CVE-2023 records published in November 2023
This page lists the 2,324 CVE-2023 records published in November 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 11 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 31513.6% of these records
- Listed in CISA KEV
- 110.5% of these records
- Reported exploited
- 90.4% of these records
- Detection signal
- 542.3% of these records
- Exploit code
- 723.1% of these records
- Actionable vendor fix
- 1,68872.6% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in November 2023 have had from about 35 months to about 36 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-49735 | Apache Tiles: Unvalidated input may lead to path traversal and XXE | 7.5v3.1 | 1.3% | 2023-11-30 | Fix |
| CVE-2023-49733 | Apache Cocoon's StreamGenerator is vulnerable to XXE injection | 9.8v3.1 | 1.3% | 2023-11-30 | Fix |
| CVE-2023-49701 | ASR Falcon out-of-bounds access a buffer in SIM management | 7.2CNA v3.1 | 0.5% | 2023-11-30 | Fix |
| CVE-2023-49700 | ASR Falcon buffer copy without checking size of input in IMS | 6.7CNA v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-49699 | ASR Falcon out-of-bounds access a buffer in IMS | 6.7CNA v3.1 | 0.2% | 2023-11-30 | Fix |
| CVE-2023-49620 | Apache DolphinScheduler missing authorization | 6.5v3.1 | 1.1% | 2023-11-30 | Fix |
| CVE-2023-49097 | ZITADEL vulnerable account takeover via malicious host header injection | 8.1CNA v3.1 | 0.8% | 2023-11-30 | Fix |
| CVE-2023-49095 | nexkey allows arbitrary users to impersonate any remote user due to missing signature validation | 8.6CNA v3.1 | 0.6% | 2023-11-30 | Fix |
| CVE-2023-49094 | Symbolicator server side request forgery | 4.3CNA v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-49087 | SimpleSAMLphp xml-security XML signature validation vulnerability | 6.8CNA v3.1 | 0.2% | 2023-11-30 | Fix |
| CVE-2023-49081 | Aiohttp's ClientSession is vulnerable to CRLF injection via version | 7.2CNA v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-49077 | mailcow dockerized quarantine UI vulnerability | 8.3CNA v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-49076 | Pimcore missing token/header to prevent CSRF | 4.3CNA v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-49052 | Microweber file upload | 8.8v3.1 | 2.4% | 2023-11-30 | Exploit code |
| CVE-2023-48964 | Tenda i6 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-48963 | Tenda i6 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-48914 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48913 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48912 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48894 | Huaxiaerp jshERP improper access control | 6.5v3.1 | 0.6% | 2023-11-30 | |
| CVE-2023-48812 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48811 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48810 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48808 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48807 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48806 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48805 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48804 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48803 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48802 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-48754 | Delete Post Revisions In WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-48752 | Happyforms WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48749 | Salient Core WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48748 | Salient Core WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48746 | Community by PeepSo WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48744 | Availability Calendar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-30 | |
| CVE-2023-48743 | Simply Exclude WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48742 | License Manager for WooCommerce WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-48737 | TriPay Payment Gateway WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48336 | Easy Social Icons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48334 | League Table WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-48333 | Booster for WooCommerce WordPress plugin sensitive data exposure | 6.5v3.1 | 0.6% | 2023-11-30 | Fix |
| CVE-2023-48331 | MyBookTable Bookstore WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-48330 | Bulk Comment Remove WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-48329 | Fast Custom Social Share by CodeBard WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48328 | NextGEN Gallery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-48326 | Events Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48323 | Awesome Support WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-30 | Fix |
| CVE-2023-48322 | eDoc Employee Job Application WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48321 | magazine3 AMP for WP stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48320 | WebDorado SpiderVPlayer stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48317 | Display Custom Post WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-48289 | Import Spreadsheets from Microsoft Excel WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-48284 | Decorator WooCommerce Email Customizer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-48283 | Simple Testimonials Showcase WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-30 | |
| CVE-2023-48282 | Taxonomy filter WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-48281 | Broken Link Checker for YouTube WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-48279 | Seraphinite Post .DOCX Source WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-48278 | WP Forms Puzzle Captcha WordPress plugin cross-site request forgery (CSRF) leading to XSS | 6.1NVD v3.1 | 0.2% | 2023-11-30 | |
| CVE-2023-48272 | Maspik Spam blacklist WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47877 | Perfmatters WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47876 | Perfmatters WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47875 | Perfmatters WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-30 | Fix |
| CVE-2023-47872 | wpForo Forum WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47870 | wpForo Forum WordPress plugin broken access control and cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-47854 | Parallax Image WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47853 | myCred WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47851 | Bootstrap Shortcodes Ultimate WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-47850 | Community by PeepSo WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47848 | Tainacan WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-47844 | Grab and Save WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-47827 | Events Addon for Elementor WordPress plugin broken access control | 7.5v3.1 | 0.5% | 2023-11-30 | Fix |
| CVE-2023-47777 | WordPress WooCommerce and WooCommerce Blocks plugins Auth. cross-site scripting (XSS) | 5.4v3.1 | 0.8% | 2023-11-30 | Fix |
| CVE-2023-47645 | RegistrationMagic WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-47521 | Q2W3 Post Order WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-47505 | Elementor Website Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 25.3% | 2023-11-30 | Fix |
| CVE-2023-47464 | GL.iNet Gl-ax1800 insecure permissions | 8.8v3.1 | 22.6% | 2023-11-30 | Exploit code |
| CVE-2023-47463 | GL.iNet Gl-ax1800 insecure permissions | 9.8v3.1 | 1.3% | 2023-11-30 | |
| CVE-2023-47454 | NetEase Cloudmusic untrusted search path | 7.8v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-47453 | sohu video-player An untrusted search path | 7.8v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-47452 | notepad-plus-plus Notepad++ An untrusted search path | 7.8v3.1 | 0.5% | 2023-11-30 | |
| CVE-2023-47418 | Zoneland O2OA remote code execution | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-47307 | Szlbt LBT-T300-T310 buffer overflow | 7.5v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-47279 | Delta Electronics InfraSuite Device Master path traversal | 7.5v3.1 | 1.1% | 2023-11-30 | Fix |
| CVE-2023-47207 | Delta Electronics InfraSuite Device Master deserialization of untrusted data | 9.8v3.1 | 16.6% | 2023-11-30 | Fix |
| CVE-2023-46956 | oretnom23 Packers And Movers Management System SQL injection | 7.2v3.1 | 1.2% | 2023-11-30 | |
| CVE-2023-46820 | Image Regenerate and Select Crop WordPress plugin sensitive data exposure | 5.3v3.1 | 0.6% | 2023-11-30 | Fix |
| CVE-2023-46690 | Delta Electronics InfraSuite Device Master path traversal | 8.8v3.1 | 1.9% | 2023-11-30 | Fix |
| CVE-2023-46389 | Loytec Linx-151 information disclosure | 7.5v3.1 | 2.0% | 2023-11-30 | Fix |
| CVE-2023-46388 | Loytec Linx-151 cleartext storage of sensitive information | 7.5v3.1 | 1.5% | 2023-11-30 | Fix |
| CVE-2023-46387 | Loytec Linx-151 information disclosure | 7.5v3.1 | 2.0% | 2023-11-30 | Fix |
| CVE-2023-46386 | Loytec Linx-151 cleartext storage of sensitive information | 7.5v3.1 | 1.6% | 2023-11-30 | Fix |
| CVE-2023-46385 | Loytec L-inx Configurator cleartext transmission of sensitive information | 7.5v3.1 | 0.8% | 2023-11-30 | Fix |
| CVE-2023-46384 | Loytec L-inx Configurator cleartext storage of sensitive information | 7.5v3.1 | 1.5% | 2023-11-30 | Fix |
| CVE-2023-46383 | Loytec L-inx Configurator cleartext transmission of sensitive information | 7.5v3.1 | 1.4% | 2023-11-30 | Fix |
| CVE-2023-46326 | zstack insufficient session expiration | 8.8v3.1 | 0.7% | 2023-11-30 | |
| CVE-2023-46086 | affiliate-toolkit WordPress Affiliate plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-45834 | Libsyn Publisher Hub WordPress plugin sensitive data exposure | 5.3v3.1 | 0.5% | 2023-11-30 | |
| CVE-2023-45609 | Powr Pack WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-45066 | Export All Posts for WordPress Smackcoders information disclosure | 7.5v3.1 | 0.5% | 2023-11-30 | |
| CVE-2023-45050 | Jetpack WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.6% | 2023-11-30 | Fix |
| CVE-2023-44150 | ProfilePress WordPress plugin sensitive data exposure | 7.5v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-44143 | Bamboo Columns WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-42917 | Apple Multiple Products WebKit memory corruption | 8.8v3.1 | 9.3% | 2023-11-30 | KEVKCVFix |
| CVE-2023-42916 | Apple Multiple Products WebKit out-of-bounds read | 6.5v3.1 | 17.8% | 2023-11-30 | KEVKCVFix |
| CVE-2023-41735 | Email posts to subscribers WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2023-11-30 | |
| CVE-2023-41136 | Simple Long Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-41128 | WP Roadmap WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-41127 | Evergreen Content Poster WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-40680 | Yoast SEO WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-40674 | Simple URLs WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-11-30 | Fix |
| CVE-2023-40662 | Cookies and Content Security Policy WordPress plugin sensitive data exposure | 7.5v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-40600 | EWWW Image Optimizer WordPress plugin sensitive data exposure | 7.5v3.1 | 2.0% | 2023-11-30 | NucleiExploit codeFix |
| CVE-2023-40211 | Post Grid WordPress plugin sensitive data exposure | 7.5v3.1 | 2.2% | 2023-11-30 | NucleiFix |
| CVE-2023-39921 | Molongui WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-39226 | Delta Electronics InfraSuite Device Master exposed dangerous method or function | 9.8v3.1 | 1.2% | 2023-11-30 | Fix |
| CVE-2023-38474 | Campaign Monitor for WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-38400 | Enfold WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-37972 | WooCommerce Product Stock Alert WordPress plugin sensitive data exposure | 7.5v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-37928 | Zyxel NAS326 firmware WSGI server of the Zyxel command injection | 8.8CNA v3.1 | 60.2% | 2023-11-30 | Fix |
| CVE-2023-37927 | Zyxel NAS326 firmware CGI program of the Zyxel improper neutralization | 8.8CNA v3.1 | 1.8% | 2023-11-30 | Fix |
| CVE-2023-37890 | KB Support WordPress plugin broken access control | 4.3v3.1 | 0.5% | 2023-11-30 | Fix |
| CVE-2023-37868 | Premium Addons PRO WordPress plugin sensitive data exposure | 6.5v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-37867 | Yet Another Stars Rating WordPress plugin race condition | 8.1v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-36685 | CartFlows Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-36682 | Schema Pro WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-36523 | Email download link WordPress plugin sensitive data exposure | 5.3v3.1 | 0.6% | 2023-11-30 | |
| CVE-2023-36507 | BookingPress WordPress plugin sensitive data exposure | 5.3v3.1 | 0.6% | 2023-11-30 | Fix |
| CVE-2023-35138 | Zyxel NAS326 firmware command injection | 9.8CNA v3.1 | 40.0% | 2023-11-30 | Fix |
| CVE-2023-35137 | Zyxel NAS326 firmware authentication module of the Zyxel improper authentication | 7.5CNA v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-34390 | Schweitzer Engineering Laboratories SEL-451 denial of service | 4.5CNA v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-34389 | Schweitzer Engineering Laboratories SEL-451 An resource exhaustion | 4.5CNA v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-34388 | Schweitzer Engineering Laboratories SEL-451 improper authentication could lead to session hijacking | 6.5CNA v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-34030 | WordPress Complianz and Complianz Premium plugins cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-34018 | SoundCloud Shortcode WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-33333 | Really Simple Plugins Complianz cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-32291 | MonsterInsights Pro WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-11-30 | Fix |
