2023-47437Pachno cross-site scripting5.4NVD v3.10.5%2023-11-28
CVE-2023-46944Gitkraken Gitlens arbitrary code execution7.8v3.11.3%2023-11-28Exploit code
CVE-2023-46589Apache Tomcat: HTTP request smuggling via malformed trailer headers7.5v3.12.7%2023-11-28Fix
CVE-2023-45539HAProxy information disclosure8.2v3.11.5%2023-11-28Exploit codeFix
CVE-2023-45286HTTP request body disclosure in github.com/go-resty/Resty/v25.9v3.10.7%2023-11-28Fix
CVE-2023-42505Apache Superset: Sensitive information disclosure on db connection details4.3CNA v3.11.0%2023-11-28Fix
CVE-2023-42504Apache Superset: Lack of rate limiting allows for possible denial of service5.8CNA v3.11.1%2023-11-28Fix
CVE-2023-42502Apache Superset: Open redirect4.8CNA v3.10.8%2023-11-28Fix
CVE-2023-42004IBM Security Guardium CSV injection8.0CNA v3.11.1%2023-11-28Fix
CVE-2023-41264Netwrix Usercube improper authentication9.8v3.11.0%2023-11-28
CVE-2023-40056SolarWinds Platform SQL injection remote code execution8.0CNA v3.14.8%2023-11-28Fix
CVE-2023-37926Zyxel ATP series firmware buffer overflow5.5CNA v3.10.2%2023-11-28Fix
CVE-2023-37925Zyxel ATP series firmware debug CLI command of the Zyxel improper privilege management5.5CNA v3.10.2%2023-11-28Fix
CVE-2023-35139Zyxel ATP series firmware CGI program of the Zyxel cross-site scripting5.2CNA v3.10.5%2023-11-28Fix
CVE-2023-35136Zyxel ATP series firmware “Quagga” package of the Zyxel improper input validation5.5CNA v3.10.2%2023-11-28Fix
CVE-2023-34055Spring Boot server Web Observations DoS5.3CNA v3.11.2%2023-11-28Fix
CVE-2023-34054Reactor Netty HTTP Server Metrics DoS5.3CNA v3.10.9%2023-11-28Fix
CVE-2023-34053Spring Framework server Web Observations DoS5.3CNA v3.11.2%2023-11-28Fix
CVE-2023-32065OroCommerce get-totals-for-checkout API endpoint returns unwanted data5.8CNA v3.10.5%2023-11-28Fix
CVE-2023-32064OroCommerce customer frontend menus improper access control5.0CNA v3.10.5%2023-11-28Fix
CVE-2023-32063oroinc crm OroCRMCallBundle has incorrect call view page visibility5.0CNA v3.10.5%2023-11-28Fix
CVE-2023-30590Node.js crypto Diffie-Hellman key generation vulnerability7.5NVD v3.11.5%2023-11-28Fix
CVE-2023-30588Node.js Node denial of service5.3v3.11.2%2023-11-28Fix
CVE-2023-30585Node.js msi installer repair operation vulnerability7.5NVD v3.11.5%2023-11-28Fix
CVE-2023-29770Sapplica Sentrifugo unrestricted file upload8.8v3.10.9%2023-11-28
CVE-2023-29066Becton Dickinson (BD) FACSChorus incorrect user management3.2CNA v3.10.3%2023-11-28
CVE-2023-29065Becton Dickinson (BD) FACSChorus Overly Permissive Access Policy4.1CNA v3.10.3%2023-11-28
CVE-2023-29064Becton Dickinson (BD) FACSChorus hard-coded secrets4.1CNA v3.10.3%2023-11-28
CVE-2023-29063Becton Dickinson (BD) FACSChorus lack of DMA Access Protections2.4CNA v3.10.2%2023-11-28
CVE-2023-29062Becton Dickinson (BD) FACSChorus Unsecure Identity Verification3.8CNA v3.10.3%2023-11-28
CVE-2023-29061Becton Dickinson (BD) FACSChorus lack of Adequate BIOS Authentication5.2CNA v3.10.4%2023-11-28
CVE-2023-29060Becton Dickinson FACSChorus USB ports improper access control5.4CNA v3.10.3%2023-11-28
CVE-2023-24023Improper verification of cryptographic signature in Bluetooth service6.8v3.11.3%2023-11-28Fix
CVE-2023-6359Cross-site scripting in Alumne LMS6.1v3.10.4%2023-11-28Fix
CVE-2023-6239M-Files Server incorrect calculation of effective permissions5.4CNA v3.10.6%2023-11-28Fix
CVE-2023-6226WP Shortcodes Plugin WordPress plugin insecure direct object reference4.3v3.10.5%2023-11-28Fix
CVE-2023-6225WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting5.4v3.10.5%2023-11-28Fix
CVE-2023-6219BookingPress WordPress plugin authenticated (Administrator+) arbitrary file upload7.2v3.11.2%2023-11-28Fix
CVE-2023-6201Command injection in Univera Panorama Framework8.8v3.11.6%2023-11-28Fix
CVE-2023-6151Information disclosure in Eskom E-municipality7.5v3.10.6%2023-11-28Fix
CVE-2023-6150Information disclosure in Eskom E-municipality7.5v3.10.6%2023-11-28Fix
CVE-2023-5981GnuTLS: Timing side-channel in the rsa-psk authentication5.9NVD v3.11.3%2023-11-28Fix
CVE-2023-5960Zyxel USG FLEX series firmware hotspot feature of the Zyxel improper privilege management5.5CNA v3.10.2%2023-11-28Fix
CVE-2023-5797Zyxel ATP series firmware debug CLI command of the Zyxel improper privilege management5.5CNA v3.10.2%2023-11-28Fix
CVE-2023-5650Zyxel ATP series firmware ZySH of the Zyxel improper privilege management5.5CNA v3.10.2%2023-11-28Fix
CVE-2023-4667IDEMIA SIGMA Lite and Lite + stored cross-site scripting in webserver administration8.1CNA v3.10.4%2023-11-28Fix
CVE-2023-4398Zyxel ATP series firmware integer overflow7.5CNA v3.10.9%2023-11-28Fix
CVE-2023-4397Zyxel ATP series firmware buffer overflow4.4CNA v3.10.2%2023-11-28Fix
CVE-2023-4226Chamilo LMS file upload functionality remote code execution8.8v3.12.4%2023-11-28Exploit codeFix
CVE-2023-4225Chamilo LMS file upload functionality remote code execution8.8v3.11.8%2023-11-28Fix
CVE-2023-4224Chamilo LMS file upload functionality remote code execution8.8v3.11.8%2023-11-28Fix
CVE-2023-4223Chamilo LMS file upload functionality remote code execution8.8v3.11.8%2023-11-28Fix
CVE-2023-4222Chamilo LMS Learning Path PPT2LP command injection8.8v3.13.5%2023-11-28Fix
CVE-2023-4221Chamilo LMS Learning Path PPT2LP command injection8.8v3.13.5%2023-11-28Fix
CVE-2023-4220Chamilo LMS Unauthenticated Big upload file remote code execution6.1NVD v3.176.1%2023-11-28NucleiMetasploitExploit codeFix
CVE-2023-3545Chamilo LMS Htaccess file upload Security Bypass9.8v3.12.4%2023-11-28Fix
CVE-2023-3533Chamilo LMS unauthenticated remote code execution via arbitrary file write9.8v3.13.5%2023-11-28Fix
CVE-2023-3368Chamilo LMS unauthenticated command injection9.8v3.168.9%2023-11-28NucleiFix
CVE-2023-49322F-Secure Elements Endpoint Protection denial of service7.5v3.10.7%2023-11-27Fix
CVE-2023-49321F-Secure Elements Endpoint Protection denial of service5.3v3.10.6%2023-11-27Fix
CVE-2023-49316Phpseclib needs guardrails on large binaryfield integers7.5v3.10.8%2023-11-27Fix
CVE-2023-49145Apache NiFi: Improper neutralization of Input in Advanced User interface for Jolt7.9CNA v3.11.2%2023-11-27Fix
CVE-2023-49068Apache DolphinScheduler: Information leakage7.5v3.11.1%2023-11-27Fix
CVE-2023-49047Tenda AX1803 out-of-bounds write7.5v3.10.8%2023-11-27
CVE-2023-49046Tenda AX1803 stack-based buffer overflow9.8v3.11.4%2023-11-27
CVE-2023-49044Tenda AX1803 stack-based buffer overflow9.8v3.11.4%2023-11-27
CVE-2023-49043Tenda AX1803 buffer overflow9.8v3.113.2%2023-11-27
CVE-2023-49042Tenda AX1803 heap-based buffer overflow9.8v3.11.4%2023-11-27
CVE-2023-49040Tenda AX1803 command injection9.8v3.11.5%2023-11-27
CVE-2023-4903032NS Klive SQL injection7.5v3.10.9%2023-11-27
CVE-2023-49029SMPN1SMG Absis cross-site scripting6.1v3.10.9%2023-11-27
CVE-2023-49028Absis smpn1smg cross-site scripting5.4v3.10.8%2023-11-27
CVE-2023-48369Mattermost log Flooding due to specially crafted requests in different endpoints4.3CNA v3.10.6%2023-11-27Fix
CVE-2023-48268Mattermost denial of service via Board Import zip bomb4.3CNA v3.10.7%2023-11-27Fix
CVE-2023-48188Store-opart Op'art Devis PrestaShop opartdevis v.4.5.18 thru v.4.6.12 SQL injection9.8v3.11.3%2023-11-27
CVE-2023-48034Acer Sk-9662 inadequate encryption strength6.1v3.10.2%2023-11-27Exploit code
CVE-2023-47865Mattermost username and Icon override can be used by members when Hardened Mode is enabled4.3CNA v3.10.4%2023-11-27Fix
CVE-2023-47168Mattermost open redirect4.3CNA v3.10.4%2023-11-27Fix
CVE-2023-46480OwnCast remote code execution9.8v3.11.6%2023-11-27
CVE-2023-46355Blmodules CSV Feeds Pro information disclosure5.3v3.10.5%2023-11-27
CVE-2023-46349Myprestamodules Updateproducts SQL injection9.8v3.10.8%2023-11-27Fix
CVE-2023-45223Users full name disclosure through Mattermost Boards with Show Full Name option disabled4.3CNA v3.10.5%2023-11-27Fix
CVE-2023-43754Mattermost exposure of sensitive information to an unauthorized actor4.3CNA v3.10.5%2023-11-27Fix
CVE-2023-43701Apache Superset: Stored XSS on API endpoint4.3CNA v3.11.0%2023-11-27Fix
CVE-2023-42501Apache Superset: Unnecessary read permissions within the Gamma role4.3CNA v3.10.9%2023-11-27Fix
CVE-2023-42366BusyBox out-of-bounds write5.5NVD v3.10.4%2023-11-27Fix
CVE-2023-42365BusyBox use-after-free5.5v3.10.4%2023-11-27Fix
CVE-2023-42364BusyBox A use-after-free5.5v3.10.4%2023-11-27Fix
CVE-2023-42363BusyBox use-after-free5.5v3.10.4%2023-11-27Fix
CVE-2023-42000Arcserve UDP Agent Unauthenticated path traversal file upload9.8NVD v3.11.5%2023-11-27Fix
CVE-2023-41999Arcserve UDP management authentication bypass9.8NVD v3.11.4%2023-11-27Fix
CVE-2023-41998Arcserve UDP unauthenticated RCE9.8NVD v3.115.3%2023-11-27Fix
CVE-2023-41257Foxit Reader way type confusion8.8v3.11.6%2023-11-27Fix
CVE-2023-40703Denial of service via specially crafted block fields in Mattermost Boards4.3CNA v3.10.7%2023-11-27Fix
