CVE-2023 records published in December 2023

This page lists the 2,568 CVE-2023 records published in December 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists nine of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.

Critical
42616.6% of these records
Listed in CISA KEV
90.4% of these records
Reported exploited
40.2% of these records
Detection signal
562.2% of these records
Exploit code
632.5% of these records
Actionable vendor fix
1,87773.1% of these records

Figures as of 2026-10-24 13:46 UTC. Records published in December 2023 have had from about 34 months to about 35 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.

CVE-2023 records published in December 2023, newest first: records 1 to 1,000 of 2,568
CVE Summary CVSS EPSS Published Signals
CVE-2023-52286Tencent Distributed SQL information disclosure7.5v3.10.8%2023-12-31
CVE-2023-52284bytecodealliance Webassembly Micro Runtime double free5.5v3.10.3%2023-12-31Fix
CVE-2023-52277Royalapps Royaltsx out-of-bounds write7.8v3.10.2%2023-12-31
CVE-2023-52275TECNO Mobile Camon X missing authorization2.1v3.10.3%2023-12-31
CVE-2023-52269MDaemon Security Gateway cross-site scripting4.8v3.10.4%2023-12-31
CVE-2023-52267Hongliuliao Ehttp out-of-bounds read7.5v3.10.7%2023-12-31
CVE-2023-52266Hongliuliao Ehttp use-after-free7.5v3.10.7%2023-12-31
CVE-2023-52185Everest Backup WordPress plugin sensitive data exposure7.5v3.10.5%2023-12-31Fix
CVE-2023-52182ARI Stream Quiz WordPress plugin PHP object injection8.8NVD v3.10.6%2023-12-31Fix
CVE-2023-52181Theme per user WordPress plugin PHP object injection9.8v3.10.6%2023-12-31Fix
CVE-2023-52180Recipe Maker For Your Food Blog from Zip Recipes WordPress plugin SQL injection8.1v3.10.5%2023-12-31Fix
CVE-2023-52134GEO my WordPress plugin SQL injection7.2v3.10.5%2023-12-31Fix
CVE-2023-52133Most And Least Read Posts Widget WordPress plugin SQL injection8.8v3.10.5%2023-12-31Fix
CVE-2023-52132WP Adminify WordPress plugin SQL injection7.2v3.10.5%2023-12-31Fix
CVE-2023-52131Page Generator WordPress plugin SQL injection7.2v3.10.5%2023-12-31Fix
CVE-2023-51547Fluent Support WordPress plugin SQL injection7.2v3.10.5%2023-12-31Fix
CVE-2023-51503WooPayments WordPress plugin Automattic insecure direct object reference7.5v3.10.5%2023-12-31Fix
CVE-2023-51469Checkout Mestres WP WordPress plugin SQL injection9.8v3.10.6%2023-12-31Fix
CVE-2023-51423WebinarIgnition WordPress plugin SQL injection9.8v3.10.6%2023-12-31Fix
CVE-2023-49777YITH WooCommerce Product Add-Ons WordPress plugin PHP object injection8.8NVD v3.10.7%2023-12-31Fix
CVE-2023-39157JetElements For Elementor WordPress plugin remote code execution (RCE)8.8NVD v3.10.7%2023-12-31Fix
CVE-2023-7193MTab Bookmark Installation install.php access control8.1v3.10.4%2023-12-31
CVE-2023-7191S-cms reg.php SQL injection8.8v3.10.5%2023-12-31
CVE-2023-7190S-CMS SQL injection8.8v3.10.5%2023-12-31
CVE-2023-7189S-CMS statistics module SQL injection8.8v3.10.5%2023-12-31
CVE-2023-7188Shipping 100 Fahuo100 login.php SQL injection8.1v3.10.5%2023-12-31
CVE-2023-7187Totolink N350RT HTTP POST request stack-based overflow8.8v3.10.7%2023-12-31
CVE-2023-71867-card Fakabao notify.php SQL injection8.8v3.10.5%2023-12-31
CVE-2023-71857-card Fakabao wxpay_notify.php SQL injection8.8v3.10.5%2023-12-31
CVE-2023-71847-card Fakabao notify.php SQL injection8.8v3.10.5%2023-12-31
CVE-2023-71837-card Fakabao alipay_notify.php SQL injection8.8v3.10.6%2023-12-31
CVE-2023-7130code-projects College Notes Gallery login.php SQL injection8.8v3.10.7%2023-12-31
CVE-2023-6094OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials5.3CNA v3.10.2%2023-12-31Fix
CVE-2023-6093OnCell G3150A-LTE Series: Clickjacking5.3CNA v3.10.3%2023-12-31Fix
CVE-2023-52265Idurarapp Idurar cross-site scripting5.4v3.10.4%2023-12-30
CVE-2023-52264thirty bees Bees Blog cross-site scripting6.1v3.10.4%2023-12-30
CVE-2023-52263Brave Browser open redirect6.1v3.10.5%2023-12-30
CVE-2023-52262Outdoorbits Little Backup Box arbitrary code execution9.8v3.10.9%2023-12-30
CVE-2023-52257Logobee cross-site scripting6.1v3.10.4%2023-12-30
CVE-2023-52252Unified Remote XML external entity injection9.8v3.11.1%2023-12-30
CVE-2023-51136TOTOLINK X2000R out-of-bounds write9.8v3.10.6%2023-12-30Fix
CVE-2023-51135TOTOLINK X2000R out-of-bounds write9.8v3.10.6%2023-12-30Fix
CVE-2023-51133TOTOLINK X2000R out-of-bounds write9.8v3.10.6%2023-12-30Fix
CVE-2023-50651TOTOLINK X6000R OS command injection9.8v3.12.8%2023-12-30
CVE-2023-50589Embras Geosiap Erp SQL injection9.8v3.10.7%2023-12-30
CVE-2023-50578Mingsoft MCMS SQL injection9.8v3.12.2%2023-12-30Nuclei
CVE-2023-50559Openxiangshan Xiangshan information disclosure5.5v3.10.2%2023-12-30
CVE-2023-50550Layui cross-site scripting (XSS)5.4v3.10.3%2023-12-30Fix
CVE-2023-50110TestLink authentication bypass7.5v3.10.7%2023-12-30
CVE-2023-49299Apache DolphinScheduler: Arbitrary js execute as root for authenticated users8.8v3.11.4%2023-12-30Fix
CVE-2023-41544JeecgBoot server-side template injection9.8v3.12.7%2023-12-30
CVE-2023-41543Jeecg Boot SQL injection9.8v3.10.9%2023-12-30
CVE-2023-41542Jeecg Boot SQL injection9.8v3.10.9%2023-12-30
CVE-2023-38023An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in __scone_dispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak."5.5v3.10.2%2023-12-30Fix
