CVE-2023 records published in November 2023
Page two of three: records 1,001 to 2,000 of the 2,324 published in November 2023, newest first. The first page carries the figures for November 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-6018 | MLflow arbitrary file write | 9.8v3.1 | 47.9% | 2023-11-16 | NucleiFix |
| CVE-2023-6017 | H2O S3 Bucket takeover | 7.1v3.1 | 0.9% | 2023-11-16 | |
| CVE-2023-6016 | H2O remote code execution via POJO Model Import | 9.8v3.1 | 30.6% | 2023-11-16 | |
| CVE-2023-6015 | MLflow arbitrary file upload | 7.5NVD v3.1 | 4.4% | 2023-11-16 | Fix |
| CVE-2023-6014 | MLflow authentication bypass | 9.8v3.1 | 1.2% | 2023-11-16 | Fix |
| CVE-2023-6013 | H2O Local File Include | 5.4NVD v3.1 | 0.7% | 2023-11-16 | |
| CVE-2023-4771 | Cross-site scripting vulnerability in CKSource CKEditor | 6.1v3.1 | 0.9% | 2023-11-16 | Exploit codeFix |
| CVE-2023-48365 | Qlik Sense HTTP tunneling vulnerability | 9.9v3.1 | 47.5% | 2023-11-15 | KEVEmerging ThreatsFix |
| CVE-2023-48224 | Ethyca Fides Cryptographically Weak Generation of One-Time Codes for Identity Verification | 8.2CNA v3.1 | 1.0% | 2023-11-15 | Fix |
| CVE-2023-48219 | Special characters in unescaped text nodes can trigger mXSS in TinyMCE | 6.1CNA v3.1 | 0.7% | 2023-11-15 | Fix |
| CVE-2023-48200 | Grocy cross-site scripting | 5.4v3.1 | 0.8% | 2023-11-15 | |
| CVE-2023-48199 | Grocy 'manageApiKeys' component HTML injection | 7.8v3.1 | 0.5% | 2023-11-15 | |
| CVE-2023-48198 | Grocy cross-site scripting | 5.4v3.1 | 0.7% | 2023-11-15 | |
| CVE-2023-48197 | Grocy ‘manageApiKeys’ component cross-site scripting | 5.4v3.1 | 0.7% | 2023-11-15 | |
| CVE-2023-48089 | Xuxueli xxl-job xxl-job-admin vulnerable to remote code execution | 8.8v3.1 | 1.3% | 2023-11-15 | |
| CVE-2023-48088 | Xuxueli xxl-job xxl-job-admin vulnerable to cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-15 | |
| CVE-2023-48087 | Xuxueli xxl-job xxl-job-admin vulnerable to insecure permissions | 5.4v3.1 | 0.4% | 2023-11-15 | |
| CVE-2023-48014 | gpac out-of-bounds write | 7.8v3.1 | 0.4% | 2023-11-15 | |
| CVE-2023-48013 | GPAC filter packet handling double free | 7.8v3.1 | 0.3% | 2023-11-15 | |
| CVE-2023-48011 | GPAC movie fragment parsing use-after-free | 7.8v3.1 | 0.3% | 2023-11-15 | |
| CVE-2023-47678 | ASUSTeK COMPUTER RT-AC87U An improper access control | 9.1v3.1 | 0.7% | 2023-11-15 | |
| CVE-2023-47637 | SQL injection in Admin Grid Filter API in Pimcore | 8.8CNA v3.1 | 1.2% | 2023-11-15 | Fix |
| CVE-2023-47636 | Full path disclosure via re-export document in pimcore/admin-ui-classic-bundle | 5.3CNA v3.1 | 0.7% | 2023-11-15 | Fix |
| CVE-2023-47586 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server Multiple heap-based buffer overflow | 7.8v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-47585 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server out-of-bounds read | 7.8v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-47584 | FUJI ELECTRIC CO., LTD. and Hakko Electronics V-Server out-of-bounds write | 7.8v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-47583 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS Simulator Multiple out-of-bounds read | 7.8v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-47582 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS uninitialized pointer access | 7.8v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-47581 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS out-of-bounds read | 7.8v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-47580 | FUJI ELECTRIC CO., LTD. and Hakko Electronics TELLUS memory corruption | 7.8v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-47446 | PHPGurukul Pre-School Enrollment System cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-15 | |
| CVE-2023-47445 | PHPGurukul Pre-School Enrollment System SQL injection | 9.8v3.1 | 0.8% | 2023-11-15 | |
| CVE-2023-47444 | OpenCart code injection | 8.8v3.1 | 1.8% | 2023-11-15 | |
| CVE-2023-47347 | free5gc buffer overflow | 7.5v3.1 | 0.7% | 2023-11-15 | |
| CVE-2023-47345 | free5gc buffer overflow | 7.5v3.1 | 0.9% | 2023-11-15 | |
| CVE-2023-47309 | Nukium Gls cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-15 | |
| CVE-2023-47308 | Activedesign Newsletterpop SQL injection | 9.8v3.1 | 0.7% | 2023-11-15 | |
| CVE-2023-46672 | Logstash insertion of sensitive information into log file | 8.4CNA v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-46121 | Generic Extractor MITM vulnerability in yt-dlp | 5.0CNA v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-43979 | Prestahero Ybc Blog SQL injection | 9.8v3.1 | 0.7% | 2023-11-15 | Fix |
| CVE-2023-43591 | Zoom Video Communications Zoom Rooms for macOS improper privilege management | 7.8CNA v3.1 | 0.2% | 2023-11-15 | |
| CVE-2023-43590 | Zoom Video Communications Zoom Rooms for macOS link following | 7.8CNA v3.1 | 0.2% | 2023-11-15 | |
| CVE-2023-43588 | Zoom Video Communications Zoom Clients some insufficient control flow management | 3.5CNA v3.1 | 0.7% | 2023-11-15 | |
| CVE-2023-43582 | Zoom Video Communications Zoom Clients some improper authorization | 5.5CNA v3.1 | 0.7% | 2023-11-15 | |
| CVE-2023-41718 | Ivanti Secure Access incorrect default permissions | 7.8v3.1 | 0.5% | 2023-11-15 | Fix |
| CVE-2023-41699 | Payara Platform: URL redirection to untrusted site using FORM authentication | 6.1CNA v3.1 | 0.4% | 2023-11-15 | Fix |
| CVE-2023-41597 | EyouCMS cross-site scripting | 6.1v3.1 | 1.2% | 2023-11-15 | Nuclei |
| CVE-2023-41442 | Kloudq Tor Loco Min improper authentication | 9.8v3.1 | 1.3% | 2023-11-15 | |
| CVE-2023-40923 | Myprestamodules Orders (csv, Excel) Export Pro SQL injection | 8.8v3.1 | 0.7% | 2023-11-15 | Fix |
| CVE-2023-39337 | Ivanti EPMM information disclosure | 9.1v3.1 | 1.9% | 2023-11-15 | Fix |
| CVE-2023-39335 | Ivanti EPMM improper privilege management | 9.8v3.1 | 2.3% | 2023-11-15 | Fix |
| CVE-2023-38544 | A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings. This vulnerability could be exploited to compromise the integrity and security of the network on the affected system. | 5.5v3.1 | 0.4% | 2023-11-15 | Fix |
| CVE-2023-38543 | Ivanti Secure Access Client Windows resource exhaustion | 7.8v3.1 | 0.4% | 2023-11-15 | Fix |
| CVE-2023-38043 | Ivanti Secure Access Client Windows denial of service | 7.8v3.1 | 0.4% | 2023-11-15 | Fix |
| CVE-2023-35080 | Ivanti Secure Access Client incorrect default permissions | 7.8v3.1 | 0.7% | 2023-11-15 | Exploit codeFix |
| CVE-2023-34982 | AVEVA Operations Control Logger external control of file name or path | 7.1v3.1 | 0.2% | 2023-11-15 | |
| CVE-2023-34062 | Reactor Netty path traversal | 7.5CNA v3.1 | 1.1% | 2023-11-15 | Fix |
| CVE-2023-33873 | AVEVA Operations Control Logger execution with unnecessary privileges | 7.8v3.1 | 0.2% | 2023-11-15 | |
| CVE-2023-31100 | Phoenix SecureCore™ Technology™ 4 SMI handler vulnerability improper access control | 8.4CNA v3.1 | 0.2% | 2023-11-15 | Fix |
| CVE-2023-30954 | Palantir com.palantir.video:video-application-server gotham Video broken authentication | 2.7CNA v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-23549 | Checkmk DoS via long hostnames | 2.7CNA v3.1 | 0.6% | 2023-11-15 | Fix |
| CVE-2023-22818 | Multiple DLL search order hijacking vulnerabilities in SanDisk Security Installer for Windows | 7.3CNA v3.1 | 0.2% | 2023-11-15 | Fix |
| CVE-2023-6133 | Forminator WordPress plugin authenticated (Administrator+) arbitrary file upload | 4.9v3.1 | 0.9% | 2023-11-15 | Fix |
| CVE-2023-6112 | Google Chrome Navigation use-after-free | 8.8v3.1 | 24.7% | 2023-11-15 | Fix |
| CVE-2023-6105 | ManageEngine information disclosure in multiple Products | 5.5NVD v3.1 | 0.7% | 2023-11-15 | Fix |
| CVE-2023-6032 | Schneider Electric Galaxy VS path traversal | 5.3CNA v3.1 | 0.6% | 2023-11-15 | Fix |
| CVE-2023-5997 | Google Chrome Garbage Collection use-after-free | 8.8v3.1 | 1.0% | 2023-11-15 | Fix |
| CVE-2023-5987 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) cross-site scripting | 6.1CNA v3.1 | 0.4% | 2023-11-15 | Fix |
| CVE-2023-5986 | Schneider Electric EcoStruxure™ Power Monitoring Expert (PME) open redirect | 8.2CNA v3.1 | 0.5% | 2023-11-15 | Fix |
| CVE-2023-5985 | Schneider Electric ION8650 cross-site scripting | 4.8CNA v3.1 | 0.4% | 2023-11-15 | |
| CVE-2023-5984 | Schneider Electric ION8650 download without integrity check | 7.2CNA v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-5720 | Quarkus: Build env information disclosure via gradle plugin | 7.7CNA v3.1 | 0.8% | 2023-11-15 | |
| CVE-2023-5676 | Eclipse OpenJ9 possible infinite busy hang | 4.1CNA v3.1 | 0.4% | 2023-11-15 | Fix |
| CVE-2023-5381 | Elementor Addon Elements WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-11-15 | Fix |
| CVE-2023-5245 | Combust Mleap model archive extractor path traversal | 9.8NVD v3.1 | 1.2% | 2023-11-15 | Fix |
| CVE-2023-4889 | Shareaholic WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-11-15 | Fix |
| CVE-2023-4723 | Elementor Addon Elements WordPress plugin missing authorization to sensitive information exposure | 5.3v3.1 | 0.9% | 2023-11-15 | Fix |
| CVE-2023-4690 | Elementor Addon Elements WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-4689 | Elementor Addon Elements WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2023-11-15 | Fix |
| CVE-2023-4602 | Namaste! LMS WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.7% | 2023-11-15 | Fix |
| CVE-2023-48217 | Remote code execution via form uploads in Statamic/cms | 8.8CNA v3.1 | 1.1% | 2023-11-14 | Fix |
| CVE-2023-48094 | CesiumJS A cross-site scripting | 6.1v3.1 | 0.3% | 2023-11-14 | |
| CVE-2023-48021 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-48020 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47684 | Essential Grid WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.8% | 2023-11-14 | NucleiFix |
| CVE-2023-47680 | Qi Addons For Elementor WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47673 | Post Pay Counter WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47665 | Plainview Protect Passwords WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47662 | Live Gold Price and Silver Price Charts Widgets WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47660 | Product Visibility by Country for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47659 | Lava Directory Manager WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47658 | Extra Product Options for WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47657 | Direct Checkout Quick View Buy Now For WooCommerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47656 | ANAC XML Bandi di Gara WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47654 | BZScore Live Score WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47653 | TWB Woocommerce Reviews WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47646 | Recently viewed and most viewed products WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47641 | Inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in Aiohttp | 3.4CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-47640 | Insecure Use of HMAC-SHA1 for Session Signing in datahub | 6.4CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47631 | vantage6 Node accepts non-whitelisted algorithms from malicious server | 7.2CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47630 | Attacker can cause Kyverno user to unintentionally consume insecure image | 7.1CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-47629 | Privilege escalation through email sign-up in datahub | 7.1CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-47628 | Session Expiration Misconfiguration in datahub | 4.2CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47627 | Aiohttp has problems in HTTP parser (the python one, not llhttp) | 5.3CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-47609 | Thinkingreed OSS Calendar SQL injection | 8.8v3.1 | 1.1% | 2023-11-14 | Fix |
| CVE-2023-47554 | Actueel Financieel Nieuws Denk Internet Solutions WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47550 | Donations Made Easy Smart Donations WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2023-11-14 | |
| CVE-2023-47549 | EazyDocs WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47547 | Products, Order and Customers Export for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47546 | OneClick Chat to Order WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47545 | Forms for Mailchimp by Optin Cat WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47544 | Atarim WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47533 | Countdown and CountUp, WooCommerce Sales Timer WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47532 | WP Crowdfunding WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47528 | WP Edit Username WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47524 | CodeBard's Patron Button and Widgets for Patreon WordPress plugin cross-site scripting (XSS) | 6.1v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47522 | Photo Feed WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47520 | Responsive Column Widgets WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47518 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Matthew Muro Restrict Categories plugin <= 2.6.4 versions. | 6.1NVD v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-47517 | SendPress Newsletters WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-47384 | gpac memory leak | 5.5v3.1 | 0.3% | 2023-11-14 | |
| CVE-2023-47262 | Abbott ID NOW internal serial port vulnerability | 5.2v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-47130 | Unsafe deserialization of user data in yiisoft/Yii | 8.1CNA v3.1 | 3.1% | 2023-11-14 | Fix |
| CVE-2023-47127 | Weak authentication in Session Handling in TYPO3/cms-core | 4.2CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-47126 | Information disclosure in Install tool in TYPO3/cms-install | 3.7CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-47125 | TYPO3 html-sanitizer By-passing cross-site scripting Protection in HTML Sanitizer | 4.7CNA v3.1 | 0.6% | 2023-11-14 | Exploit codeFix |