CVE-2023-40610Apache Superset: Privilege escalation with default examples database6.3CNA v3.11.3%2023-11-27Fix
CVE-2023-40194Foxit Reader Javascript exportDataObject API arbitrary file write8.8v3.12.0%2023-11-27Fix
CVE-2023-39542Foxit Reader Javascript saveAs API code execution8.8v3.13.3%2023-11-27Fix
CVE-2023-38573Foxit Reader way use-after-free8.8v3.11.9%2023-11-27Fix
CVE-2023-35985Foxit Reader Javascript exportDataObject API arbitrary file write8.8v3.12.7%2023-11-27Exploit codeFix
CVE-2023-35075Mattermost HTML injection via channel autocomplete3.1CNA v3.10.4%2023-11-27Fix
CVE-2023-32616Foxit Reader way use-after-free8.8v3.11.8%2023-11-27Fix
CVE-2023-32062oroinc crm OroCalendarBundle has incorrect system calendar events visibility5.0CNA v3.10.5%2023-11-27Fix
CVE-2023-31275WPS Office functionality uninitialized pointer use7.8v3.11.7%2023-11-27
CVE-2023-25632NAVER Whale browser personal information exposure5.5v3.10.2%2023-11-27
CVE-2023-6329Control iD iDSecure passwordCustom authentication bypass9.8NVD v3.165.0%2023-11-27Reported exploitedNucleiMetasploitExploit code
CVE-2023-6313SourceCodester URL Shortener Long URL cross-site scripting6.1v3.10.6%2023-11-27
CVE-2023-6312SourceCodester Loan Management System Users page deleteUser.php delete_user SQL injection7.2v3.10.8%2023-11-27
CVE-2023-6311SourceCodester Loan Management System Loan Type page delete_ltype.php delete_ltype SQL injection7.2v3.10.8%2023-11-27
CVE-2023-6310SourceCodester Loan Management System deleteBorrower.php delete_borrower SQL injection7.2v3.10.8%2023-11-27
CVE-2023-6309moses-smt mosesdecoder trans_result.php os command injection9.8v3.14.2%2023-11-27
CVE-2023-6308Xiamen Four-Faith Video Surveillance Management System Apache Struts unrestricted upload8.8v3.11.0%2023-11-27
CVE-2023-6307jeecgboot JimuReport image path traversal9.8v3.10.8%2023-11-27
CVE-2023-6306SourceCodester Free and Open Source Inventory Management System member_data.php SQL injection9.8v3.10.8%2023-11-27
CVE-2023-6305SourceCodester Free and Open Source Inventory Management System suppliar_data.php SQL injection9.8v3.10.8%2023-11-27
CVE-2023-6304Tecno 4G Portable WiFi TR118 Ping tool goform_get_cmd_process os command injection8.0v3.19.5%2023-11-27
CVE-2023-6303CSZCMS site settings page cross-site scripting4.8v3.10.6%2023-11-27
CVE-2023-6302CSZCMS File Manager page templates permission7.2v3.10.9%2023-11-27
CVE-2023-6301SourceCodester Best Courier Management System GET parameter parcel_list.php cross-site scripting6.1v3.10.6%2023-11-27
CVE-2023-6300SourceCodester Best Courier Management System cross-site scripting6.1v3.10.6%2023-11-27
CVE-2023-6287Checkmk Appliance backup password in GET parameter3.3CNA v3.10.2%2023-11-27Fix
CVE-2023-6254OTRS password is send back to client8.1CNA v3.10.6%2023-11-27Fix
CVE-2023-6202Insecure direct object reference in /plugins/focalboard/ API/v2/users of Mattermost Boards4.3CNA v3.10.4%2023-11-27Fix
CVE-2023-5974WPB Show Core WordPress plugin unauthenticated server side request forgery9.8NVD v3.13.2%2023-11-27Nuclei
CVE-2023-5958POST SMTP Mailer WordPress plugin unauthenticated cross-site scripting6.1NVD v3.10.5%2023-11-27Fix
CVE-2023-5942Medialist WordPress plugin Contributor+ stored XSS5.4NVD v3.10.5%2023-11-27Fix
CVE-2023-5906Job Manager and Career WordPress plugin directory listing to sensitive data exposure7.5NVD v3.10.8%2023-11-27Fix
CVE-2023-5885Franklin Electric Fueling Systems Colibri path traversal6.5v3.11.1%2023-11-27Fix
CVE-2023-5871Libnbd: Malicious nbd server may crash libnbd5.3CNA v3.10.9%2023-11-27Fix
CVE-2023-5845Simple Social Buttons WordPress plugin unauthenticated password Protected post access5.3NVD v3.10.6%2023-11-27Fix
CVE-2023-5738WordPress Backup and Migration plugin Subscriber+ stored XSS5.4NVD v3.10.4%2023-11-27Fix
CVE-2023-5737WordPress Backup and Migration plugin Subscriber+ plugin settings update4.3NVD v3.10.5%2023-11-27Fix
CVE-2023-5653WassUp Real Time Analytics WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-11-27
CVE-2023-5641Martins Free and Easy SEO Link buildings WordPress plugin reflected XSS6.1NVD v3.10.4%2023-11-27Fix
CVE-2023-5620Webpushr WordPress plugin unauthenticated stored XSS5.4NVD v3.10.4%2023-11-27Fix
CVE-2023-5611Seraphinite Accelerator WordPress plugin Unauthorised settings Reset/Import5.3NVD v3.10.3%2023-11-27Fix
CVE-2023-5607Trellix Application and Change Control (TACC) path traversal8.4CNA v3.10.9%2023-11-27Fix
CVE-2023-5604Asgaros Forum WordPress plugin unauthenticated arbitrary file upload9.8NVD v3.12.0%2023-11-27Fix
CVE-2023-5560WP-UserOnline WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-11-27Fix
CVE-2023-555910Web Booster WordPress plugin unauthenticated arbitrary option deletion9.1NVD v3.12.8%2023-11-27NucleiFix
CVE-2023-5525The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a valid nonce to toggle the auto-update status of the plugin.4.3NVD v3.10.5%2023-11-27Fix
CVE-2023-5325Woocommerce Vietnam Checkout WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-11-27Fix
CVE-2023-5239Security and Malware scan by CleanTalk WordPress plugin IP spoofing7.5NVD v3.10.7%2023-11-27Fix
CVE-2023-5209Bookly WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-11-27Fix
CVE-2023-4931Uncontrolled search path element vulnerability in Plesk7.8v3.10.2%2023-11-27Fix
CVE-2023-4922WPB Show Core WordPress plugin unauthenticated local file inclusion9.8NVD v3.115.7%2023-11-27
CVE-2023-4642kk Star Ratings WordPress plugin Rating tampering via race condition5.9NVD v3.10.4%2023-11-27Fix
CVE-2023-4590Buffer overflow vulnerability in Frhed9.8v3.11.1%2023-11-27Exploit code
CVE-2023-4514Mmm Simple File List WordPress plugin Contributor+ stored XSS5.4NVD v3.10.4%2023-11-27
CVE-2023-4297Mmm Simple File List WordPress plugin Subscriber+ arbitrary directory listing4.3NVD v3.10.6%2023-11-27
CVE-2023-4252EventPrime WordPress plugin Booking Pricing bypass5.3NVD v3.10.5%2023-11-27Fix
CVE-2023-2707gAppointments plugin settings stored cross-site scripting4.8NVD v3.10.4%2023-11-27
CVE-2023-49312Precision Bridge improper certificate validation9.1v3.10.7%2023-11-26
CVE-2023-6299Apryse iText Reference Table PdfDocument.java memory leak6.5v3.10.9%2023-11-26Fix
CVE-2023-6298Apryse iText PdfDocument.java main array index6.5v3.11.1%2023-11-26
CVE-2023-6297PHPGurukul Nipah Virus Testing Management System patient search report page cross-site scripting6.1v3.10.8%2023-11-26
CVE-2023-6296osCommerce Instant message compare cross-site scripting6.1v3.10.8%2023-11-26
CVE-2023-49298OpenZFS insecure direct object reference7.5v3.11.2%2023-11-24Fix
CVE-2023-48796Apache DolphinScheduler sensitive information disclosure7.5v3.11.2%2023-11-24Fix
CVE-2023-48712User authorization bug leading to privilege escalation in warpgate7.1CNA v3.10.7%2023-11-24Fix
CVE-2023-48711Server-side request forgery (SSRF) vulnerability in google-translate-api-browser3.7CNA v3.10.5%2023-11-24Fix
CVE-2023-48708Insertion of Sensitive Information into Log in codeigniter4/shield5.0CNA v3.10.6%2023-11-24Fix
CVE-2023-48707Cleartext storage of sensitive information in codeigniter4/shield5.0CNA v3.10.3%2023-11-24Fix
CVE-2023-48312Authentication bypass using an empty token in capsule-proxy9.8CNA v3.10.6%2023-11-24Fix
CVE-2023-46575SQL injection vulnerability in Meshery9.8v3.11.3%2023-11-24Fix
CVE-2023-44303Dell RVTools information disclosure7.5CNA v3.10.5%2023-11-24Fix
CVE-2023-33706Sysaid insecure direct object reference6.5v3.10.6%2023-11-24
CVE-2023-26279IBM QRadar WinCollect Agent improper output encoding3.3CNA v3.10.2%2023-11-24Fix
CVE-2023-6293Prototype pollution in robinbuschmann/Sequelize-typescript7.1v3.10.6%2023-11-24Fix
CVE-2023-6277LibTIFF: Out-of-memory in tiffopen via a craft file6.5NVD v3.11.8%2023-11-24Fix
CVE-2023-6276Tongda OA 2017 delete.php SQL injection7.5v3.10.6%2023-11-24
CVE-2023-6275TOTVS Fluig Platform mobileredir openApp.jsp cross-site scripting6.1v3.12.4%2023-11-24NucleiExploit codeFix
CVE-2023-6274Byzoro Smart S80 PHP file updatelib.php unrestricted upload9.8v3.12.9%2023-11-24
CVE-2023-6251Checkmk CSRF in delete_user_message3.5CNA v3.10.2%2023-11-24Fix
CVE-2023-49216Usedesk cross-site scripting5.4v3.10.4%2023-11-23Fix
CVE-2023-49215Usedesk cross-site scripting6.1v3.10.4%2023-11-23Fix
CVE-2023-49214Usedesk server-side template injection9.8v3.10.8%2023-11-23Fix
CVE-2023-49213Ironmansoftware PowerShell Universal command injection8.8v3.12.1%2023-11-23Fix
CVE-2023-49210Node-openssl openssl npm package vulnerable to command execution9.8v3.11.9%2023-11-23
CVE-2023-49208Glewlwyd SSO Server buffer overflow9.8v3.10.9%2023-11-23Fix
CVE-2023-47839eCommerce Product Catalog WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-23Fix
CVE-2023-47835ARI Stream Quiz WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-23Fix