CVE-2023-38022An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.29 for Intel SGX. Insufficient pointer validation allows a local attacker to access unauthorized information. This relates to strlen and sgx_is_within_user.5.5v3.10.2%2023-12-30
CVE-2023-38021Fortanix Confidential Computing Manager enclave entry function vulnerability5.5v3.10.2%2023-12-30
CVE-2023-7181Muyun DedeBIZ Add Attachment unrestricted upload7.2v3.10.8%2023-12-30
CVE-2023-7180Tongda OA 2017 delete.php SQL injection4.3v3.10.5%2023-12-30
CVE-2023-7179Campcodes Online College Library System HTTP POST request category_row.php SQL injection8.8v3.10.7%2023-12-30
CVE-2023-7178Campcodes Online College Library System HTTP POST request book_row.php SQL injection7.2v3.10.7%2023-12-30
CVE-2023-7177Campcodes Online College Library System HTTP POST request book_add.php SQL injection8.8v3.10.7%2023-12-30
CVE-2023-7176Campcodes Online College Library System HTTP POST request return_add.php SQL injection8.8v3.10.7%2023-12-30
CVE-2023-7175Campcodes Online College Library System HTTP POST request borrow_add.php SQL injection9.8v3.10.6%2023-12-30
CVE-2023-7173PHPGurukul Hospital Management System registration.php cross-site scripting5.4v3.11.5%2023-12-30
CVE-2023-7172PHPGurukul Hospital Management System Admin Dashboard SQL injection7.2v3.11.5%2023-12-30
CVE-2023-6998Lockscreen bypass in eWeLink App7.7v3.10.2%2023-12-30Fix
CVE-2023-52240Kantega-sso Kantega SAML SSO OIDC KERBEROS Single Sign-on cross-site scripting6.1v3.10.5%2023-12-29Fix
CVE-2023-52174XnView Classic out-of-bounds write9.8v3.10.7%2023-12-29Fix
CVE-2023-52173XnView Classic out-of-bounds write9.8v3.10.6%2023-12-29Fix
CVE-2023-52139Misskey vulnerable to improper authorization when accessing with third-party application9.1CNA v3.10.5%2023-12-29Fix
CVE-2023-52137GitHub action tj-actions/verify-changed-files is vulnerable to command injection in output filenames7.7CNA v3.12.6%2023-12-29Fix
CVE-2023-52135WS Form LITE WordPress plugin SQL injection7.2v3.10.5%2023-12-29Fix
CVE-2023-52085Winter CMS local file inclusion through server side template injection3.3CNA v3.130.2%2023-12-29NucleiFix
CVE-2023-51688eCommerce Product Catalog WordPress plugin sensitive data exposure7.5v3.10.5%2023-12-29Fix
CVE-2023-51687Product Catalog Simple WordPress plugin sensitive data exposure7.5v3.10.5%2023-12-29Fix
CVE-2023-51676Happy Addons for Elementor WordPress plugin server side request forgery (SSRF)6.5v3.10.3%2023-12-29Fix
CVE-2023-51675Advanced Access Manager WordPress plugin open redirection5.4v3.10.3%2023-12-29Fix
CVE-2023-51663Hail authentication can be bypassed by changing email address5.3CNA v3.10.4%2023-12-29Fix
CVE-2023-51545Job Manager and Career WordPress plugin cross-site request forgery leading to PHP object injection8.8NVD v3.10.3%2023-12-29Fix
CVE-2023-51541Stock Ticker WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-29Fix
CVE-2023-51527GPT3 AI Content Writer WordPress plugin sensitive data exposure7.5v3.10.5%2023-12-29Fix
CVE-2023-51517Calculated Fields Form WordPress plugin open redirection5.4v3.10.3%2023-12-29Fix
CVE-2023-51505Active Products Tables for WooCommerce WordPress plugin PHP object injection9.8v3.10.7%2023-12-29Fix
CVE-2023-51475WP MLM Unilevel WordPress plugin arbitrary file upload9.8v3.10.6%2023-12-29
CVE-2023-51473TerraClassifieds WordPress plugin arbitrary file upload9.8v3.10.6%2023-12-29
CVE-2023-51470Rencontre Dating Site WordPress plugin PHP object injection8.8NVD v3.10.6%2023-12-29Fix
CVE-2023-51468Rencontre Dating Site WordPress plugin arbitrary file upload9.8v3.10.6%2023-12-29Fix
CVE-2023-51435Honor Magic UI improper privilege management7.1CNA v3.10.2%2023-12-29Fix
CVE-2023-51434Honor Magic UI buffer overflow9.3CNA v3.10.2%2023-12-29Fix
CVE-2023-51433Honor Magic UI improper privilege management2.9CNA v3.10.1%2023-12-29Fix
CVE-2023-51432Honor Magic UI out-of-bounds read3.2CNA v3.10.2%2023-12-29Fix
CVE-2023-51431Honor com.hihonor.phoneservice incorrect privilege assignment7.0CNA v3.10.1%2023-12-29Fix
CVE-2023-51430Honor Magic UI improper privilege management4.4CNA v3.10.2%2023-12-29Fix
CVE-2023-51429Honor Magic OS improper privilege management6.0CNA v3.10.2%2023-12-29Fix
CVE-2023-51428Honor Magic OS type confusion4.6CNA v3.10.2%2023-12-29Fix
CVE-2023-51427Honor Magic OS type confusion4.6CNA v3.10.2%2023-12-29Fix
CVE-2023-51426Honor Magic OS type confusion4.6CNA v3.10.2%2023-12-29Fix
CVE-2023-51422WebinarIgnition WordPress plugin PHP object injection8.8NVD v3.10.6%2023-12-29Fix
CVE-2023-51421Verge3D WordPress plugin arbitrary file upload8.8NVD v3.10.6%2023-12-29Fix
CVE-2023-51420Verge3D WordPress plugin remote code execution (RCE)8.8NVD v3.10.6%2023-12-29
CVE-2023-51419BERTHA AI WordPress plugin arbitrary file upload9.8v3.10.6%2023-12-29Fix
CVE-2023-51417JVM rich text icons WordPress plugin arbitrary file upload8.8NVD v3.10.6%2023-12-29Fix
CVE-2023-51414EnvíaloSimple WordPress plugin PHP object injection9.8v3.10.6%2023-12-29Fix
CVE-2023-51412Piotnet Forms WordPress plugin arbitrary file upload9.8v3.10.5%2023-12-29Fix
CVE-2023-51411Frontend Admin by DynamiApps WordPress plugin arbitrary file upload9.8v3.10.6%2023-12-29Fix
CVE-2023-51410WP Mail Log WordPress plugin arbitrary file upload8.8NVD v3.10.6%2023-12-29Fix