| CVE-2023-31177 | Schweitzer Engineering Laboratories SEL-451 cross-site scripting | 4.3CNA v3.1 | 0.5% | 2023-11-30 | Fix |
| CVE-2023-31176 | Schweitzer Engineering Laboratories SEL-451 An insufficient entropy | 7.5CNA v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-26533 | Zippy WordPress plugin sensitive data exposure | 6.5v3.1 | 0.7% | 2023-11-30 | Fix |
| CVE-2023-25057 | Libsyn Publisher Hub WordPress plugin sensitive data exposure | 5.3v3.1 | 0.6% | 2023-11-30 | Fix |
| CVE-2023-6442 | PHPGurukul Nipah Virus Testing Management System add-phlebotomist.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-30 | |
| CVE-2023-6440 | SourceCodester Book Borrower System add-book.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-30 | |
| CVE-2023-6439 | ZenTao PMS cross-site scripting | 6.1v3.1 | 0.7% | 2023-11-30 | |
| CVE-2023-6438 | Thecosy IceCMS Like improper enforcement of a single, unique action | 5.3v3.1 | 0.7% | 2023-11-30 | |
| CVE-2023-6435 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6434 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6433 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6432 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6431 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6430 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6429 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6428 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6427 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6426 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6425 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6424 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6423 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6422 | Cross-site scripting vulnerability in BigProf products | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6420 | Cross-site scripting vulnerability in Voovi Social Networking Script | 6.1v3.1 | 0.5% | 2023-11-30 | |
| CVE-2023-6419 | Cross-site scripting vulnerability in Voovi Social Networking Script | 6.1v3.1 | 0.5% | 2023-11-30 | |
| CVE-2023-6418 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6417 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6416 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6415 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6414 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6413 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6412 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6411 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6410 | SQL injection in Voovi Social Networking Script | 7.5NVD v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6402 | PHPGurukul Nipah Virus Testing Management System add-phlebotomist.php SQL injection | 8.8v3.1 | 0.8% | 2023-11-30 | |
| CVE-2023-6401 | NotePad++ dbghelp.exe uncontrolled search path | 7.8v3.1 | 0.3% | 2023-11-30 | Exploit code |
| CVE-2023-6376 | Henschen and Associates Court Document Management software cache uses predictable file names | 7.5v3.1 | 1.1% | 2023-11-30 | Fix |
| CVE-2023-6375 | Tyler Technologies Magistrate Court Case Management Plus stores backups insecurely | 7.5v3.1 | 1.0% | 2023-11-30 | |
| CVE-2023-6360 | joedolson My Calendar SQL injection | 9.8NVD v3.1 | 63.1% | 2023-11-30 | Reported exploitedNucleiExploit codeFix |
| CVE-2023-6354 | Tyler Technologies Magistrate Court Case Management Plus PDFViewer.aspx allows authentication bypass | 9.4v3.1 | 1.0% | 2023-11-30 | |
| CVE-2023-6353 | Tyler Technologies Civil and Criminal Electronic Filing Upload.aspx allows authentication bypass | 9.4v3.1 | 1.0% | 2023-11-30 | |
| CVE-2023-6352 | Aquaforest TIFF Server default configuration allows access to arbitrary files | 5.3v3.1 | 1.1% | 2023-11-30 | Fix |
| CVE-2023-6344 | Tyler Technologies Court Case Management Plus Aquaforest TIFF Server authentication bypass | 5.3v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-6343 | Tyler Technologies Court Case Management Plus Aquaforest TIFF Server authentication bypass | 5.3v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-6342 | Tyler Technologies Court Case Management Plus pay for print allows authentication bypass | 9.8v3.1 | 1.1% | 2023-11-30 | Fix |
| CVE-2023-6341 | Catalis CM360 allows authentication bypass | 5.3v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-6137 | Frontier Post WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-6136 | Debug Log Manager WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2023-11-30 | Fix |
| CVE-2023-6071 | Trellix ESM command injection | 8.4CNA v3.1 | 0.9% | 2023-11-30 | Fix |
| CVE-2023-6027 | Cross-site scripting vulnerability in PHPMemcachedAdmin | 5.4v3.1 | 0.4% | 2023-11-30 | |
| CVE-2023-6026 | Improper limitation of a pathname to a restricted directory (path traversal) in PHPMemcachedAdmin | 9.1v3.1 | 0.9% | 2023-11-30 | |
| CVE-2023-5966 | Unrestricted upload of file with dangerous type in EspoCRM | 7.2v3.1 | 1.0% | 2023-11-30 | Fix |
| CVE-2023-5965 | Unrestricted upload of file with dangerous type in EspoCRM | 7.2v3.1 | 1.0% | 2023-11-30 | Exploit codeFix |
| CVE-2023-5909 | Improper validation of certificate with host mismatch in PTC KEPServerEx | 7.5v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-5908 | Heap based buffer overflow in PTC KEPServerEx | 9.1v3.1 | 1.0% | 2023-11-30 | Fix |
| CVE-2023-5803 | Business Directory WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-5772 | Debug Log Manager WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-11-30 | Fix |
| CVE-2023-5275 | Mitsubishi Electric GX Works2 simulation function improper input validation | 2.5CNA v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-5274 | Mitsubishi Electric GX Works2 simulation function improper input validation | 2.5CNA v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-5247 | Mitsubishi Electric GX Works3 external control of a file path | 7.8CNA v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-4770 | Uncontrolled search path element vulnerability in 4D and 4D Windows Server | 7.8v3.1 | 0.3% | 2023-11-30 | |
| CVE-2023-4474 | Zyxel NAS326 firmware WSGI server of the Zyxel improper neutralization | 9.8CNA v3.1 | 29.7% | 2023-11-30 | Emerging ThreatsFix |
| CVE-2023-4473 | Zyxel NAS326 firmware web server of the Zyxel command injection | 9.8CNA v3.1 | 41.3% | 2023-11-30 | Emerging ThreatsFix |
| CVE-2023-3741 | NEC Platforms ITK-6DGS-1(BK) TEL An OS command injection | 9.8v3.1 | 1.5% | 2023-11-30 | |
| CVE-2023-2267 | Schweitzer Engineering Laboratories SEL-411L An improper input validation | 4.3CNA v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-2266 | Schweitzer Engineering Laboratories SEL-411L An cross-site scripting | 4.3CNA v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-2265 | Schweitzer Engineering Laboratories SEL-411L An clickjacking | 4.3CNA v3.1 | 0.4% | 2023-11-30 | Fix |
| CVE-2023-2264 | Schweitzer Engineering Laboratories SEL-411L improper input validition could lead to code injection | 4.0CNA v3.1 | 0.2% | 2023-11-30 | Fix |
| CVE-2023-49694 | NETGEAR ProSAFE Network Management System privilege escalation via MySQL Server | 7.8NVD v3.1 | 0.5% | 2023-11-29 | Fix |
| CVE-2023-49693 | NETGEAR ProSAFE Network Management System RCE via Unprotected Access to Java Debug Wire protocol | 9.8NVD v3.1 | 1.2% | 2023-11-29 | Fix |
| CVE-2023-49674 | Jenkins NeuVector vulnerability Scanner Plugin missing permission check | 4.3v3.1 | 0.5% | 2023-11-29 | Fix |
| CVE-2023-49673 | Jenkins NeuVector vulnerability Scanner Plugin cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-29 | Fix |
| CVE-2023-49656 | Jenkins Matlab Plugin XML external entity | 9.8v3.1 | 0.8% | 2023-11-29 | Fix |
| CVE-2023-49655 | Jenkins Matlab Plugin cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-29 | Fix |
| CVE-2023-49654 | Jenkins Matlab Plugin missing permission checks | 9.8v3.1 | 0.8% | 2023-11-29 | Fix |
| CVE-2023-49653 | Jenkins Jira Plugin vulnerable to exposure of system-scoped credentials | 6.5v3.1 | 0.6% | 2023-11-29 | Fix |
| CVE-2023-49652 | Jenkins Google Compute Engine Plugin has incorrect permission checks | 2.7v3.1 | 0.5% | 2023-11-29 | Fix |
| CVE-2023-49091 | azukaar Cosmos-Server jwttoken in Cosmos server never expires after password changed and logging out | 8.8CNA v3.1 | 0.8% | 2023-11-29 | Fix |
| CVE-2023-49090 | CarrierWave has a content-type allowlist bypass vulnerability, possibly leading to XSS | 6.8CNA v3.1 | 0.6% | 2023-11-29 | Fix |
| CVE-2023-49083 | cryptography vulnerable to null-dereference when loading PKCS7 certificates | 5.9CNA v3.1 | 1.0% | 2023-11-29 | Fix |
| CVE-2023-49082 | Aiohttp's ClientSession is vulnerable to CRLF injection via method | 5.3CNA v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-49079 | Misskey's missing signature validation allows arbitrary users to impersonate any remote user | 9.3CNA v3.1 | 0.4% | 2023-11-29 | Fix |
| CVE-2023-48952 | Openlinksw Virtuoso deserialization of untrusted data | 7.5v3.1 | 1.0% | 2023-11-29 | Fix |
| CVE-2023-48951 | Openlinksw Virtuoso denial of service | 7.5v3.1 | 0.8% | 2023-11-29 | Fix |
| CVE-2023-48950 | Openlinksw Virtuoso denial of service | 7.5v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-48949 | Openlinksw Virtuoso denial of service | 7.5v3.1 | 0.8% | 2023-11-29 | Fix |
| CVE-2023-48948 | Openlinksw Virtuoso denial of service | 7.5v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-48947 | Openlinksw Virtuoso denial of service | 7.5v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-48946 | Openlinksw Virtuoso denial of service | 7.5v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-48945 | Openlinksw Virtuoso stack-based buffer overflow | 7.5v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-48882 | EyouCMS A stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-29 | |
| CVE-2023-48881 | EyouCMS A stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-29 | |
| CVE-2023-48880 | EyouCMS A stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-29 | |
| CVE-2023-47462 | GL.iNet Gl-ax1800 insecure permissions | 9.8v3.1 | 1.3% | 2023-11-29 | |
| CVE-2023-46887 | iteachyou Dreamer CMS download without integrity check | 7.5v3.1 | 0.3% | 2023-11-29 | |
| CVE-2023-46886 | iteachyou Dreamer CMS path traversal | 9.1v3.1 | 1.0% | 2023-11-29 | |
| CVE-2023-45484 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-11-29 | |
| CVE-2023-45483 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-11-29 | |
| CVE-2023-45482 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-11-29 | |
| CVE-2023-45481 | Tenda AC10 stack-based buffer overflow | 9.8v3.1 | 1.0% | 2023-11-29 | |
| CVE-2023-45480 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-11-29 | |
| CVE-2023-45479 | Tenda AC10 out-of-bounds write | 9.8v3.1 | 1.0% | 2023-11-29 | |
| CVE-2023-44383 | October CMS stored XSS by authenticated backend user with improper configuration | 5.4CNA v3.1 | 0.4% | 2023-11-29 | Fix |
| CVE-2023-40626 | Joomla! CMS core Exposure of environment variables | 7.5NVD v3.1 | 0.8% | 2023-11-29 | Fix |
| CVE-2023-40458 | Sierra Wireless ALEOS AceManager DOS | 7.5v3.1 | 0.8% | 2023-11-29 | Fix |
| CVE-2023-24294 | Zumtobel Netlink Ccd buffer overflow | 7.5v3.1 | 0.8% | 2023-11-29 | |
| CVE-2023-23325 | Zumtobel Netlink Ccd OS command injection | 9.8v3.1 | 1.7% | 2023-11-29 | |
| CVE-2023-23324 | Zumtobel Netlink Ccd hard-coded credentials | 9.8v3.1 | 0.8% | 2023-11-29 | |
| CVE-2023-6378 | Logback receiver DOS | 7.5v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-6351 | Google Chrome libavif use-after-free | 8.8v3.1 | 0.9% | 2023-11-29 | Fix |
| CVE-2023-6350 | Google Chrome libavif use-after-free | 8.8v3.1 | 1.3% | 2023-11-29 | Exploit codeFix |
| CVE-2023-6348 | Google Chrome Spellcheck type confusion | 8.8v3.1 | 1.1% | 2023-11-29 | Fix |
| CVE-2023-6347 | Google Chrome Mojo use-after-free | 8.8v3.1 | 1.1% | 2023-11-29 | Fix |
| CVE-2023-6346 | Google Chrome WebAudio use-after-free | 8.8v3.1 | 1.0% | 2023-11-29 | Fix |
| CVE-2023-6345 | Google Skia integer overflow | 9.6v3.1 | 16.5% | 2023-11-29 | KEVFix |
| CVE-2023-6218 | MOVEit Transfer Group Admin privilege escalation | 7.2CNA v3.1 | 0.7% | 2023-11-29 | Fix |
| CVE-2023-6217 | MOVEit Transfer XSS via MOVEit Gateway | 7.1CNA v3.1 | 0.5% | 2023-11-29 | Fix |
| CVE-2023-6070 | Trellix Enterprise Security Manager (ESM) server-side request forgery | 4.3CNA v3.1 | 0.2% | 2023-11-29 | Fix |
| CVE-2023-49314 | Asana Desktop code injection | 7.8NVD v3.1 | 4.3% | 2023-11-28 | |
| CVE-2023-49313 | horsicq Xmachoviewer dylib injection | 9.8NVD v3.1 | 1.3% | 2023-11-28 | |
| CVE-2023-49092 | RustCrypto/RSA vulnerable to a Marvin Attack via key recovery through timing sidechannels | 5.9CNA v3.1 | 0.6% | 2023-11-28 | Fix |
| CVE-2023-49078 | Cross-site scripting vulnerability in raptor-web | 5.4CNA v3.1 | 0.5% | 2023-11-28 | Fix |
| CVE-2023-49075 | Pimcore Admin UI has Two Factor Authentication disabled for non admin security firewalls | 8.5CNA v3.1 | 1.4% | 2023-11-28 | Fix |
| CVE-2023-49062 | Facebook Katran improper initialization | 7.5v3.1 | 0.6% | 2023-11-28 | Fix |
| CVE-2023-48848 | Ureport arbitrary file read | 7.5v3.1 | 0.9% | 2023-11-28 | |
| CVE-2023-48713 | Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler | 6.5CNA v3.1 | 0.9% | 2023-11-28 | Fix |