| CVE-2023-46601 | Siemens COMOS improper access control | 9.6CNA v3.1 | 0.5% | 2023-11-14 | |
| CVE-2023-46590 | Siemens OPC UA Modelling Editor (SiOME) XML external entity injection | 7.5CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-46582 | code-projects Inventory Management SQL injection | 7.8v3.1 | 0.3% | 2023-11-14 | |
| CVE-2023-46581 | code-projects Inventory Management SQL injection | 5.5v3.1 | 0.3% | 2023-11-14 | |
| CVE-2023-46580 | code-projects Inventory Management cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-14 | |
| CVE-2023-46446 | AsyncSSH Rogue Session Attack | 6.8v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-46445 | AsyncSSH Rogue Extension Negotiation | 5.9v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-46132 | Crosslinking transaction attack in hyperledger/fabric | 7.1CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-46099 | Siemens SIMATIC PCS neo cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-46098 | Siemens SIMATIC PCS neo permissive cross-domain policy | 8.0CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-46097 | Siemens SIMATIC PCS neo SQL injection | 6.3CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-46096 | Siemens SIMATIC PCS neo missing authentication | 6.5CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-46026 | PHPGurukul Teacher Subject Allocation Management System profile.php cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-46025 | PHPGurukul Teacher Subject Allocation Management System teacher-info.php SQL injection | 4.9v3.1 | 0.7% | 2023-11-14 | |
| CVE-2023-46024 | PHPGurukul Teacher Subject Allocation Management System index.php SQL injection | 7.5v3.1 | 1.1% | 2023-11-14 | Exploit code |
| CVE-2023-46023 | code-projects Simple Task List addTask.php SQL injection | 6.5v3.1 | 0.6% | 2023-11-14 | |
| CVE-2023-46022 | code-projects BloodBank delete.php SQL injection | 7.8v3.1 | 0.8% | 2023-11-14 | Exploit code |
| CVE-2023-45881 | gibbonedu gibbon cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-14 | |
| CVE-2023-45880 | gibbonedu gibbon path traversal | 7.2v3.1 | 1.2% | 2023-11-14 | |
| CVE-2023-45879 | gibbonedu gibbon cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-14 | |
| CVE-2023-45878 | gibbonedu gibbon out-of-bounds write | 9.8NVD v3.1 | 63.1% | 2023-11-14 | NucleiExploit code |
| CVE-2023-45794 | Siemens Mendix Applications using Mendix 10 authentication bypass by replay | 6.8CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-45684 | Northern.tech Cfengine SQL injection | 7.5v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-45627 | HPE Aruba Access Points: 100 Series CLI service denial of service | 4.3CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-45626 | HPE Aruba Access Points: 100 Series incorrect authorization | 5.5CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-45625 | HPE Aruba Access Points: 100 Series command line interface command injection | 7.2CNA v3.1 | 1.8% | 2023-11-14 | Fix |
| CVE-2023-45624 | HPE Aruba Access Points: 100 Series soft ap daemon accessed denial of service | 7.5CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-45623 | HPE Aruba Access Points: 100 Series Wi-Fi Uplink service accessed denial of service | 7.5CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-45622 | HPE Aruba Access Points: 100 Series BLE daemon service accessed denial of service | 7.5CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-45621 | HPE Aruba Access Points: 100 Series CLI service accessed denial of service | 7.5CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-45620 | HPE Aruba Access Points: 100 Series CLI service accessed denial of service | 7.5CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-45619 | HPE Aruba Access Points: 100 Series RSSI service accessed by PAPI arbitrary file deletion | 8.2CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-45618 | HPE Aruba Access Points: 100 Series There are arbitrary file deletion | 8.2CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-45617 | HPE Aruba Access Points: 100 Series CLI service accessed by PAPI arbitrary file deletion | 8.2CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-45616 | HPE Aruba Access Points: 100 Series underlying AirWave client service buffer overflow | 9.8CNA v3.1 | 2.1% | 2023-11-14 | Fix |
| CVE-2023-45615 | HPE Aruba Access Points: 100 Series underlying CLI service buffer overflow | 9.8CNA v3.1 | 2.1% | 2023-11-14 | Fix |
| CVE-2023-45614 | HPE Aruba Access Points: 100 Series underlying CLI service buffer overflow | 9.8CNA v3.1 | 2.1% | 2023-11-14 | Fix |
| CVE-2023-45585 | Fortinet FortiSIEM sensitive information in log files | 2.1CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-45582 | Fortinet FortiMail missing brute-force protection | 5.3CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-45560 | Memberscard code injection | 7.5v3.1 | 0.7% | 2023-11-14 | |
| CVE-2023-45558 | Golden channel access token information disclosure | 7.5v3.1 | 0.7% | 2023-11-14 | |
| CVE-2023-44374 | A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router (6GK5812-1AA00-2AA2) (All ve | 7.1CNA v4.0 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-44373 | Siemens RUGGEDCOM RM1224 LTE(4G) EU injection | 9.4CNA v4.0 | 1.3% | 2023-11-14 | Fix |
| CVE-2023-44322 | Siemens RUGGEDCOM RM1224 LTE(4G) EU unchecked return value | 3.7CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-44321 | Siemens RUGGEDCOM RM1224 LTE(4G) EU denial of service | 5.1CNA v4.0 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-44320 | Siemens RUGGEDCOM RM1224 LTE(4G) EU forced browsing | 4.3CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-44319 | Siemens RUGGEDCOM RM1224 LTE(4G) EU weak hash | 6.9CNA v4.0 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-44318 | Siemens RUGGEDCOM RM1224 LTE(4G) EU hard-coded cryptographic key | 6.9CNA v4.0 | 0.7% | 2023-11-14 | |
| CVE-2023-44317 | Siemens RUGGEDCOM RM1224 LTE(4G) EU acceptance of untrusted data | 8.6CNA v4.0 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-44248 | Fortinet FortiEDR CollectorWindows improper access control | 4.0CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-43902 | Emudhra Emsigner weak password recovery | 9.8v3.1 | 0.8% | 2023-11-14 | |
| CVE-2023-43901 | Emudhra Emsigner incorrect authorization | 7.5v3.1 | 0.5% | 2023-11-14 | |
| CVE-2023-43900 | Emudhra Emsigner insecure direct object reference | 6.5v3.1 | 0.6% | 2023-11-14 | |
| CVE-2023-43505 | Siemens COMOS improper access control | 9.6CNA v3.1 | 0.6% | 2023-11-14 | |
| CVE-2023-43504 | Siemens COMOS buffer overflow | 9.6CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-43503 | Siemens COMOS cleartext transmission of sensitive information | 3.5CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-42783 | Fortinet FortiWLM relative path traversal | 7.3CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-42480 | Information disclosure in NetWeaver AS Java Logon | 5.3CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-42327 | Netgate pfSense cross-site scripting | 5.4v3.1 | 55.4% | 2023-11-14 | Emerging Threats |
| CVE-2023-42326 | Netgate pfSense command injection | 8.8v3.1 | 64.0% | 2023-11-14 | Emerging ThreatsExploit codeFix |
| CVE-2023-42325 | Netgate pfSense cross-site scripting | 5.4v3.1 | 57.9% | 2023-11-14 | Emerging Threats |
| CVE-2023-41840 | Fortinet FortiClientWindows untrusted search path | 7.4CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-41676 | Fortinet FortiSIEM information disclosure | 4.2CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-41570 | MikroTik RouterOS improper access control | 5.3v3.1 | 0.5% | 2023-11-14 | |
| CVE-2023-41366 | Information disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform | 5.3CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-40719 | Fortinet FortiAnalyzer hard-coded credentials | 4.1CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-40540 | Intel(R) NUC BIOS firmware information disclosure | 4.1CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-40220 | Intel(R) NUC BIOS firmware information disclosure | 5.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-39537 | AMI AptioV improper input validation in BIOS TCG2 | 7.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-39536 | AMI AptioV improper input validation in BIOS OFBD | 7.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-39535 | AMI AptioV improper input validation in BIOS | 7.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-39412 | Intel Unison software some cross-site request forgery | 5.4CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-39411 | Intel Unison software denial of service | 5.0CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-39230 | Intel Rapid Storage Technology software some insecure inherited permissions | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-39228 | Intel Unison software improper access control | 5.3CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-39221 | Intel Unison software improper access control | 5.4CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-39206 | Zoom Video Communications Zoom Clients some buffer overflow | 3.7CNA v3.1 | 1.1% | 2023-11-14 | |
| CVE-2023-39205 | Zoom Video Communications Zoom Clients improper check for exceptional conditions | 4.3CNA v3.1 | 0.9% | 2023-11-14 | |
| CVE-2023-39204 | Zoom Video Communications Zoom Clients some buffer overflow | 4.3CNA v3.1 | 1.1% | 2023-11-14 | |
| CVE-2023-39203 | Zoom Video Communications Zoom Rooms Client resource exhaustion | 4.3CNA v3.1 | 0.9% | 2023-11-14 | |
| CVE-2023-39202 | Zoom Video Communications Zoom Rooms Client untrusted search path | 3.1CNA v3.1 | 0.2% | 2023-11-14 | |
| CVE-2023-39199 | Zoom Video Communications Zoom Clients missing cryptographic step | 4.9CNA v3.1 | 0.6% | 2023-11-14 | |
| CVE-2023-38570 | Intel Unison software out-of-bounds access | 5.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-38411 | Intel Smart Campus android application improper access control | 3.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-38177 | Microsoft SharePoint server remote code execution | 6.1CNA v3.1 | 3.4% | 2023-11-14 | Fix |
| CVE-2023-38151 | Microsoft Host Integration Server 2020 remote code execution | 8.8CNA v3.1 | 1.8% | 2023-11-14 | Fix |
| CVE-2023-38131 | Intel Unison software denial of service | 6.5CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-36860 | Intel Unison software improper input validation | 7.6CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-36719 | Microsoft Speech Application Programming Interface (SAPI) elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-36705 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-36641 | Fortinet FortiOS A numeric truncation | 6.2CNA v3.1 | 1.3% | 2023-11-14 | Fix |
| CVE-2023-36633 | Fortinet FortiMail improper authorization | 5.3CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-36560 | Microsoft .NET Framework ASP.NET security feature bypass | 8.8CNA v3.1 | 2.9% | 2023-11-14 | Fix |
| CVE-2023-36558 | ASP.NET Core security feature bypass | 6.2CNA v3.1 | 1.1% | 2023-11-14 | Fix |
| CVE-2023-36553 | Fortinet FortiSIEM OS command injection | 9.3CNA v3.1 | 1.9% | 2023-11-14 | Fix |
| CVE-2023-36439 | Microsoft Exchange Server remote code execution | 8.0CNA v3.1 | 4.9% | 2023-11-14 | Fix |
| CVE-2023-36437 | Microsoft Azure DevOps server remote code execution | 8.8CNA v3.1 | 2.0% | 2023-11-14 | Fix |
| CVE-2023-36428 | Microsoft Local Security Authority subsystem service information disclosure | 5.5CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-36427 | Microsoft Windows Hyper-V elevation of privilege | 7.0CNA v3.1 | 1.5% | 2023-11-14 | Exploit codeFix |
| CVE-2023-36425 | Microsoft Windows Distributed File System (DFS) remote code execution | 8.0CNA v3.1 | 1.5% | 2023-11-14 | Fix |
| CVE-2023-36424 | Microsoft Windows out-of-bounds read | 7.8CNA v3.1 | 12.2% | 2023-11-14 | KEVExploit codeFix |
| CVE-2023-36423 | Microsoft Remote Registry service remote code execution | 8.8CNA v3.1 | 2.0% | 2023-11-14 | Fix |
| CVE-2023-36422 | Microsoft Windows Defender elevation of privilege | 7.8CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-36413 | Microsoft Office security feature bypass | 6.5CNA v3.1 | 30.0% | 2023-11-14 | Fix |
| CVE-2023-36410 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-36408 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-36407 | Microsoft Windows Hyper-V elevation of privilege | 7.8CNA v3.1 | 1.7% | 2023-11-14 | Exploit codeFix |
| CVE-2023-36406 | Microsoft Windows Hyper-V information disclosure | 5.5CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-36405 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-36404 | Microsoft Windows Kernel information disclosure | 5.5CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-36403 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-36402 | Microsoft WDAC OLE DB provider for SQL server remote code execution | 8.8CNA v3.1 | 1.8% | 2023-11-14 | Fix |
| CVE-2023-36401 | Microsoft Remote Registry service remote code execution | 7.2CNA v3.1 | 1.9% | 2023-11-14 | Fix |
| CVE-2023-36400 | Microsoft Windows HMAC Key Derivation elevation of privilege | 8.8CNA v3.1 | 4.3% | 2023-11-14 | Fix |
| CVE-2023-36399 | Microsoft Windows Storage elevation of privilege | 7.1CNA v3.1 | 8.3% | 2023-11-14 | Fix |
| CVE-2023-36398 | Microsoft Windows NTFS information disclosure | 6.5CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-36397 | Microsoft Windows Pragmatic General Multicast (PGM) remote code execution | 9.8CNA v3.1 | 17.5% | 2023-11-14 | Fix |
| CVE-2023-36396 | Microsoft Windows Compressed Folder remote code execution | 7.8CNA v3.1 | 1.7% | 2023-11-14 | Fix |
| CVE-2023-36395 | Microsoft Windows Deployment services denial of service | 7.5CNA v3.1 | 2.5% | 2023-11-14 | Fix |
| CVE-2023-36394 | Microsoft Windows Search service elevation of privilege | 7.0CNA v3.1 | 6.7% | 2023-11-14 | Fix |