CVE-2023-51402Ultimate Addons for WPBakery Page Builder WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-29Fix
CVE-2023-51399Back Button Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-29Fix
CVE-2023-51397WP Remote Site Search WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-29Fix
CVE-2023-51396Brizy Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-29Fix
CVE-2023-51378Rise Blocks WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-29Fix
CVE-2023-51374ZeroBounce Email Verification and Validation WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-29Fix
CVE-2023-51373Google Photos Gallery with Shortcodes WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2023-12-29Fix
CVE-2023-51372HashBar WordPress Notification Bar plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-29Fix
CVE-2023-51371Bit Assist WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-29Fix
CVE-2023-51361Sticky Chat Widget WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-29Fix
CVE-2023-51358Block IPs for Gravity Forms WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-29Fix
CVE-2023-51354Webba Booking WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-29Fix
CVE-2023-50902New User Approve WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-29Fix
CVE-2023-50901HT Mega WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-29Fix
CVE-2023-50896weForms WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-29Fix
CVE-2023-50893UpSolution Core WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-29Fix
CVE-2023-50892TheGem WordPress theme cross-site scripting (XSS)6.1NVD v3.10.3%2023-12-29Fix
CVE-2023-50891Zoho Forms WordPress plugin cross-site scripting (XSS)5.4v3.11.1%2023-12-29Fix
CVE-2023-50889Beaver Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-29Fix
CVE-2023-50881Advanced Access Manager WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-29Fix
CVE-2023-50880BuddyPress WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-29Fix
CVE-2023-50879WordPress.com Editing Toolkit plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-29Fix
CVE-2023-50878MStore API WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-29Fix
CVE-2023-50837Login Lockdown WordPress plugin SQL injection7.2v3.10.6%2023-12-29Fix
CVE-2023-50572JLine vulnerable to out of memory error5.5NVD v3.10.3%2023-12-29Fix
CVE-2023-50571Jeasy Easy Rules easy-rules-mvel vulnerable to remote code execution7.8v3.10.4%2023-12-29
CVE-2023-50570Seancfoley ip-address infinite loop5.5v3.10.3%2023-12-29Fix
CVE-2023-50104zzcms ZZCMS 2023 has a file upload9.8v3.11.1%2023-12-29
CVE-2023-50071Customer Support System SQL injection8.8v3.113.8%2023-12-29Exploit code
CVE-2023-50070oretnom23 Customer Support System SQL injection8.8NVD v3.10.8%2023-12-29
CVE-2023-50069wiremock cross-site scripting6.1v3.10.4%2023-12-29
CVE-2023-50035Small CRM SQL injection9.8v3.10.6%2023-12-29
CVE-2023-49830Astra Pro WordPress plugin remote code execution (RCE)8.8NVD v3.10.7%2023-12-29Fix
CVE-2023-47840Qode Essential Addons WordPress plugin remote code execution (RCE)8.8NVD v3.11.4%2023-12-29Exploit codeFix
CVE-2023-47804Apache OpenOffice: Macro URL arbitrary script execution8.8v3.12.7%2023-12-29Fix
CVE-2023-46623WP EXtra WordPress plugin remote code execution (RCE)8.8NVD v3.10.6%2023-12-29Fix
CVE-2023-45751Nexter Extension WordPress plugin remote code execution (RCE)7.2NVD v3.10.6%2023-12-29Fix
CVE-2023-44089Pandora FMS XSS in Visual console6.1CNA v3.10.3%2023-12-29Fix
CVE-2023-44088Pandora FMS SQL injection in Visual console5.9CNA v3.10.7%2023-12-29Exploit codeFix
CVE-2023-41815Pandora FMS XSS in file manager7.5CNA v3.10.3%2023-12-29Fix
CVE-2023-41814Pandora FMS XSS vulnerability messages3.7CNA v3.10.3%2023-12-29Fix
CVE-2023-41813Pandora FMS user notification settings edition3.0CNA v3.10.3%2023-12-29Fix
CVE-2023-40606Kanban Boards for WordPress plugin arbitrary code execution7.2NVD v3.10.8%2023-12-29
CVE-2023-32517MailChimp Subscribe Forms WordPress plugin open redirection6.1v3.10.4%2023-12-29Fix
CVE-2023-32101Library Viewer WordPress plugin open redirection6.1v3.10.4%2023-12-29Fix
CVE-2023-32095Rename Media Files WordPress plugin remote code execution (RCE)8.8NVD v3.10.7%2023-12-29
CVE-2023-31302Sesami Cash Point & Transport Optimizer cross-site scripting6.1v3.10.5%2023-12-29
CVE-2023-31301Sesami Cash Point & Transport Optimizer stored cross-site scripting6.1v3.10.5%2023-12-29
CVE-2023-31300Sesami Cash Point & Transport Optimizer cleartext transmission of sensitive information7.5v3.10.4%2023-12-29
CVE-2023-31299Sesami Cash Point & Transport Optimizer cross-site scripting6.1v3.10.5%2023-12-29
CVE-2023-31298Sesami Cash Point & Transport Optimizer cross-site scripting4.8v3.10.4%2023-12-29
CVE-2023-31296Sesami Cash Point & Transport Optimizer CSV injection5.3v3.10.4%2023-12-29
CVE-2023-31295Sesami Cash Point & Transport Optimizer CSV injection7.5v3.10.6%2023-12-29
CVE-2023-31294Sesami Cash Point & Transport Optimizer CSV injection7.5v3.10.6%2023-12-29
CVE-2023-31293Sesami Cash Point & Transport Optimizer improper access control4.3v3.10.5%2023-12-29
CVE-2023-31292Sesami Cash Point & Transport Optimizer improper authentication5.5v3.10.2%2023-12-29
CVE-2023-31237Zephyr Project Manager WordPress plugin open redirection6.1v3.10.4%2023-12-29Fix