CVE-2023-47834Quiz And Survey Master WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-23Fix
CVE-2023-47833Theater for WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-23Fix
CVE-2023-47790Pz-LinkCard WordPress plugin cross-site request forgery (CSRF)6.1NVD v3.10.2%2023-11-23Fix
CVE-2023-47668Membership Plugin WordPress plugin StellarWP information disclosure7.5v3.11.0%2023-11-23Exploit codeFix
CVE-2023-47529Cloud Templates and Patterns collection WordPress plugin sensitive data exposure7.5NVD v3.11.0%2023-11-23Fix
CVE-2023-47244Email Marketing for WooCommerce by Omnisend WordPress plugin sensitive data exposure7.5v3.10.6%2023-11-23Fix
CVE-2023-44290Dell Command Monitor (DCM) improper access control7.3CNA v3.10.2%2023-11-23Fix
CVE-2023-44289Dell Command Configure (DCC) improper access control7.3CNA v3.10.2%2023-11-23Fix
CVE-2023-43123Apache Storm temporary files information disclosure5.5v3.10.3%2023-11-23Fix
CVE-2023-43086Dell Command Configure (DCC) improper access control7.3CNA v3.10.2%2023-11-23Fix
CVE-2023-41812Pandora FMS uploading executables via the file manager5.7CNA v3.10.6%2023-11-23Fix
CVE-2023-41811Pandora FMS stored XSS via Site News page5.3CNA v3.10.3%2023-11-23Fix
CVE-2023-41810Pandora FMS stored XSS via Dashboard Panel4.0CNA v3.10.3%2023-11-23Fix
CVE-2023-41808Pandora FMS arbitrary file read as Root via GoTTY page8.5CNA v3.10.5%2023-11-23Fix
CVE-2023-41807Pandora FMS linux local privilege escalation via GoTTY page9.1CNA v3.10.7%2023-11-23Fix
CVE-2023-41806Pandora FMS misassignment of privileges can cause DOS attack8.2CNA v3.10.5%2023-11-23Fix
CVE-2023-41792Pandora FMS Lack of Authorization and stored XSS via SNMP Trap Editor page5.9CNA v3.10.2%2023-11-23Fix
CVE-2023-41791Pandora FMS Lack of Authorization and stored XSS via Translation Abuse8.4CNA v3.10.5%2023-11-23Fix
CVE-2023-41790Pandora FMS Traversal Path on PHP file7.6CNA v3.10.6%2023-11-23Fix
CVE-2023-41789Pandora FMS unauthenticated admin account takeover via XSS7.6CNA v3.10.5%2023-11-23Fix
CVE-2023-41788Pandora FMS remote code execution via File Uploader7.6CNA v3.10.7%2023-11-23Fix
CVE-2023-41787Pandora FMS arbitrary file read6.0CNA v3.10.5%2023-11-23Fix
CVE-2023-41786Pandora FMS database backups availability by low-privileged users6.8CNA v3.10.5%2023-11-23
CVE-2023-41140Autodesk AutoCAD, Advance Steel and Civil 3D heap-based buffer overflow7.8v3.10.3%2023-11-23Fix
CVE-2023-41139Autodesk AutoCAD, Advance Steel and Civil 3D untrusted pointer dereference7.8NVD v3.10.3%2023-11-23Fix
CVE-2023-40002Booster for WooCommerce WordPress plugin sensitive data exposure6.5v3.10.6%2023-11-23Fix
CVE-2023-39253Dell OS Recovery Tool improper access control7.3CNA v3.10.2%2023-11-23Fix
CVE-2023-33202Bouncy Castle denial of service (DoS)5.5v3.10.9%2023-11-23Fix
CVE-2023-30581Node.js Node missing authorization7.5v3.11.1%2023-11-23Fix
CVE-2023-29076Autodesk AutoCAD, Advance Steel and Civil 3D memory corruption9.8v3.11.0%2023-11-23Fix
CVE-2023-29075Autodesk AutoCAD, Advance Steel and Civil 3D out-of-bounds write9.8v3.11.1%2023-11-23Fix
CVE-2023-29074Autodesk AutoCAD, Advance Steel and Civil 3D out-of-bounds write9.8v3.11.1%2023-11-23Fix
CVE-2023-29073Autodesk AutoCAD, Advance Steel and Civil 3D heap-based buffer overflow9.8v3.11.1%2023-11-23Fix
CVE-2023-28813Hikvision LocalServiceComponents plug-in parameters vulnerability8.1CNA v3.10.6%2023-11-23Fix
CVE-2023-28812Hikvision LocalServiceComponents web browser plug-in buffer overflow9.1CNA v3.11.0%2023-11-23Fix
CVE-2023-28811Hikvision iDS-EXXHUH password recovery feature buffer overflow7.4CNA v3.10.4%2023-11-23Fix
CVE-2023-23978WP Client Reports WordPress plugin sensitive data exposure6.5v3.10.7%2023-11-23Fix
CVE-2023-6118Path traversal in Neutron IP Camera7.5CNA v3.10.8%2023-11-23Fix
CVE-2023-5972Linux kernel nft_inner.c functionality of netfilter in the null pointer dereference7.8NVD v3.10.3%2023-11-23Fix
CVE-2023-4677Pandora FMS unauthenticated admin account takeover via Cron Log File Backups7.0CNA v3.10.5%2023-11-23Fix
CVE-2023-4595Seattle Lab SLmail information disclosure6.5NVD v3.10.7%2023-11-23
CVE-2023-4594Cross-site scripting in BVRP Software SLmail5.4v3.10.4%2023-11-23
CVE-2023-4593Path traversal in BVRP Software SLmail6.5v3.11.1%2023-11-23
CVE-2023-4406XSS in KC Group's E-Commerce Software6.1CNA v3.10.5%2023-11-23
CVE-2023-3631SQLi in Medart Notification Panel9.8CNA v3.10.8%2023-11-23
CVE-2023-3377SQLi in Veribilim's Veribase9.8CNA v3.10.8%2023-11-23
CVE-2023-49146getgrav dom-sanitizer cross-site scripting in DOMSanitizer6.1v3.10.4%2023-11-22Fix
CVE-2023-49102Nzbget remote code execution8.8v3.11.5%2023-11-22
CVE-2023-48706Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite3.6CNA v3.10.5%2023-11-22Fix
CVE-2023-48705nautobot has XSS potential in custom links, job buttons, and computed fields7.1CNA v3.10.5%2023-11-22Fix
CVE-2023-48646Zoho ManageEngine RecoveryManager Plus arbitrary command execution7.2v3.182.2%2023-11-22Emerging ThreatsFix
CVE-2023-48161giflib buffer overflow7.1NVD v3.10.4%2023-11-22Fix
CVE-2023-48107Zlib-ng Minizip-ng buffer overflow8.8v3.11.3%2023-11-22Fix
CVE-2023-48106Zlib-ng Minizip-ng buffer overflow8.8v3.10.9%2023-11-22Fix
CVE-2023-48105bytecodealliance Webassembly Micro Runtime out-of-bounds write7.5v3.11.0%2023-11-22Fix
CVE-2023-47831DrawIt (draw.io) WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22
CVE-2023-47829Quick Call Button WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-22
CVE-2023-47825WP EXtra WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47824Legal Pages WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47821Email Encoder Bundle WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22Fix
CVE-2023-47819Easy Call Now by ThikShare WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22
CVE-2023-47817Daily Prayer Time WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22Fix
CVE-2023-47816Charitable WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22Fix
CVE-2023-47815BP Profile Shortcodes Extra WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22Fix
CVE-2023-47814BMI Calculator WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22
CVE-2023-47813Better RSS Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22
CVE-2023-47812Bamboo Columns WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22
CVE-2023-47811Anywhere Flash Embed WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22
CVE-2023-47810Ajax Domain Checker WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22
CVE-2023-47809Accordion WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22Fix
CVE-2023-47808Christina Uechi Add Widgets to Page cross-site scripting5.4v3.10.4%2023-11-22
CVE-2023-47792Big File Uploads WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47791Leadster WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47786LayerSlider WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-22Fix
CVE-2023-47785LayerSlider WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47781Thrive Theme Builder WordPress theme cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47775wpDiscuz WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47773Permalinks Customizer WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-22
CVE-2023-47768Footer Putter WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-22
CVE-2023-47767Interactive World Map WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-22Fix
CVE-2023-47766Post Status Notifier Lite WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-22Fix
CVE-2023-47765CodeBard's Patron Button and Widgets for Patreon WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47759Chaty WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-22Fix
CVE-2023-47758Multi Step Form WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-47755WooCommerce Product Carousel Slider WordPress plugin cross-site scripting (XSS)6.1v3.10.4%2023-11-22
CVE-2023-47467JeecgBoot directory traversal in jeecg-boot6.5v3.11.1%2023-11-22
CVE-2023-47393Mercedes-benz Mercedes Me An improper access control5.3v3.10.5%2023-11-22
CVE-2023-47392Mercedes-benz Mercedes Me An improper access control5.3v3.10.5%2023-11-22
CVE-2023-47380Cross-site scripting in Admidio6.1v3.10.7%2023-11-22Fix
CVE-2023-47350Cross-site request forgery in SwiftyEdit8.8v3.10.4%2023-11-22Fix
CVE-2023-47316H-mdm Headwind Mdm insecure direct object reference5.4v3.10.4%2023-11-22
CVE-2023-47315H-mdm Headwind Mdm hard-coded credentials8.8v3.10.8%2023-11-22
CVE-2023-47314H-mdm Headwind Mdm cross-site scripting5.4v3.10.4%2023-11-22
CVE-2023-47313H-mdm Headwind Mdm path traversal5.4v3.10.8%2023-11-22
CVE-2023-47312H-mdm Headwind Mdm cleartext storage of sensitive information6.5v3.10.4%2023-11-22
CVE-2023-47251Mprivacy-tools path traversal6.5v3.11.7%2023-11-22
CVE-2023-47250Mprivacy-tools incorrect default permissions8.8NVD v3.11.4%2023-11-22Exploit code