| CVE-2023-36393 | Microsoft Windows User interface Application Core remote code execution | 7.8CNA v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-36392 | Microsoft Windows DHCP server service denial of service | 7.5CNA v3.1 | 2.5% | 2023-11-14 | Fix |
| CVE-2023-36052 | Microsoft Azure CLI REST command information disclosure | 8.6CNA v3.1 | 21.1% | 2023-11-14 | Fix |
| CVE-2023-36050 | Microsoft Exchange Server spoofing | 8.0CNA v3.1 | 39.2% | 2023-11-14 | Fix |
| CVE-2023-36049 | NET, .NET Framework, and Visual Studio elevation of privilege | 7.6CNA v3.1 | 6.8% | 2023-11-14 | Fix |
| CVE-2023-36047 | Microsoft Windows Authentication elevation of privilege | 7.8CNA v3.1 | 1.1% | 2023-11-14 | Fix |
| CVE-2023-36046 | Microsoft Windows Authentication denial of service | 7.1CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-36045 | Microsoft Office Graphics remote code execution | 7.8CNA v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-36043 | Microsoft System Center Operations Manager Open Management Infrastructure information disclosure | 6.5CNA v3.1 | 1.4% | 2023-11-14 | Fix |
| CVE-2023-36042 | Visual Studio denial of service | 6.2CNA v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-36041 | Microsoft Excel remote code execution | 7.8CNA v3.1 | 56.7% | 2023-11-14 | Fix |
| CVE-2023-36039 | Microsoft Exchange Server spoofing | 8.0CNA v3.1 | 73.0% | 2023-11-14 | Fix |
| CVE-2023-36038 | Microsoft ASP.NET Core denial of service | 8.2CNA v3.1 | 2.8% | 2023-11-14 | Fix |
| CVE-2023-36037 | Microsoft Excel security feature bypass | 7.8CNA v3.1 | 1.2% | 2023-11-14 | Fix |
| CVE-2023-36036 | Microsoft Windows Cloud Files Mini Filter driver privilege escalation | 7.8CNA v3.1 | 16.7% | 2023-11-14 | KEVFix |
| CVE-2023-36035 | Microsoft Exchange Server spoofing | 8.0CNA v3.1 | 86.6% | 2023-11-14 | Fix |
| CVE-2023-36033 | Microsoft Windows Desktop Window Manager (DWM) Core library privilege escalation | 7.8CNA v3.1 | 10.9% | 2023-11-14 | KEVFix |
| CVE-2023-36031 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 7.6CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-36030 | Microsoft Dynamics 365 Sales spoofing | 6.1CNA v3.1 | 0.9% | 2023-11-14 | Fix |
| CVE-2023-36028 | Microsoft Protected Extensible Authentication Protocol (PEAP) remote code execution | 9.8CNA v3.1 | 2.8% | 2023-11-14 | Fix |
| CVE-2023-36025 | Microsoft Windows SmartScreen security feature bypass | 8.8CNA v3.1 | 88.1% | 2023-11-14 | KEVEmerging ThreatsExploit codeFix |
| CVE-2023-36021 | Microsoft On-Prem Data Gateway security feature bypass | 8.0CNA v3.1 | 1.7% | 2023-11-14 | Fix |
| CVE-2023-36018 | Microsoft Visual Studio Code Jupyter Extension spoofing | 7.8CNA v3.1 | 1.5% | 2023-11-14 | Fix |
| CVE-2023-36017 | Microsoft Windows Scripting Engine memory corruption | 8.8CNA v3.1 | 25.3% | 2023-11-14 | Fix |
| CVE-2023-36016 | Microsoft Dynamics 365 (on-premises) cross-site scripting | 6.2CNA v3.1 | 1.3% | 2023-11-14 | Fix |
| CVE-2023-36007 | Microsoft Send Customer Voice survey from Dynamics 365 spoofing | 7.6CNA v3.1 | 1.1% | 2023-11-14 | Fix |
| CVE-2023-34997 | Intel Server Configuration Utility software installer for some insecure inherited permissions | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-34991 | Fortinet FortiWLM SQL injection | 9.3CNA v3.1 | 28.8% | 2023-11-14 | Emerging ThreatsFix |
| CVE-2023-34431 | Intel(R) Server Board BIOS firmware some improper input validation | 8.2CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-34430 | Intel Battery Life Diagnostic Tool software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-34350 | Intel(R) XTU software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-34314 | Intel(R) Simics Simulator software some insecure inherited permissions | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-34060 | VMware Cloud Director Appliance (VCD Appliance) missing authentication | 9.8v3.1 | 1.3% | 2023-11-14 | Fix |
| CVE-2023-33878 | Intel(R) NUC P14E Laptop Element Audio Install Package software privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-33874 | Intel(R) NUC 12 Pro Kits and Mini PCs some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-33872 | Intel Support android application improper access control | 5.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-33304 | Fortinet FortiClientWindows hard-coded credentials | 4.4CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32701 | Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP) | 7.1CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32662 | Intel Battery Life Diagnostic Tool installation software some improper authorization | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32661 | Intel NUC Kits NUC7PJYH and NUC7CJYH Realtek SD Card Reader Driver improper authentication | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32660 | Intel NUC Kit NUC6i7KYK Thunderbolt 3 Firmware Update Tool uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32658 | Intel(R) NUC Kits NUC7i3DN some unquoted search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32655 | Intel(R) NUC Kits and Mini PCs privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32641 | Intel(R) QAT firmware improper input validation | 7.3CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-32638 | Intel Arc RGB Controller software some incorrect default permissions | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32283 | Intel(R) On Demand software some sensitive information in log files | 5.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32279 | Intel(R) Connectivity Performance Suite user mode driver for some improper access control | 7.5CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-32278 | Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits privilege escalation | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-32204 | Intel(R) OFU software some improper access control | 8.8CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-31754 | Optimizely Cms cross-site scripting | 4.8v3.1 | 0.4% | 2023-11-14 | |
| CVE-2023-31403 | Improper access control vulnerability in SAP Business One product installation | 9.6CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-31320 | AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards improper input validation | 7.5v3.1 | 1.3% | 2023-11-14 | Exploit codeFix |
| CVE-2023-31273 | Intel DCM software some protection mechanism failure | 10.0CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-31247 | Weston Embedded uC-HTTP HTTP Server host header parsing functionality memory corruption | 9.8v3.1 | 1.7% | 2023-11-14 | Fix |
| CVE-2023-31203 | OpenVINO Model Server software some improper input validation | 4.3CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-29504 | Intel(R) RealSense(TM) Dynamic Calibration software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-29177 | Fortinet FortiDDoS-F buffer overflow | 6.2CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-29165 | Intel(R) Arc(TM) Control software some unquoted search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | |
| CVE-2023-29161 | Intel(R) OFU software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-29157 | Intel(R) OFU software some improper access control | 8.4CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28741 | Intel(R) QAT drivers some buffer overflow | 7.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28740 | Intel(R) QAT drivers some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28737 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some improper initialization | 8.8CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28723 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some information disclosure | 3.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28404 | Intel(R) Arc(TM) & Iris(R) Xe Graphics out-of-bounds read | 3.8CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28401 | Intel(R) Arc(TM) & Iris(R) Xe Graphics some out-of-bounds write | 5.2CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28397 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some improper access control | 7.8CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28391 | Weston Embedded uC-HTTP HTTP Server header parsing functionality memory corruption | 9.8v3.1 | 1.5% | 2023-11-14 | Fix |
| CVE-2023-28388 | Intel(R) Chipset Device Software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28379 | Weston Embedded uC-HTTP HTTP Server form boundary functionality memory corruption | 9.8v3.1 | 1.7% | 2023-11-14 | Fix |
| CVE-2023-28378 | Intel(R) QAT drivers some improper authorization | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28377 | Intel(R) NUC Kit NUC11PH USB firmware installation software some improper authentication | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-28376 | Intel(R) E810 Ethernet Controllers and Adapters firmware for some out-of-bounds read | 6.5CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-28002 | Fortinet FortiOS improper integrity check validation | 5.8CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-27882 | Weston Embedded uC-HTTP HTTP Server form boundary functionality heap-based buffer overflow | 9.8v3.1 | 1.8% | 2023-11-14 | Fix |
| CVE-2023-27879 | Intel(R) Optane(TM) SSD products firmware for some improper access control | 6.8CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-27519 | Intel(R) Optane(TM) SSD products firmware for some improper input validation | 6.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-27513 | Intel(R) Server Information Retrieval Utility software some uncontrolled search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-27383 | Intel(R) oneAPI HPC Toolkit some protection mechanism failure | 6.8CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-27306 | Intel(R) Optane(TM) SSD products firmware for some improper initialization | 6.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-27305 | Intel(R) Arc(TM) Control software some incorrect default permissions | 6.7CNA v3.1 | 0.2% | 2023-11-14 | |
| CVE-2023-26589 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some use-after-free | 6.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-26222 | TIBCO EBX cross-site scripting (XXS) | 8.7CNA v3.1 | 0.5% | 2023-11-14 | |
| CVE-2023-26205 | Fortinet FortiADC improper access control | 7.9CNA v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-25952 | Intel(R) Arc(TM) Control software some out-of-bounds write | 6.1CNA v3.1 | 0.2% | 2023-11-14 | |
| CVE-2023-25949 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some resource exhaustion | 5.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-25756 | Intel(R) Processors BIOS firmware for some out-of-bounds read | 4.6CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-25603 | Fortinet FortiADC permissive cross-domain policy | 5.4CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-25181 | Weston Embedded uC-HTTP HTTP Server functionality heap-based buffer overflow | 9.8v3.1 | 1.7% | 2023-11-14 | Fix |
| CVE-2023-25080 | Intel(R) Distribution of OpenVINO toolkit software some protection mechanism failure | 5.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-25075 | Intel Server Configuration Utility software installer for some unquoted search path | 6.7CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-25071 | Intel(R) Arc(TM) & Iris(R) Xe Graphics some null pointer dereference | 5.6CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-24592 | Intel(R) oneAPI Toolkits and Component software some path traversal | 7.3CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-24588 | Intel(R) Optane(TM) SSD products firmware for some information disclosure | 5.9CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-24587 | Intel(R) Optane(TM) SSD products firmware for some insufficient control flow management | 6.9CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-24585 | Weston Embedded uC-HTTP HTTP Server functionality out-of-bounds write | 9.8v3.1 | 1.2% | 2023-11-14 | Fix |
| CVE-2023-23583 | Intel(R) Processors privilege escalation | 8.8CNA v3.1 | 1.3% | 2023-11-14 | Fix |
| CVE-2023-22663 | Intel Unison software improper authentication | 5.9CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-22448 | Intel Unison software improper access control | 5.9CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-22337 | Intel Unison software improper input validation | 7.5CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-22329 | Intel(R) Processors BIOS firmware for some improper input validation | 2.6CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-22327 | Intel(R) FPGA products firmware for some out-of-bounds write | 6.0CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-22313 | Intel(R) QAT Library software information disclosure | 2.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-22310 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some race condition | 6.5CNA v3.1 | 0.1% | 2023-11-14 | Fix |
| CVE-2023-22305 | Intel(R) Aptio* V UEFI Firmware Integrator Tools some integer overflow | 6.5CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-22292 | Intel Unison software uncaught exception | 7.3CNA v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-22290 | Intel Unison software uncaught exception | 6.5CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-22285 | Intel Unison software improper access control | 7.5CNA v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-20596 | AMD Ryzen processors SMM Supervisor improper input validation | 9.8v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-20592 | AMD EPYC processors INVD instruction handling vulnerability | 6.5v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-20571 | AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics “Cezanne” race condition | 8.1v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-20568 | AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards improper signature verification | 6.7v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-20567 | AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards improper signature verification | 6.7v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-20566 | Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. | 5.3CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-20565 | AMD Ryzen processors System Management Mode privilege escalation | 7.8v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-20563 | AMD Ryzen processors System Management Mode privilege escalation | 7.8v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-20533 | AMD Ryzen™ 3000 Series Desktop Processors “Matisse” denial of service | 6.1CNA v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-20526 | AMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax” ASP Bootloader improper input validation | 1.9CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-20521 | AMD processors ASP bootloader race condition | 3.3CNA v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-20519 | AMD 3rd Gen AMD EPYC™ Processors use-after-free | 3.3v3.1 | 0.2% | 2023-11-14 | Fix |