CVE-2023-31229WP Directory Kit WordPress plugin open redirection6.1v3.10.3%2023-12-29Fix
CVE-2023-31095Integration for Contact Form 7 HubSpot WordPress plugin open redirection6.1v3.10.4%2023-12-29Fix
CVE-2023-28786Solid Security WordPress plugin open redirection6.1v3.10.4%2023-12-29Fix
CVE-2023-25054RSVPMaker WordPress plugin David F code injection9.8v3.10.7%2023-12-29Fix
CVE-2023-23634Documize SQL injection9.8v3.11.1%2023-12-29
CVE-2023-23443Honor Magic OS type confusion4.6CNA v3.10.2%2023-12-29Fix
CVE-2023-23442Honor Magic OS type confusion4.6CNA v3.10.2%2023-12-29Fix
CVE-2023-23441Honor Magic UI out-of-bounds read6.0CNA v3.10.2%2023-12-29Fix
CVE-2023-23440Honor LGE-AN00 information disclosure3.3CNA v3.10.2%2023-12-29Fix
CVE-2023-23439Honor LGE-AN00 information disclosure4.0CNA v3.10.2%2023-12-29Fix
CVE-2023-23438Honor LGE-AN00 improper privilege management4.0CNA v3.10.1%2023-12-29Fix
CVE-2023-23437Honor com.hihonor.vmall insecure storage of sensitive information3.3CNA v3.10.2%2023-12-29Fix
CVE-2023-23436Honor Magic OS improper signature verification7.3CNA v3.10.1%2023-12-29Fix
CVE-2023-23435Honor Magic OS improper signature verification4.0CNA v3.10.1%2023-12-29Fix
CVE-2023-23434HonorBoardApp information disclosure4.0CNA v3.10.2%2023-12-29Fix
CVE-2023-23433Honor NTH-AN00 improper signature verification4.0CNA v3.10.1%2023-12-29Fix
CVE-2023-23432Honor NTH-AN00 improper signature verification7.3CNA v3.10.1%2023-12-29Fix
CVE-2023-23431Honor NTH-AN00 improper signature verification7.3CNA v3.10.1%2023-12-29Fix
CVE-2023-23430Honor com.hihonor.magichome improper privilege management3.3CNA v3.10.3%2023-12-29Fix
CVE-2023-23429Honor Magic OS improper privilege management4.0CNA v3.10.3%2023-12-29Fix
CVE-2023-23428Honor Magic OS improper privilege management3.3CNA v3.10.3%2023-12-29Fix
CVE-2023-23427Honor Magic OS improper privilege management4.0CNA v3.10.3%2023-12-29Fix
CVE-2023-23426Honor FRI-AN00 information disclosure6.6CNA v3.10.2%2023-12-29Fix
CVE-2023-23424Honor NTH-AN00 code execution6.5CNA v3.10.6%2023-12-29Fix
CVE-2023-22677WP Booklet WordPress plugin remote code execution (RCE)8.8v3.10.7%2023-12-29
CVE-2023-22676Advanced Custom Fields: Image Crop Add-on WordPress plugin broken access control8.8v3.10.4%2023-12-29
CVE-2023-7171Novel-Plus Friendly Link FriendLinkController.java cross-site scripting4.8v3.10.5%2023-12-29
CVE-2023-7166Novel-Plus HTTP POST request updateUserInfo cross-site scripting5.4v3.10.5%2023-12-29
CVE-2023-7161Netentsec NS-ASG Application Security Gateway Login SQL injection9.8v3.10.7%2023-12-29
CVE-2023-7160SourceCodester Engineers Online Portal Add Engineer cross-site scripting6.1v3.10.3%2023-12-29
CVE-2023-7159gopeak MasterLab User.php update unrestricted upload9.8v3.10.6%2023-12-29
CVE-2023-7158MicroPython objslice.c slice_indices heap-based overflow9.8v3.11.2%2023-12-29Fix
CVE-2023-7157SourceCodester Free and Open Source Inventory Management System sell_return_data.php SQL injection9.8v3.10.7%2023-12-29
CVE-2023-7156Campcodes Online College Library System Search index.php SQL injection9.8v3.10.7%2023-12-29
CVE-2023-7155SourceCodester Free and Open Source Inventory Management System edit_product.php SQL injection8.8v3.10.6%2023-12-29
CVE-2023-7152MicroPython modselect.c poll_set_add_fd use-after-free9.8v3.10.9%2023-12-29
CVE-2023-7150Campcodes Chic Beauty Salon Product product-list.php unrestricted upload8.8v3.10.6%2023-12-29
CVE-2023-7149code-projects QR Code Generator cross-site scripting6.1v3.10.5%2023-12-29
CVE-2023-7148ShifuML shifu Java Expression Language DataPurifier.java code injection8.1v3.10.7%2023-12-29
CVE-2023-7147gopeak MasterLab User.php base64ImageContent unrestricted upload9.8v3.10.6%2023-12-29
CVE-2023-7146gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete SQL injection9.8v3.10.7%2023-12-29
CVE-2023-7145gopeak MasterLab HTTP POST Request Framework.php sqlInject SQL injection9.8v3.10.7%2023-12-29
CVE-2023-7144gopeak MasterLab HTTP POST Request Feature.php sqlInject SQL injection9.8v3.10.6%2023-12-29
CVE-2023-7143code-projects Client Details System regester.php cross-site scripting4.8v3.10.5%2023-12-29
CVE-2023-7142code-projects Client Details System clientview.php SQL injection9.8v3.10.6%2023-12-29
CVE-2023-7141code-projects Client Details System update-clients.php SQL injection9.8v3.10.6%2023-12-29
CVE-2023-7114Mattermost cross-site request forgery7.1CNA v3.10.5%2023-12-29Fix
CVE-2023-7113Mattermost cross-site scripting3.7CNA v3.10.3%2023-12-29Fix
CVE-2023-7080Arbitrary remote code execution within Wrangler dev Workers sandbox8.5CNA v3.10.6%2023-12-29Fix
CVE-2023-7079Arbitrary remote file read in Wrangler dev server6.4CNA v3.10.7%2023-12-29Fix
CVE-2023-7078Server-side request forgery (SSRF) in Miniflare7.5CNA v3.10.6%2023-12-29Fix
CVE-2023-6939Honor Magic UI type confusion4.0CNA v3.10.2%2023-12-29Fix
CVE-2023-4675SQLi i GM Informatics MDO9.8CNA v3.10.5%2023-12-29
CVE-2023-4674SQLi in Yazteks E-commerce Software–0.3%2023-12-29
CVE-2023-4541SQLi in Weens Admin Panel9.8CNA v3.10.5%2023-12-29
CVE-2023-4468Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorization7.6v3.10.3%2023-12-29
CVE-2023-4467Poly Trio 8800 Test Automation Mode backdoor6.6v3.10.3%2023-12-29