| CVE-2023-48193 | fit2cloud jumpserver insecure permissions | 9.8v3.1 | 2.0% | 2023-11-28 | |
| CVE-2023-48121 | EZVIZ Cs-c3n-a0-3h2wfrl Direct Connection module authentication bypass | 5.3v3.1 | 0.8% | 2023-11-28 | Fix |
| CVE-2023-48042 | Communitydeveloper Amazzing Filter Search filters in Prestashop cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-28 | |
| CVE-2023-48023 | Anyscale Ray server-side request forgery | 9.1v3.1 | 35.1% | 2023-11-28 | NucleiFix |
| CVE-2023-48022 | Ray has arbitrary code execution via jobs submission API | 9.8v3.1 | 83.9% | 2023-11-28 | Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-47503 | jflyfox jfinal_cms arbitrary code execution | 9.8v3.1 | 1.3% | 2023-11-28 | |
| CVE-2023-47437 | Pachno cross-site scripting | 5.4NVD v3.1 | 0.5% | 2023-11-28 | |
| CVE-2023-46944 | Gitkraken Gitlens arbitrary code execution | 7.8v3.1 | 1.3% | 2023-11-28 | Exploit code |
| CVE-2023-46589 | Apache Tomcat: HTTP request smuggling via malformed trailer headers | 7.5v3.1 | 2.7% | 2023-11-28 | Fix |
| CVE-2023-45539 | HAProxy information disclosure | 8.2v3.1 | 1.5% | 2023-11-28 | Exploit codeFix |
| CVE-2023-45286 | HTTP request body disclosure in github.com/go-resty/Resty/v2 | 5.9v3.1 | 0.7% | 2023-11-28 | Fix |
| CVE-2023-42505 | Apache Superset: Sensitive information disclosure on db connection details | 4.3CNA v3.1 | 1.0% | 2023-11-28 | Fix |
| CVE-2023-42504 | Apache Superset: Lack of rate limiting allows for possible denial of service | 5.8CNA v3.1 | 1.1% | 2023-11-28 | Fix |
| CVE-2023-42502 | Apache Superset: Open redirect | 4.8CNA v3.1 | 0.8% | 2023-11-28 | Fix |
| CVE-2023-42004 | IBM Security Guardium CSV injection | 8.0CNA v3.1 | 1.1% | 2023-11-28 | Fix |
| CVE-2023-41264 | Netwrix Usercube improper authentication | 9.8v3.1 | 1.0% | 2023-11-28 | |
| CVE-2023-40056 | SolarWinds Platform SQL injection remote code execution | 8.0CNA v3.1 | 4.8% | 2023-11-28 | Fix |
| CVE-2023-37926 | Zyxel ATP series firmware buffer overflow | 5.5CNA v3.1 | 0.2% | 2023-11-28 | Fix |
| CVE-2023-37925 | Zyxel ATP series firmware debug CLI command of the Zyxel improper privilege management | 5.5CNA v3.1 | 0.2% | 2023-11-28 | Fix |
| CVE-2023-35139 | Zyxel ATP series firmware CGI program of the Zyxel cross-site scripting | 5.2CNA v3.1 | 0.5% | 2023-11-28 | Fix |
| CVE-2023-35136 | Zyxel ATP series firmware “Quagga” package of the Zyxel improper input validation | 5.5CNA v3.1 | 0.2% | 2023-11-28 | Fix |
| CVE-2023-34055 | Spring Boot server Web Observations DoS | 5.3CNA v3.1 | 1.2% | 2023-11-28 | Fix |
| CVE-2023-34054 | Reactor Netty HTTP Server Metrics DoS | 5.3CNA v3.1 | 0.9% | 2023-11-28 | Fix |
| CVE-2023-34053 | Spring Framework server Web Observations DoS | 5.3CNA v3.1 | 1.2% | 2023-11-28 | Fix |
| CVE-2023-32065 | OroCommerce get-totals-for-checkout API endpoint returns unwanted data | 5.8CNA v3.1 | 0.5% | 2023-11-28 | Fix |
| CVE-2023-32064 | OroCommerce customer frontend menus improper access control | 5.0CNA v3.1 | 0.5% | 2023-11-28 | Fix |
| CVE-2023-32063 | oroinc crm OroCRMCallBundle has incorrect call view page visibility | 5.0CNA v3.1 | 0.5% | 2023-11-28 | Fix |
| CVE-2023-30590 | Node.js crypto Diffie-Hellman key generation vulnerability | 7.5NVD v3.1 | 1.5% | 2023-11-28 | Fix |
| CVE-2023-30588 | Node.js Node denial of service | 5.3v3.1 | 1.2% | 2023-11-28 | Fix |
| CVE-2023-30585 | Node.js msi installer repair operation vulnerability | 7.5NVD v3.1 | 1.5% | 2023-11-28 | Fix |
| CVE-2023-29770 | Sapplica Sentrifugo unrestricted file upload | 8.8v3.1 | 0.9% | 2023-11-28 | |
| CVE-2023-29066 | Becton Dickinson (BD) FACSChorus incorrect user management | 3.2CNA v3.1 | 0.3% | 2023-11-28 | |
| CVE-2023-29065 | Becton Dickinson (BD) FACSChorus Overly Permissive Access Policy | 4.1CNA v3.1 | 0.3% | 2023-11-28 | |
| CVE-2023-29064 | Becton Dickinson (BD) FACSChorus hard-coded secrets | 4.1CNA v3.1 | 0.3% | 2023-11-28 | |
| CVE-2023-29063 | Becton Dickinson (BD) FACSChorus lack of DMA Access Protections | 2.4CNA v3.1 | 0.2% | 2023-11-28 | |
| CVE-2023-29062 | Becton Dickinson (BD) FACSChorus Unsecure Identity Verification | 3.8CNA v3.1 | 0.3% | 2023-11-28 | |
| CVE-2023-29061 | Becton Dickinson (BD) FACSChorus lack of Adequate BIOS Authentication | 5.2CNA v3.1 | 0.4% | 2023-11-28 | |
| CVE-2023-29060 | Becton Dickinson FACSChorus USB ports improper access control | 5.4CNA v3.1 | 0.3% | 2023-11-28 | |
| CVE-2023-24023 | Improper verification of cryptographic signature in Bluetooth service | 6.8v3.1 | 1.3% | 2023-11-28 | Fix |
| CVE-2023-6359 | Cross-site scripting in Alumne LMS | 6.1v3.1 | 0.4% | 2023-11-28 | Fix |
| CVE-2023-6239 | M-Files Server incorrect calculation of effective permissions | 5.4CNA v3.1 | 0.6% | 2023-11-28 | Fix |
| CVE-2023-6226 | WP Shortcodes Plugin WordPress plugin insecure direct object reference | 4.3v3.1 | 0.5% | 2023-11-28 | Fix |
| CVE-2023-6225 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-28 | Fix |
| CVE-2023-6219 | BookingPress WordPress plugin authenticated (Administrator+) arbitrary file upload | 7.2v3.1 | 1.2% | 2023-11-28 | Fix |
| CVE-2023-6201 | Command injection in Univera Panorama Framework | 8.8v3.1 | 1.6% | 2023-11-28 | Fix |
| CVE-2023-6151 | Information disclosure in Eskom E-municipality | 7.5v3.1 | 0.6% | 2023-11-28 | Fix |
| CVE-2023-6150 | Information disclosure in Eskom E-municipality | 7.5v3.1 | 0.6% | 2023-11-28 | Fix |
| CVE-2023-5981 | GnuTLS: Timing side-channel in the rsa-psk authentication | 5.9NVD v3.1 | 1.3% | 2023-11-28 | Fix |
| CVE-2023-5960 | Zyxel USG FLEX series firmware hotspot feature of the Zyxel improper privilege management | 5.5CNA v3.1 | 0.2% | 2023-11-28 | Fix |
| CVE-2023-5797 | Zyxel ATP series firmware debug CLI command of the Zyxel improper privilege management | 5.5CNA v3.1 | 0.2% | 2023-11-28 | Fix |
| CVE-2023-5650 | Zyxel ATP series firmware ZySH of the Zyxel improper privilege management | 5.5CNA v3.1 | 0.2% | 2023-11-28 | Fix |
| CVE-2023-4667 | IDEMIA SIGMA Lite and Lite + stored cross-site scripting in webserver administration | 8.1CNA v3.1 | 0.4% | 2023-11-28 | Fix |
| CVE-2023-4398 | Zyxel ATP series firmware integer overflow | 7.5CNA v3.1 | 0.9% | 2023-11-28 | Fix |
| CVE-2023-4397 | Zyxel ATP series firmware buffer overflow | 4.4CNA v3.1 | 0.2% | 2023-11-28 | Fix |
| CVE-2023-4226 | Chamilo LMS file upload functionality remote code execution | 8.8v3.1 | 2.4% | 2023-11-28 | Exploit codeFix |
| CVE-2023-4225 | Chamilo LMS file upload functionality remote code execution | 8.8v3.1 | 1.8% | 2023-11-28 | Fix |
| CVE-2023-4224 | Chamilo LMS file upload functionality remote code execution | 8.8v3.1 | 1.8% | 2023-11-28 | Fix |
| CVE-2023-4223 | Chamilo LMS file upload functionality remote code execution | 8.8v3.1 | 1.8% | 2023-11-28 | Fix |
| CVE-2023-4222 | Chamilo LMS Learning Path PPT2LP command injection | 8.8v3.1 | 3.5% | 2023-11-28 | Fix |
| CVE-2023-4221 | Chamilo LMS Learning Path PPT2LP command injection | 8.8v3.1 | 3.5% | 2023-11-28 | Fix |
| CVE-2023-4220 | Chamilo LMS Unauthenticated Big upload file remote code execution | 6.1NVD v3.1 | 76.1% | 2023-11-28 | NucleiMetasploitExploit codeFix |
| CVE-2023-3545 | Chamilo LMS Htaccess file upload Security Bypass | 9.8v3.1 | 2.4% | 2023-11-28 | Fix |
| CVE-2023-3533 | Chamilo LMS unauthenticated remote code execution via arbitrary file write | 9.8v3.1 | 3.5% | 2023-11-28 | Fix |
| CVE-2023-3368 | Chamilo LMS unauthenticated command injection | 9.8v3.1 | 68.9% | 2023-11-28 | NucleiFix |
| CVE-2023-49322 | F-Secure Elements Endpoint Protection denial of service | 7.5v3.1 | 0.7% | 2023-11-27 | Fix |
| CVE-2023-49321 | F-Secure Elements Endpoint Protection denial of service | 5.3v3.1 | 0.6% | 2023-11-27 | Fix |
| CVE-2023-49316 | Phpseclib needs guardrails on large binaryfield integers | 7.5v3.1 | 0.8% | 2023-11-27 | Fix |
| CVE-2023-49145 | Apache NiFi: Improper neutralization of Input in Advanced User interface for Jolt | 7.9CNA v3.1 | 1.2% | 2023-11-27 | Fix |
| CVE-2023-49068 | Apache DolphinScheduler: Information leakage | 7.5v3.1 | 1.1% | 2023-11-27 | Fix |
| CVE-2023-49047 | Tenda AX1803 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-49046 | Tenda AX1803 stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-11-27 | |
| CVE-2023-49044 | Tenda AX1803 stack-based buffer overflow | 9.8v3.1 | 1.4% | 2023-11-27 | |
| CVE-2023-49043 | Tenda AX1803 buffer overflow | 9.8v3.1 | 13.2% | 2023-11-27 | |
| CVE-2023-49042 | Tenda AX1803 heap-based buffer overflow | 9.8v3.1 | 1.4% | 2023-11-27 | |
| CVE-2023-49040 | Tenda AX1803 command injection | 9.8v3.1 | 1.5% | 2023-11-27 | |
| CVE-2023-49030 | 32NS Klive SQL injection | 7.5v3.1 | 0.9% | 2023-11-27 | |
| CVE-2023-49029 | SMPN1SMG Absis cross-site scripting | 6.1v3.1 | 0.9% | 2023-11-27 | |
| CVE-2023-49028 | Absis smpn1smg cross-site scripting | 5.4v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-48369 | Mattermost log Flooding due to specially crafted requests in different endpoints | 4.3CNA v3.1 | 0.6% | 2023-11-27 | Fix |
| CVE-2023-48268 | Mattermost denial of service via Board Import zip bomb | 4.3CNA v3.1 | 0.7% | 2023-11-27 | Fix |
| CVE-2023-48188 | Store-opart Op'art Devis PrestaShop opartdevis v.4.5.18 thru v.4.6.12 SQL injection | 9.8v3.1 | 1.3% | 2023-11-27 | |
| CVE-2023-48034 | Acer Sk-9662 inadequate encryption strength | 6.1v3.1 | 0.2% | 2023-11-27 | Exploit code |
| CVE-2023-47865 | Mattermost username and Icon override can be used by members when Hardened Mode is enabled | 4.3CNA v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-47168 | Mattermost open redirect | 4.3CNA v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-46480 | OwnCast remote code execution | 9.8v3.1 | 1.6% | 2023-11-27 | |
| CVE-2023-46355 | Blmodules CSV Feeds Pro information disclosure | 5.3v3.1 | 0.5% | 2023-11-27 | |
| CVE-2023-46349 | Myprestamodules Updateproducts SQL injection | 9.8v3.1 | 0.8% | 2023-11-27 | Fix |
| CVE-2023-45223 | Users full name disclosure through Mattermost Boards with Show Full Name option disabled | 4.3CNA v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-43754 | Mattermost exposure of sensitive information to an unauthorized actor | 4.3CNA v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-43701 | Apache Superset: Stored XSS on API endpoint | 4.3CNA v3.1 | 1.0% | 2023-11-27 | Fix |
| CVE-2023-42501 | Apache Superset: Unnecessary read permissions within the Gamma role | 4.3CNA v3.1 | 0.9% | 2023-11-27 | Fix |
| CVE-2023-42366 | BusyBox out-of-bounds write | 5.5NVD v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-42365 | BusyBox use-after-free | 5.5v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-42364 | BusyBox A use-after-free | 5.5v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-42363 | BusyBox use-after-free | 5.5v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-42000 | Arcserve UDP Agent Unauthenticated path traversal file upload | 9.8NVD v3.1 | 1.5% | 2023-11-27 | Fix |
| CVE-2023-41999 | Arcserve UDP management authentication bypass | 9.8NVD v3.1 | 1.4% | 2023-11-27 | Fix |
| CVE-2023-41998 | Arcserve UDP unauthenticated RCE | 9.8NVD v3.1 | 15.3% | 2023-11-27 | Fix |
| CVE-2023-41257 | Foxit Reader way type confusion | 8.8v3.1 | 1.6% | 2023-11-27 | Fix |
| CVE-2023-40703 | Denial of service via specially crafted block fields in Mattermost Boards | 4.3CNA v3.1 | 0.7% | 2023-11-27 | Fix |
| CVE-2023-40610 | Apache Superset: Privilege escalation with default examples database | 6.3CNA v3.1 | 1.3% | 2023-11-27 | Fix |
| CVE-2023-40194 | Foxit Reader Javascript exportDataObject API arbitrary file write | 8.8v3.1 | 2.0% | 2023-11-27 | Fix |
| CVE-2023-39542 | Foxit Reader Javascript saveAs API code execution | 8.8v3.1 | 3.3% | 2023-11-27 | Fix |
| CVE-2023-38573 | Foxit Reader way use-after-free | 8.8v3.1 | 1.9% | 2023-11-27 | Fix |
| CVE-2023-35985 | Foxit Reader Javascript exportDataObject API arbitrary file write | 8.8v3.1 | 2.7% | 2023-11-27 | Exploit codeFix |
| CVE-2023-35075 | Mattermost HTML injection via channel autocomplete | 3.1CNA v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-32616 | Foxit Reader way use-after-free | 8.8v3.1 | 1.8% | 2023-11-27 | Fix |
| CVE-2023-32062 | oroinc crm OroCalendarBundle has incorrect system calendar events visibility | 5.0CNA v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-31275 | WPS Office functionality uninitialized pointer use | 7.8v3.1 | 1.7% | 2023-11-27 | |
| CVE-2023-25632 | NAVER Whale browser personal information exposure | 5.5v3.1 | 0.2% | 2023-11-27 | |
| CVE-2023-6329 | Control iD iDSecure passwordCustom authentication bypass | 9.8NVD v3.1 | 65.0% | 2023-11-27 | Reported exploitedNucleiMetasploitExploit code |
| CVE-2023-6313 | SourceCodester URL Shortener Long URL cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-27 | |
| CVE-2023-6312 | SourceCodester Loan Management System Users page deleteUser.php delete_user SQL injection | 7.2v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-6311 | SourceCodester Loan Management System Loan Type page delete_ltype.php delete_ltype SQL injection | 7.2v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-6310 | SourceCodester Loan Management System deleteBorrower.php delete_borrower SQL injection | 7.2v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-6309 | moses-smt mosesdecoder trans_result.php os command injection | 9.8v3.1 | 4.2% | 2023-11-27 | |
| CVE-2023-6308 | Xiamen Four-Faith Video Surveillance Management System Apache Struts unrestricted upload | 8.8v3.1 | 1.0% | 2023-11-27 | |