| CVE-2023-6131 | Code injection in salesagility/SuiteCRM | 8.8v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-6130 | Path traversal: \..\filename in salesagility/SuiteCRM | 8.8v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-6128 | Cross-site scripting (XSS) Reflected in salesagility/SuiteCRM | 5.4v3.1 | 0.6% | 2023-11-14 | Fix |
| CVE-2023-6127 | Unrestricted upload of file with dangerous type in salesagility/SuiteCRM | 5.4v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-6126 | Code injection in salesagility/SuiteCRM | 9.8v3.1 | 0.7% | 2023-11-14 | Fix |
| CVE-2023-6125 | Code injection in salesagility/SuiteCRM | 8.8v3.1 | 0.8% | 2023-11-14 | Fix |
| CVE-2023-6124 | Server-side request forgery (SSRF) in salesagility/SuiteCRM | 4.3v3.1 | 0.5% | 2023-11-14 | Fix |
| CVE-2023-6111 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-11-14 | Fix |
| CVE-2023-6109 | YOP Poll WordPress plugin race condition to Vote manipulation | 3.7NVD v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-6006 | PaperCut NG, PaperCut MF privilege escalation | 7.8CNA v3.1 | 0.4% | 2023-11-14 | Fix |
| CVE-2023-5528 | Kubernetes improper input validation | 7.2CNA v3.1 | 4.3% | 2023-11-14 | Fix |
| CVE-2023-5189 | Red Hat Ansible Automation Platform hub: Insecure galaxy-importer tarfile extraction | 6.3CNA v3.1 | 1.0% | 2023-11-14 | Fix |
| CVE-2023-48068 | DedeCMS cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-13 | |
| CVE-2023-48063 | iteachyou Dreamer CMS cross-site request forgery | 4.3v3.1 | 0.2% | 2023-11-13 | |
| CVE-2023-48060 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-13 | |
| CVE-2023-48058 | iteachyou Dreamer CMS cross-site request forgery | 8.8v3.1 | 0.4% | 2023-11-13 | |
| CVE-2023-47801 | Click Studios Passwordstate incorrect permission assignment | 4.7v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-47697 | WP Event Manager WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-47696 | Product Enquiry for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-47695 | Shortcodes Finder WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-47690 | Additional Order Filters for WooCommerce WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-47669 | Profile Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-47652 | Auto Affiliate Links WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | Fix |
| CVE-2023-47625 | Global buffer overflow leading to denial of service in PX4-Autopilot | 2.9CNA v3.1 | 0.5% | 2023-11-13 | Fix |
| CVE-2023-47621 | Remote code execution via file uploads in guest-entries | 8.8CNA v3.1 | 1.0% | 2023-11-13 | Fix |
| CVE-2023-47516 | Category Post List Widget WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | |
| CVE-2023-47346 | free5gc buffer overflow | 7.5v3.1 | 0.8% | 2023-11-13 | |
| CVE-2023-47230 | Contact Forms by Cimatti WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-47163 | Remarshal uncontrolled recursion | 7.5v3.1 | 1.0% | 2023-11-13 | Fix |
| CVE-2023-47117 | HumanSignal label-studio Label Studio Object Relational Mapper leak vulnerability in Filtering Task | 7.5CNA v3.1 | 4.1% | 2023-11-13 | NucleiFix |
| CVE-2023-46638 | WCP OpenWeather WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-46636 | Custom Header Images WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-46634 | Custom My Account for Woocommerce WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | |
| CVE-2023-46629 | Cross-Site Request Forgery (CSRF) vulnerability in themelocation Remove Add to Cart WooCommerce plugin <= 1.4.4. | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-46625 | Autolinks Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-46620 | DeepL Pro API translation WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-46619 | WDSocialWidgets WordPress plugin WebDorado cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-46618 | Category SEO Meta Tags WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-46207 | Motors Car Dealer and Classified Ads WordPress plugin server side request forgery (SSRF) | 7.5v3.1 | 0.5% | 2023-11-13 | Fix |
| CVE-2023-46201 | Auto Login New User After Registration WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | |
| CVE-2023-46092 | Webmaster Tools WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | |
| CVE-2023-46021 | code-projects BloodBank cancel.php SQL injection | 5.5v3.1 | 0.3% | 2023-11-13 | Exploit code |
| CVE-2023-46020 | code-projects BloodBank updateprofile.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-13 | Exploit code |
| CVE-2023-46019 | code-projects BloodBank abs.php cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-11-13 | |
| CVE-2023-46018 | code-projects BloodBank receiverReg.php SQL injection | 5.5v3.1 | 0.4% | 2023-11-13 | Exploit code |
| CVE-2023-46017 | code-projects BloodBank receiverLogin.php SQL injection | 5.5v3.1 | 0.4% | 2023-11-13 | Exploit code |
| CVE-2023-46016 | code-projects BloodBank abs.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-13 | Exploit code |
| CVE-2023-46015 | code-projects BloodBank index.php cross-site scripting | 6.1NVD v3.1 | 0.5% | 2023-11-13 | |
| CVE-2023-46014 | code-projects BloodBank hospitalLogin.php SQL injection | 5.5NVD v3.1 | 0.4% | 2023-11-13 | Exploit code |
| CVE-2023-42816 | Denial of service from malicious signature in kyverno | 6.1CNA v3.1 | 0.5% | 2023-11-13 | Fix |
| CVE-2023-42815 | Denial of service from malicious image manifest in kyverno | 3.1CNA v3.1 | 0.7% | 2023-11-13 | Fix |
| CVE-2023-42814 | Denial of service from malicious image manifest in kyverno | 3.1CNA v3.1 | 0.7% | 2023-11-13 | Fix |
| CVE-2023-42813 | Denial of service from malicious manifest in kyverno | 6.1CNA v3.1 | 0.7% | 2023-11-13 | Fix |
| CVE-2023-41239 | PowerPress Podcasting WordPress plugin server side request forgery (SSRF) | 6.5v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-40335 | Cleverwise Daily Quotes WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | |
| CVE-2023-39166 | tagDiv Composer WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | Fix |
| CVE-2023-38515 | Church Admin WordPress plugin server side request forgery (SSRF) | 4.9v3.1 | 0.5% | 2023-11-13 | Fix |
| CVE-2023-38364 | IBM CICS TX Advanced cross-site scripting | 6.1CNA v3.1 | 0.5% | 2023-11-13 | Fix |
| CVE-2023-38363 | IBM CICS TX information disclosure | 4.3CNA v3.1 | 0.6% | 2023-11-13 | Fix |
| CVE-2023-37978 | HTTP Headers WordPress plugin server side request forgery (SSRF) | 4.9v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-35877 | Extra User Details WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | Fix |
| CVE-2023-35041 | Webpushr WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-34384 | Kebo Twitter Feed WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-34378 | WP Hide Post WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-34013 | Poll Maker WordPress plugin server side request forgery (SSRF) | 7.5v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-33207 | Stop Referrer Spam WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-32588 | Post State Tags WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-32583 | WP All Backup WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-32123 | The7 WordPress theme cross-site request forgery (CSRF) | 6.1v3.1 | 0.2% | 2023-11-13 | Fix |
| CVE-2023-31230 | Baidu Tongji generator WordPress plugin cross-site request forgery (CSRF) | 6.1NVD v3.1 | 0.2% | 2023-11-13 | |
| CVE-2023-31219 | Download Monitor WordPress plugin server side request forgery (SSRF) | 4.9v3.1 | 0.7% | 2023-11-13 | Fix |
| CVE-2023-27445 | Blog Floating Button WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-27441 | New Adman WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-27438 | Evgen Yurchenko WP Translitera cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-27436 | Elegant Custom Fonts WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-27434 | Classic Editor and Classic Widgets WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-26543 | WP Meteor Page Speed Optimization Topping WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-26531 | 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-26524 | Quiz And Survey Master WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-26518 | WP TFeed WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | |
| CVE-2023-26516 | Debug Assistant WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2023-11-13 | Fix |
| CVE-2023-26514 | XML Sitemap Generator for Google WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-13 | Fix |
| CVE-2023-23800 | Shortcodes Ultimate WordPress plugin server side request forgery (SSRF) | 6.5NVD v3.1 | 0.5% | 2023-11-13 | Fix |
| CVE-2023-23684 | WPGraphQL WordPress plugin server side request forgery (SSRF) | 6.5v3.1 | 0.5% | 2023-11-13 | Fix |
| CVE-2023-6103 | Intelbras RX 1500 SSID WiFi.html cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-13 | |
| CVE-2023-6102 | Maiwei Safety Production Control Platform unrestricted upload | 9.8v3.1 | 0.8% | 2023-11-13 | |
| CVE-2023-6101 | Maiwei Safety Production Control Platform Intelligent Monitoring ha.html information disclosure | 7.5v3.1 | 0.9% | 2023-11-13 | |
| CVE-2023-6100 | Maiwei Safety Production Control Platform GetItemList information disclosure | 5.3v3.1 | 0.8% | 2023-11-13 | |
| CVE-2023-6099 | Shenzhen Youkate Industrial Facial Love Cloud Payment System improper privilege management | 9.8v3.1 | 0.9% | 2023-11-13 | |
| CVE-2023-6098 | Cross-site scripting on ICSSolution ICS Business Manager | 6.1v3.1 | 0.5% | 2023-11-13 | |
| CVE-2023-6097 | SQL injection on ICSSolution ICS Business Manager | 8.8NVD v3.1 | 0.8% | 2023-11-13 | |
| CVE-2023-5747 | Command injection via wave install file | 7.2CNA v3.1 | 0.6% | 2023-11-13 | Fix |
| CVE-2023-5741 | POWR WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.6% | 2023-11-13 | Fix |
| CVE-2023-5037 | Hanwha Vision A-Series authenticated command injection | 7.1CNA v4.0 | 1.5% | 2023-11-13 | Fix |
| CVE-2023-4775 | Advanced iFrame WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-13 | Fix |
| CVE-2023-4603 | Star CloudPRNT for WooCommerce WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.7% | 2023-11-13 | Fix |
| CVE-2023-47037 | Apache Airflow missing fix for in (DAG run broken access) | 4.3v3.1 | 1.5% | 2023-11-12 | Fix |
| CVE-2023-42781 | Apache Airflow: Permission verification bypass allows viewing dagruns of other dags | 6.5v3.1 | 1.7% | 2023-11-12 | Fix |
| CVE-2023-29425 | ShiftController Employee Shift Scheduling WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-29238 | Whydonate WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28987 | Wp Ultimate Review WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28930 | Mobile Banner WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28696 | I Recommend This WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28694 | Wbcom Designs BuddyPress Activity Social Share WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28618 | Enhanced Plugin Admin WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28498 | Hotel Booking Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28497 | Slideshow Gallery WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28495 | WP Shortcode by MyThemeShop WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28420 | Custom Options Plus WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | |
| CVE-2023-28419 | Force First and Last Name as Display Name WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.4% | 2023-11-12 | Fix |
| CVE-2023-28173 | Google XML Sitemap for Images WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | |
| CVE-2023-28172 | WP Google Map WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28167 | CF7 Invisible reCAPTCHA WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-28134 | Local Privliege Escalation in Check Point Endpoint Security Remediation service | 7.8v3.1 | 0.2% | 2023-11-12 | Fix |
| CVE-2023-27632 | Daily Prayer Time WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-27623 | WP Page Numbers WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | |
| CVE-2023-27611 | Reusable Blocks Extended WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-27431 | Big Store WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-27418 | Side Menu Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-27417 | Affiliate Super Assistent WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-12 | Fix |
| CVE-2023-6084 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.9% | 2023-11-12 | |
| CVE-2023-47390 | Headscale writes bearer tokens to info-level logs | 7.5v3.1 | 0.7% | 2023-11-11 | |
| CVE-2023-46850 | OpenVPN 2 (Community) use-after-free | 9.8v3.1 | 2.0% | 2023-11-11 | Fix |
| CVE-2023-46849 | OpenVPN 2 (Community) divide by zero | 7.5v3.1 | 1.2% | 2023-11-11 | Fix |
| CVE-2023-43057 | IBM QRadar SIEM cross-site scripting | 4.6CNA v3.1 | 0.4% | 2023-11-11 | Fix |