CVE-2023-47016radare2 out-of-bounds write7.5v3.11.2%2023-11-22Fix
CVE-2023-47014Remyandrade Sticky Notes App Sourcecodester cross-site request forgery6.5v3.10.3%2023-11-22Exploit code
CVE-2023-46814VideoLAN VLC media player uncontrolled search path7.8v3.10.3%2023-11-22Fix
CVE-2023-46673Elasticsearch improper handling of exceptional conditions6.5CNA v3.10.8%2023-11-22Fix
CVE-2023-46357Myprestamodules Cross Selling In Modal Cart SQL injection9.8v3.10.7%2023-11-22Fix
CVE-2023-45377Chronopost SQL injection9.8v3.10.7%2023-11-22Fix
CVE-2023-43887struktur libde265 buffer overflow8.1v3.11.0%2023-11-22Fix
CVE-2023-43082Dell Unity improper certificate validation8.6CNA v3.10.3%2023-11-22Fix
CVE-2023-43081Dell PowerProtect Agent for File System incorrect default permissions4.0CNA v3.10.2%2023-11-22Fix
CVE-2023-41146Autodesk Customer Portal information disclosure4.3v3.10.5%2023-11-22Fix
CVE-2023-41145Autodesk users who no longer have an active license for an account can still access cases for that account.5.3v3.10.5%2023-11-22Fix
CVE-2023-40152Fuji Electric Tellus Lite V-Simulator out-of-bounds write7.8v3.10.3%2023-11-22Fix
CVE-2023-39925Community by PeepSo WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-37924Apache Submarine: SQL injection from unauthorized login9.8v3.17.2%2023-11-22Fix
CVE-2023-35127Fuji Electric Tellus Lite V-Simulator stack-based buffer overflow7.8v3.10.3%2023-11-22Fix
CVE-2023-30496Bus Ticket Booking with Seat Reservation WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-22Fix
CVE-2023-29069Autodesk Desktop Connector uncontrolled search path7.8v3.10.3%2023-11-22Fix
CVE-2023-28749CM On Demand Search And Replace WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-28747CBX Currency Converter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-27633Customify WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-27461When Last Login WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-27458WpStream Live Streaming, Video on Demand, Pay Per View WordPress plugin cross-site request forgery8.8v3.10.3%2023-11-22Fix
CVE-2023-27457Passionate Brains Add Expires Headers and Optimized Minify cross-site request forgery8.8v3.10.3%2023-11-22Fix
CVE-2023-27453LWS Tools WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-27451Instant Images WordPress plugin server side request forgery (SSRF)8.8v3.10.8%2023-11-22Fix
CVE-2023-27446DeepL Pro API translation WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-27444DecaLog WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-27442Leyka WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-26542phpinfo WP WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-26535Sheets To WP Table Live Sync WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-26532Social Auto Poster WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22
CVE-2023-25987YouTube Channel WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22Fix
CVE-2023-25986PayGreen WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-22
CVE-2023-25682IBM Sterling B2B Integrator information disclosure6.2CNA v3.10.2%2023-11-22Fix
CVE-2023-20241Cisco Secure Client out-of-bounds read5.5CNA v3.10.2%2023-11-22Fix
CVE-2023-20240Cisco Secure Client out-of-bounds read5.5CNA v3.10.2%2023-11-22Fix
CVE-2023-20084Cisco Secure Endpoint quarantine timing vulnerability5.0CNA v3.10.2%2023-11-22Fix
CVE-2023-6265DrayTek Vigor2960 mainfunction.cgi dumpSyslog option directory traversal8.1v3.11.8%2023-11-22Emerging Threats
CVE-2023-6264Devolutions Server Content-Security-Policy header information disclosure5.3v3.10.5%2023-11-22Fix
CVE-2023-6263Server spoofing vulnerability in NxCloud8.3CNA v3.10.5%2023-11-22Fix
CVE-2023-6253Saved Uninstall Key in Digital Guardian Agent Uninstaller6.0v3.10.3%2023-11-22Fix
CVE-2023-6252Path traversal vulnerability in Chameleon Power products7.5v3.10.9%2023-11-22
CVE-2023-6189Improper permission Handling in M-Files Server4.3CNA v3.10.5%2023-11-22Fix
CVE-2023-6164MainWP Dashboard WordPress plugin Authenticated(Administrator+) CSS injection4.8v3.10.4%2023-11-22Fix
CVE-2023-6160LifterLMS WordPress plugin directory traversal to arbitrary CSV file deletion6.7v3.10.8%2023-11-22Fix
CVE-2023-6157Checkmk livestatus injection in ajax_search7.6CNA v3.10.9%2023-11-22Fix
CVE-2023-6156Checkmk livestatus injection in availability timeline7.6CNA v3.10.9%2023-11-22Fix
CVE-2023-6117M-Files REST API allows denial of service5.7CNA v3.10.7%2023-11-22Fix
CVE-2023-6011DECE Software Geodi stored cross-site scripting5.4CNA v3.10.4%2023-11-22Fix
CVE-2023-6009UserPro WordPress plugin authenticated (Subscriber+) privilege escalation8.8v3.10.9%2023-11-22Fix
CVE-2023-6008UserPro WordPress plugin cross-site request forgery via multiple functions4.3v3.10.2%2023-11-22Fix
CVE-2023-6007UserPro WordPress plugin missing authorization via multiple functions6.5NVD v3.10.3%2023-11-22Fix
CVE-2023-5983Information disclosure in Botanik Software Pharmacy Automation7.5v3.10.6%2023-11-22Fix
CVE-2023-5921DECE Software Geodi improper workflow enforcement7.1v3.10.2%2023-11-22Fix
CVE-2023-5822Drag and Drop Multiple File Upload for Contact Form 7 unrestricted file upload9.8v3.11.8%2023-11-22Fix
CVE-2023-5815News and Blog Designer Pack WordPress Blog plugin unauthenticated remote code execution9.8v3.14.3%2023-11-22NucleiFix
CVE-2023-5742EasyRotator for WordPress plugin stored cross-site scripting5.4v3.10.4%2023-11-22Fix
CVE-2023-5715Website Optimization Plerdy WordPress plugin authenticated (Admin+) stored cross-site scripting4.8v3.10.5%2023-11-22Fix
CVE-2023-5708WP Post Columns WordPress plugin stored cross-site scripting5.4v3.10.4%2023-11-22Fix
CVE-2023-5706VK Blocks WordPress plugin authenticated (Contributor+) stored cross-site scripting via block5.4v3.10.5%2023-11-22Fix
CVE-2023-5704CPO Shortcodes WordPress plugin stored cross-site scripting5.4v3.10.4%2023-11-22Fix
CVE-2023-5667Tab Ultimate WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-11-22Fix
CVE-2023-5664Garden Gnome Package WordPress plugin stored cross-site scripting5.4v3.10.6%2023-11-22Fix
CVE-2023-5662Sponsors WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.5%2023-11-22Fix
CVE-2023-5537Delete Usermetas WordPress plugin cross-site request forgery4.3v3.10.3%2023-11-22Fix
CVE-2023-5469Steven Henty Drop Shadow Boxes dropshadowbox shortcode stored cross-site scripting5.4v3.10.5%2023-11-22Fix
CVE-2023-5466Wp anything slider WordPress plugin authenticated (Subscriber+) SQL injection via shortcode8.8v3.10.8%2023-11-22Fix
CVE-2023-5465Popup with fancybox WordPress plugin authenticated (Subscriber+) SQL injection via shortcode8.8v3.10.8%2023-11-22Fix
CVE-2023-5419Funnelforms Free WordPress plugin missing authorization to Test email Sending4.3v3.10.4%2023-11-22Fix
CVE-2023-5417Funnelforms Free WordPress plugin missing authorization to Category update4.3v3.10.4%2023-11-22Fix
CVE-2023-5416Funnelforms Free WordPress plugin missing authorization to Category deletion4.3v3.10.4%2023-11-22Fix
CVE-2023-5415Funnelforms Free WordPress plugin missing authorization to New Category creation4.3v3.10.4%2023-11-22Fix
CVE-2023-5411Funnelforms Free WordPress plugin missing authorization to post modification4.3v3.10.4%2023-11-22Fix
CVE-2023-5387Funnelforms Free WordPress plugin missing authorization to Enable/Disable Dark Mode4.3v3.10.4%2023-11-22Fix
CVE-2023-5386Funnelforms Free WordPress plugin missing authorization to arbitrary post deletion4.3v3.10.4%2023-11-22Fix
CVE-2023-5385Funnelforms Free WordPress plugin missing authorization to arbitrary post Duplication4.3v3.10.4%2023-11-22Fix
CVE-2023-5383Funnelforms Free WordPress plugin cross-site request forgery to arbitrary post Duplication4.3v3.10.2%2023-11-22Fix
CVE-2023-5382Funnelforms Free WordPress plugin cross-site request forgery to arbitrary post deletion4.3v3.10.3%2023-11-22Fix
CVE-2023-5338Theme Blvd Shortcodes WordPress plugin stored cross-site scripting5.4v3.10.4%2023-11-22
CVE-2023-5314WP EXtra WordPress plugin missing authorization to arbitrary email Sending4.3v3.10.4%2023-11-22Fix
CVE-2023-5299Fuji Electric Tellus Lite V-Simulator improper access control8.8v3.10.5%2023-11-22Fix
CVE-2023-5234Related Products for WooCommerce WordPress plugin stored cross-site scripting5.4v3.10.5%2023-11-22Fix
CVE-2023-5163Weather Atlas Widget WordPress plugin stored cross-site scripting5.4v3.10.6%2023-11-22Fix
CVE-2023-5128TCD Google Maps WordPress plugin stored cross-site scripting5.4v3.10.5%2023-11-22
CVE-2023-5096HTML filter and csv-file search WordPress plugin stored cross-site scripting5.4v3.10.4%2023-11-22Fix
CVE-2023-5048WDContactFormBuilder WordPress plugin stored cross-site scripting5.4v3.10.4%2023-11-22
CVE-2023-5047DRD Fleet Leasing DRDrive SQL command improper neutralization9.8CNA v3.10.7%2023-11-22Fix