CVE-2023-4466Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web interface protection mechanism4.9v3.10.5%2023-12-29
CVE-2023-4465Poly VVX 601 Configuration File Import unverified password change6.5v3.10.5%2023-12-29
CVE-2023-4464Poly VVX 601 Diagnostic Telnet Mode os command injection7.2v3.13.3%2023-12-29
CVE-2023-4463Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP header denial of service7.5v3.11.0%2023-12-29
CVE-2023-4462Poly VVX 601 Web Configuration application random values5.9v3.10.9%2023-12-29
CVE-2023-52152Cybergarage Mupnp For C out-of-bounds read7.5v3.10.6%2023-12-28
CVE-2023-52084Winter CMS stored XSS through Backend ColorPicker FormWidget2.0CNA v3.10.3%2023-12-28Fix
CVE-2023-52083wintercms winter stored XSS through privileged upload of Media Manager file followed by renaming2.0CNA v3.10.3%2023-12-28Fix
CVE-2023-52082Lychee is vulnerable to an SQL injection in explain DB queries8.8CNA v3.10.5%2023-12-28Fix
CVE-2023-52081ewen-lbh ffcss theme name lookup improper unicode handling5.3CNA v3.10.5%2023-12-28Fix
CVE-2023-52079kriszyp msgpackr conversion of property names to strings can trigger infinite recursion6.8CNA v3.10.7%2023-12-28Fix
CVE-2023-51501Uncode Core WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-28Fix
CVE-2023-51010Qd-metro Qingdao Metro AdSdkH5Activity vulnerability5.3v3.10.4%2023-12-28
CVE-2023-51006Zhwnl Chinese Perpetual Calendar openFile method vulnerability7.5v3.10.6%2023-12-28
CVE-2023-50874Ajax Load More WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-28Fix
CVE-2023-50873Marios Alexandrou Add Any Extension to Pages cross-site request forgery8.8v3.10.2%2023-12-28Fix
CVE-2023-50860Amelia WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-28Fix
CVE-2023-50859WP Crowdfunding WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-28Fix
CVE-2023-50858Anti Hacker WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-28Fix
CVE-2023-50857Recover WooCommerce Cart Abandonment WordPress plugin SQL command improper neutralization7.2v3.10.5%2023-12-28Fix
CVE-2023-50856Funnel Builder for WordPress by FunnelKit plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50855Pre* Party Resource Hints WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50854Squirrly SEO - Advanced Pack WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50853Advanced Form Integration WordPress plugin SQL command improper neutralization7.2v3.10.5%2023-12-28Fix
CVE-2023-50852BookIt WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50851Simply Schedule Appointments WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50849e2pdf WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50848404 Solution WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50847Welcart e-Commerce WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50846RegistrationMagic WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50845GeoDirectory WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50844WP Mail Catcher WordPress plugin SQL injection7.2v3.10.5%2023-12-28Fix
CVE-2023-50843Clockwork SMS Notfications WordPress plugin SQL injection7.2v3.10.5%2023-12-28
CVE-2023-50842MF Gig Calendar WordPress plugin SQL injection8.8v3.10.5%2023-12-28
CVE-2023-50841BookingPress WordPress plugin SQL injection8.8v3.10.5%2023-12-28Fix
CVE-2023-50840Booking Manager WordPress plugin SQL injection8.8v3.10.5%2023-12-28Fix
CVE-2023-50839JS Help Desk Best Help Desk and Support WordPress plugin SQL injection9.8NVD v3.12.0%2023-12-28NucleiFix
CVE-2023-50838NEX-Forms Ultimate Form Builder WordPress plugin SQL injection7.2v3.10.6%2023-12-28Fix
CVE-2023-50836HTML Forms WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-28Fix
CVE-2023-50692jizhiCMS file upload8.8v3.10.9%2023-12-28
CVE-2023-50470Seacms component admin_ Video.php cross-site scripting5.4v3.10.4%2023-12-28
CVE-2023-50448Activeadmin potential CSV export data leak6.5v3.10.5%2023-12-28Fix
CVE-2023-50445GL.iNet Gl-a1300 command injection7.8v3.19.1%2023-12-28MetasploitExploit codeKCV
CVE-2023-50267MeterSphere horizontal privilege escalation vulnerability of resources in project scope4.3CNA v3.10.3%2023-12-28Fix
CVE-2023-50038Textpattern background arbitrary file upload8.8v3.10.8%2023-12-28
CVE-2023-49469Shaarli reflected cross-site scripting6.1v3.10.5%2023-12-28Fix
CVE-2023-49230Peplink Balance Two missing authorization8.8v3.12.1%2023-12-28Nuclei
CVE-2023-49229Peplink Balance Two missing authorization4.3v3.10.5%2023-12-28
CVE-2023-49228Peplink Balance Two hard-coded credentials6.4v3.10.5%2023-12-28
CVE-2023-46989Innovadeluxe QuickOrder SQL injection7.8v3.10.2%2023-12-28Fix
CVE-2023-46987Seacms code injection8.8v3.11.3%2023-12-28
CVE-2023-45702HCL Launch agent as a Windows service is vulnerable to a denial of service6.2CNA v3.10.2%2023-12-28Fix
CVE-2023-45701HCL Launch is susceptible to sensitive information disclosure4.3CNA v3.10.5%2023-12-28Fix
CVE-2023-36381Zippy WordPress plugin PHP object injection8.8v3.10.5%2023-12-28Fix
CVE-2023-34829TP-Link Tapo cleartext transmission of sensitive information6.5v3.10.2%2023-12-28
CVE-2023-32795WooCommerce Product Add-ons WordPress plugin PHP object injection7.2v3.10.7%2023-12-28Fix
CVE-2023-32513GiveWP WordPress plugin PHP object injection9.8v3.10.6%2023-12-28Fix
CVE-2023-27447WP SMS WordPress plugin sensitive data exposure7.5v3.10.5%2023-12-28Fix