| CVE-2023-5959 | Byzoro Smart S85F Management Platform login.php password recovery | 4.3v3.1 | 0.9% | 2023-11-11 | |
| CVE-2023-47800 | Natus Sleepworks hard-coded credentials | 9.8v3.1 | 1.4% | 2023-11-10 | Fix |
| CVE-2023-47614 | Telit Cinterion BGS5 information disclosure | 3.3NVD v3.1 | 0.2% | 2023-11-10 | Fix |
| CVE-2023-47611 | Telit Cinterion BGS5 improper privilege management | 7.8NVD v3.1 | 0.2% | 2023-11-10 | Fix |
| CVE-2023-47246 | SysAid Server path traversal | 9.8v3.1 | 98.9% | 2023-11-10 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-47164 | DigitalDruid.Net HOTELDRUID cross-site scripting | 6.1v3.1 | 0.7% | 2023-11-10 | Fix |
| CVE-2023-47129 | Statamic CMS remote code execution via front-end form uploads | 8.4CNA v3.1 | 1.1% | 2023-11-10 | Exploit codeFix |
| CVE-2023-47128 | piccolo SQL injection via named transaction savepoints | 9.1CNA v3.1 | 0.8% | 2023-11-10 | Fix |
| CVE-2023-47122 | Gitsign's Rekor public keys fetched from upstream API instead of local TUF client | 4.2CNA v3.1 | 0.4% | 2023-11-10 | Fix |
| CVE-2023-47121 | Discourse SSRF vulnerability in Embedding | 3.4CNA v3.1 | 0.7% | 2023-11-10 | Fix |
| CVE-2023-47120 | Discourse DoS through Onebox favicon URL | 7.5CNA v3.1 | 1.0% | 2023-11-10 | Fix |
| CVE-2023-47119 | discourse HTML injection in oneboxed links | 5.3CNA v3.1 | 0.9% | 2023-11-10 | Exploit codeFix |
| CVE-2023-47108 | opentelemetry-go-contrib DoS vulnerability in otelgrpc due to unbound cardinality metrics | 7.5CNA v3.1 | 2.0% | 2023-11-10 | Fix |
| CVE-2023-46735 | Symfony potential cross-site scripting in WebhookController | 6.1CNA v3.1 | 0.6% | 2023-11-10 | Fix |
| CVE-2023-46734 | Symfony potential cross-site scripting vulnerabilities in CodeExtension filters | 6.1CNA v3.1 | 0.7% | 2023-11-10 | Fix |
| CVE-2023-46733 | Symfony possible session fixation | 6.5CNA v3.1 | 0.7% | 2023-11-10 | Fix |
| CVE-2023-46729 | Sentry Next.js vulnerable to SSRF via Next.js SDK tunnel endpoint | 9.3CNA v3.1 | 0.6% | 2023-11-10 | Fix |
| CVE-2023-46130 | discourse bypassing height value allowed in some theme components | 4.3CNA v3.1 | 0.7% | 2023-11-10 | Fix |
| CVE-2023-45816 | discourse unread bookmark reminder notifications that the user cannot access can be seen | 3.3CNA v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-45806 | Discourse vulnerable to DoS via Regexp injection in Full Name | 4.3CNA v3.1 | 1.0% | 2023-11-10 | Fix |
| CVE-2023-45167 | IBM AIX denial of service | 6.2CNA v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-41285 | QNAP QuMagie SQL injection | 7.4CNA v3.1 | 0.5% | 2023-11-10 | Fix |
| CVE-2023-41284 | QNAP QuMagie SQL injection | 7.4CNA v3.1 | 0.5% | 2023-11-10 | Fix |
| CVE-2023-39796 | WBCE_CMS miniform module SQL injection | 9.8v3.1 | 6.1% | 2023-11-10 | NucleiFix |
| CVE-2023-39295 | QNAP QuMagie OS command injection | 8.8CNA v3.1 | 1.7% | 2023-11-10 | Fix |
| CVE-2023-36027 | Microsoft Edge (Chromium-based) elevation of privilege | 7.1CNA v3.1 | 1.1% | 2023-11-10 | Fix |
| CVE-2023-36024 | Microsoft Edge (Chromium-based) elevation of privilege | 7.1CNA v3.1 | 1.1% | 2023-11-10 | Fix |
| CVE-2023-36014 | Microsoft Edge (Chromium-based) remote code execution | 7.3CNA v3.1 | 1.4% | 2023-11-10 | Fix |
| CVE-2023-31078 | WP BrowserUpdate WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-31077 | Export WP Page to Static HTML/CSS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-30478 | Newsletters WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-29440 | Simple Job Board WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-29428 | Superb Social Media Share Buttons and Follow Buttons WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-29426 | Spreadshop WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-10 | Fix |
| CVE-2023-23367 | QNAP QTS, QuTS hero and QuTScloud OS command injection | 4.7CNA v3.1 | 1.5% | 2023-11-10 | Fix |
| CVE-2023-6076 | PHPGurukul Restaurant Table Booking System booking-details.php information disclosure | 7.5v3.1 | 1.0% | 2023-11-10 | |
| CVE-2023-6075 | PHPGurukul Restaurant Table Booking System Reservation request index.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-11-10 | |
| CVE-2023-6074 | PHPGurukul Restaurant Table Booking System Booking Reservation check-status.php SQL injection | 9.8v3.1 | 0.7% | 2023-11-10 | |
| CVE-2023-6073 | DoS and Control of Volume settings for VW ID.3 ICAS3 IVI ECU | 6.3v3.1 | 0.4% | 2023-11-10 | Fix |
| CVE-2023-6069 | Improper link resolution before file access in froxlor/froxlor | 8.8NVD v3.1 | 0.8% | 2023-11-10 | Fix |
| CVE-2023-4949 | Memory corruption vulnerability in Grub-Legacy's XFS Implementation | 6.7NVD v3.1 | 0.2% | 2023-11-10 | Fix |
| CVE-2023-4804 | Johnson Controls Quantum HD Unity debug features active debug code | 10.0CNA v3.1 | 0.8% | 2023-11-10 | Fix |
| CVE-2023-47616 | Telit Cinterion BGS5 information disclosure | 4.6NVD v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-47615 | Telit Cinterion BGS5 information disclosure | 5.5NVD v3.1 | 0.2% | 2023-11-09 | |
| CVE-2023-47613 | Telit Cinterion BGS5 relative path traversal | 7.1NVD v3.1 | 0.2% | 2023-11-09 | |
| CVE-2023-47612 | Telit Cinterion BGS5 files accessible to external parties | 6.1NVD v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-47610 | Telit Cinterion EHS5 buffer overflow | 9.8NVD v3.1 | 1.7% | 2023-11-09 | |
| CVE-2023-47489 | Combodo iTop export as csv CSV injection | 7.8v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47488 | Combodo iTop cross-site scripting | 6.1v3.1 | 1.2% | 2023-11-09 | |
| CVE-2023-47373 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47372 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47370 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47369 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47368 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47367 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47366 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47365 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47364 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47363 | Linecorp line inadequate encryption strength | 6.5v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-47248 | PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file | 9.8v3.1 | 14.4% | 2023-11-09 | NucleiExploit codeFix |
| CVE-2023-47238 | Top 10 WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-47237 | WP Google My Business Auto Publish WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-47110 | PrestaShop Customer Reassurance Block configuration ajax handler improper access control | 9.1CNA v3.1 | 0.4% | 2023-11-09 | Fix |
| CVE-2023-46894 | Esptool allows attackers to view sensitive information via weak cryptographic algorithm | 7.5v3.1 | 0.5% | 2023-11-09 | |
| CVE-2023-46743 | xwikisas application-collabora the same file cannot be opened with different rights | 7.4CNA v3.1 | 0.5% | 2023-11-09 | Fix |
| CVE-2023-46614 | WP Helper Premium WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-46492 | Mldb Machine Learning Database cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-09 | |
| CVE-2023-45885 | NASA Open MCT cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-09 | |
| CVE-2023-45884 | NASA Open MCT cross-site request forgery (CSRF) | 6.5v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-45284 | Go standard library path/filepath IsLocal function vulnerability | 5.3v3.1 | 0.9% | 2023-11-09 | Fix |
| CVE-2023-45283 | Insecure parsing of Windows paths with a \??\ prefix in path/filepath | 7.5v3.1 | 2.8% | 2023-11-09 | Fix |
| CVE-2023-43791 | HumanSignal Label Studio Django SECRET_KEY vulnerability | 9.8CNA v3.1 | 1.2% | 2023-11-09 | Fix |
| CVE-2023-41138 | AppsAnywhere Client sensitive information not cleared before reuse | 6.7NVD v3.1 | 0.2% | 2023-11-09 | Fix |
| CVE-2023-41137 | AppsAnywhere Client hard-coded cryptographic key | 9.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-40055 | SolarWinds Network Configuration Manager directory traversal remote code execution | 8.0CNA v3.1 | 2.1% | 2023-11-09 | Fix |
| CVE-2023-40054 | SolarWinds Network Configuration Manager directory traversal remote code execution | 8.0CNA v3.1 | 3.0% | 2023-11-09 | Fix |
| CVE-2023-39198 | Kernel: Qxl: Race condition leading to use-after-free in qxl_mode_dumb_create | 6.4NVD v3.1 | 0.4% | 2023-11-09 | Fix |
| CVE-2023-37790 | Broadcom Clarity cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-09 | Exploit code |
| CVE-2023-37533 | HCL Connections is vulnerable to reflected cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-11-09 | Fix |
| CVE-2023-36688 | Simple Site Verify WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.5% | 2023-11-09 | Fix |
| CVE-2023-34386 | WPC Smart Wishlist for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-34371 | Download SpamReferrerBlock WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34182 | LH Password Changer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34181 | WP-Cirrus WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34178 | Groundhogg WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-34177 | WP-Cache.com WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34171 | WP Report Post WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34169 | TS Webfonts for さくらのレンタルサーバ WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-34033 | Ajax Pagination and Infinite Scroll WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34031 | bbPress Toolkit WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34025 | LWS Hide Login WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-34024 | WP Full Auto Tags Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-34002 | WP Inventory Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32794 | WooCommerce Product Add-ons WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32745 | AutomateWoo WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32744 | WooCommerce Product Recommendations WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32739 | WP Custom Cursors WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32602 | LOKALYZE WordPress Call Me Now plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-32594 | Hyphenator WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-32592 | Sunny Search WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-32587 | WP Reactions Lite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32579 | Forget About Shortcode Buttons WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32512 | ShortPixel Adaptive Images WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32502 | Pro Mime Types WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32501 | VikBooking Hotel Booking Engine and PMS WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32500 | WoodMart WordPress theme cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32125 | Multi Rating WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-32093 | TPG Redirect WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-32092 | Community by PeepSo WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-31235 | Participants Database WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-31093 | Chronosly Events Calendar WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | |
| CVE-2023-31088 | Floating Action Button WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-31087 | JS Job Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-31086 | Simple Giveaways WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-29975 | pfSense improper authentication | 7.2v3.1 | 1.7% | 2023-11-09 | |
| CVE-2023-26156 | chromedriver command injection | 7.5v3.1 | 2.2% | 2023-11-09 | Fix |
| CVE-2023-25994 | Publish to Schedule WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-25975 | Etsy Shop WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-20902 | Timing attack risk in Harbor | 5.9CNA v3.1 | 0.4% | 2023-11-09 | Fix |
| CVE-2023-6054 | Tongda OA 2017 lock.php SQL injection | 9.8v3.1 | 0.9% | 2023-11-09 | |
| CVE-2023-6053 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 1.0% | 2023-11-09 | |
| CVE-2023-6052 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 1.0% | 2023-11-09 | |
| CVE-2023-6039 | kernel A use-after-free | 5.5NVD v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-5954 | Vault Requests Triggering Policy Checks may lead to Unbounded Memory Consumption | 5.9CNA v3.1 | 0.7% | 2023-11-09 | Fix |
| CVE-2023-5551 | Moodle: Forum summary report shows students from other groups when in separate groups mode | 3.3NVD v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-5550 | Moodle: Rce due to LFI risk in some misconfigured shared hosting environments | 9.8NVD v3.1 | 1.4% | 2023-11-09 | Fix |
| CVE-2023-5549 | Moodle: Insufficient capability checks when updating the parent of a course category | 5.3NVD v3.1 | 0.6% | 2023-11-09 | Fix |
| CVE-2023-5548 | Moodle: Cache poisoning risk with endpoint revision numbers | 5.3NVD v3.1 | 0.3% | 2023-11-09 | Fix |
| CVE-2023-5547 | Moodle: Xss risk when previewing data in course upload tool | 6.1NVD v3.1 | 0.5% | 2023-11-09 | Fix |
| CVE-2023-5546 | Moodle: Stored XSS in quiz grading report via user id number | 5.4NVD v3.1 | 1.2% | 2023-11-09 | Fix |
| CVE-2023-5545 | Moodle: Auto-populated h5p author name causes a potential information leak | 5.3NVD v3.1 | 0.5% | 2023-11-09 | Fix |
| CVE-2023-5544 | Moodle: Stored XSS and potential IDOR risk in wiki comments | 5.4NVD v3.1 | 0.5% | 2023-11-09 | Fix |
| CVE-2023-5543 | Moodle: Duplicating a bigbluebutton activity assigns the same meeting id | 3.3NVD v3.1 | 0.2% | 2023-11-09 | Fix |
| CVE-2023-5542 | Moodle: Students can view other users in only see own membership groups | 4.3NVD v3.1 | 0.4% | 2023-11-09 | Fix |
| CVE-2023-5541 | Moodle: Xss risk when using CSV grade import method | 6.1NVD v3.1 | 0.5% | 2023-11-09 | Fix |
| CVE-2023-5540 | Moodle: Authenticated remote code execution risk in imscp | 8.8NVD v3.1 | 1.9% | 2023-11-09 | Fix |
| CVE-2023-5539 | Moodle: Authenticated remote code execution risk in lesson | 8.8NVD v3.1 | 1.9% | 2023-11-09 | Fix |