CVE-2023-4726Ultimate Dashboard WordPress plugin stored cross-site scripting4.8v3.10.4%2023-11-22Fix
CVE-2023-4686WP Customer Reviews WordPress plugin authenticated (Subscriber+) sensitive information exposure4.3v3.10.5%2023-11-22Fix
CVE-2023-3104Missing authentication for critical function in Unitree Robotics A17.5v3.10.5%2023-11-22
CVE-2023-3103Authentication bypass by spoofing in Unitree Robotics A15.9NVD v3.10.6%2023-11-22
CVE-2023-2889SQLi in Veon Computer's Service Tracking Software9.8v3.10.7%2023-11-22Fix
CVE-2023-2841Advanced Local Pickup for WooCommerce WordPress plugin authenticated (Administrator+) SQL injection7.2v3.10.6%2023-11-22Fix
CVE-2023-2497UserPro WordPress plugin cross-site request forgery to PHP object injection8.8v3.10.3%2023-11-22Fix
CVE-2023-2449UserPro WordPress plugin insecure password reset Mechanism9.8v3.10.9%2023-11-22Fix
CVE-2023-2448UserPro WordPress plugin missing authorization arbitrary shortcode execution5.3v3.11.0%2023-11-22Fix
CVE-2023-2447UserPro WordPress plugin cross-site request forgery to sensitive information exposure6.1v3.10.2%2023-11-22Fix
CVE-2023-2446UserPro WordPress plugin sensitive information disclosure via shortcode6.5v3.10.8%2023-11-22Fix
CVE-2023-2440UserPro WordPress plugin cross-site request forgery to privilege escalation8.8v3.10.3%2023-11-22Fix
CVE-2023-2438UserPro WordPress plugin cross-site request forgery to stored cross-site scripting6.1v3.10.2%2023-11-22Fix
CVE-2023-2437UserPro WordPress plugin authentication bypass to Administrator8.1NVD v3.16.7%2023-11-22NucleiFix
CVE-2023-49105ownCloud improper authentication9.8v3.143.2%2023-11-21KEVNucleiEmerging ThreatsExploit codeFix
CVE-2023-49104ownCloud oauth2 open redirect6.1NVD v3.10.6%2023-11-21Fix
CVE-2023-49103ownCloud graphapi information disclosure7.5NVD v3.178.4%2023-11-21KEVNucleiEmerging ThreatsExploit codeFix
CVE-2023-49061Mozilla Firefox open redirect6.1v3.10.3%2023-11-21Fix
CVE-2023-49060An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120.9.8v3.10.6%2023-11-21Fix
CVE-2023-48701Statamic CMS vulnerable to cross-site scripting via uploaded assets7.5CNA v3.10.7%2023-11-21Fix
CVE-2023-48700nautobot-plugin-device-onboarding Clear Text Credentials Exposed via Onboarding Task5.7CNA v3.10.4%2023-11-21Fix
CVE-2023-48699fastbots eval injection8.4CNA v3.10.7%2023-11-21Fix
CVE-2023-48307Nextcloud Mail app vulnerable to server-side request forgery3.5CNA v3.10.9%2023-11-21Fix
CVE-2023-48306Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF5.0CNA v3.10.8%2023-11-21Fix
CVE-2023-48305Nextcloud Server user_ldap app logs user passwords in the log file on level debug4.2CNA v3.10.2%2023-11-21Fix
CVE-2023-48304Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user4.3CNA v3.10.6%2023-11-21Fix
CVE-2023-48303Nextcloud Server admins can change authentication details of user configured external storage2.4CNA v3.10.7%2023-11-21Fix
CVE-2023-48302Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V3.5CNA v3.10.6%2023-11-21Fix
CVE-2023-48301Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name3.5CNA v3.10.6%2023-11-21Fix
CVE-2023-48299PyTorch TorchServe model archive extraction path traversal5.3CNA v3.10.7%2023-11-21Fix
CVE-2023-48239Nextcloud Server users can make external storage mount points inaccessible for other users8.5CNA v3.11.0%2023-11-21Fix
CVE-2023-48230capnproto cap'n Proto WebSocket message can cause crash5.9CNA v3.11.9%2023-11-21Fix
CVE-2023-48228goauthentik authentik OAuth2: PKCE can be fully circumvented7.5CNA v3.11.2%2023-11-21Fix
CVE-2023-48226OpenReplay HTML injection6.5CNA v3.10.8%2023-11-21
CVE-2023-48124Nayem-howlader SUP Online Shopping cross-site scripting5.4v3.10.6%2023-11-21
CVE-2023-47643SuiteCRM has Unauthenticated Graphql Introspection Enabled3.1CNA v3.13.0%2023-11-21NucleiFix
CVE-2023-46935EyouCMS cross-site scripting5.4v3.10.4%2023-11-21
CVE-2023-45886Ipinfusion Zebos denial of service7.5v3.11.4%2023-11-21Fix
CVE-2023-42770Red Lion Controls Sixnet RTU authentication bypass using an Alternative Path or Channel9.8v3.10.9%2023-11-21Fix
CVE-2023-40151Red Lion Controls Sixnet RTU exposed dangerous method or function9.8v3.11.1%2023-11-21Fix
CVE-2023-28802Zscaler Client Connector improper integrity check validation4.9CNA v3.10.2%2023-11-21Fix
CVE-2023-22521Atlassian Crowd Data Center remote code execution8.0CNA v3.01.2%2023-11-21Fix
CVE-2023-22516Atlassian Bamboo Data Center remote code execution8.5CNA v3.01.2%2023-11-21Fix
CVE-2023-21418Axis Communications AXIS OS path traversal7.1CNA v3.10.7%2023-11-21Fix
CVE-2023-21417Axis Communications AXIS OS path traversal7.1CNA v3.10.7%2023-11-21Fix
CVE-2023-21416Axis Communications AXIS OS path traversal7.1CNA v3.10.7%2023-11-21Fix
CVE-2023-20274Cisco AppDynamics improper privilege management6.3CNA v3.10.2%2023-11-21Fix
CVE-2023-20272Cisco Identity Services Engine Software unprotected alternate path6.7CNA v3.10.9%2023-11-21Fix
CVE-2023-20265Cisco IP Phones with Multiplatform Firmware cross-site scripting5.5CNA v3.10.5%2023-11-21Fix
CVE-2023-20208Cisco Identity Services Engine Software cross-site scripting4.8CNA v3.10.5%2023-11-21Fix
CVE-2023-6248Data leakage and arbitrary remote code execution in Syrus cloud devices9.8v3.11.2%2023-11-21
CVE-2023-6238Kernel: Nvme: Memory corruption via unprivileged user passthrough6.7NVD v3.10.3%2023-11-21Fix
CVE-2023-6235Arbitrary code execution in Duet Display7.8v3.10.3%2023-11-21
CVE-2023-6213Mozilla Firefox memory safety bugs8.8v3.10.7%2023-11-21Fix
CVE-2023-6212Mozilla Firefox memory safety bugs8.8v3.10.8%2023-11-21Fix
CVE-2023-6211Mozilla Firefox clickjacking6.5v3.10.5%2023-11-21Fix
CVE-2023-6210Mozilla Firefox pop-up content loading vulnerability6.5v3.10.6%2023-11-21Fix
CVE-2023-6209Mozilla Firefox path traversal6.5v3.11.4%2023-11-21Fix
CVE-2023-6208Mozilla Firefox X11 primary selection vulnerability8.8v3.10.8%2023-11-21Fix
CVE-2023-6207Mozilla Firefox use-after-free8.8v3.10.8%2023-11-21Fix
CVE-2023-6206Mozilla Firefox clickjacking5.4v3.10.6%2023-11-21Fix
CVE-2023-6205Mozilla Firefox use-after-free6.5v3.10.9%2023-11-21Fix
CVE-2023-6204Mozilla Firefox out-of-bounds read6.5v3.10.8%2023-11-21Fix
CVE-2023-6144Dev Blog session cookie insecure direct object reference4.8NVD v3.10.4%2023-11-21
CVE-2023-6142Dev Blog file upload feature stored cross-site scripting5.4v3.10.4%2023-11-21
CVE-2023-5776Post Meta Data Manager WordPress plugin cross-site request forgery8.8v3.10.3%2023-11-21Fix
CVE-2023-5599Dassault Systèmes 3DSwymer 3DDashboard stored cross-site scripting5.4CNA v3.10.4%2023-11-21
CVE-2023-5598Dassault Systèmes 3DSwymer stored cross-site scripting5.4CNA v3.10.4%2023-11-21
CVE-2023-5553Axis Communications AXIS OS incorrect authorization7.6CNA v3.10.3%2023-11-21Fix
CVE-2023-5055zephyrproject-rtos Zephyr L2CAP: Possible stack based buffer overflow in le_ecred_reconf_req8.3CNA v3.10.8%2023-11-21
CVE-2023-4424zephyrproject-rtos Zephyr bt: Hci: DoS and possible RCE8.3CNA v3.10.4%2023-11-21
CVE-2023-4149WAGO: OS command injection vulnerability in Managed Switch9.8CNA v3.11.1%2023-11-21Fix
CVE-2023-48310NC3-LU TestingPlatform ability to DoS the testing infrastructure by overwriting files9.1CNA v3.11.1%2023-11-20Fix
CVE-2023-48309next-auth vulnerable to possible user mocking that bypasses basic authentication5.3CNA v3.10.7%2023-11-20Fix
CVE-2023-48300Embed Privacy missing escaping for show_all attribute in opt-out shortcode6.3CNA v3.10.5%2023-11-20Fix
CVE-2023-48293XWiki Admin tools Application CSRF with QueryOnXWiki allows arbitrary database queries8.8CNA v3.10.4%2023-11-20Fix
CVE-2023-48292XWiki Admin Tools Application Run Shell command allows CSRF RCE attacks9.7CNA v3.122.9%2023-11-20Exploit codeFix
CVE-2023-48241XWiki Platform Solr suggest service improper authorization7.5CNA v3.172.8%2023-11-20NucleiFix
CVE-2023-48240XWiki Platform rendered diff image embedding server-side request forgery9.1CNA v3.10.7%2023-11-20Fix
CVE-2023-48223fast-jwt JWT Algorithm Confusion5.9CNA v3.10.7%2023-11-20Fix
CVE-2023-48221wire-avs remote format string7.3CNA v3.10.9%2023-11-20Fix
CVE-2023-48218Bypass of field access control in strapi-plugin-protected-populate5.3CNA v3.10.6%2023-11-20Fix
CVE-2023-48192TOTOLINK A3700R code injection7.8v3.10.3%2023-11-20
CVE-2023-48176Mizhexiaoxiao Websiteguide An insecure permissions9.8v3.10.9%2023-11-20
CVE-2023-48111Tenda AX1803 out-of-bounds write7.5v3.10.8%2023-11-20
CVE-2023-48110Tenda AX1803 out-of-bounds write7.5v3.10.8%2023-11-20
CVE-2023-48109Tenda AX1803 out-of-bounds write7.5v3.10.8%2023-11-20
CVE-2023-48090GPAC M3U8 parsing memory leak7.1v3.10.3%2023-11-20
CVE-2023-48051Upydev has weak encryption padding7.5v3.10.2%2023-11-20
CVE-2023-48039GPAC MPD parsing memory leak5.5v3.10.3%2023-11-20
CVE-2023-47772Slider Revolution WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-20Fix