| CVE-2023-6307 | jeecgboot JimuReport image path traversal | 9.8v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-6306 | SourceCodester Free and Open Source Inventory Management System member_data.php SQL injection | 9.8v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-6305 | SourceCodester Free and Open Source Inventory Management System suppliar_data.php SQL injection | 9.8v3.1 | 0.8% | 2023-11-27 | |
| CVE-2023-6304 | Tecno 4G Portable WiFi TR118 Ping tool goform_get_cmd_process os command injection | 8.0v3.1 | 9.5% | 2023-11-27 | |
| CVE-2023-6303 | CSZCMS site settings page cross-site scripting | 4.8v3.1 | 0.6% | 2023-11-27 | |
| CVE-2023-6302 | CSZCMS File Manager page templates permission | 7.2v3.1 | 0.9% | 2023-11-27 | |
| CVE-2023-6301 | SourceCodester Best Courier Management System GET parameter parcel_list.php cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-27 | |
| CVE-2023-6300 | SourceCodester Best Courier Management System cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-27 | |
| CVE-2023-6287 | Checkmk Appliance backup password in GET parameter | 3.3CNA v3.1 | 0.2% | 2023-11-27 | Fix |
| CVE-2023-6254 | OTRS password is send back to client | 8.1CNA v3.1 | 0.6% | 2023-11-27 | Fix |
| CVE-2023-6202 | Insecure direct object reference in /plugins/focalboard/ API/v2/users of Mattermost Boards | 4.3CNA v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-5974 | WPB Show Core WordPress plugin unauthenticated server side request forgery | 9.8NVD v3.1 | 3.2% | 2023-11-27 | Nuclei |
| CVE-2023-5958 | POST SMTP Mailer WordPress plugin unauthenticated cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-5942 | Medialist WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-5906 | Job Manager and Career WordPress plugin directory listing to sensitive data exposure | 7.5NVD v3.1 | 0.8% | 2023-11-27 | Fix |
| CVE-2023-5885 | Franklin Electric Fueling Systems Colibri path traversal | 6.5v3.1 | 1.1% | 2023-11-27 | Fix |
| CVE-2023-5871 | Libnbd: Malicious nbd server may crash libnbd | 5.3CNA v3.1 | 0.9% | 2023-11-27 | Fix |
| CVE-2023-5845 | Simple Social Buttons WordPress plugin unauthenticated password Protected post access | 5.3NVD v3.1 | 0.6% | 2023-11-27 | Fix |
| CVE-2023-5738 | WordPress Backup and Migration plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-5737 | WordPress Backup and Migration plugin Subscriber+ plugin settings update | 4.3NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-5653 | WassUp Real Time Analytics WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-11-27 | |
| CVE-2023-5641 | Martins Free and Easy SEO Link buildings WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-5620 | Webpushr WordPress plugin unauthenticated stored XSS | 5.4NVD v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-5611 | Seraphinite Accelerator WordPress plugin Unauthorised settings Reset/Import | 5.3NVD v3.1 | 0.3% | 2023-11-27 | Fix |
| CVE-2023-5607 | Trellix Application and Change Control (TACC) path traversal | 8.4CNA v3.1 | 0.9% | 2023-11-27 | Fix |
| CVE-2023-5604 | Asgaros Forum WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 2.0% | 2023-11-27 | Fix |
| CVE-2023-5560 | WP-UserOnline WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-5559 | 10Web Booster WordPress plugin unauthenticated arbitrary option deletion | 9.1NVD v3.1 | 2.8% | 2023-11-27 | NucleiFix |
| CVE-2023-5525 | The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a valid nonce to toggle the auto-update status of the plugin. | 4.3NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-5325 | Woocommerce Vietnam Checkout WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-5239 | Security and Malware scan by CleanTalk WordPress plugin IP spoofing | 7.5NVD v3.1 | 0.7% | 2023-11-27 | Fix |
| CVE-2023-5209 | Bookly WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-4931 | Uncontrolled search path element vulnerability in Plesk | 7.8v3.1 | 0.2% | 2023-11-27 | Fix |
| CVE-2023-4922 | WPB Show Core WordPress plugin unauthenticated local file inclusion | 9.8NVD v3.1 | 15.7% | 2023-11-27 | |
| CVE-2023-4642 | kk Star Ratings WordPress plugin Rating tampering via race condition | 5.9NVD v3.1 | 0.4% | 2023-11-27 | Fix |
| CVE-2023-4590 | Buffer overflow vulnerability in Frhed | 9.8v3.1 | 1.1% | 2023-11-27 | Exploit code |
| CVE-2023-4514 | Mmm Simple File List WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.4% | 2023-11-27 | |
| CVE-2023-4297 | Mmm Simple File List WordPress plugin Subscriber+ arbitrary directory listing | 4.3NVD v3.1 | 0.6% | 2023-11-27 | |
| CVE-2023-4252 | EventPrime WordPress plugin Booking Pricing bypass | 5.3NVD v3.1 | 0.5% | 2023-11-27 | Fix |
| CVE-2023-2707 | gAppointments plugin settings stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-11-27 | |
| CVE-2023-49312 | Precision Bridge improper certificate validation | 9.1v3.1 | 0.7% | 2023-11-26 | |
| CVE-2023-6299 | Apryse iText Reference Table PdfDocument.java memory leak | 6.5v3.1 | 0.9% | 2023-11-26 | Fix |
| CVE-2023-6298 | Apryse iText PdfDocument.java main array index | 6.5v3.1 | 1.1% | 2023-11-26 | |
| CVE-2023-6297 | PHPGurukul Nipah Virus Testing Management System patient search report page cross-site scripting | 6.1v3.1 | 0.8% | 2023-11-26 | |
| CVE-2023-6296 | osCommerce Instant message compare cross-site scripting | 6.1v3.1 | 0.8% | 2023-11-26 | |
| CVE-2023-49298 | OpenZFS insecure direct object reference | 7.5v3.1 | 1.2% | 2023-11-24 | Fix |
| CVE-2023-48796 | Apache DolphinScheduler sensitive information disclosure | 7.5v3.1 | 1.2% | 2023-11-24 | Fix |
| CVE-2023-48712 | User authorization bug leading to privilege escalation in warpgate | 7.1CNA v3.1 | 0.7% | 2023-11-24 | Fix |
| CVE-2023-48711 | Server-side request forgery (SSRF) vulnerability in google-translate-api-browser | 3.7CNA v3.1 | 0.5% | 2023-11-24 | Fix |
| CVE-2023-48708 | Insertion of Sensitive Information into Log in codeigniter4/shield | 5.0CNA v3.1 | 0.6% | 2023-11-24 | Fix |
| CVE-2023-48707 | Cleartext storage of sensitive information in codeigniter4/shield | 5.0CNA v3.1 | 0.3% | 2023-11-24 | Fix |
| CVE-2023-48312 | Authentication bypass using an empty token in capsule-proxy | 9.8CNA v3.1 | 0.6% | 2023-11-24 | Fix |
| CVE-2023-46575 | SQL injection vulnerability in Meshery | 9.8v3.1 | 1.3% | 2023-11-24 | Fix |
| CVE-2023-44303 | Dell RVTools information disclosure | 7.5CNA v3.1 | 0.5% | 2023-11-24 | Fix |
| CVE-2023-33706 | Sysaid insecure direct object reference | 6.5v3.1 | 0.6% | 2023-11-24 | |
| CVE-2023-26279 | IBM QRadar WinCollect Agent improper output encoding | 3.3CNA v3.1 | 0.2% | 2023-11-24 | Fix |
| CVE-2023-6293 | Prototype pollution in robinbuschmann/Sequelize-typescript | 7.1v3.1 | 0.6% | 2023-11-24 | Fix |
| CVE-2023-6277 | LibTIFF: Out-of-memory in tiffopen via a craft file | 6.5NVD v3.1 | 1.8% | 2023-11-24 | Fix |
| CVE-2023-6276 | Tongda OA 2017 delete.php SQL injection | 7.5v3.1 | 0.6% | 2023-11-24 | |
| CVE-2023-6275 | TOTVS Fluig Platform mobileredir openApp.jsp cross-site scripting | 6.1v3.1 | 2.4% | 2023-11-24 | NucleiExploit codeFix |
| CVE-2023-6274 | Byzoro Smart S80 PHP file updatelib.php unrestricted upload | 9.8v3.1 | 2.9% | 2023-11-24 | |
| CVE-2023-6251 | Checkmk CSRF in delete_user_message | 3.5CNA v3.1 | 0.2% | 2023-11-24 | Fix |
| CVE-2023-49216 | Usedesk cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-23 | Fix |
| CVE-2023-49215 | Usedesk cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-23 | Fix |
| CVE-2023-49214 | Usedesk server-side template injection | 9.8v3.1 | 0.8% | 2023-11-23 | Fix |
| CVE-2023-49213 | Ironmansoftware PowerShell Universal command injection | 8.8v3.1 | 2.1% | 2023-11-23 | Fix |
| CVE-2023-49210 | Node-openssl openssl npm package vulnerable to command execution | 9.8v3.1 | 1.9% | 2023-11-23 | |
| CVE-2023-49208 | Glewlwyd SSO Server buffer overflow | 9.8v3.1 | 0.9% | 2023-11-23 | Fix |
| CVE-2023-47839 | eCommerce Product Catalog WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-23 | Fix |
| CVE-2023-47835 | ARI Stream Quiz WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-23 | Fix |
| CVE-2023-47834 | Quiz And Survey Master WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-23 | Fix |
| CVE-2023-47833 | Theater for WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-23 | Fix |
| CVE-2023-47790 | Pz-LinkCard WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-23 | Fix |
| CVE-2023-47668 | Membership Plugin WordPress plugin StellarWP information disclosure | 7.5v3.1 | 1.0% | 2023-11-23 | Exploit codeFix |
| CVE-2023-47529 | Cloud Templates and Patterns collection WordPress plugin sensitive data exposure | 7.5NVD v3.1 | 1.0% | 2023-11-23 | Fix |
| CVE-2023-47244 | Email Marketing for WooCommerce by Omnisend WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2023-11-23 | Fix |
| CVE-2023-44290 | Dell Command Monitor (DCM) improper access control | 7.3CNA v3.1 | 0.2% | 2023-11-23 | Fix |
| CVE-2023-44289 | Dell Command Configure (DCC) improper access control | 7.3CNA v3.1 | 0.2% | 2023-11-23 | Fix |
| CVE-2023-43123 | Apache Storm temporary files information disclosure | 5.5v3.1 | 0.3% | 2023-11-23 | Fix |
| CVE-2023-43086 | Dell Command Configure (DCC) improper access control | 7.3CNA v3.1 | 0.2% | 2023-11-23 | Fix |
| CVE-2023-41812 | Pandora FMS uploading executables via the file manager | 5.7CNA v3.1 | 0.6% | 2023-11-23 | Fix |
| CVE-2023-41811 | Pandora FMS stored XSS via Site News page | 5.3CNA v3.1 | 0.3% | 2023-11-23 | Fix |
| CVE-2023-41810 | Pandora FMS stored XSS via Dashboard Panel | 4.0CNA v3.1 | 0.3% | 2023-11-23 | Fix |
| CVE-2023-41808 | Pandora FMS arbitrary file read as Root via GoTTY page | 8.5CNA v3.1 | 0.5% | 2023-11-23 | Fix |
| CVE-2023-41807 | Pandora FMS linux local privilege escalation via GoTTY page | 9.1CNA v3.1 | 0.7% | 2023-11-23 | Fix |
| CVE-2023-41806 | Pandora FMS misassignment of privileges can cause DOS attack | 8.2CNA v3.1 | 0.5% | 2023-11-23 | Fix |
| CVE-2023-41792 | Pandora FMS Lack of Authorization and stored XSS via SNMP Trap Editor page | 5.9CNA v3.1 | 0.2% | 2023-11-23 | Fix |
| CVE-2023-41791 | Pandora FMS Lack of Authorization and stored XSS via Translation Abuse | 8.4CNA v3.1 | 0.5% | 2023-11-23 | Fix |
| CVE-2023-41790 | Pandora FMS Traversal Path on PHP file | 7.6CNA v3.1 | 0.6% | 2023-11-23 | Fix |
| CVE-2023-41789 | Pandora FMS unauthenticated admin account takeover via XSS | 7.6CNA v3.1 | 0.5% | 2023-11-23 | Fix |
| CVE-2023-41788 | Pandora FMS remote code execution via File Uploader | 7.6CNA v3.1 | 0.7% | 2023-11-23 | Fix |
| CVE-2023-41787 | Pandora FMS arbitrary file read | 6.0CNA v3.1 | 0.5% | 2023-11-23 | Fix |
| CVE-2023-41786 | Pandora FMS database backups availability by low-privileged users | 6.8CNA v3.1 | 0.5% | 2023-11-23 | |
| CVE-2023-41140 | Autodesk AutoCAD, Advance Steel and Civil 3D heap-based buffer overflow | 7.8v3.1 | 0.3% | 2023-11-23 | Fix |
| CVE-2023-41139 | Autodesk AutoCAD, Advance Steel and Civil 3D untrusted pointer dereference | 7.8NVD v3.1 | 0.3% | 2023-11-23 | Fix |
| CVE-2023-40002 | Booster for WooCommerce WordPress plugin sensitive data exposure | 6.5v3.1 | 0.6% | 2023-11-23 | Fix |
| CVE-2023-39253 | Dell OS Recovery Tool improper access control | 7.3CNA v3.1 | 0.2% | 2023-11-23 | Fix |
| CVE-2023-33202 | Bouncy Castle denial of service (DoS) | 5.5v3.1 | 0.9% | 2023-11-23 | Fix |
| CVE-2023-30581 | Node.js Node missing authorization | 7.5v3.1 | 1.1% | 2023-11-23 | Fix |
| CVE-2023-29076 | Autodesk AutoCAD, Advance Steel and Civil 3D memory corruption | 9.8v3.1 | 1.0% | 2023-11-23 | Fix |
| CVE-2023-29075 | Autodesk AutoCAD, Advance Steel and Civil 3D out-of-bounds write | 9.8v3.1 | 1.1% | 2023-11-23 | Fix |
| CVE-2023-29074 | Autodesk AutoCAD, Advance Steel and Civil 3D out-of-bounds write | 9.8v3.1 | 1.1% | 2023-11-23 | Fix |
| CVE-2023-29073 | Autodesk AutoCAD, Advance Steel and Civil 3D heap-based buffer overflow | 9.8v3.1 | 1.1% | 2023-11-23 | Fix |
| CVE-2023-28813 | Hikvision LocalServiceComponents plug-in parameters vulnerability | 8.1CNA v3.1 | 0.6% | 2023-11-23 | Fix |
| CVE-2023-28812 | Hikvision LocalServiceComponents web browser plug-in buffer overflow | 9.1CNA v3.1 | 1.0% | 2023-11-23 | Fix |
| CVE-2023-28811 | Hikvision iDS-EXXHUH password recovery feature buffer overflow | 7.4CNA v3.1 | 0.4% | 2023-11-23 | Fix |
| CVE-2023-23978 | WP Client Reports WordPress plugin sensitive data exposure | 6.5v3.1 | 0.7% | 2023-11-23 | Fix |
| CVE-2023-6118 | Path traversal in Neutron IP Camera | 7.5CNA v3.1 | 0.8% | 2023-11-23 | Fix |
| CVE-2023-5972 | Linux kernel nft_inner.c functionality of netfilter in the null pointer dereference | 7.8NVD v3.1 | 0.3% | 2023-11-23 | Fix |
| CVE-2023-4677 | Pandora FMS unauthenticated admin account takeover via Cron Log File Backups | 7.0CNA v3.1 | 0.5% | 2023-11-23 | Fix |
| CVE-2023-4595 | Seattle Lab SLmail information disclosure | 6.5NVD v3.1 | 0.7% | 2023-11-23 | |
| CVE-2023-4594 | Cross-site scripting in BVRP Software SLmail | 5.4v3.1 | 0.4% | 2023-11-23 | |
| CVE-2023-4593 | Path traversal in BVRP Software SLmail | 6.5v3.1 | 1.1% | 2023-11-23 | |
| CVE-2023-4406 | XSS in KC Group's E-Commerce Software | 6.1CNA v3.1 | 0.5% | 2023-11-23 | |
| CVE-2023-3631 | SQLi in Medart Notification Panel | 9.8CNA v3.1 | 0.8% | 2023-11-23 | |
| CVE-2023-3377 | SQLi in Veribilim's Veribase | 9.8CNA v3.1 | 0.8% | 2023-11-23 | |
| CVE-2023-49146 | getgrav dom-sanitizer cross-site scripting in DOMSanitizer | 6.1v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-49102 | Nzbget remote code execution | 8.8v3.1 | 1.5% | 2023-11-22 | |
| CVE-2023-48706 | Vim has heap-use-after-free at /src/charset.c:1770:12 in skipwhite | 3.6CNA v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-48705 | nautobot has XSS potential in custom links, job buttons, and computed fields | 7.1CNA v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-48646 | Zoho ManageEngine RecoveryManager Plus arbitrary command execution | 7.2v3.1 | 82.2% | 2023-11-22 | Emerging ThreatsFix |