CVE-2023-7163D-Link D-View 8 Unauthenticated Probe-Core Server Communication9.8NVD v3.11.7%2023-12-28
CVE-2023-7140code-projects Client Details System manage-users.php SQL injection9.8v3.10.6%2023-12-28
CVE-2023-7139code-projects Client Details System HTTP POST request regester.php SQL injection9.8v3.10.6%2023-12-28
CVE-2023-7138code-projects Client Details System HTTP POST request admin SQL injection8.8v3.10.7%2023-12-28
CVE-2023-7137code-projects Client Details System HTTP POST request SQL injection8.8v3.117.0%2023-12-28
CVE-2023-7136code-projects Record Management System Document Type doctype.php cross-site scripting5.4v3.10.5%2023-12-28
CVE-2023-7135code-projects Record Management System Offices offices.php cross-site scripting5.4v3.10.5%2023-12-28
CVE-2023-7134SourceCodester Medicine Tracking System path traversal9.8v3.10.9%2023-12-28
CVE-2023-7133y_project RuoYi HTTP POST request login cross-site scripting6.1v3.10.7%2023-12-28
CVE-2023-7132code-projects Intern Membership Management System User Registration cross-site scripting5.4v3.10.6%2023-12-28
CVE-2023-7131code-projects Intern Membership Management System User Registration SQL injection9.8v3.10.7%2023-12-28
CVE-2023-7129code-projects Voting System Voters Login SQL injection8.8v3.10.6%2023-12-28
CVE-2023-7128code-projects Voting System Admin Login SQL injection8.8v3.10.7%2023-12-28
CVE-2023-7127code-projects Automated Voting System Login SQL injection9.8v3.10.7%2023-12-28
CVE-2023-7126code-projects Automated Voting System Admin Login SQL injection8.8v3.10.7%2023-12-28
CVE-2023-7124code-projects E-Commerce Site search.php cross-site scripting6.1v3.10.7%2023-12-28
CVE-2023-7123SourceCodester Medicine Tracking System SQL injection9.8v3.10.7%2023-12-28
CVE-2023-4672XSS in Talent Soft's ECOP6.1CNA v3.10.3%2023-12-28Fix
CVE-2023-4671SQLi in Talent Soft's ECOP9.8v3.10.7%2023-12-28Fix
CVE-2023-52077nexryai Nexkey admin API incorrect authorization8.9CNA v3.10.7%2023-12-27Fix
CVE-2023-52075ReVanced API vulnerable to denial of service due to lack of error caching7.5CNA v3.10.5%2023-12-27Fix
CVE-2023-51700WP-Mobile-BankID-Integration WordPress Database deserialization: Potential for object injection6.4CNA v3.10.5%2023-12-27Fix
CVE-2023-51697Audiobookshelf vulnerable to blind SSRF in `podcastUtils.js`4.3CNA v3.10.3%2023-12-27Fix
CVE-2023-51665Audiobookshelf vulnerable to blind SSRF in `Auth.js`4.3CNA v3.10.3%2023-12-27Fix
CVE-2023-51664Tj-actions/changed-files command injection in output filenames7.3CNA v3.13.4%2023-12-27Fix
CVE-2023-51443FreeSWITCH susceptible to denial of service via DTLS Hello packets during call initiation7.5CNA v3.11.5%2023-12-27Fix
CVE-2023-51084Hyavijava stack overflow9.8v3.10.7%2023-12-27
CVE-2023-51080HuTool hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method7.5v3.10.6%2023-12-27Fix
CVE-2023-51079Mvel mvel2 TimeOut error exists in the ParseTools.subCompileExpression method5.3v3.10.7%2023-12-27Fix
CVE-2023-51075HuTool hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function7.5v3.10.7%2023-12-27Fix
CVE-2023-51074Json-path out-of-bounds write5.3v3.10.7%2023-12-27Fix
CVE-2023-50255Zip path traversal in Deepin-compressor9.3CNA v3.11.1%2023-12-27Fix
CVE-2023-49003Simplemobiletools Simple Dialer missing authorization5.3v3.10.5%2023-12-27Exploit code
CVE-2023-49002Xenomtechnologies Phone Dialer-voice Call Dialer access restriction bypass7.5NVD v3.10.7%2023-12-27
CVE-2023-49001Indi Browser code injection9.8v3.10.8%2023-12-27
CVE-2023-49000ArtistScope Artisbrowser code injection9.8v3.10.9%2023-12-27
CVE-2023-47883Vladymix TV Browser code injection9.8NVD v3.11.9%2023-12-27
CVE-2023-47882Kami Vision YI IoT app WebViewActivity vulnerability7.1v3.10.5%2023-12-27Exploit code
CVE-2023-46919Fedirtsapana Simple HTTP Server Plus hard-coded credentials6.3v3.10.1%2023-12-27
CVE-2023-46918Fedirtsapana Simple HTTP Server Plus hard-coded credentials4.6v3.10.3%2023-12-27
CVE-2023-43955Fedirtsapana TV Bro code injection9.8NVD v3.11.3%2023-12-27
CVE-2023-43481TCL Browser TV Web - Browsehere code injection9.8v3.11.1%2023-12-27Exploit code
CVE-2023-40038Arris DG1670A improper authentication8.8v3.10.3%2023-12-27
CVE-2023-7116WeiYe-Jing datax-web HTTP POST request killJob os command injection9.8v3.19.9%2023-12-27Nuclei
CVE-2023-6879Heap buffer overflow in libaom9.8NVD v3.11.2%2023-12-27Fix
CVE-2023-6190Authenicated path traversal in İzmir Katip Çelebi University9.8v3.10.8%2023-12-27Fix
CVE-2023-4641Shadow-utils: Possible password leak during passwd(1) change5.5NVD v3.10.3%2023-12-27Fix
CVE-2023-3171Red Hat EAP eap-7: Heap exhaustion via deserialization7.5CNA v3.10.9%2023-12-27Fix
CVE-2023-52096steve-community Ocpp-jaxb SQL injection7.5v3.10.6%2023-12-26
CVE-2023-52086Startutorial PHP Backend For Resumable.js unrestricted file upload8.1v3.10.7%2023-12-26
CVE-2023-51654Brother Industries iPrint&Scan Desktop link following5.5v3.10.2%2023-12-26Fix
CVE-2023-51467Apache OFBiz: Pre-authentication remote code execution (RCE)9.8NVD v3.196.0%2023-12-26NucleiMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2023-51363Buffalo VR-S1000 information disclosure6.5v3.10.3%2023-12-26Fix
CVE-2023-51107Artifex MuPDF divide by zero7.5v3.10.7%2023-12-26