CVE-2023-47417Paulrouget Dzslides component /shells/embedder.html cross-site scripting6.1v3.10.5%2023-11-20
CVE-2023-47311Spaceapplications Yacms clickjacking6.1v3.10.4%2023-11-20
CVE-2023-47217OpenHarmony arkruntime has a buffer overflow4.0CNA v3.10.2%2023-11-20
CVE-2023-47175LuxSoft LuxCal Web Calendar cross-site scripting6.1v3.10.7%2023-11-20Fix
CVE-2023-47172WithSecure Elements Endpoint Protection local privilege escalation7.8v3.10.2%2023-11-20Fix
CVE-2023-46990PublicCMS deserialization of untrusted data9.8v3.11.5%2023-11-20
CVE-2023-46705OpenHarmony arkruntime has a type confusion6.2CNA v3.10.2%2023-11-20
CVE-2023-46700LuxSoft LuxCal Web Calendar SQL injection9.8v3.11.0%2023-11-20Fix
CVE-2023-46471Spaceapplications Yacms Space Applications Services Yamcs v.5.8.6 cross-site scripting5.4v3.10.6%2023-11-20
CVE-2023-46470Spaceapplications Yacms Space Applications Services Yamcs v.5.8.6 cross-site scripting5.4v3.10.6%2023-11-20
CVE-2023-46302Apache Submarine: Fix SnakeYaml unsafe deserialization9.8v3.11.8%2023-11-20Fix
CVE-2023-46100OpenHarmony cert manager has a use of uninitialized resource6.2CNA v3.10.2%2023-11-20
CVE-2023-43612OpenHarmony hiview has an improper preservation of permissions8.4CNA v3.10.2%2023-11-20
CVE-2023-42774OpenHarmony Liteos-A has a incorrect default permissions6.2CNA v3.10.2%2023-11-20
CVE-2023-38885OS4ED Opensis cross-site request forgery8.8v3.10.4%2023-11-20
CVE-2023-38884OS4ED Opensis Community Edition version insecure direct object reference7.5v3.10.9%2023-11-20
CVE-2023-38883OS4ED Opensis Community Edition version reflected cross-site scripting6.1v3.10.6%2023-11-20
CVE-2023-38882OS4ED Opensis Community Edition version reflected cross-site scripting6.1v3.10.6%2023-11-20
CVE-2023-38881OS4ED Opensis Community Edition version reflected cross-site scripting6.1v3.10.6%2023-11-20
CVE-2023-38880OS4ED Opensis missing authorization9.8v3.11.0%2023-11-20
CVE-2023-38879OS4ED Opensis path traversal7.5v3.13.7%2023-11-20Nuclei
CVE-2023-38823Tenda AC18 buffer overflow9.8v3.11.2%2023-11-20
CVE-2023-36013Microsoft PowerShell information disclosure6.5CNA v3.11.4%2023-11-20Fix
CVE-2023-35762OS command injection in INEA ME RTU9.8v3.11.7%2023-11-20Fix
CVE-2023-29155INEA ME RTU missing authentication for critical function9.8v3.10.9%2023-11-20Fix
CVE-2023-6199BookStack Book Stack LFR via blind SSRF6.5v3.11.4%2023-11-20Exploit codeFix
CVE-2023-6197Audio Merchant WordPress plugin cross-site request forgery5.4v3.10.2%2023-11-20Fix
CVE-2023-6196Audio Merchant WordPress plugin cross-site request forgery to arbitrary file upload8.8v3.10.3%2023-11-20
CVE-2023-6178Tenable Nessus Agent out-of-bounds write6.8CNA v3.10.8%2023-11-20Fix
CVE-2023-6062Tenable Nessus arbitrary file write6.8CNA v3.11.0%2023-11-20Fix
CVE-2023-6045OpenHarmony arkruntime has a type confusion5.9CNA v3.10.2%2023-11-20
CVE-2023-5799WP Hotel Booking WordPress plugin Contributor+ arbitrary post deletion5.4NVD v3.10.5%2023-11-20Fix
CVE-2023-5652WP Hotel Booking WordPress plugin unauthenticated SQLi9.8NVD v3.163.7%2023-11-20NucleiFix
CVE-2023-5651WP Hotel Booking WordPress plugin Subscriber+ arbitrary post deletion5.4NVD v3.10.3%2023-11-20Fix
CVE-2023-5640Article Analytics WordPress plugin unauthenticated SQL injection9.8NVD v3.11.0%2023-11-20
CVE-2023-5610Seraphinite Accelerator WordPress plugin authenticated arbitrary redirect5.4NVD v3.10.4%2023-11-20Fix
CVE-2023-5609Seraphinite Accelerator WordPress plugin reflected XSS6.1NVD v3.10.4%2023-11-20Fix
CVE-2023-5593Zyxel SecuExtender SSL VPN Client Windows-based out-of-bounds write7.8CNA v3.10.2%2023-11-20Fix
CVE-2023-5509myStickymenu WordPress plugin Subscriber+ arbitrary form Leads deletion5.4NVD v3.10.5%2023-11-20Fix
CVE-2023-5343Popup Box WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-11-20Fix
CVE-2023-5340Five Star Restaurant Menu and Food Ordering WordPress plugin unauthenticated PHP object injection9.8NVD v3.11.2%2023-11-20Fix
CVE-2023-5140Bonus for Woo WordPress plugin reflected cross-site scripting6.1NVD v3.10.4%2023-11-20Fix
CVE-2023-5119Forminator and Forminator Pro WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2023-11-20Fix
CVE-2023-4970PubyDoc WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-11-20
CVE-2023-4824WooHoo Newspaper Magazine WordPress theme settings update via CSRF8.8NVD v3.10.4%2023-11-20
CVE-2023-4808WP Post Popup WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-11-20
CVE-2023-4799Magic Embeds WordPress plugin Contributor+ stored XSS via shortcode5.4NVD v3.10.4%2023-11-20Fix
CVE-2023-3379WAGO: Improper privilege management in web-based management5.3CNA v3.10.2%2023-11-20Fix
CVE-2023-3116OpenHarmony Liteos-A has a incorrect default permissions7.3CNA v3.10.2%2023-11-20
CVE-2023-5341ImageMagick: Heap use-after-free in coders/bmp.c5.5NVD v3.10.5%2023-11-19Fix
CVE-2023-48736Color Demoiccmax out-of-bounds read6.5v3.10.6%2023-11-18
CVE-2023-48028kodcloud kodbox missing brute-force protection9.8v3.11.1%2023-11-18
CVE-2023-48017iteachyou Dreamer CMS cross-site request forgery8.8v3.10.4%2023-11-18
CVE-2023-47685Preloader Matrix WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-47672WP Category Post List Widget WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-47671Vertical scroll recent post WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-47670Korea SNS WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47667WP Full Stripe Free WordPress plugin cross-site request forgery vulnerability on every setting Save8.8v3.10.3%2023-11-18Fix
CVE-2023-47666Code Snippets WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47664Plainview Protect Passwords WordPress plugin cross-site request forgery (CSRF)8.8v3.10.4%2023-11-18
CVE-2023-47655ANAC XML Bandi di Gara WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47651WP Links Page WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47650Peter Sterling Add Local Avatar cross-site request forgery8.8v3.10.3%2023-11-18
CVE-2023-47649Best Restaurant Menu by PriceListo WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47644ProfileGrid WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47556Device Theme Switcher WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-47553UserHeat WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47552Image Hover Effects WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47551Donations Made Easy Smart Donations WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-47531Droit Dark Mode WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-47519WooCommerce Product Table Lite WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-47243코드엠샵 마이사이트 WordPress plugin CodeMShop cross-site request forgery8.8v3.10.3%2023-11-18Fix
CVE-2023-46402Inefficient regular expression complexity in Git-urls7.5v3.10.9%2023-11-18
CVE-2023-44796LimeSurvey cross-site scripting5.4v3.10.7%2023-11-18Fix
CVE-2023-43177CrushFTP improper control of dynamic code9.8v3.181.8%2023-11-18NucleiMetasploitEmerging ThreatsExploit code
CVE-2023-41129Patreon WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-40817Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40816Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40815Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40814Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40813Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40812Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40810Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40809Cross-site scripting in OpenCRX6.1v3.10.5%2023-11-18Fix
CVE-2023-40363IBM InfoSphere Information Server privilege escalation8.1CNA v3.10.6%2023-11-18Fix
CVE-2023-38361IBM CICS TX Advanced information disclosure5.9CNA v3.10.4%2023-11-18Fix
CVE-2023-32514Google Site Verification plugin using Meta Tag WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-32504Wise Chat WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-32245Essential Addons for Elementor Pro WordPress plugin server side request forgery (SSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-31089Video XML Sitemap Generator WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18
CVE-2023-31075Easy Hide Login WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-28780Yoast SEO: Local WordPress plugin cross-site request forgery (CSRF)8.8v3.10.4%2023-11-18Fix
CVE-2023-25985WordPress Tooltips plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-18Fix
CVE-2023-6187Paid Memberships Pro WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8v3.151.5%2023-11-18Fix
CVE-2023-4214AppPresser WordPress plugin insecure password reset Mechanism9.8v3.10.9%2023-11-18Fix
CVE-2023-48659MISP parameter parsing vulnerability9.8v3.10.9%2023-11-17
CVE-2023-48658An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space.9.8v3.10.9%2023-11-17
CVE-2023-48657MISP filter handling vulnerability9.8v3.10.9%2023-11-17