| CVE-2023-4612 | Apereo Foundation CAS improper authentication | 9.8v3.1 | 0.9% | 2023-11-09 | |
| CVE-2023-4379 | Incorrect authorization in GitLab | 8.1CNA v3.1 | 0.6% | 2023-11-09 | Fix |
| CVE-2023-4218 | XXE in eclipse.platform / Eclipse IDE | 5.0CNA v3.1 | 0.4% | 2023-11-09 | Fix |
| CVE-2023-47397 | Webidsupport WeBid code injection | 9.8v3.1 | 1.0% | 2023-11-08 | |
| CVE-2023-47379 | Microweber cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-47231 | ShortCodes UI WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-47229 | Download Top 25 Social Icons WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-47228 | Layer Slider WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-47227 | Social Feed All social media in one place WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-47226 | Post Sliders and Post Grids WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-47223 | Basic Interactive World Map WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-47190 | Apollo13 Framework Extensions WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-47181 | IdeaPush WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-47114 | Ethyca Fides HTML injection vulnerability in HTML-Formatted DSR Packages | 4.3CNA v3.1 | 0.6% | 2023-11-08 | Fix |
| CVE-2023-47113 | DLL search order hijacking vulnerability in BleachBit for Windows | 7.3CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-47111 | ZITADEL race condition in lockout policy execution | 7.3CNA v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-47109 | PrestaShop Customer Reassurance Block improper authorization | 5.5CNA v3.1 | 0.8% | 2023-11-08 | Fix |
| CVE-2023-47107 | PILOS account takeover through password reset poisoning | 8.8CNA v3.1 | 0.6% | 2023-11-08 | Fix |
| CVE-2023-46774 | Huawei HarmonyOS vulnerability of uncaught exceptions in the NFC module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46772 | Huawei EMUI vulnerability of parameters being out of the value range in the QMI service module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46771 | Huawei HarmonyOS security vulnerability in the face unlock module | 7.5v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46770 | Huawei HarmonyOS out-of-bounds vulnerability in the sensor module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46769 | Huawei HarmonyOS use-after-free (UAF) vulnerability in the dubai module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46768 | Huawei HarmonyOS multi-thread vulnerability in the idmap module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46767 | Huawei HarmonyOS out-of-bounds write vulnerability in the kernel driver module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46766 | Huawei HarmonyOS out-of-bounds write vulnerability in the kernel driver module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46765 | Huawei HarmonyOS vulnerability of uncaught exceptions in the NFC module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46764 | Huawei HarmonyOS unauthorized startup vulnerability of background apps | 5.3v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2023-46763 | Huawei HarmonyOS vulnerability of background app permission management in the framework module | 5.3v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2023-46762 | Huawei HarmonyOS out-of-bounds write vulnerability in the kernel driver module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46761 | Huawei HarmonyOS out-of-bounds write vulnerability in the kernel driver module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46760 | Huawei HarmonyOS out-of-bounds write vulnerability in the kernel driver module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46759 | Huawei HarmonyOS permission control vulnerability in the call module | 7.5v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46758 | Huawei HarmonyOS permission management vulnerability in the multi-screen interaction module | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-46757 | Huawei HarmonyOS information disclosure | 7.5v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46756 | Huawei HarmonyOS permission control vulnerability in the window management module | 5.3v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2023-46755 | Huawei HarmonyOS improper access control | 5.3v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46643 | Download CloudNet360 WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-46642 | SAHU TikTok Pixel for E-Commerce WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-46640 | Medialist WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46627 | WP Simple HTML Sitemap WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46626 | FLOWFACT WP Connector WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-46621 | User Avatar WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46613 | Jens Kuerschner Add to Calendar Button stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-46483 | Timeteccloud Auto Web-based Database Management System timetec AWDMS v.2.0 cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-46363 | JBIG2ENC buffer overflow | 5.5v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2023-46362 | JBIG2ENC use-after-free | 5.5v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2023-45875 | Couchbase Server information disclosure | 7.5v3.1 | 0.7% | 2023-11-08 | Fix |
| CVE-2023-45857 | Axios cross-site request forgery | 6.5v3.1 | 0.6% | 2023-11-08 | Exploit codeFix |
| CVE-2023-45849 | Arbitrary code execution in Helix Core | 9.0CNA v3.1 | 1.1% | 2023-11-08 | Fix |
| CVE-2023-45319 | Unauthenticated remote denial of service (Commit) in Helix Core | 7.5CNA v3.1 | 0.9% | 2023-11-08 | Fix |
| CVE-2023-45225 | Zavio IP Camera stack-based buffer overflow | 9.8v3.1 | 1.3% | 2023-11-08 | |
| CVE-2023-45140 | ovh the-bastion group-based JIT MFA bypass on scp and sftp in The Bastion | 4.8CNA v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-45079 | Lenovo BIOS out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-45078 | Lenovo BIOS out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-45077 | Lenovo BIOS out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-45076 | Lenovo BIOS out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-45075 | Lenovo BIOS out-of-bounds read | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-44115 | Huawei HarmonyOS vulnerability of improper permission control in the Booster module | 7.5v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-44098 | Huawei HarmonyOS vulnerability of missing encryption in the card management module | 7.5v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43755 | Zavio IP Camera stack-based buffer overflow | 9.8v3.1 | 1.3% | 2023-11-08 | |
| CVE-2023-43581 | Lenovo Desktop BIOS Update_WMI module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43580 | Lenovo Desktop BIOS SmuV11DxeVMR module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43579 | Lenovo Desktop BIOS SmuV11Dxe driver in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43578 | Lenovo Desktop BIOS SmiFlash module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43577 | Lenovo Desktop BIOS ReFlash module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43576 | Lenovo Desktop BIOS WMISwSmi module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43575 | Lenovo Desktop BIOS UltraFunctionTable module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43574 | Lenovo Desktop BIOS buffer over-read | 4.4CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43573 | Lenovo Desktop BIOS buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43572 | Lenovo Desktop BIOS BiosExtensionLoader module in some buffer over-read | 4.4CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43571 | Lenovo Desktop BIOS BiosExtensionLoader module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43570 | Lenovo Desktop BIOS arbitrary code execution | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43569 | Lenovo Desktop BIOS OemSmi module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43568 | Lenovo Desktop BIOS LemSecureBootForceKey module in some buffer over-read | 4.4CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-43567 | Lenovo Desktop BIOS LemSecureBootForceKey module in some buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-41270 | Samsung Smart TV UE40D7000 WPS DoS attack | 3.5CNA v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-41112 | Samsung Exynos 9810 buffer overflow | 7.5v3.1 | 0.6% | 2023-11-08 | Fix |
| CVE-2023-41111 | Samsung Exynos 9810 out-of-bounds write | 7.5v3.1 | 0.6% | 2023-11-08 | Fix |
| CVE-2023-39913 | Apache UIMA Java SDK deserialization of untrusted data, improper input validation | 8.8v3.1 | 1.5% | 2023-11-08 | Fix |
| CVE-2023-39435 | Zavio IP Camera stack-based buffer overflow | 9.8v3.1 | 1.2% | 2023-11-08 | |
| CVE-2023-36667 | Couchbase Server path traversal | 7.5v3.1 | 1.0% | 2023-11-08 | Fix |
| CVE-2023-35767 | Unauthenticated remote denial of service via Shutdown function in Helix Core | 7.5CNA v3.1 | 0.9% | 2023-11-08 | Fix |
| CVE-2023-32298 | Simple User Listing WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-29974 | pfSense weak password requirements | 9.8v3.1 | 1.8% | 2023-11-08 | |
| CVE-2023-26221 | TIBCO Spotfire Spotfire Connectors insufficiently protected credentials | 5.0CNA v3.1 | 0.2% | 2023-11-08 | |
| CVE-2023-6012 | Incorrect input data validation in Lanaccess ONSAFE MonitorHM Web console | 9.8v3.1 | 0.9% | 2023-11-08 | |
| CVE-2023-6002 | YugabyteDB log injection | 6.5CNA v3.1 | 0.4% | 2023-11-08 | |
| CVE-2023-6001 | YugabyteDB Anywhere Prometheus Metrics Accessible Pre-Authentication | 5.3CNA v3.1 | 0.6% | 2023-11-08 | |
| CVE-2023-5996 | Google Chrome WebAudio use-after-free | 8.8v3.1 | 2.0% | 2023-11-08 | Fix |
| CVE-2023-5978 | FreeBSD incorrect libcap_net limitation list manipulation | 7.5v3.1 | 0.5% | 2023-11-08 | Fix |
| CVE-2023-5941 | FreeBSD libc stdio buffer overflow | 9.8v3.1 | 1.1% | 2023-11-08 | Fix |
| CVE-2023-5913 | A potential privilege escalation vulnerability in OpenText Fortify ScanCentral DAST API | 8.2CNA v3.1 | 0.6% | 2023-11-08 | Fix |
| CVE-2023-5801 | Huawei HarmonyOS vulnerability of identity verification being bypassed in the face unlock module | 9.1v3.1 | 0.4% | 2023-11-08 | Fix |
| CVE-2023-5760 | Avast/Avg Antivirus time-of-check to time-of-use bug leads to full local privilege escalation | 7.0v3.1 | 0.2% | 2023-11-08 | |
| CVE-2023-5759 | Unauthenticated remote denial of service via Buffer in Helix Core | 7.5CNA v3.1 | 0.9% | 2023-11-08 | Fix |
| CVE-2023-5136 | Incorrect permission assignment in the TopoGrafix DataPlugin for GPX | 5.5CNA v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2023-5079 | Lenovo LeCloud Application improper input validation | 7.5CNA v3.1 | 0.6% | 2023-11-08 | Fix |
| CVE-2023-5078 | Lenovo ThinkPad BIOS incorrect initialization | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-5075 | Lenovo IdeaPad Duet 3-10IGL5 buffer overflow | 6.7CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-4891 | Lenovo View Driver use-after-free | 5.5CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-4706 | Lenovo 1Lenovo Preload Directory incorrect default permissions | 7.3CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-4632 | Lenovo System Update uncontrolled search path | 7.8CNA v3.1 | 0.3% | 2023-11-08 | Fix |
| CVE-2023-4249 | Zavio IP Camera stack-based buffer overflow | 9.8v3.1 | 12.9% | 2023-11-08 | |
| CVE-2023-4061 | wildfly-core exposure of sensitive information to an unauthorized actor | 6.5CNA v3.1 | 0.8% | 2023-11-08 | Fix |
| CVE-2023-3959 | Zavio IP Camera stack-based buffer overflow | 9.8v3.1 | 48.8% | 2023-11-08 | |
| CVE-2023-3282 | Cortex XSOAR: Local privilege escalation (PE) vulnerability in Cortex XSOAR Engine | 6.4CNA v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-0392 | Okta LDAP Agent unquoted search path | 6.7v3.1 | 0.2% | 2023-11-08 | Fix |
| CVE-2023-47510 | WPDBSpringClean WordPress plugin cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-11-07 | |
| CVE-2023-47456 | Tenda AX1806 out-of-bounds read | 9.1v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-47455 | Tenda AX1806 out-of-bounds write | 9.1v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-47360 | VideoLAN VLC media player integer underflow | 7.5v3.1 | 0.9% | 2023-11-07 | Fix |
| CVE-2023-47359 | VideoLAN VLC media player out-of-bounds write | 9.8v3.1 | 1.1% | 2023-11-07 | Fix |
| CVE-2023-47102 | Urbackup Server observable discrepancy | 5.3v3.1 | 0.6% | 2023-11-07 | Exploit code |
| CVE-2023-46998 | Bootboxjs Bootbox Bootbox.js cross-site scripting | 6.1v3.1 | 1.4% | 2023-11-07 | Exploit code |
| CVE-2023-46851 | Apache Allura: Sensitive information exposure via import | 4.9v3.1 | 1.6% | 2023-11-07 | Fix |
| CVE-2023-46845 | EC-CUBE 3 series code injection | 7.2v3.1 | 1.6% | 2023-11-07 | Fix |
| CVE-2023-46819 | Apache OFBiz: Execution of Solr plugin queries without authentication | 5.3v3.1 | 1.8% | 2023-11-07 | Fix |
| CVE-2023-46800 | Online Matrimonial Project multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46793 | Online Matrimonial Project multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46789 | Online Matrimonial Project multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46788 | Online Matrimonial Project multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46787 | Online Matrimonial Project multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46785 | Online Matrimonial Project multiple Unauthenticated SQL Injections (SQLi) | 9.8v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46744 | Stored cross-site scripting in Squidex | 5.4CNA v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-46737 | Possible endless data attack from attacker-controlled registry in cosign | 3.1CNA v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-46730 | Server-side request forgery in groupoffice | 7.4CNA v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-46679 | Online Job Portal multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46677 | Online Job Portal multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-46501 | BoltWire information disclosure | 9.1v3.1 | 1.3% | 2023-11-07 | Exploit code |