| CVE-2023-48161 | giflib buffer overflow | 7.1NVD v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-48107 | Zlib-ng Minizip-ng buffer overflow | 8.8v3.1 | 1.3% | 2023-11-22 | Fix |
| CVE-2023-48106 | Zlib-ng Minizip-ng buffer overflow | 8.8v3.1 | 0.9% | 2023-11-22 | Fix |
| CVE-2023-48105 | bytecodealliance Webassembly Micro Runtime out-of-bounds write | 7.5v3.1 | 1.0% | 2023-11-22 | Fix |
| CVE-2023-47831 | DrawIt (draw.io) WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47829 | Quick Call Button WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47825 | WP EXtra WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47824 | Legal Pages WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47821 | Email Encoder Bundle WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47819 | Easy Call Now by ThikShare WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | |
| CVE-2023-47817 | Daily Prayer Time WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47816 | Charitable WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47815 | BP Profile Shortcodes Extra WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47814 | BMI Calculator WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47813 | Better RSS Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47812 | Bamboo Columns WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47811 | Anywhere Flash Embed WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47810 | Ajax Domain Checker WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47809 | Accordion WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47808 | Christina Uechi Add Widgets to Page cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47792 | Big File Uploads WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47791 | Leadster WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47786 | LayerSlider WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47785 | LayerSlider WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47781 | Thrive Theme Builder WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47775 | wpDiscuz WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47773 | Permalinks Customizer WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47768 | Footer Putter WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47767 | Interactive World Map WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47766 | Post Status Notifier Lite WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47765 | CodeBard's Patron Button and Widgets for Patreon WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47759 | Chaty WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47758 | Multi Step Form WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-47755 | WooCommerce Product Carousel Slider WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47467 | JeecgBoot directory traversal in jeecg-boot | 6.5v3.1 | 1.1% | 2023-11-22 | |
| CVE-2023-47393 | Mercedes-benz Mercedes Me An improper access control | 5.3v3.1 | 0.5% | 2023-11-22 | |
| CVE-2023-47392 | Mercedes-benz Mercedes Me An improper access control | 5.3v3.1 | 0.5% | 2023-11-22 | |
| CVE-2023-47380 | Cross-site scripting in Admidio | 6.1v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2023-47350 | Cross-site request forgery in SwiftyEdit | 8.8v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-47316 | H-mdm Headwind Mdm insecure direct object reference | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47315 | H-mdm Headwind Mdm hard-coded credentials | 8.8v3.1 | 0.8% | 2023-11-22 | |
| CVE-2023-47314 | H-mdm Headwind Mdm cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47313 | H-mdm Headwind Mdm path traversal | 5.4v3.1 | 0.8% | 2023-11-22 | |
| CVE-2023-47312 | H-mdm Headwind Mdm cleartext storage of sensitive information | 6.5v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-47251 | Mprivacy-tools path traversal | 6.5v3.1 | 1.7% | 2023-11-22 | |
| CVE-2023-47250 | Mprivacy-tools incorrect default permissions | 8.8NVD v3.1 | 1.4% | 2023-11-22 | Exploit code |
| CVE-2023-47016 | radare2 out-of-bounds write | 7.5v3.1 | 1.2% | 2023-11-22 | Fix |
| CVE-2023-47014 | Remyandrade Sticky Notes App Sourcecodester cross-site request forgery | 6.5v3.1 | 0.3% | 2023-11-22 | Exploit code |
| CVE-2023-46814 | VideoLAN VLC media player uncontrolled search path | 7.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-46673 | Elasticsearch improper handling of exceptional conditions | 6.5CNA v3.1 | 0.8% | 2023-11-22 | Fix |
| CVE-2023-46357 | Myprestamodules Cross Selling In Modal Cart SQL injection | 9.8v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2023-45377 | Chronopost SQL injection | 9.8v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2023-43887 | struktur libde265 buffer overflow | 8.1v3.1 | 1.0% | 2023-11-22 | Fix |
| CVE-2023-43082 | Dell Unity improper certificate validation | 8.6CNA v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-43081 | Dell PowerProtect Agent for File System incorrect default permissions | 4.0CNA v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-41146 | Autodesk Customer Portal information disclosure | 4.3v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-41145 | Autodesk users who no longer have an active license for an account can still access cases for that account. | 5.3v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-40152 | Fuji Electric Tellus Lite V-Simulator out-of-bounds write | 7.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-39925 | Community by PeepSo WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-37924 | Apache Submarine: SQL injection from unauthorized login | 9.8v3.1 | 7.2% | 2023-11-22 | Fix |
| CVE-2023-35127 | Fuji Electric Tellus Lite V-Simulator stack-based buffer overflow | 7.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-30496 | Bus Ticket Booking with Seat Reservation WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-29069 | Autodesk Desktop Connector uncontrolled search path | 7.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-28749 | CM On Demand Search And Replace WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-28747 | CBX Currency Converter WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27633 | Customify WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27461 | When Last Login WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27458 | WpStream Live Streaming, Video on Demand, Pay Per View WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27457 | Passionate Brains Add Expires Headers and Optimized Minify cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27453 | LWS Tools WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27451 | Instant Images WordPress plugin server side request forgery (SSRF) | 8.8v3.1 | 0.8% | 2023-11-22 | Fix |
| CVE-2023-27446 | DeepL Pro API translation WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27444 | DecaLog WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-27442 | Leyka WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-26542 | phpinfo WP WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-26535 | Sheets To WP Table Live Sync WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-26532 | Social Auto Poster WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | |
| CVE-2023-25987 | YouTube Channel WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-25986 | PayGreen WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-22 | |
| CVE-2023-25682 | IBM Sterling B2B Integrator information disclosure | 6.2CNA v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-20241 | Cisco Secure Client out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-20240 | Cisco Secure Client out-of-bounds read | 5.5CNA v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-20084 | Cisco Secure Endpoint quarantine timing vulnerability | 5.0CNA v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-6265 | DrayTek Vigor2960 mainfunction.cgi dumpSyslog option directory traversal | 8.1v3.1 | 1.8% | 2023-11-22 | Emerging Threats |
| CVE-2023-6264 | Devolutions Server Content-Security-Policy header information disclosure | 5.3v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-6263 | Server spoofing vulnerability in NxCloud | 8.3CNA v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-6253 | Saved Uninstall Key in Digital Guardian Agent Uninstaller | 6.0v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-6252 | Path traversal vulnerability in Chameleon Power products | 7.5v3.1 | 0.9% | 2023-11-22 | |
| CVE-2023-6189 | Improper permission Handling in M-Files Server | 4.3CNA v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-6164 | MainWP Dashboard WordPress plugin Authenticated(Administrator+) CSS injection | 4.8v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-6160 | LifterLMS WordPress plugin directory traversal to arbitrary CSV file deletion | 6.7v3.1 | 0.8% | 2023-11-22 | Fix |
| CVE-2023-6157 | Checkmk livestatus injection in ajax_search | 7.6CNA v3.1 | 0.9% | 2023-11-22 | Fix |
| CVE-2023-6156 | Checkmk livestatus injection in availability timeline | 7.6CNA v3.1 | 0.9% | 2023-11-22 | Fix |
| CVE-2023-6117 | M-Files REST API allows denial of service | 5.7CNA v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2023-6011 | DECE Software Geodi stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-6009 | UserPro WordPress plugin authenticated (Subscriber+) privilege escalation | 8.8v3.1 | 0.9% | 2023-11-22 | Fix |
| CVE-2023-6008 | UserPro WordPress plugin cross-site request forgery via multiple functions | 4.3v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-6007 | UserPro WordPress plugin missing authorization via multiple functions | 6.5NVD v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-5983 | Information disclosure in Botanik Software Pharmacy Automation | 7.5v3.1 | 0.6% | 2023-11-22 | Fix |
| CVE-2023-5921 | DECE Software Geodi improper workflow enforcement | 7.1v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-5822 | Drag and Drop Multiple File Upload for Contact Form 7 unrestricted file upload | 9.8v3.1 | 1.8% | 2023-11-22 | Fix |
| CVE-2023-5815 | News and Blog Designer Pack WordPress Blog plugin unauthenticated remote code execution | 9.8v3.1 | 4.3% | 2023-11-22 | NucleiFix |
| CVE-2023-5742 | EasyRotator for WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5715 | Website Optimization Plerdy WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-5708 | WP Post Columns WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5706 | VK Blocks WordPress plugin authenticated (Contributor+) stored cross-site scripting via block | 5.4v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-5704 | CPO Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5667 | Tab Ultimate WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-5664 | Garden Gnome Package WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-22 | Fix |
| CVE-2023-5662 | Sponsors WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-5537 | Delete Usermetas WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-5469 | Steven Henty Drop Shadow Boxes dropshadowbox shortcode stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-5466 | Wp anything slider WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 8.8v3.1 | 0.8% | 2023-11-22 | Fix |
| CVE-2023-5465 | Popup with fancybox WordPress plugin authenticated (Subscriber+) SQL injection via shortcode | 8.8v3.1 | 0.8% | 2023-11-22 | Fix |
| CVE-2023-5419 | Funnelforms Free WordPress plugin missing authorization to Test email Sending | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5417 | Funnelforms Free WordPress plugin missing authorization to Category update | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5416 | Funnelforms Free WordPress plugin missing authorization to Category deletion | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5415 | Funnelforms Free WordPress plugin missing authorization to New Category creation | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5411 | Funnelforms Free WordPress plugin missing authorization to post modification | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5387 | Funnelforms Free WordPress plugin missing authorization to Enable/Disable Dark Mode | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5386 | Funnelforms Free WordPress plugin missing authorization to arbitrary post deletion | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5385 | Funnelforms Free WordPress plugin missing authorization to arbitrary post Duplication | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5383 | Funnelforms Free WordPress plugin cross-site request forgery to arbitrary post Duplication | 4.3v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-5382 | Funnelforms Free WordPress plugin cross-site request forgery to arbitrary post deletion | 4.3v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-5338 | Theme Blvd Shortcodes WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-5314 | WP EXtra WordPress plugin missing authorization to arbitrary email Sending | 4.3v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5299 | Fuji Electric Tellus Lite V-Simulator improper access control | 8.8v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-5234 | Related Products for WooCommerce WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-5163 | Weather Atlas Widget WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-22 | Fix |
| CVE-2023-5128 | TCD Google Maps WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-22 | |