CVE-2023-51106Artifex MuPDF divide by zero7.5v3.10.7%2023-12-26Fix
CVE-2023-51105Artifex MuPDF divide by zero7.5v3.10.9%2023-12-26Fix
CVE-2023-51104Artifex MuPDF divide by zero7.5v3.10.9%2023-12-26Fix
CVE-2023-51103Artifex MuPDF divide by zero7.5v3.10.9%2023-12-26Fix
CVE-2023-51102Tenda W9 out-of-bounds write9.8v3.10.7%2023-12-26
CVE-2023-51101Tenda W9 out-of-bounds write9.8v3.10.7%2023-12-26
CVE-2023-51100Tenda W9 OS command injection9.8v3.11.8%2023-12-26
CVE-2023-51099Tenda W9 OS command injection9.8v3.11.9%2023-12-26
CVE-2023-51098Tenda W9 OS command injection9.8v3.11.8%2023-12-26
CVE-2023-51097Tenda W9 out-of-bounds write9.8v3.10.8%2023-12-26
CVE-2023-51095Tenda M3 out-of-bounds write9.8v3.10.8%2023-12-26
CVE-2023-51094Tenda M3 OS command injection9.8v3.11.1%2023-12-26
CVE-2023-51093Tenda M3 out-of-bounds write9.8v3.10.8%2023-12-26Emerging Threats
CVE-2023-51092Tenda M3 out-of-bounds write9.8v3.112.9%2023-12-26
CVE-2023-51091Tenda M3 out-of-bounds write9.8v3.18.5%2023-12-26
CVE-2023-51090Tenda M3 out-of-bounds write9.8v3.10.7%2023-12-26
CVE-2023-50968Apache OFBiz: Arbitrary file properties reading and SSRF attack7.5v3.163.4%2023-12-26NucleiFix
CVE-2023-50339WESEEK GROWI User Management stored cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-50332WESEEK GROWI User Management improper authorization6.5v3.10.5%2023-12-26Fix
CVE-2023-50297Alfasado PowerCMS (PowerCMS 6 Series) open redirect6.1v3.10.4%2023-12-26Fix
CVE-2023-50294WESEEK GROWI cleartext storage of sensitive information6.5v3.10.3%2023-12-26Fix
CVE-2023-50175WESEEK GROWI App settings stored cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-49949Passwork incorrect authorization8.1v3.10.6%2023-12-26
CVE-2023-49807WESEEK GROWI cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-49779WESEEK GROWI anchor tag stored cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-49598WESEEK GROWI event handlers of the pre tags stored cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-49438Open redirect vulnerability in Flask-Security-Too6.1v3.11.1%2023-12-26NucleiExploit codeFix
CVE-2023-49119WESEEK GROWI cross-site scripting5.4v3.10.4%2023-12-26Fix
CVE-2023-49117Alfasado PowerCMS (PowerCMS 6 Series) cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-48003Asp.net Zero user messages open redirect6.1v3.10.5%2023-12-26
CVE-2023-47215WESEEK GROWI cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-46711Buffalo VR-S1000 hard-coded credentials4.6v3.10.2%2023-12-26Fix
CVE-2023-46699WESEEK GROWI User settings cross-site request forgery4.3v3.10.2%2023-12-26Fix
CVE-2023-46681Buffalo VR-S1000 command improper neutralization7.8v3.10.3%2023-12-26Fix
CVE-2023-45741Buffalo VR-S1000 OS command injection6.8v3.10.3%2023-12-26Fix
CVE-2023-45740WESEEK GROWI cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-45737WESEEK GROWI App settings stored cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-42436WESEEK GROWI presentation feature stored cross-site scripting5.4v3.10.3%2023-12-26Fix
CVE-2023-28616Stormshield Network Security cleartext transmission of sensitive information7.5v3.10.3%2023-12-26Fix
CVE-2023-27150OpenCRX cross-site scripting5.4v3.10.4%2023-12-26Fix
CVE-2023-7111code-projects Library Management System index.php SQL injection9.8v3.10.6%2023-12-26
CVE-2023-6268JSON Content Importer WordPress plugin reflected XSS6.1NVD v3.10.4%2023-12-26Fix
CVE-2023-6250BestWebSoft's Like and Share WordPress plugin unauthenticated password Protected post read7.5NVD v3.10.5%2023-12-26Fix
CVE-2023-6166Quiz Maker WordPress plugin reflected cross-site scripting6.1NVD v3.10.4%2023-12-26Fix
CVE-2023-6155Quiz Maker WordPress plugin unauthenticated email Address disclosure5.3NVD v3.10.6%2023-12-26Fix
CVE-2023-6114Duplicator and Duplicator Pro backups tmp directory information disclosure7.5NVD v3.130.9%2023-12-26NucleiFix
CVE-2023-5991Hotel Booking Lite WordPress plugin unauthenticated arbitrary file download and deletion9.8NVD v3.13.3%2023-12-26NucleiFix
CVE-2023-5980BSK Forms Blacklist WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.4%2023-12-26Fix
CVE-2023-5939rtMedia for WordPress, BuddyPress and bbPress plugin Admin+ RCE7.2NVD v3.11.3%2023-12-26Fix
CVE-2023-5931rtMedia for WordPress, BuddyPress and bbPress plugin Subscriber+ RCE8.8NVD v3.10.8%2023-12-26Fix
CVE-2023-5674WP Mail Log Contributor+ SQL injection in wml_logs/send_mail endpoint8.8NVD v3.110.8%2023-12-26Fix
CVE-2023-5673WP Mail Log Contributor+ arbitrary file upload to RCE8.8NVD v3.11.1%2023-12-26Fix
CVE-2023-5672WP Mail Log Contributor+ LFI in wml_logs/send_mail endpoint6.5NVD v3.10.7%2023-12-26Fix
CVE-2023-5645WP Mail Log Contributor+ SQL injection in wml_logs endpoint8.8NVD v3.10.7%2023-12-26Fix
CVE-2023-5644WP Mail Log incorrect authorization in REST API endpoints7.6NVD v3.10.5%2023-12-26Fix
CVE-2023-5203WP Sessions Time Monitoring Full Automatic WordPress plugin unauthenticated SQL injection7.5NVD v3.12.2%2023-12-26NucleiFix
CVE-2023-5180Out-of-bounds write vulnerability exists in ODA Drawings SDK7.8CNA v3.10.2%2023-12-26Exploit codeFix
CVE-2023-51772One Identity Password Manager insufficient session expiration8.8v3.10.5%2023-12-25
CVE-2023-51771Starnight Micro HTTP Server buffer overflow9.8v3.10.7%2023-12-25
CVE-2023-499543CX SQL injection9.8NVD v3.12.2%2023-12-25