| CVE-2023-46253 | Remote code execution in Squidex | 9.1CNA v3.1 | 1.5% | 2023-11-07 | Fix |
| CVE-2023-46252 | Cross-site scripting (XSS) via postMessage handler in Squidex | 6.8CNA v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-46244 | Privilege escalation in Xwiki platform | 9.1CNA v3.1 | 0.8% | 2023-11-07 | Fix |
| CVE-2023-46243 | Code execution via the edit action in XWiki platform | 10.0CNA v3.1 | 1.0% | 2023-11-07 | Fix |
| CVE-2023-46242 | Code injection in XWiki Platform | 9.7CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-46001 | gpac buffer overflow | 5.5v3.1 | 0.3% | 2023-11-07 | |
| CVE-2023-45380 | Silbersaiten ORDER Duplicator insecure direct object reference | 8.8NVD v3.1 | 0.6% | 2023-11-07 | |
| CVE-2023-43984 | Advanced Export Products Orders Cron CSV Excel Smart Soft advancedexport insecure permissions | 7.5v3.1 | 0.6% | 2023-11-07 | |
| CVE-2023-43886 | Tenda RX9 Pro HTTP server component buffer overflow | 7.1v3.1 | 0.6% | 2023-11-07 | |
| CVE-2023-43885 | Tenda RX9 Pro Firmware missing authorization | 8.1v3.1 | 0.7% | 2023-11-07 | |
| CVE-2023-42659 | WS_FTP Server arbitrary file upload | 9.1CNA v3.1 | 0.9% | 2023-11-07 | Fix |
| CVE-2023-42555 | Samsung Mobile EasySetup implicit intent for sensitive communication | 6.3CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42554 | Samsung Mobile Samsung Pass improper authentication | 5.4CNA v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-42553 | Samsung Mobile Samsung Email improper authorization | 4.0CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42552 | Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall. | 4.4CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42551 | Samsung Mobile Samsung Account startTncActivity implicit intent for sensitive communication | 5.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42550 | Samsung Mobile Samsung Account startSignIn implicit intent for sensitive communication | 5.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42549 | Samsung Mobile Samsung Account implicit intent for sensitive communication | 5.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42548 | Samsung Mobile Samsung Account implicit intent for sensitive communication | 5.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42547 | Samsung Mobile Samsung Account implicit intent for sensitive communication | 5.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42546 | Samsung Mobile Samsung Account implicit intent for sensitive communication | 5.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42545 | Samsung Mobile Phone implicit intent for sensitive communication | 5.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42544 | Samsung Mobile Quick Share improper access control | 5.5CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42543 | Samsung Mobile Bixby Voice improper intent verification | 6.2CNA v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-42542 | Samsung Mobile Samsung Push Service improper access control | 3.3CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42541 | Samsung Mobile Samsung Push Service PushClientProvider improper authorization | 4.0CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42540 | Samsung Mobile Samsung Account improper access control | 4.0CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42539 | Samsung Health ChallengeNotificationManager vulnerability | 4.7CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42538 | Samsung Mobile Devices saped_rec_silence in libsaped improper input validation | 5.9CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42537 | Samsung Mobile Devices get_head_crc in libsaped improper input validation | 8.4CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42536 | Samsung Mobile Devices saped_dec in libsaped improper input validation | 8.4CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42535 | Samsung Mobile Devices read_block of vold out-of-bounds write | 8.4CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42534 | Samsung Mobile Devices ChooserActivity improper input validation | 6.3CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42533 | Samsung Mobile Devices improper input validation | 6.6CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42532 | Samsung Mobile Devices FotaAgent improper certificate validation | 5.9CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-42531 | Samsung Mobile Devices SmsController improper access control | 6.2CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42530 | Samsung Mobile Devices SecSettings improper access control | 6.7CNA v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-42529 | Samsung Mobile Devices libsec-ril out-of-bounds write | 6.7CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42528 | Samsung Mobile Devices ProcessNvBuffering of libsec-ril improper input validation | 6.7CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42527 | Samsung Mobile Devices ProcessWriteFile of libsec-ril improper input validation | 5.6CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-42361 | Midori-global Better PDF Exporter local file inclusion | 7.8v3.1 | 0.9% | 2023-11-07 | |
| CVE-2023-42284 | Tyk api_version parameter blind SQL injection | 9.8v3.1 | 1.2% | 2023-11-07 | Exploit code |
| CVE-2023-42283 | Tyk api_id parameter blind SQL injection | 9.8v3.1 | 1.2% | 2023-11-07 | Exploit code |
| CVE-2023-41798 | Directorist WordPress plugin CSV injection | 8.8v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-41723 | Veeam One insecure storage of sensitive information | 4.3v3.1 | 12.3% | 2023-11-07 | Fix |
| CVE-2023-41425 | WonderCMS Wonder CMS v.3.2.0 thru v.3.4.2 cross-site scripting | 6.1NVD v3.1 | 54.3% | 2023-11-07 | MetasploitExploit code |
| CVE-2023-41036 | MacVim's Insecure Usage of IPC Mechanisms | 7.8CNA v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-40453 | Docker Machine escape sequence injection | 6.5v3.1 | 0.9% | 2023-11-07 | Fix |
| CVE-2023-38549 | Veeam One cross-site scripting | 5.4v3.1 | 19.1% | 2023-11-07 | Fix |
| CVE-2023-38548 | Veeam One insufficiently protected credentials | 4.3NVD v3.1 | 11.8% | 2023-11-07 | Fix |
| CVE-2023-38547 | Veeam One remote code execution | 9.8v3.1 | 18.9% | 2023-11-07 | Fix |
| CVE-2023-38509 | XWiki Platform's obfuscated email addresses should not be sorted | 4.3CNA v3.1 | 0.8% | 2023-11-07 | Fix |
| CVE-2023-36527 | Post to CSV by BestWebSoft WordPress plugin CSV injection | 8.8v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-36409 | Microsoft Edge (Chromium-based) information disclosure | 6.5CNA v3.1 | 0.9% | 2023-11-07 | Fix |
| CVE-2023-35140 | Zyxel GS1900-24EP firmware improper privilege management | 5.5CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-33481 | RemoteClinic SQL injection | 9.8v3.1 | 0.7% | 2023-11-07 | |
| CVE-2023-33480 | RemoteClinic unrestricted file upload | 8.8v3.1 | 1.9% | 2023-11-07 | |
| CVE-2023-33479 | RemoteClinic SQL injection | 9.8v3.1 | 0.7% | 2023-11-07 | |
| CVE-2023-33478 | RemoteClinic SQL injection | 9.8v3.1 | 0.7% | 2023-11-07 | |
| CVE-2023-33074 | Qualcomm Snapdragon use-after-free in Audio | 8.4CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-33061 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-33059 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 7.8CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-33056 | Qualcomm Snapdragon null pointer dereference in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-33055 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 7.8CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-33048 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-33047 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-33045 | Qualcomm Snapdragon buffer copy without checking size of input in WLAN firmware | 9.8CNA v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-33031 | Qualcomm Snapdragon buffer copy without checking size of input in Automotive Audio | 7.8CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-32966 | Jazz Popups WordPress plugin cross-site request forgery (CSRF) leading to stored XSS | 6.1v3.1 | 0.2% | 2023-11-07 | |
| CVE-2023-30739 | Samsung Mobile Devices arbitrary code execution | 6.7CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-28574 | Qualcomm Snapdragon improper input validation in Core | 9.0CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28572 | Qualcomm Snapdragon buffer over-read in WLAN host | 6.6CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-28570 | Qualcomm Snapdragon buffer copy without checking size of input in Audio | 6.7CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28569 | Qualcomm Snapdragon buffer over-read in WLAN HAL | 6.1CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28568 | Qualcomm Snapdragon buffer over-read in WLAN HAL | 6.1CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28566 | Qualcomm Snapdragon buffer over-read in WLAN HAL | 6.1CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28563 | Qualcomm Snapdragon buffer over-read in IOE firmware | 6.1CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28556 | Qualcomm Snapdragon improper authorization in HLOS | 7.1CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28554 | Buffer over-read in Qualcomm IPC | 6.1CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28553 | Qualcomm Snapdragon buffer over-read in WLAN host | 6.1CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28545 | Qualcomm Snapdragon memory corruption | 8.2CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-28499 | Slide Anything WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-25983 | KB Support WordPress plugin CSV injection | 8.8v3.1 | 1.1% | 2023-11-07 | Fix |
| CVE-2023-24852 | Qualcomm Snapdragon improper authentication in Core | 8.4CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-23796 | Form Builder WordPress plugin CSV injection | 9.8v3.1 | 0.6% | 2023-11-07 | |
| CVE-2023-23678 | WP Cookie Notice for GDPR, CCPA and ePrivacy Consent WordPress plugin CSV injection | 7.2v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-22719 | GiveWP WordPress plugin CSV injection | 9.8v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-22388 | Qualcomm Snapdragon use of out-of-range pointer offset in Multi-mode Call Processor | 9.8CNA v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-21671 | Qualcomm Snapdragon improper input validation in Core | 9.3CNA v3.1 | 0.1% | 2023-11-07 | Fix |
| CVE-2023-5998 | Out-of-bounds read in gpac/gpac | 7.5v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-5982 | UpdraftPlus WordPress plugin cross-site request forgery to Google Drive Storage update | 5.4v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-5976 | Improper access control in microweber/microweber | 4.3v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-5975 | ImageMapper WordPress plugin cross-site request forgery to plugin settings Change via ajax | 4.3v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-5904 | Cross-site scripting (XSS) Stored in pkp/pkp-lib | 5.4v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-5903 | Cross-site scripting (XSS) Stored in pkp/pkp-lib | 5.4v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-5902 | Cross-site request forgery (CSRF) in pkp/pkp-lib | 4.3v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-5901 | Cross-site scripting in pkp/pkp-lib | 4.8v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-5900 | Cross-site request forgery in pkp/pkp-lib | 4.3v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-5819 | Amazonify WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-5818 | Amazonify WordPress plugin cross-site request forgery to Amazon Tracking ID update | 4.3v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-5748 | Synology SSL VPN Client cgi component buffer overflow | 3.3CNA v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-5743 | Telephone Number Linker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-5709 | WD WidgetTwitter WordPress plugin authenticated (Contributor+) SQL injection via shortcode | 6.5NVD v3.1 | 0.8% | 2023-11-07 | |
| CVE-2023-5703 | Gift Up Gift Cards for WordPress and WooCommerce plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-5669 | Featured Image Caption WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-5661 | Social Feed WordPress plugin authenticated (Author+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-11-07 | |
| CVE-2023-5660 | SendPress Newsletters WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.7% | 2023-11-07 | Fix |
| CVE-2023-5659 | Interact: Embed A Quiz On Your Site WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-5658 | WP MapIt WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-5577 | Bitly's WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-5567 | QR Code Tag WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-11-07 | |
| CVE-2023-5532 | ImageMapper WordPress plugin cross-site request forgery to stored cross-site scripting | 4.3v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-5507 | ImageMapper WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-5506 | ImageMapper WordPress plugin missing authorization authenticated arbitrary Page/Post deletion | 4.3v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-5309 | Broken Session Management in Puppet Enterprise | 6.8CNA v3.1 | 0.5% | 2023-11-07 | Fix |
| CVE-2023-5179 | Open Design Alliance ODA Drawings SDK out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-5076 | Ziteboard Online Whiteboard WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-11-07 | Fix |
| CVE-2023-4956 | Red Hat Quay config editor page clickjacking | 6.5CNA v3.1 | 0.5% | 2023-11-07 | |