| CVE-2023-5096 | HTML filter and csv-file search WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-5048 | WDContactFormBuilder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-22 | |
| CVE-2023-5047 | DRD Fleet Leasing DRDrive SQL command improper neutralization | 9.8CNA v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2023-4726 | Ultimate Dashboard WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-22 | Fix |
| CVE-2023-4686 | WP Customer Reviews WordPress plugin authenticated (Subscriber+) sensitive information exposure | 4.3v3.1 | 0.5% | 2023-11-22 | Fix |
| CVE-2023-3104 | Missing authentication for critical function in Unitree Robotics A1 | 7.5v3.1 | 0.5% | 2023-11-22 | |
| CVE-2023-3103 | Authentication bypass by spoofing in Unitree Robotics A1 | 5.9NVD v3.1 | 0.6% | 2023-11-22 | |
| CVE-2023-2889 | SQLi in Veon Computer's Service Tracking Software | 9.8v3.1 | 0.7% | 2023-11-22 | Fix |
| CVE-2023-2841 | Advanced Local Pickup for WooCommerce WordPress plugin authenticated (Administrator+) SQL injection | 7.2v3.1 | 0.6% | 2023-11-22 | Fix |
| CVE-2023-2497 | UserPro WordPress plugin cross-site request forgery to PHP object injection | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-2449 | UserPro WordPress plugin insecure password reset Mechanism | 9.8v3.1 | 0.9% | 2023-11-22 | Fix |
| CVE-2023-2448 | UserPro WordPress plugin missing authorization arbitrary shortcode execution | 5.3v3.1 | 1.0% | 2023-11-22 | Fix |
| CVE-2023-2447 | UserPro WordPress plugin cross-site request forgery to sensitive information exposure | 6.1v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-2446 | UserPro WordPress plugin sensitive information disclosure via shortcode | 6.5v3.1 | 0.8% | 2023-11-22 | Fix |
| CVE-2023-2440 | UserPro WordPress plugin cross-site request forgery to privilege escalation | 8.8v3.1 | 0.3% | 2023-11-22 | Fix |
| CVE-2023-2438 | UserPro WordPress plugin cross-site request forgery to stored cross-site scripting | 6.1v3.1 | 0.2% | 2023-11-22 | Fix |
| CVE-2023-2437 | UserPro WordPress plugin authentication bypass to Administrator | 8.1NVD v3.1 | 6.7% | 2023-11-22 | NucleiFix |
| CVE-2023-49105 | ownCloud improper authentication | 9.8v3.1 | 43.2% | 2023-11-21 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-49104 | ownCloud oauth2 open redirect | 6.1NVD v3.1 | 0.6% | 2023-11-21 | Fix |
| CVE-2023-49103 | ownCloud graphapi information disclosure | 7.5NVD v3.1 | 78.4% | 2023-11-21 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-49061 | Mozilla Firefox open redirect | 6.1v3.1 | 0.3% | 2023-11-21 | Fix |
| CVE-2023-49060 | An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability affects Firefox for iOS < 120. | 9.8v3.1 | 0.6% | 2023-11-21 | Fix |
| CVE-2023-48701 | Statamic CMS vulnerable to cross-site scripting via uploaded assets | 7.5CNA v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-48700 | nautobot-plugin-device-onboarding Clear Text Credentials Exposed via Onboarding Task | 5.7CNA v3.1 | 0.4% | 2023-11-21 | Fix |
| CVE-2023-48699 | fastbots eval injection | 8.4CNA v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-48307 | Nextcloud Mail app vulnerable to server-side request forgery | 3.5CNA v3.1 | 0.9% | 2023-11-21 | Fix |
| CVE-2023-48306 | Nextcloud Server DNS pin middleware can be tricked into DNS rebinding allowing SSRF | 5.0CNA v3.1 | 0.8% | 2023-11-21 | Fix |
| CVE-2023-48305 | Nextcloud Server user_ldap app logs user passwords in the log file on level debug | 4.2CNA v3.1 | 0.2% | 2023-11-21 | Fix |
| CVE-2023-48304 | Nextcloud Server vulnerable to attacker enabling/disabling birthday calendar for any user | 4.3CNA v3.1 | 0.6% | 2023-11-21 | Fix |
| CVE-2023-48303 | Nextcloud Server admins can change authentication details of user configured external storage | 2.4CNA v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-48302 | Nextcloud Server vulnerable to Self XSS when pasting HTML into Text app with Ctrl+Shift+V | 3.5CNA v3.1 | 0.6% | 2023-11-21 | Fix |
| CVE-2023-48301 | Nextcloud Server HTML injection in search UI when selecting a circle with HTML in the display name | 3.5CNA v3.1 | 0.6% | 2023-11-21 | Fix |
| CVE-2023-48299 | PyTorch TorchServe model archive extraction path traversal | 5.3CNA v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-48239 | Nextcloud Server users can make external storage mount points inaccessible for other users | 8.5CNA v3.1 | 1.0% | 2023-11-21 | Fix |
| CVE-2023-48230 | capnproto cap'n Proto WebSocket message can cause crash | 5.9CNA v3.1 | 1.9% | 2023-11-21 | Fix |
| CVE-2023-48228 | goauthentik authentik OAuth2: PKCE can be fully circumvented | 7.5CNA v3.1 | 1.2% | 2023-11-21 | Fix |
| CVE-2023-48226 | OpenReplay HTML injection | 6.5CNA v3.1 | 0.8% | 2023-11-21 | |
| CVE-2023-48124 | Nayem-howlader SUP Online Shopping cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-21 | |
| CVE-2023-47643 | SuiteCRM has Unauthenticated Graphql Introspection Enabled | 3.1CNA v3.1 | 3.0% | 2023-11-21 | NucleiFix |
| CVE-2023-46935 | EyouCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-21 | |
| CVE-2023-45886 | Ipinfusion Zebos denial of service | 7.5v3.1 | 1.4% | 2023-11-21 | Fix |
| CVE-2023-42770 | Red Lion Controls Sixnet RTU authentication bypass using an Alternative Path or Channel | 9.8v3.1 | 0.9% | 2023-11-21 | Fix |
| CVE-2023-40151 | Red Lion Controls Sixnet RTU exposed dangerous method or function | 9.8v3.1 | 1.1% | 2023-11-21 | Fix |
| CVE-2023-28802 | Zscaler Client Connector improper integrity check validation | 4.9CNA v3.1 | 0.2% | 2023-11-21 | Fix |
| CVE-2023-22521 | Atlassian Crowd Data Center remote code execution | 8.0CNA v3.0 | 1.2% | 2023-11-21 | Fix |
| CVE-2023-22516 | Atlassian Bamboo Data Center remote code execution | 8.5CNA v3.0 | 1.2% | 2023-11-21 | Fix |
| CVE-2023-21418 | Axis Communications AXIS OS path traversal | 7.1CNA v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-21417 | Axis Communications AXIS OS path traversal | 7.1CNA v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-21416 | Axis Communications AXIS OS path traversal | 7.1CNA v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-20274 | Cisco AppDynamics improper privilege management | 6.3CNA v3.1 | 0.2% | 2023-11-21 | Fix |
| CVE-2023-20272 | Cisco Identity Services Engine Software unprotected alternate path | 6.7CNA v3.1 | 0.9% | 2023-11-21 | Fix |
| CVE-2023-20265 | Cisco IP Phones with Multiplatform Firmware cross-site scripting | 5.5CNA v3.1 | 0.5% | 2023-11-21 | Fix |
| CVE-2023-20208 | Cisco Identity Services Engine Software cross-site scripting | 4.8CNA v3.1 | 0.5% | 2023-11-21 | Fix |
| CVE-2023-6248 | Data leakage and arbitrary remote code execution in Syrus cloud devices | 9.8v3.1 | 1.2% | 2023-11-21 | |
| CVE-2023-6238 | Kernel: Nvme: Memory corruption via unprivileged user passthrough | 6.7NVD v3.1 | 0.3% | 2023-11-21 | Fix |
| CVE-2023-6235 | Arbitrary code execution in Duet Display | 7.8v3.1 | 0.3% | 2023-11-21 | |
| CVE-2023-6213 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.7% | 2023-11-21 | Fix |
| CVE-2023-6212 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.8% | 2023-11-21 | Fix |
| CVE-2023-6211 | Mozilla Firefox clickjacking | 6.5v3.1 | 0.5% | 2023-11-21 | Fix |
| CVE-2023-6210 | Mozilla Firefox pop-up content loading vulnerability | 6.5v3.1 | 0.6% | 2023-11-21 | Fix |
| CVE-2023-6209 | Mozilla Firefox path traversal | 6.5v3.1 | 1.4% | 2023-11-21 | Fix |
| CVE-2023-6208 | Mozilla Firefox X11 primary selection vulnerability | 8.8v3.1 | 0.8% | 2023-11-21 | Fix |
| CVE-2023-6207 | Mozilla Firefox use-after-free | 8.8v3.1 | 0.8% | 2023-11-21 | Fix |
| CVE-2023-6206 | Mozilla Firefox clickjacking | 5.4v3.1 | 0.6% | 2023-11-21 | Fix |
| CVE-2023-6205 | Mozilla Firefox use-after-free | 6.5v3.1 | 0.9% | 2023-11-21 | Fix |
| CVE-2023-6204 | Mozilla Firefox out-of-bounds read | 6.5v3.1 | 0.8% | 2023-11-21 | Fix |
| CVE-2023-6144 | Dev Blog session cookie insecure direct object reference | 4.8NVD v3.1 | 0.4% | 2023-11-21 | |
| CVE-2023-6142 | Dev Blog file upload feature stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-21 | |
| CVE-2023-5776 | Post Meta Data Manager WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-21 | Fix |
| CVE-2023-5599 | Dassault Systèmes 3DSwymer 3DDashboard stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-21 | |
| CVE-2023-5598 | Dassault Systèmes 3DSwymer stored cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-21 | |
| CVE-2023-5553 | Axis Communications AXIS OS incorrect authorization | 7.6CNA v3.1 | 0.3% | 2023-11-21 | Fix |
| CVE-2023-5055 | zephyrproject-rtos Zephyr L2CAP: Possible stack based buffer overflow in le_ecred_reconf_req | 8.3CNA v3.1 | 0.8% | 2023-11-21 | |
| CVE-2023-4424 | zephyrproject-rtos Zephyr bt: Hci: DoS and possible RCE | 8.3CNA v3.1 | 0.4% | 2023-11-21 | |
| CVE-2023-4149 | WAGO: OS command injection vulnerability in Managed Switch | 9.8CNA v3.1 | 1.1% | 2023-11-21 | Fix |
| CVE-2023-48310 | NC3-LU TestingPlatform ability to DoS the testing infrastructure by overwriting files | 9.1CNA v3.1 | 1.1% | 2023-11-20 | Fix |
| CVE-2023-48309 | next-auth vulnerable to possible user mocking that bypasses basic authentication | 5.3CNA v3.1 | 0.7% | 2023-11-20 | Fix |
| CVE-2023-48300 | Embed Privacy missing escaping for show_all attribute in opt-out shortcode | 6.3CNA v3.1 | 0.5% | 2023-11-20 | Fix |
| CVE-2023-48293 | XWiki Admin tools Application CSRF with QueryOnXWiki allows arbitrary database queries | 8.8CNA v3.1 | 0.4% | 2023-11-20 | Fix |
| CVE-2023-48292 | XWiki Admin Tools Application Run Shell command allows CSRF RCE attacks | 9.7CNA v3.1 | 22.9% | 2023-11-20 | Exploit codeFix |
| CVE-2023-48241 | XWiki Platform Solr suggest service improper authorization | 7.5CNA v3.1 | 72.8% | 2023-11-20 | NucleiFix |
| CVE-2023-48240 | XWiki Platform rendered diff image embedding server-side request forgery | 9.1CNA v3.1 | 0.7% | 2023-11-20 | Fix |
| CVE-2023-48223 | fast-jwt JWT Algorithm Confusion | 5.9CNA v3.1 | 0.7% | 2023-11-20 | Fix |
| CVE-2023-48221 | wire-avs remote format string | 7.3CNA v3.1 | 0.9% | 2023-11-20 | Fix |
| CVE-2023-48218 | Bypass of field access control in strapi-plugin-protected-populate | 5.3CNA v3.1 | 0.6% | 2023-11-20 | Fix |
| CVE-2023-48192 | TOTOLINK A3700R code injection | 7.8v3.1 | 0.3% | 2023-11-20 | |
| CVE-2023-48176 | Mizhexiaoxiao Websiteguide An insecure permissions | 9.8v3.1 | 0.9% | 2023-11-20 | |
| CVE-2023-48111 | Tenda AX1803 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-11-20 | |
| CVE-2023-48110 | Tenda AX1803 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-11-20 | |
| CVE-2023-48109 | Tenda AX1803 out-of-bounds write | 7.5v3.1 | 0.8% | 2023-11-20 | |
| CVE-2023-48090 | GPAC M3U8 parsing memory leak | 7.1v3.1 | 0.3% | 2023-11-20 | |
| CVE-2023-48051 | Upydev has weak encryption padding | 7.5v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-48039 | GPAC MPD parsing memory leak | 5.5v3.1 | 0.3% | 2023-11-20 | |
| CVE-2023-47772 | Slider Revolution WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-20 | Fix |
| CVE-2023-47417 | Paulrouget Dzslides component /shells/embedder.html cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-20 | |
| CVE-2023-47311 | Spaceapplications Yacms clickjacking | 6.1v3.1 | 0.4% | 2023-11-20 | |
| CVE-2023-47217 | OpenHarmony arkruntime has a buffer overflow | 4.0CNA v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-47175 | LuxSoft LuxCal Web Calendar cross-site scripting | 6.1v3.1 | 0.7% | 2023-11-20 | Fix |
| CVE-2023-47172 | WithSecure Elements Endpoint Protection local privilege escalation | 7.8v3.1 | 0.2% | 2023-11-20 | Fix |
| CVE-2023-46990 | PublicCMS deserialization of untrusted data | 9.8v3.1 | 1.5% | 2023-11-20 | |
| CVE-2023-46705 | OpenHarmony arkruntime has a type confusion | 6.2CNA v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-46700 | LuxSoft LuxCal Web Calendar SQL injection | 9.8v3.1 | 1.0% | 2023-11-20 | Fix |
| CVE-2023-46471 | Spaceapplications Yacms Space Applications Services Yamcs v.5.8.6 cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-20 | |
| CVE-2023-46470 | Spaceapplications Yacms Space Applications Services Yamcs v.5.8.6 cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-20 | |
| CVE-2023-46302 | Apache Submarine: Fix SnakeYaml unsafe deserialization | 9.8v3.1 | 1.8% | 2023-11-20 | Fix |
| CVE-2023-46100 | OpenHarmony cert manager has a use of uninitialized resource | 6.2CNA v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-43612 | OpenHarmony hiview has an improper preservation of permissions | 8.4CNA v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-42774 | OpenHarmony Liteos-A has a incorrect default permissions | 6.2CNA v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-38885 | OS4ED Opensis cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-20 | |
| CVE-2023-38884 | OS4ED Opensis Community Edition version insecure direct object reference | 7.5v3.1 | 0.9% | 2023-11-20 | |
| CVE-2023-38883 | OS4ED Opensis Community Edition version reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-20 | |
| CVE-2023-38882 | OS4ED Opensis Community Edition version reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-20 | |
| CVE-2023-38881 | OS4ED Opensis Community Edition version reflected cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-20 | |
| CVE-2023-38880 | OS4ED Opensis missing authorization | 9.8v3.1 | 1.0% | 2023-11-20 | |
| CVE-2023-38879 | OS4ED Opensis path traversal | 7.5v3.1 | 3.7% | 2023-11-20 | Nuclei |
| CVE-2023-38823 | Tenda AC18 buffer overflow | 9.8v3.1 | 1.2% | 2023-11-20 | |
| CVE-2023-36013 | Microsoft PowerShell information disclosure | 6.5CNA v3.1 | 1.4% | 2023-11-20 | Fix |