CVE-2023-48656MISP order clause handling vulnerability9.8v3.10.9%2023-11-17
CVE-2023-48655MISP improper output encoding9.8v3.10.9%2023-11-17
CVE-2023-48649Concrete CMS cross-site scripting5.4v3.10.6%2023-11-17Fix
CVE-2023-48648Concrete CMS allows unauthorized access because directories can be created with insecure permissions9.8v3.11.2%2023-11-17Fix
CVE-2023-48295Cross-site scripting at Device groups Deletion feature in LibreNMS6.3CNA v3.10.6%2023-11-17Fix
CVE-2023-48294Broken access control on Graphs feature in LibreNMS4.3CNA v3.10.7%2023-11-17Fix
CVE-2023-48238JWT Algorithm Confusion in json-web-token library7.5CNA v3.10.3%2023-11-17Fix
CVE-2023-48185Terra-mater Terra-master TerraMaster v.s1.0 path traversal7.5v3.11.3%2023-11-17
CVE-2023-48078code-projects Simple CRUD Functionality add.php SQL injection9.8v3.10.8%2023-11-17
CVE-2023-48031OpenSupports unrestricted file upload9.8v3.11.4%2023-11-17
CVE-2023-48029Corebos CSV injection8.0v3.11.3%2023-11-17
CVE-2023-48025Howerj Liblisp out-of-bounds read8.1v3.10.7%2023-11-17
CVE-2023-48024Howerj Liblisp use-after-free6.5v3.10.6%2023-11-17
CVE-2023-47797Liferay Portal XSS with `p_l_back_url_title` on edit content page9.6CNA v3.10.7%2023-11-17Fix
CVE-2023-47757AWeber WordPress plugin broken access control8.8v3.10.2%2023-11-17Fix
CVE-2023-47675CubeCart OS command injection7.2v3.11.0%2023-11-17Fix
CVE-2023-47283CubeCart path traversal4.9v3.11.2%2023-11-17Fix
CVE-2023-47073Adobe After Effects MP4 File Parsing out-of-bounds write remote code execution7.8CNA v3.10.4%2023-11-17Fix
CVE-2023-47072Adobe After Effects MP4 file uninitialized variable information disclosure3.3CNA v3.10.4%2023-11-17Fix
CVE-2023-47071Adobe After Effects MP4 File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-11-17Fix
CVE-2023-47070Adobe After Effects MP4 File Parsing out-of-bounds write remote code execution7.8CNA v3.10.4%2023-11-17Fix
CVE-2023-47069Adobe After Effects M4A File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-17Fix
CVE-2023-47068Adobe After Effects MP4 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-17Fix
CVE-2023-47067Adobe After Effects MP4 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-17Fix
CVE-2023-47066Adobe After Effects MP4 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-17Fix
CVE-2023-46745Rate limiting Bypass on login page in libreNMS5.3CNA v3.10.6%2023-11-17Fix
CVE-2023-45387Myprestamodules Exportproducts SQL injection9.8v3.10.7%2023-11-17Fix
CVE-2023-45382Common-services Sonice Retour path traversal7.5v3.10.8%2023-11-17
CVE-2023-44355Adobe ColdFusion improper input validation4.3CNA v3.147.2%2023-11-17Fix
CVE-2023-44353Adobe ColdFusion WDDX deserialization Gadgets9.8CNA v3.180.2%2023-11-17Reported exploitedNucleiFix
CVE-2023-44352Unauthenticate reflected XSS on Adobe ColdFusion 2018 2021 2023 last version6.1CNA v3.184.8%2023-11-17Reported exploitedNucleiFix
CVE-2023-44351Adobe ColdFusion RCE Security9.8CNA v3.150.2%2023-11-17Fix
CVE-2023-44350Adobe ColdFusion deserialization of untrusted data9.8CNA v3.164.6%2023-11-17Fix
CVE-2023-44326Adobe Dimension GLTF File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-11-17Fix
CVE-2023-44325Adobe Animate FLA File Parsing out-of-bounds read information disclosure5.5CNA v3.10.3%2023-11-17Fix
CVE-2023-44324Adobe FrameMaker Publishing Server authentication bypass9.8CNA v3.11.4%2023-11-17Fix
CVE-2023-42428CubeCart path traversal6.5v3.11.3%2023-11-17Fix
CVE-2023-41102openNDS captive portal memory leak7.5v3.11.0%2023-11-17Fix
CVE-2023-41101openNDS out-of-bounds write9.8v3.11.9%2023-11-17Fix
CVE-2023-39548NEC CLUSTERPRO X (EXPRESSCLUSTER X) unrestricted file upload8.8v3.10.7%2023-11-17Fix
CVE-2023-39547NEC CLUSTERPRO X (EXPRESSCLUSTER X) authentication bypass by replay8.8v3.10.6%2023-11-17Fix
CVE-2023-39546CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command.8.8v3.10.6%2023-11-17
CVE-2023-39545NEC CLUSTERPRO X (EXPRESSCLUSTER X) files accessible to external parties8.8v3.10.7%2023-11-17Fix
CVE-2023-39544NEC CLUSTERPRO X (EXPRESSCLUSTER X) missing authorization8.8v3.10.6%2023-11-17Fix
CVE-2023-38324openNDS FAS authentication vulnerability5.3v3.10.7%2023-11-17Fix
CVE-2023-38322openNDS Captive Portal null pointer dereference7.5v3.11.0%2023-11-17Fix
CVE-2023-38320openNDS Captive Portal null pointer dereference7.5v3.11.0%2023-11-17Fix
CVE-2023-38316openNDS Captive Portal arbitrary command execution9.8v3.11.1%2023-11-17Fix
CVE-2023-38315openNDS Captive Portal null pointer dereference7.5v3.11.0%2023-11-17Fix
CVE-2023-38314openNDS Captive Portal null pointer dereference6.5v3.10.9%2023-11-17Fix
CVE-2023-38313openNDS Captive Portal null pointer dereference7.5v3.11.0%2023-11-17Fix
CVE-2023-38130CubeCart cross-site request forgery8.1v3.10.4%2023-11-17Fix
CVE-2023-26364Denial of service of regular expression in package @Adobe/Css-tools5.3CNA v3.11.2%2023-11-17Fix
CVE-2023-26347Adobe issues ColdFusion Admin Panel Access7.5CNA v3.110.1%2023-11-17NucleiFix
CVE-2023-22275Adobe RoboHelp Server GetNewUserId SQL injection information disclosure7.5CNA v3.11.3%2023-11-17Fix
CVE-2023-22274Adobe RoboHelp Server UpdateCommandStream XML external entity Processing information disclosure7.5CNA v3.11.5%2023-11-17Fix
CVE-2023-22273Adobe RoboHelp Server OnPublishFile directory traversal remote code execution7.2CNA v3.11.9%2023-11-17Fix
CVE-2023-22272Adobe RoboHelp Server resolveDistinguishedName LDAP injection information disclosure7.5CNA v3.11.4%2023-11-17Fix
CVE-2023-22268Adobe RoboHelp Server getRHSGroupsForRoles SQL injection information disclosure6.5CNA v3.11.2%2023-11-17Fix
CVE-2023-6188GetSimpleCMS theme-edit.php code injection9.8v3.11.0%2023-11-17
CVE-2023-6179Honeywell ProWatch incorrect permission assignment to program executable folders7.8CNA v3.10.2%2023-11-17
CVE-2023-5445Trellix ePolicy Orchestrator An open redirect5.4CNA v3.10.4%2023-11-17Fix
CVE-2023-5444Trellix ePolicy Orchestrator CSRF in ePO leading to privilege escalation8.0CNA v3.10.4%2023-11-17
CVE-2023-48237Vim line shifting integer overflow2.8CNA v3.10.8%2023-11-16Fix
CVE-2023-48236Vim z= command integer overflow2.8CNA v3.10.7%2023-11-16Fix
CVE-2023-48235Overflow in ex address parsing in Vim2.8CNA v3.10.8%2023-11-16Fix
CVE-2023-48234Vim normal mode z command integer overflow2.8CNA v3.10.8%2023-11-16Fix
CVE-2023-48233Overflow with count for :s command in Vim2.8CNA v3.10.8%2023-11-16Fix
CVE-2023-48232Floating point Exception in adjust_plines_for_skipcol in Vim3.9CNA v3.10.7%2023-11-16Fix
CVE-2023-48231Vim window closing use-after-free3.9CNA v3.10.7%2023-11-16Fix
CVE-2023-48222Authenticated users can view or delete jobs they do not have authorization for in Rundeck8.1CNA v3.10.4%2023-11-16Fix
CVE-2023-48204PublicCMS server-side request forgery6.5v3.10.7%2023-11-16
CVE-2023-48134Linecorp line information disclosure7.5v3.10.7%2023-11-16
CVE-2023-48056PyPinkSign uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption7.5v3.10.4%2023-11-16
CVE-2023-48055SuperAGI hard-coded credentials7.5v3.10.4%2023-11-16
CVE-2023-48054Missing SSL certificate validation in Localstack7.4v3.10.3%2023-11-16
CVE-2023-48053Archerydms Archery hard-coded credentials7.5v3.10.4%2023-11-16
CVE-2023-48052httpie improper certificate validation7.4v3.10.3%2023-11-16Fix
CVE-2023-47688Youtube SpeedLoad WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-16
CVE-2023-47687Woo Custom and Sequential Order Number WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-16
CVE-2023-47686Arigato Autoresponder and Newsletter WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-11-16Fix
CVE-2023-47674First CFR-4EAB missing authentication9.8v3.11.3%2023-11-16Fix
CVE-2023-47642Stream description leaks to ex-subscribers in Zulip4.3CNA v3.10.5%2023-11-16Fix
CVE-2023-47514Star CloudPRNT for WooCommerce WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-16
CVE-2023-47512Product Enquiry for WooCommerce WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-16Fix
CVE-2023-47511Pinyin Slugs WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-16Fix
CVE-2023-47509Edit WooCommerce Templates WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-16Fix
CVE-2023-47508Master Slider Pro WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-16
CVE-2023-47471struktur libde265 strukturag buffer overflow6.5v3.10.8%2023-11-16Fix
CVE-2023-47470FFmpeg buffer overflow7.8v3.10.7%2023-11-16
CVE-2023-47335Autelrobotics Evo Nano Drone setNFZEnable function of Autel Robotics insecure permissions6.5v3.10.3%2023-11-16
CVE-2023-47264WithSecure Elements Endpoint Protection out-of-bounds read7.5v3.10.7%2023-11-16Fix
CVE-2023-47263WithSecure Elements Endpoint Protection denial of service7.5v3.10.7%2023-11-16Fix
CVE-2023-47245ANAC XML Viewer WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-16Fix