| CVE-2023-4888 | Simple Like Page WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-4842 | Social Sharing Plugin - Social Warfare WordPress plugin stored cross-site scripting | 5.4NVD v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-4295 | Mali GPU Kernel Driver allows improper GPU memory processing operations | 7.8v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-4272 | Mali GPU Kernel Driver exposes sensitive data from freed memory | 5.5v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-4154 | Samba: Ad dc password exposure to privileged users and rodcs | 6.5NVD v3.1 | 1.2% | 2023-11-07 | Fix |
| CVE-2023-3889 | Mali GPU Kernel Driver exposes sensitive data from freed memory | 7.8v3.1 | 0.2% | 2023-11-07 | Fix |
| CVE-2023-2675 | Improper restriction of excessive authentication attempts in linagora/Twake | 9.8v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-0898 | Uncontrolled search path element in GE MiCOM S1 Agile | 7.3v3.1 | 0.3% | 2023-11-07 | Fix |
| CVE-2023-0436 | Secret logging may occur in debug mode of Atlas Operator | 4.5CNA v3.1 | 0.6% | 2023-11-07 | Fix |
| CVE-2023-47272 | Roundcube Webmail cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-47271 | PKP Web Application Library native import/export plugin vulnerability | 5.3v3.1 | 0.6% | 2023-11-06 | |
| CVE-2023-47253 | Qualitor command injection | 9.8v3.1 | 14.4% | 2023-11-06 | NucleiExploit codeFix |
| CVE-2023-47186 | Kadence WooCommerce Email Designer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-47185 | wpDiscuz WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-47184 | Admin Bar and Dashboard Access Control WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-47182 | Login Screen Manager WordPress plugin cross-site scripting (XSS) | 8.8v3.1 | 0.2% | 2023-11-06 | |
| CVE-2023-47177 | Linker WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-11-06 | Fix |
| CVE-2023-47004 | Redis Labs Redisgraph buffer overflow | 8.8v3.1 | 1.0% | 2023-11-06 | |
| CVE-2023-46824 | Slick Popup WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-11-06 | Fix |
| CVE-2023-46823 | ImageLinks Interactive Image Builder WordPress plugin SQL injection | 7.2v3.1 | 0.8% | 2023-11-06 | Fix |
| CVE-2023-46822 | WooCommerce Store Exporter WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-46821 | GD Security Headers WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-46802 | National Tax Agency e-Tax software XML external entity injection | 5.5v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-46783 | Pre-Orders for WooCommerce WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-11-06 | Fix |
| CVE-2023-46782 | MomentoPress for Momento360 WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-11-06 | Fix |
| CVE-2023-46781 | Current Menu Item for Custom Post Types WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-46780 | Alter WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | |
| CVE-2023-46779 | EasyRecipe WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | |
| CVE-2023-46778 | Auto Limit Posts Reloaded WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | |
| CVE-2023-46777 | Feather Login Page WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-46776 | Auto Excerpt everywhere WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | |
| CVE-2023-46775 | Original texts Yandex WebMaster WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | |
| CVE-2023-46732 | Reflected cross-site scripting through revision parameter in content menu in XWiki Platform | 9.7CNA v3.1 | 2.2% | 2023-11-06 | NucleiFix |
| CVE-2023-46731 | Remote code execution through the section parameter in Administration as guest in XWiki Platform | 10.0CNA v3.1 | 88.5% | 2023-11-06 | Fix |
| CVE-2023-46728 | squid-cache squid SQUID-2021:8 denial of service in Gopher gateway | 7.5CNA v3.1 | 6.0% | 2023-11-06 | Fix |
| CVE-2023-46254 | Service accounts can see namespaces of other tenants in capsule-proxy | 4.3CNA v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-46251 | Visual editor persistent cross-site scripting (XSS) in MyBB | 7.5CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-46084 | Icons Font Loader WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-45830 | Accessibility Suite by Online ADA WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-45827 | Prototype pollution vulnerability in @clickbar/dot-diver | 7.3CNA v3.1 | 1.2% | 2023-11-06 | Exploit codeFix |
| CVE-2023-45657 | Nexter WordPress theme SQL injection | 9.8v3.1 | 1.3% | 2023-11-06 | Exploit codeFix |
| CVE-2023-45556 | mybb cross-site scripting | 5.4v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-45163 | 1E Platform 1E-Exchange-CommandLinePing instruction allows for arbitrary code execution | 7.2NVD v3.1 | 0.9% | 2023-11-06 | Fix |
| CVE-2023-45161 | 1E Platform 1E-Exchange-URLResponseTime instruction allows arbitrary code execution | 7.2NVD v3.1 | 0.8% | 2023-11-06 | Fix |
| CVE-2023-45074 | Advanced Page Visit Counter WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-45069 | Video Gallery YouTube Gallery WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-45055 | MStore API WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-45046 | Pressference Exporter WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | |
| CVE-2023-45001 | Seriously Simple Stats WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-44398 | Out-of-bounds write in Exiv2 | 8.8CNA v3.1 | 1.0% | 2023-11-06 | Fix |
| CVE-2023-42669 | Samba: Rpcecho development server allows denial of service via sleep call on ad dc | 6.5NVD v3.1 | 1.7% | 2023-11-06 | Fix |
| CVE-2023-41685 | Woocommerce Support System WordPress plugin SQL injection | 9.8v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-41378 | Calico Typha hangs during unclean TLS handshake | 7.5CNA v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2023-40661 | OpenSC: Multiple memory issues with pkcs15-init (enrollment tool) | 6.4NVD v3.1 | 1.3% | 2023-11-06 | Fix |
| CVE-2023-40660 | OpenSC: Potential pin bypass when card tracks its own login state | 6.6NVD v3.1 | 1.0% | 2023-11-06 | Fix |
| CVE-2023-40609 | Contact form 7 Custom validation WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | |
| CVE-2023-40207 | Donations Made Easy Smart Donations WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | |
| CVE-2023-39345 | Unauthorized access to Private fields in User Registration API in strapi | 7.6CNA v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-38407 | FRRouting BGP labeled unicast parsing vulnerability | 7.5v3.1 | 0.9% | 2023-11-06 | Fix |
| CVE-2023-38406 | FRRouting improper exception handling | 9.8v3.1 | 0.9% | 2023-11-06 | Fix |
| CVE-2023-38382 | Subscribe to Category WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | |
| CVE-2023-36769 | Microsoft OneNote spoofing | 4.6CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-35911 | Contact Form Generator WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-33924 | SIS Handball WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | |
| CVE-2023-32840 | MediaTek chipsets out-of-bounds write in Modem CCCI | 6.5NVD v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-32839 | MediaTek chipsets improper input validation in dpe | 6.7v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32838 | MediaTek chipsets out-of-bounds write in dpe | 6.7v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32837 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in video | 7.8v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32836 | MediaTek chipsets out-of-bounds write in display | 6.7v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32835 | MediaTek chipsets incorrect comparison in keyinstall | 6.7v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32834 | MediaTek chipsets incorrect comparison in secmem | 6.7v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32832 | MediaTek chipsets concurrent execution using shared resource with improper synchronization in video | 7.0v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32825 | MediaTek chipsets out-of-bounds read in Bluetooth service | 5.5v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-32818 | MediaTek chipsets incorrect comparison in vdec | 6.7v3.1 | 0.1% | 2023-11-06 | Fix |
| CVE-2023-28794 | Zscaler Client Connector PAC Files Exposed to Internet Websites | 4.3CNA v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-28748 | Copy Or Move Comments WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-11-06 | |
| CVE-2023-27605 | WP Reroute Email WordPress plugin SQL injection | 9.8v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2023-23702 | Comments Ratings WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-11-06 | |
| CVE-2023-20702 | MediaTek chipsets null pointer dereference in 5G RLC | 7.5v3.1 | 1.1% | 2023-11-06 | Fix |
| CVE-2023-5969 | Mattermost denial of service via Link Preview in /API/v4/redirect_location | 5.3CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-5968 | Mattermost password hash in response body after username update | 4.9CNA v3.1 | 0.5% | 2023-11-06 | Exploit codeFix |
| CVE-2023-5967 | Mattermost denial of service via crashing the Calls plugin | 4.3CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-5964 | 1E Platform 1E-Exchange-DisplayMessage instruction allows for arbitrary code execution | 7.2NVD v3.1 | 0.8% | 2023-11-06 | Fix |
| CVE-2023-5963 | Allocation of resources without limits or throttling in GitLab | 3.1CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-5950 | Rapid7 Velociraptor reflected XSS | 8.6CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-5831 | Insertion of sensitive information into sent data in GitLab | 3.7CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-5825 | Loop with unreachable exit condition (infinite loop) in GitLab | 6.5CNA v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-5823 | TK Google Fonts GDPR Compliant WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-5777 | Weintek EasyBuilder Pro use of hard-coded credentials | 9.8v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-5771 | Proofpoint Enterprise Protection HTML injection in AdminUI through email subject | 6.1CNA v3.1 | 0.3% | 2023-11-06 | Fix |
| CVE-2023-5719 | Red Lion Crimson improper neutralization of Null Byte or NUL Character | 9.8v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-5678 | OpenSSL excessive time spent in DH check / generation with large Q parameter value | 5.3NVD v3.1 | 4.5% | 2023-11-06 | Fix |
| CVE-2023-5605 | URL Shortify WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-5601 | WooCommerce Ninja Forms Product Add-ons WordPress plugin unauthenticated arbitrary file upload | 9.8NVD v3.1 | 0.9% | 2023-11-06 | Fix |
| CVE-2023-5530 | Ninja Forms WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-5454 | Templately WordPress plugin arbitrary post trashing via missing authorization | 7.5NVD v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-5355 | Awesome Support WordPress plugin Submitter+ arbitrary file deletion | 8.1NVD v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2023-5354 | Awesome Support WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-5352 | Awesome Support WordPress plugin insufficient permission check in wpas_edit_reply | 4.3NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-5228 | User Registration WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-5181 | WP Discord Invite WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-5090 | Linux kernel KVM SVM x2apic MSR interception denial of service | 5.5NVD v3.1 | 0.2% | 2023-11-06 | Fix |
| CVE-2023-5082 | History Log by click5 WordPress plugin Admin+ time-based blind SQL injection | 7.2NVD v3.1 | 0.7% | 2023-11-06 | Fix |
| CVE-2023-4996 | Netskope Client local privilege escalation | 6.6CNA v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-4930 | Front End PM WordPress plugin sensitive data exposure via directory listing | 6.5NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-4910 | Red Hat 3scale API Management personal tokens page vulnerability | 5.5CNA v3.1 | 0.2% | 2023-11-06 | |
| CVE-2023-4858 | WP Simple Table Manager WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-4810 | Responsive Pricing Table WordPress plugin Admin+ stored Cross-Site Scriping | 4.8NVD v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-4700 | Missing authorization in GitLab | 3.5CNA v3.1 | 0.4% | 2023-11-06 | Fix |
| CVE-2023-4699 | Mitsubishi Electric MELSEC-F Series FX3U-16MT/ES missing authentication | 10.0CNA v3.1 | 0.7% | 2023-11-06 | Exploit code |
| CVE-2023-4625 | Denial of service（DoS） Vulnerability in Web server function on MELSEC Series CPU module | 5.3CNA v3.1 | 1.0% | 2023-11-06 | |
| CVE-2023-4535 | OpenSC: Out-of-bounds read in myeid driver handling encryption using symmetric keys | 3.8NVD v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-3909 | Inefficient regular expression complexity in GitLab | 4.3CNA v3.1 | 0.6% | 2023-11-06 | Fix |
| CVE-2023-3399 | Insertion of sensitive information into sent data in GitLab | 8.5CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-3246 | Allocation of resources without limits or throttling in GitLab | 4.3CNA v3.1 | 0.5% | 2023-11-06 | Fix |
| CVE-2023-47260 | Redmine cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-05 | Fix |
| CVE-2023-47259 | Redmine cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-05 | Fix |
| CVE-2023-47258 | Redmine cross-site scripting | 6.1v3.1 | 0.4% | 2023-11-05 | Fix |
| CVE-2023-47249 | Color Demoiccmax out-of-bounds write | 6.5v3.1 | 0.5% | 2023-11-05 | |
| CVE-2023-46981 | xxyopen Novel-Plus SQL injection | 9.8v3.1 | 1.1% | 2023-11-05 | |
| CVE-2023-46964 | Hillstone Next Generation FireWall SG-6000-E3960 cross-site scripting | 6.1v3.1 | 0.6% | 2023-11-05 | |
| CVE-2023-46963 | Kaoshifeng Yunfan Learning Examination System improper authentication | 5.3v3.1 | 0.5% | 2023-11-04 | |
| CVE-2023-46382 | Loytec Lvis-3me12-a1 cleartext transmission of sensitive information | 7.5v3.1 | 2.5% | 2023-11-04 | Fix |
| CVE-2023-46381 | Loytec Lvis-3me12-a1 missing authentication | 8.2v3.1 | 7.4% | 2023-11-04 | Fix |