| CVE-2023-35762 | OS command injection in INEA ME RTU | 9.8v3.1 | 1.7% | 2023-11-20 | Fix |
| CVE-2023-29155 | INEA ME RTU missing authentication for critical function | 9.8v3.1 | 0.9% | 2023-11-20 | Fix |
| CVE-2023-6199 | BookStack Book Stack LFR via blind SSRF | 6.5v3.1 | 1.4% | 2023-11-20 | Exploit codeFix |
| CVE-2023-6197 | Audio Merchant WordPress plugin cross-site request forgery | 5.4v3.1 | 0.2% | 2023-11-20 | Fix |
| CVE-2023-6196 | Audio Merchant WordPress plugin cross-site request forgery to arbitrary file upload | 8.8v3.1 | 0.3% | 2023-11-20 | |
| CVE-2023-6178 | Tenable Nessus Agent out-of-bounds write | 6.8CNA v3.1 | 0.8% | 2023-11-20 | Fix |
| CVE-2023-6062 | Tenable Nessus arbitrary file write | 6.8CNA v3.1 | 1.0% | 2023-11-20 | Fix |
| CVE-2023-6045 | OpenHarmony arkruntime has a type confusion | 5.9CNA v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-5799 | WP Hotel Booking WordPress plugin Contributor+ arbitrary post deletion | 5.4NVD v3.1 | 0.5% | 2023-11-20 | Fix |
| CVE-2023-5652 | WP Hotel Booking WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 63.7% | 2023-11-20 | NucleiFix |
| CVE-2023-5651 | WP Hotel Booking WordPress plugin Subscriber+ arbitrary post deletion | 5.4NVD v3.1 | 0.3% | 2023-11-20 | Fix |
| CVE-2023-5640 | Article Analytics WordPress plugin unauthenticated SQL injection | 9.8NVD v3.1 | 1.0% | 2023-11-20 | |
| CVE-2023-5610 | Seraphinite Accelerator WordPress plugin authenticated arbitrary redirect | 5.4NVD v3.1 | 0.4% | 2023-11-20 | Fix |
| CVE-2023-5609 | Seraphinite Accelerator WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2023-11-20 | Fix |
| CVE-2023-5593 | Zyxel SecuExtender SSL VPN Client Windows-based out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2023-11-20 | Fix |
| CVE-2023-5509 | myStickymenu WordPress plugin Subscriber+ arbitrary form Leads deletion | 5.4NVD v3.1 | 0.5% | 2023-11-20 | Fix |
| CVE-2023-5343 | Popup Box WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2023-11-20 | Fix |
| CVE-2023-5340 | Five Star Restaurant Menu and Food Ordering WordPress plugin unauthenticated PHP object injection | 9.8NVD v3.1 | 1.2% | 2023-11-20 | Fix |
| CVE-2023-5140 | Bonus for Woo WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-11-20 | Fix |
| CVE-2023-5119 | Forminator and Forminator Pro WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.5% | 2023-11-20 | Fix |
| CVE-2023-4970 | PubyDoc WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-11-20 | |
| CVE-2023-4824 | WooHoo Newspaper Magazine WordPress theme settings update via CSRF | 8.8NVD v3.1 | 0.4% | 2023-11-20 | |
| CVE-2023-4808 | WP Post Popup WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-11-20 | |
| CVE-2023-4799 | Magic Embeds WordPress plugin Contributor+ stored XSS via shortcode | 5.4NVD v3.1 | 0.4% | 2023-11-20 | Fix |
| CVE-2023-3379 | WAGO: Improper privilege management in web-based management | 5.3CNA v3.1 | 0.2% | 2023-11-20 | Fix |
| CVE-2023-3116 | OpenHarmony Liteos-A has a incorrect default permissions | 7.3CNA v3.1 | 0.2% | 2023-11-20 | |
| CVE-2023-5341 | ImageMagick: Heap use-after-free in coders/bmp.c | 5.5NVD v3.1 | 0.5% | 2023-11-19 | Fix |
| CVE-2023-48736 | Color Demoiccmax out-of-bounds read | 6.5v3.1 | 0.6% | 2023-11-18 | |
| CVE-2023-48028 | kodcloud kodbox missing brute-force protection | 9.8v3.1 | 1.1% | 2023-11-18 | |
| CVE-2023-48017 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-18 | |
| CVE-2023-47685 | Preloader Matrix WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-47672 | WP Category Post List Widget WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-47671 | Vertical scroll recent post WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-47670 | Korea SNS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47667 | WP Full Stripe Free WordPress plugin cross-site request forgery vulnerability on every setting Save | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47666 | Code Snippets WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47664 | Plainview Protect Passwords WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2023-11-18 | |
| CVE-2023-47655 | ANAC XML Bandi di Gara WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47651 | WP Links Page WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47650 | Peter Sterling Add Local Avatar cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-47649 | Best Restaurant Menu by PriceListo WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47644 | ProfileGrid WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47556 | Device Theme Switcher WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-47553 | UserHeat WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47552 | Image Hover Effects WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47551 | Donations Made Easy Smart Donations WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-47531 | Droit Dark Mode WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-47519 | WooCommerce Product Table Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-47243 | 코드엠샵 마이사이트 WordPress plugin CodeMShop cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-46402 | Inefficient regular expression complexity in Git-urls | 7.5v3.1 | 0.9% | 2023-11-18 | |
| CVE-2023-44796 | LimeSurvey cross-site scripting | 5.4v3.1 | 0.7% | 2023-11-18 | Fix |
| CVE-2023-43177 | CrushFTP improper control of dynamic code | 9.8v3.1 | 81.8% | 2023-11-18 | NucleiMetasploitEmerging ThreatsExploit code |
| CVE-2023-41129 | Patreon WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-40817 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40816 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40815 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40814 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40813 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40812 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40810 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40809 | Cross-site scripting in OpenCRX | 6.1v3.1 | 0.5% | 2023-11-18 | Fix |
| CVE-2023-40363 | IBM InfoSphere Information Server privilege escalation | 8.1CNA v3.1 | 0.6% | 2023-11-18 | Fix |
| CVE-2023-38361 | IBM CICS TX Advanced information disclosure | 5.9CNA v3.1 | 0.4% | 2023-11-18 | Fix |
| CVE-2023-32514 | Google Site Verification plugin using Meta Tag WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-32504 | Wise Chat WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-32245 | Essential Addons for Elementor Pro WordPress plugin server side request forgery (SSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-31089 | Video XML Sitemap Generator WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | |
| CVE-2023-31075 | Easy Hide Login WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-28780 | Yoast SEO: Local WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2023-11-18 | Fix |
| CVE-2023-25985 | WordPress Tooltips plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-18 | Fix |
| CVE-2023-6187 | Paid Memberships Pro WordPress plugin authenticated (Subscriber+) arbitrary file upload | 8.8v3.1 | 51.5% | 2023-11-18 | Fix |
| CVE-2023-4214 | AppPresser WordPress plugin insecure password reset Mechanism | 9.8v3.1 | 0.9% | 2023-11-18 | Fix |
| CVE-2023-48659 | MISP parameter parsing vulnerability | 9.8v3.1 | 0.9% | 2023-11-17 | |
| CVE-2023-48658 | An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php lacks a checkParam function for alphanumerics, underscore, dash, period, and space. | 9.8v3.1 | 0.9% | 2023-11-17 | |
| CVE-2023-48657 | MISP filter handling vulnerability | 9.8v3.1 | 0.9% | 2023-11-17 | |
| CVE-2023-48656 | MISP order clause handling vulnerability | 9.8v3.1 | 0.9% | 2023-11-17 | |
| CVE-2023-48655 | MISP improper output encoding | 9.8v3.1 | 0.9% | 2023-11-17 | |
| CVE-2023-48649 | Concrete CMS cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-17 | Fix |
| CVE-2023-48648 | Concrete CMS allows unauthorized access because directories can be created with insecure permissions | 9.8v3.1 | 1.2% | 2023-11-17 | Fix |
| CVE-2023-48295 | Cross-site scripting at Device groups Deletion feature in LibreNMS | 6.3CNA v3.1 | 0.6% | 2023-11-17 | Fix |
| CVE-2023-48294 | Broken access control on Graphs feature in LibreNMS | 4.3CNA v3.1 | 0.7% | 2023-11-17 | Fix |
| CVE-2023-48238 | JWT Algorithm Confusion in json-web-token library | 7.5CNA v3.1 | 0.3% | 2023-11-17 | Fix |
| CVE-2023-48185 | Terra-mater Terra-master TerraMaster v.s1.0 path traversal | 7.5v3.1 | 1.3% | 2023-11-17 | |
| CVE-2023-48078 | code-projects Simple CRUD Functionality add.php SQL injection | 9.8v3.1 | 0.8% | 2023-11-17 | |
| CVE-2023-48031 | OpenSupports unrestricted file upload | 9.8v3.1 | 1.4% | 2023-11-17 | |
| CVE-2023-48029 | Corebos CSV injection | 8.0v3.1 | 1.3% | 2023-11-17 | |
| CVE-2023-48025 | Howerj Liblisp out-of-bounds read | 8.1v3.1 | 0.7% | 2023-11-17 | |
| CVE-2023-48024 | Howerj Liblisp use-after-free | 6.5v3.1 | 0.6% | 2023-11-17 | |
| CVE-2023-47797 | Liferay Portal XSS with `p_l_back_url_title` on edit content page | 9.6CNA v3.1 | 0.7% | 2023-11-17 | Fix |
| CVE-2023-47757 | AWeber WordPress plugin broken access control | 8.8v3.1 | 0.2% | 2023-11-17 | Fix |
| CVE-2023-47675 | CubeCart OS command injection | 7.2v3.1 | 1.0% | 2023-11-17 | Fix |
| CVE-2023-47283 | CubeCart path traversal | 4.9v3.1 | 1.2% | 2023-11-17 | Fix |
| CVE-2023-47073 | Adobe After Effects MP4 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-47072 | Adobe After Effects MP4 file uninitialized variable information disclosure | 3.3CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-47071 | Adobe After Effects MP4 File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-47070 | Adobe After Effects MP4 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-47069 | Adobe After Effects M4A File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-47068 | Adobe After Effects MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-47067 | Adobe After Effects MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-47066 | Adobe After Effects MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-46745 | Rate limiting Bypass on login page in libreNMS | 5.3CNA v3.1 | 0.6% | 2023-11-17 | Fix |
| CVE-2023-45387 | Myprestamodules Exportproducts SQL injection | 9.8v3.1 | 0.7% | 2023-11-17 | Fix |
| CVE-2023-45382 | Common-services Sonice Retour path traversal | 7.5v3.1 | 0.8% | 2023-11-17 | |
| CVE-2023-44355 | Adobe ColdFusion improper input validation | 4.3CNA v3.1 | 47.2% | 2023-11-17 | Fix |
| CVE-2023-44353 | Adobe ColdFusion WDDX deserialization Gadgets | 9.8CNA v3.1 | 80.2% | 2023-11-17 | Reported exploitedNucleiFix |
| CVE-2023-44352 | Unauthenticate reflected XSS on Adobe ColdFusion 2018 2021 2023 last version | 6.1CNA v3.1 | 84.8% | 2023-11-17 | Reported exploitedNucleiFix |
| CVE-2023-44351 | Adobe ColdFusion RCE Security | 9.8CNA v3.1 | 50.2% | 2023-11-17 | Fix |
| CVE-2023-44350 | Adobe ColdFusion deserialization of untrusted data | 9.8CNA v3.1 | 64.6% | 2023-11-17 | Fix |
| CVE-2023-44326 | Adobe Dimension GLTF File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-44325 | Adobe Animate FLA File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.3% | 2023-11-17 | Fix |
| CVE-2023-44324 | Adobe FrameMaker Publishing Server authentication bypass | 9.8CNA v3.1 | 1.4% | 2023-11-17 | Fix |
| CVE-2023-42428 | CubeCart path traversal | 6.5v3.1 | 1.3% | 2023-11-17 | Fix |
| CVE-2023-41102 | openNDS captive portal memory leak | 7.5v3.1 | 1.0% | 2023-11-17 | Fix |
| CVE-2023-41101 | openNDS out-of-bounds write | 9.8v3.1 | 1.9% | 2023-11-17 | Fix |
| CVE-2023-39548 | NEC CLUSTERPRO X (EXPRESSCLUSTER X) unrestricted file upload | 8.8v3.1 | 0.7% | 2023-11-17 | Fix |
| CVE-2023-39547 | NEC CLUSTERPRO X (EXPRESSCLUSTER X) authentication bypass by replay | 8.8v3.1 | 0.6% | 2023-11-17 | Fix |
| CVE-2023-39546 | CLUSTERPRO X Ver5.1 and earlier and EXPRESSCLUSTER X 5.1 and earlier, CLUSTERPRO X SingleServerSafe 5.1 and earlier, EXPRESSCLUSTER X SingleServerSafe 5.1 and earlier allows a attacker to log in to the product may execute an arbitrary command. | 8.8v3.1 | 0.6% | 2023-11-17 | |
| CVE-2023-39545 | NEC CLUSTERPRO X (EXPRESSCLUSTER X) files accessible to external parties | 8.8v3.1 | 0.7% | 2023-11-17 | Fix |
| CVE-2023-39544 | NEC CLUSTERPRO X (EXPRESSCLUSTER X) missing authorization | 8.8v3.1 | 0.6% | 2023-11-17 | Fix |
| CVE-2023-38324 | openNDS FAS authentication vulnerability | 5.3v3.1 | 0.7% | 2023-11-17 | Fix |
| CVE-2023-38322 | openNDS Captive Portal null pointer dereference | 7.5v3.1 | 1.0% | 2023-11-17 | Fix |
| CVE-2023-38320 | openNDS Captive Portal null pointer dereference | 7.5v3.1 | 1.0% | 2023-11-17 | Fix |
| CVE-2023-38316 | openNDS Captive Portal arbitrary command execution | 9.8v3.1 | 1.1% | 2023-11-17 | Fix |
| CVE-2023-38315 | openNDS Captive Portal null pointer dereference | 7.5v3.1 | 1.0% | 2023-11-17 | Fix |
| CVE-2023-38314 | openNDS Captive Portal null pointer dereference | 6.5v3.1 | 0.9% | 2023-11-17 | Fix |
| CVE-2023-38313 | openNDS Captive Portal null pointer dereference | 7.5v3.1 | 1.0% | 2023-11-17 | Fix |
| CVE-2023-38130 | CubeCart cross-site request forgery | 8.1v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-26364 | Denial of service of regular expression in package @Adobe/Css-tools | 5.3CNA v3.1 | 1.2% | 2023-11-17 | Fix |
| CVE-2023-26347 | Adobe issues ColdFusion Admin Panel Access | 7.5CNA v3.1 | 10.1% | 2023-11-17 | NucleiFix |
| CVE-2023-22275 | Adobe RoboHelp Server GetNewUserId SQL injection information disclosure | 7.5CNA v3.1 | 1.3% | 2023-11-17 | Fix |
| CVE-2023-22274 | Adobe RoboHelp Server UpdateCommandStream XML external entity Processing information disclosure | 7.5CNA v3.1 | 1.5% | 2023-11-17 | Fix |