CVE-2023-47242ANAC XML Bandi di Gara WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-16Fix
CVE-2023-47240CBX Map for Google Map and OpenStreetMap WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-16Fix
CVE-2023-47239Easy PayPal Shopping Cart WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-11-16Fix
CVE-2023-47213First CFR-4EAB hard-coded credentials9.8v3.11.1%2023-11-16Fix
CVE-2023-47112Authenticated users can view job names and groups they do not have authorization to view in Rundeck4.3CNA v3.10.5%2023-11-16Fix
CVE-2023-47060Adobe Premiere Pro MP4 file uninitialized variable information disclosure3.3CNA v3.10.3%2023-11-16Fix
CVE-2023-47059Adobe Premiere Pro MP4 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-16Fix
CVE-2023-47058Adobe Premiere Pro MP4 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-16Fix
CVE-2023-47057Adobe Premiere Pro MP4 File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-11-16Fix
CVE-2023-47056Adobe Premiere Pro MP4 File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-11-16Fix
CVE-2023-47055Adobe Premiere Pro M4A File Parsing use-after-free remote code execution7.8CNA v3.10.4%2023-11-16Fix
CVE-2023-47054Adobe Audition MP4 File Parsing uninitialized variable information disclosure5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47053Adobe Audition MP4 File Parsing uninitialized variable information disclosure5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47052Adobe Audition MP4 File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47051Adobe Audition MP4 File Parsing heap-based buffer overflow remote code execution5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47050Adobe Audition M4A File Parsing out-of-bounds read remote code execution5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47049Adobe Audition MP4 File Parsing out-of-bounds read remote code execution5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47048Adobe Audition MP4 File Parsing out-of-bounds read remote code execution5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47047Adobe Audition MP4 File Parsing uninitialized variable remote code execution5.5CNA v3.10.3%2023-11-16Fix
CVE-2023-47046Adobe Audition MP4 File Parsing out-of-bounds write remote code execution5.5CNA v3.10.3%2023-11-16Fix
CVE-2023-47044Adobe Media Encoder MP4 file uninitialized variable information disclosure5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-47043Adobe Media Encoder MP4 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-16Fix
CVE-2023-47042Adobe Media Encoder MP4 File Parsing heap-based buffer overflow remote code execution7.8CNA v3.10.4%2023-11-16Fix
CVE-2023-47041Adobe Media Encoder MP4 File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-11-16Fix
CVE-2023-47040Adobe Media Encoder MP4 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-11-16Fix
CVE-2023-47025Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component5.5v3.10.3%2023-11-16
CVE-2023-47003Redis Labs Redisgraph null pointer dereference9.8v3.11.1%2023-11-16
CVE-2023-46214Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing8.8v3.189.1%2023-11-16MetasploitEmerging ThreatsExploit codeFix
CVE-2023-46213Splunk Enterprise cross-site scripting (XSS) on Show Syntax Highlighted view in Search page4.8v3.10.5%2023-11-16Fix
CVE-2023-44372TALOS-2023-1842 Adobe Acrobat Reader U3D page event use-after-free7.8CNA v3.12.6%2023-11-16Fix
CVE-2023-44371Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution7.8CNA v3.14.9%2023-11-16Fix
CVE-2023-44367Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution7.8CNA v3.12.1%2023-11-16Fix
CVE-2023-44366Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution7.8CNA v3.11.8%2023-11-16Fix
CVE-2023-44365Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution7.8CNA v3.12.0%2023-11-16Fix
CVE-2023-44361Adobe Acrobat Reader DC AcroForm Doc object use-after-free information disclosure5.5CNA v3.12.1%2023-11-16Fix
CVE-2023-44360Adobe Acrobat Reader DC PDF File Parsing out-of-bounds read information disclosure5.5CNA v3.12.4%2023-11-16Fix
CVE-2023-44359Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution7.8CNA v3.12.1%2023-11-16Fix
CVE-2023-44358Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.0%2023-11-16Fix
CVE-2023-44357Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.0%2023-11-16Fix
CVE-2023-44356Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.0%2023-11-16Fix
CVE-2023-44348Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure5.5CNA v3.12.4%2023-11-16Fix
CVE-2023-44340Adobe Acrobat Reader DC PDF File Parsing out-of-bounds read information disclosure5.5CNA v3.12.0%2023-11-16Fix
CVE-2023-44339Adobe Acrobat Reader DC AcroForm value out-of-bounds read information disclosure5.5CNA v3.12.0%2023-11-16Fix
CVE-2023-44338Adobe Acrobat Reader DC Annotation out-of-bounds read remote code execution7.8CNA v3.12.0%2023-11-16Fix
CVE-2023-44337Adobe Acrobat Reader DC Font Parsing out-of-bounds read remote code execution7.8CNA v3.12.0%2023-11-16Fix
CVE-2023-44336TALOS-2023-1794 Adobe Acrobat Reader Thermometer use-after-free7.8CNA v3.12.3%2023-11-16Fix
CVE-2023-44335Adobe Photoshop 2023 CC memory corruption vulnerability I5.5CNA v3.10.3%2023-11-16Fix
CVE-2023-44334Adobe Photoshop 2023 CC memory corruption vulnerability VI5.5CNA v3.10.3%2023-11-16Fix
CVE-2023-44333Adobe Photoshop 2023 CC memory corruption vulnerability V5.5CNA v3.10.3%2023-11-16Fix
CVE-2023-44332Adobe Photoshop 2023 CC memory corruption vulnerability II5.5CNA v3.10.3%2023-11-16Fix
CVE-2023-44331Adobe Photoshop 2023 CC memory corruption vulnerability IV5.5CNA v3.10.3%2023-11-16Fix
CVE-2023-44330Adobe Photoshop 2023 CC memory corruption vulnerability III7.8CNA v3.10.3%2023-11-16Fix
CVE-2023-44329Adobe Bridge MP4 File Parsing uninitialized variable information disclosure5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-44328Adobe Bridge MP4 File Parsing use-after-free information disclosure5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-44327Adobe Bridge MP4 file uninitialized variable information disclosure5.5CNA v3.10.4%2023-11-16Fix
CVE-2023-44296Dell Mobility hard-coded credentials8.4CNA v3.10.2%2023-11-16Fix
CVE-2023-44292Dell Repository Manager (DRM) improper access control6.7CNA v3.10.2%2023-11-16Fix
CVE-2023-44282Dell Repository Manager (DRM) improper access control6.7CNA v3.10.2%2023-11-16Fix
CVE-2023-43757ELECOM WRC-2533GHBK2-T multiple routers provided by inadequate encryption strength6.5v3.10.5%2023-11-16Exploit code
CVE-2023-43752ELECOM WRC-X3000GS2-W OS command injection8.0v3.11.0%2023-11-16Fix
CVE-2023-43275DedeCMS cross-site request forgery8.8v3.10.3%2023-11-16
CVE-2023-40314The OpenNMS Group Horizon cross-site scripting in bootstrap.jsp5.8CNA v3.10.4%2023-11-16Fix
CVE-2023-39926Under Construction / Maintenance Mode from Acurax WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-16
CVE-2023-39259Dell OS Recovery Tool improper access control7.3CNA v3.10.2%2023-11-16Fix
CVE-2023-39246Dell Encryption symlink following4.6CNA v3.10.2%2023-11-16Fix
CVE-2023-36026Microsoft Edge (Chromium-based) spoofing4.3CNA v3.10.8%2023-11-16Fix
CVE-2023-36008Microsoft Edge (Chromium-based) remote code execution6.6CNA v3.10.6%2023-11-16Fix
CVE-2023-34375Seo By 10Web WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-16
CVE-2023-32957Team Members Showcase WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-11-16
CVE-2023-32796WooCommerce Product Enquiry WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-11-16Fix
CVE-2023-32469Dell Precision 5820 Tower improper input validation7.5CNA v3.10.2%2023-11-16Fix
CVE-2023-28621WordPress Raise Mag theme and Wishful Blog theme are vulnerable to cross-site scripting (XSS)6.1NVD v3.10.5%2023-11-16
CVE-2023-26368Adobe InCopy out-of-bounds read7.8CNA v3.10.3%2023-11-16Fix
CVE-2023-26031Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems7.5v3.12.1%2023-11-16Fix
CVE-2023-6176Kernel: Local DoS vulnerability in scatterwalk_copychunks4.7NVD v3.10.3%2023-11-16Fix
CVE-2023-6174Out-of-bounds read in Wireshark6.3CNA v3.10.7%2023-11-16Fix
CVE-2023-6121Red Hat Enterprise Linux 8 Kernel: Nvme: Info leak due to out-of-bounds read in nvmet_ctrl_find_get4.3NVD v3.11.6%2023-11-16Fix
CVE-2023-6119Trellix GetSusp improper privilege management6.5CNA v3.10.2%2023-11-16Fix
CVE-2023-6038Local file inclusion in h2oai/h2o-37.5NVD v3.14.3%2023-11-16Nuclei
CVE-2023-6023ModelDB Local File Include7.5v3.13.0%2023-11-16Nuclei
CVE-2023-6022Cross-site request forgery (CSRF) in PrefectHQ/Prefect8.8v3.10.4%2023-11-16Fix
CVE-2023-6021Ray Log File Local File Include7.5v3.137.1%2023-11-16NucleiFix
CVE-2023-6020Ray Static File Local File Include7.5v3.114.7%2023-11-16NucleiMetasploitExploit codeFix
CVE-2023-6019Ray command injection in cpu_profile parameter9.8v3.174.6%2023-11-16MetasploitExploit codeFix