| CVE-2023-22273 | Adobe RoboHelp Server OnPublishFile directory traversal remote code execution | 7.2CNA v3.1 | 1.9% | 2023-11-17 | Fix |
| CVE-2023-22272 | Adobe RoboHelp Server resolveDistinguishedName LDAP injection information disclosure | 7.5CNA v3.1 | 1.4% | 2023-11-17 | Fix |
| CVE-2023-22268 | Adobe RoboHelp Server getRHSGroupsForRoles SQL injection information disclosure | 6.5CNA v3.1 | 1.2% | 2023-11-17 | Fix |
| CVE-2023-6188 | GetSimpleCMS theme-edit.php code injection | 9.8v3.1 | 1.0% | 2023-11-17 | |
| CVE-2023-6179 | Honeywell ProWatch incorrect permission assignment to program executable folders | 7.8CNA v3.1 | 0.2% | 2023-11-17 | |
| CVE-2023-5445 | Trellix ePolicy Orchestrator An open redirect | 5.4CNA v3.1 | 0.4% | 2023-11-17 | Fix |
| CVE-2023-5444 | Trellix ePolicy Orchestrator CSRF in ePO leading to privilege escalation | 8.0CNA v3.1 | 0.4% | 2023-11-17 | |
| CVE-2023-48237 | Vim line shifting integer overflow | 2.8CNA v3.1 | 0.8% | 2023-11-16 | Fix |
| CVE-2023-48236 | Vim z= command integer overflow | 2.8CNA v3.1 | 0.7% | 2023-11-16 | Fix |
| CVE-2023-48235 | Overflow in ex address parsing in Vim | 2.8CNA v3.1 | 0.8% | 2023-11-16 | Fix |
| CVE-2023-48234 | Vim normal mode z command integer overflow | 2.8CNA v3.1 | 0.8% | 2023-11-16 | Fix |
| CVE-2023-48233 | Overflow with count for :s command in Vim | 2.8CNA v3.1 | 0.8% | 2023-11-16 | Fix |
| CVE-2023-48232 | Floating point Exception in adjust_plines_for_skipcol in Vim | 3.9CNA v3.1 | 0.7% | 2023-11-16 | Fix |
| CVE-2023-48231 | Vim window closing use-after-free | 3.9CNA v3.1 | 0.7% | 2023-11-16 | Fix |
| CVE-2023-48222 | Authenticated users can view or delete jobs they do not have authorization for in Rundeck | 8.1CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-48204 | PublicCMS server-side request forgery | 6.5v3.1 | 0.7% | 2023-11-16 | |
| CVE-2023-48134 | Linecorp line information disclosure | 7.5v3.1 | 0.7% | 2023-11-16 | |
| CVE-2023-48056 | PyPinkSign uses a non-random or static IV for Cipher Block Chaining (CBC) mode in AES encryption | 7.5v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-48055 | SuperAGI hard-coded credentials | 7.5v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-48054 | Missing SSL certificate validation in Localstack | 7.4v3.1 | 0.3% | 2023-11-16 | |
| CVE-2023-48053 | Archerydms Archery hard-coded credentials | 7.5v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-48052 | httpie improper certificate validation | 7.4v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-47688 | Youtube SpeedLoad WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-16 | |
| CVE-2023-47687 | Woo Custom and Sequential Order Number WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-16 | |
| CVE-2023-47686 | Arigato Autoresponder and Newsletter WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-47674 | First CFR-4EAB missing authentication | 9.8v3.1 | 1.3% | 2023-11-16 | Fix |
| CVE-2023-47642 | Stream description leaks to ex-subscribers in Zulip | 4.3CNA v3.1 | 0.5% | 2023-11-16 | Fix |
| CVE-2023-47514 | Star CloudPRNT for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-47512 | Product Enquiry for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47511 | Pinyin Slugs WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47509 | Edit WooCommerce Templates WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47508 | Master Slider Pro WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-47471 | struktur libde265 strukturag buffer overflow | 6.5v3.1 | 0.8% | 2023-11-16 | Fix |
| CVE-2023-47470 | FFmpeg buffer overflow | 7.8v3.1 | 0.7% | 2023-11-16 | |
| CVE-2023-47335 | Autelrobotics Evo Nano Drone setNFZEnable function of Autel Robotics insecure permissions | 6.5v3.1 | 0.3% | 2023-11-16 | |
| CVE-2023-47264 | WithSecure Elements Endpoint Protection out-of-bounds read | 7.5v3.1 | 0.7% | 2023-11-16 | Fix |
| CVE-2023-47263 | WithSecure Elements Endpoint Protection denial of service | 7.5v3.1 | 0.7% | 2023-11-16 | Fix |
| CVE-2023-47245 | ANAC XML Viewer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47242 | ANAC XML Bandi di Gara WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47240 | CBX Map for Google Map and OpenStreetMap WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47239 | Easy PayPal Shopping Cart WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47213 | First CFR-4EAB hard-coded credentials | 9.8v3.1 | 1.1% | 2023-11-16 | Fix |
| CVE-2023-47112 | Authenticated users can view job names and groups they do not have authorization to view in Rundeck | 4.3CNA v3.1 | 0.5% | 2023-11-16 | Fix |
| CVE-2023-47060 | Adobe Premiere Pro MP4 file uninitialized variable information disclosure | 3.3CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-47059 | Adobe Premiere Pro MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47058 | Adobe Premiere Pro MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47057 | Adobe Premiere Pro MP4 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-47056 | Adobe Premiere Pro MP4 File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47055 | Adobe Premiere Pro M4A File Parsing use-after-free remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47054 | Adobe Audition MP4 File Parsing uninitialized variable information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47053 | Adobe Audition MP4 File Parsing uninitialized variable information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47052 | Adobe Audition MP4 File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47051 | Adobe Audition MP4 File Parsing heap-based buffer overflow remote code execution | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47050 | Adobe Audition M4A File Parsing out-of-bounds read remote code execution | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47049 | Adobe Audition MP4 File Parsing out-of-bounds read remote code execution | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47048 | Adobe Audition MP4 File Parsing out-of-bounds read remote code execution | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47047 | Adobe Audition MP4 File Parsing uninitialized variable remote code execution | 5.5CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-47046 | Adobe Audition MP4 File Parsing out-of-bounds write remote code execution | 5.5CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-47044 | Adobe Media Encoder MP4 file uninitialized variable information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47043 | Adobe Media Encoder MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47042 | Adobe Media Encoder MP4 File Parsing heap-based buffer overflow remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47041 | Adobe Media Encoder MP4 File Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-47040 | Adobe Media Encoder MP4 File Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-47025 | Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component | 5.5v3.1 | 0.3% | 2023-11-16 | |
| CVE-2023-47003 | Redis Labs Redisgraph null pointer dereference | 9.8v3.1 | 1.1% | 2023-11-16 | |
| CVE-2023-46214 | Remote code execution (RCE) in Splunk Enterprise through Insecure XML Parsing | 8.8v3.1 | 89.1% | 2023-11-16 | MetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-46213 | Splunk Enterprise cross-site scripting (XSS) on Show Syntax Highlighted view in Search page | 4.8v3.1 | 0.5% | 2023-11-16 | Fix |
| CVE-2023-44372 | TALOS-2023-1842 Adobe Acrobat Reader U3D page event use-after-free | 7.8CNA v3.1 | 2.6% | 2023-11-16 | Fix |
| CVE-2023-44371 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.1 | 4.9% | 2023-11-16 | Fix |
| CVE-2023-44367 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.1 | 2.1% | 2023-11-16 | Fix |
| CVE-2023-44366 | Adobe Acrobat Reader DC Font Parsing out-of-bounds write remote code execution | 7.8CNA v3.1 | 1.8% | 2023-11-16 | Fix |
| CVE-2023-44365 | Adobe Acrobat Reader DC Font Parsing uninitialized variable remote code execution | 7.8CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44361 | Adobe Acrobat Reader DC AcroForm Doc object use-after-free information disclosure | 5.5CNA v3.1 | 2.1% | 2023-11-16 | Fix |
| CVE-2023-44360 | Adobe Acrobat Reader DC PDF File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.4% | 2023-11-16 | Fix |
| CVE-2023-44359 | Adobe Acrobat Reader DC Font Parsing use-after-free remote code execution | 7.8CNA v3.1 | 2.1% | 2023-11-16 | Fix |
| CVE-2023-44358 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44357 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44356 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44348 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.4% | 2023-11-16 | Fix |
| CVE-2023-44340 | Adobe Acrobat Reader DC PDF File Parsing out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44339 | Adobe Acrobat Reader DC AcroForm value out-of-bounds read information disclosure | 5.5CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44338 | Adobe Acrobat Reader DC Annotation out-of-bounds read remote code execution | 7.8CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44337 | Adobe Acrobat Reader DC Font Parsing out-of-bounds read remote code execution | 7.8CNA v3.1 | 2.0% | 2023-11-16 | Fix |
| CVE-2023-44336 | TALOS-2023-1794 Adobe Acrobat Reader Thermometer use-after-free | 7.8CNA v3.1 | 2.3% | 2023-11-16 | Fix |
| CVE-2023-44335 | Adobe Photoshop 2023 CC memory corruption vulnerability I | 5.5CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-44334 | Adobe Photoshop 2023 CC memory corruption vulnerability VI | 5.5CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-44333 | Adobe Photoshop 2023 CC memory corruption vulnerability V | 5.5CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-44332 | Adobe Photoshop 2023 CC memory corruption vulnerability II | 5.5CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-44331 | Adobe Photoshop 2023 CC memory corruption vulnerability IV | 5.5CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-44330 | Adobe Photoshop 2023 CC memory corruption vulnerability III | 7.8CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-44329 | Adobe Bridge MP4 File Parsing uninitialized variable information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-44328 | Adobe Bridge MP4 File Parsing use-after-free information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-44327 | Adobe Bridge MP4 file uninitialized variable information disclosure | 5.5CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-44296 | Dell Mobility hard-coded credentials | 8.4CNA v3.1 | 0.2% | 2023-11-16 | Fix |
| CVE-2023-44292 | Dell Repository Manager (DRM) improper access control | 6.7CNA v3.1 | 0.2% | 2023-11-16 | Fix |
| CVE-2023-44282 | Dell Repository Manager (DRM) improper access control | 6.7CNA v3.1 | 0.2% | 2023-11-16 | Fix |
| CVE-2023-43757 | ELECOM WRC-2533GHBK2-T multiple routers provided by inadequate encryption strength | 6.5v3.1 | 0.5% | 2023-11-16 | Exploit code |
| CVE-2023-43752 | ELECOM WRC-X3000GS2-W OS command injection | 8.0v3.1 | 1.0% | 2023-11-16 | Fix |
| CVE-2023-43275 | DedeCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-16 | |
| CVE-2023-40314 | The OpenNMS Group Horizon cross-site scripting in bootstrap.jsp | 5.8CNA v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-39926 | Under Construction / Maintenance Mode from Acurax WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-39259 | Dell OS Recovery Tool improper access control | 7.3CNA v3.1 | 0.2% | 2023-11-16 | Fix |
| CVE-2023-39246 | Dell Encryption symlink following | 4.6CNA v3.1 | 0.2% | 2023-11-16 | Fix |
| CVE-2023-36026 | Microsoft Edge (Chromium-based) spoofing | 4.3CNA v3.1 | 0.8% | 2023-11-16 | Fix |
| CVE-2023-36008 | Microsoft Edge (Chromium-based) remote code execution | 6.6CNA v3.1 | 0.6% | 2023-11-16 | Fix |
| CVE-2023-34375 | Seo By 10Web WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-32957 | Team Members Showcase WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-16 | |
| CVE-2023-32796 | WooCommerce Product Enquiry WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-32469 | Dell Precision 5820 Tower improper input validation | 7.5CNA v3.1 | 0.2% | 2023-11-16 | Fix |
| CVE-2023-28621 | WordPress Raise Mag theme and Wishful Blog theme are vulnerable to cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-11-16 | |
| CVE-2023-26368 | Adobe InCopy out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-26031 | Privilege escalation in Apache Hadoop Yarn container-executor binary on Linux systems | 7.5v3.1 | 2.1% | 2023-11-16 | Fix |
| CVE-2023-6176 | Kernel: Local DoS vulnerability in scatterwalk_copychunks | 4.7NVD v3.1 | 0.3% | 2023-11-16 | Fix |
| CVE-2023-6174 | Out-of-bounds read in Wireshark | 6.3CNA v3.1 | 0.7% | 2023-11-16 | Fix |
| CVE-2023-6121 | Red Hat Enterprise Linux 8 Kernel: Nvme: Info leak due to out-of-bounds read in nvmet_ctrl_find_get | 4.3NVD v3.1 | 1.6% | 2023-11-16 | Fix |
| CVE-2023-6119 | Trellix GetSusp improper privilege management | 6.5CNA v3.1 | 0.2% | 2023-11-16 | Fix |
| CVE-2023-6038 | Local file inclusion in h2oai/h2o-3 | 7.5NVD v3.1 | 4.3% | 2023-11-16 | Nuclei |
| CVE-2023-6023 | ModelDB Local File Include | 7.5v3.1 | 3.0% | 2023-11-16 | Nuclei |
| CVE-2023-6022 | Cross-site request forgery (CSRF) in PrefectHQ/Prefect | 8.8v3.1 | 0.4% | 2023-11-16 | Fix |
| CVE-2023-6021 | Ray Log File Local File Include | 7.5v3.1 | 37.1% | 2023-11-16 | NucleiFix |
| CVE-2023-6020 | Ray Static File Local File Include | 7.5v3.1 | 14.7% | 2023-11-16 | NucleiMetasploitExploit codeFix |
| CVE-2023-6019 | Ray command injection in cpu_profile parameter | 9.8v3.1 | 74.6% | 2023-11-16 | MetasploitExploit codeFix |