CVE-2023-49944BeyondTrust Privilege Management Challenge Response feature vulnerability6.7v3.10.2%2023-12-25Fix
CVE-2023-49880IBM Financial Transaction Manager for SWIFT Services data manipulation7.5CNA v3.10.5%2023-12-25Fix
CVE-2023-49328Wolterskluwer B.point argument injection7.2v3.11.0%2023-12-25
CVE-2023-49226Peplink Balance Two command injection7.2v3.13.4%2023-12-25
CVE-2023-48654One Identity Password Manager file upload9.8v3.11.0%2023-12-25
CVE-2023-48652Concrete CMS cross-site request forgery (CSRF)4.3v3.10.2%2023-12-25Fix
CVE-2023-47247SysAid On-Premise Knowledge Base article deletion vulnerability4.3v3.10.3%2023-12-25Fix
CVE-2023-47091Stormshield Network Security buffer overflow7.5v3.10.5%2023-12-25Fix
CVE-2023-43064IBM i code execution7.0CNA v3.10.2%2023-12-25Fix
CVE-2023-40236Pexip Virtual Meeting Rooms hard-coded credentials5.3v3.10.4%2023-12-25
CVE-2023-38826Follettlearning Solutions Destiny Follet Learning cross-site scripting6.1v3.10.4%2023-12-25
CVE-2023-38321Sierra Wireless ALEOS null pointer dereference7.5v3.11.1%2023-12-25Fix
CVE-2023-37225Pexip Infinity cross-site scripting6.1v3.10.3%2023-12-25
CVE-2023-37188Blosc C-Blosc2 null pointer dereference7.5v3.10.8%2023-12-25
CVE-2023-37187Blosc C-Blosc2 null pointer dereference7.5v3.10.8%2023-12-25
CVE-2023-37186Blosc C-Blosc2 null pointer dereference7.5v3.10.8%2023-12-25
CVE-2023-37185Blosc C-Blosc2 null pointer dereference7.5v3.10.8%2023-12-25
CVE-2023-36486ILIAS workflow engine remote command execution7.2v3.10.9%2023-12-25Fix
CVE-2023-36485ILIAS workflow engine remote command execution7.2v3.10.8%2023-12-25Fix
CVE-2023-31455Pexip Infinity improper input validation7.5v3.10.6%2023-12-25
CVE-2023-31297Sesami Cash Point & Transport Optimizer cross-site scripting4.8v3.10.3%2023-12-25
CVE-2023-31289Pexip Infinity improper input validation7.5v3.10.6%2023-12-25
CVE-2023-31224Jamf improper authentication9.8v3.10.6%2023-12-25Fix
CVE-2023-30451Path traversal in TYPO3 File Abstraction Layer Storages4.9v3.11.2%2023-12-25Fix
CVE-2023-28872ncp-e Secure Enterprise Client link following8.8v3.10.8%2023-12-25
CVE-2023-7104SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow7.3NVD v3.11.5%2023-12-25Fix
CVE-2023-7100PHPGurukul Restaurant Table Booking System bwdates-report-details.php SQL injection9.8v3.10.7%2023-12-25
CVE-2023-7099PHPGurukul Nipah Virus Testing Management System bwdates-report-result.php SQL injection9.8v3.10.6%2023-12-25
CVE-2023-7098icret EasyImages hide.php path traversal5.3v3.10.7%2023-12-25
CVE-2023-7097code-projects Water Billing System addbill.php SQL injection9.8v3.10.6%2023-12-25
CVE-2023-7096code-projects Faculty Management System crud.php SQL injection9.8v3.10.7%2023-12-25
CVE-2023-7095Totolink A7100RU HTTP POST request main buffer overflow9.8v3.113.7%2023-12-25
CVE-2023-7094Netentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosure7.5v3.10.9%2023-12-25
CVE-2023-7093KylinSoft kylin-system-updater com.kylin.systemupgrade service OS command injection7.8v3.10.9%2023-12-25
CVE-2023-51767OpenBSD OpenSSH authentication bypass7.0NVD v3.10.7%2023-12-24KCVFix
CVE-2023-51766Exim insufficient verification of data authenticity5.3v3.11.1%2023-12-24Emerging ThreatsFix
CVE-2023-51765Sendmail insufficient verification of data authenticity5.3v3.11.1%2023-12-24Emerging ThreatsFix
CVE-2023-51764Postfix insufficient verification of data authenticity5.3NVD v3.12.6%2023-12-24Emerging ThreatsExploit codeFix
CVE-2023-51763ActiveAdmin CSV injection leading to sensitive information disclosure9.8v3.10.9%2023-12-24Fix
CVE-2023-51714Qt HTTP/2 HPACK table integer overflow9.8NVD v3.11.0%2023-12-24Fix
CVE-2023-7102Barracuda ESG Appliance remote code execution (RCE)9.8NVD v3.144.6%2023-12-24MetasploitExploit codeFix
CVE-2023-7101Spreadsheet::ParseExcel remote code execution7.8NVD v3.119.1%2023-12-24KEVMetasploitExploit codeFix
CVE-2023-7092Uniway UW-302VP Admin Web interface wlan_basic_set.cgi cross-site request forgery4.3v3.10.4%2023-12-24
CVE-2023-7091Dreamer CMS uploadFile unrestricted upload8.8v3.10.9%2023-12-24
CVE-2023-49594instipod DuoUniversalKeycloakAuthenticator challenge functionality information disclosure6.5v3.11.2%2023-12-23Fix
CVE-2023-7090Sudo: Improper handling of ipa_hostname leads to privilege mismanagement8.8NVD v3.10.7%2023-12-23Fix
CVE-2023-7008systemd systemd-resolved: Unsigned name response in signed zone is not refused when dnssec=yes5.9NVD v3.10.8%2023-12-23Fix
CVE-2023-7002Backup Migration WordPress plugin authenticated (Admin+) OS command injection via URL7.2v3.130.6%2023-12-23Fix
CVE-2023-6972Backup Migration WordPress plugin unauthenticated path traversal to arbitrary file deletion9.8v3.11.4%2023-12-23Exploit codeFix
CVE-2023-6971Backup Migration WordPress plugin remote file inclusion9.8v3.16.4%2023-12-23Fix
CVE-2023-6744Divi WordPress theme authenticated (Contributor+) stored cross-site scripting via shortcode5.4v3.10.3%2023-12-23Fix
CVE-2023-5962ioLogik E1200 Series: Weak cryptographic algorithm6.5CNA v3.10.3%2023-12-23Fix
CVE-2023-5961ioLogik E1200 Series: Cross-site request forgery (CSRF)8.8CNA v3.10.4%2023-12-23Exploit codeFix
CVE-2023-51713ProFTPD out-of-bounds read7.5v3.14.2%2023-12-22NucleiFix
CVE-2023-51708Bentley Assetwise Alim For Transportation improper authentication8.6v3.10.5%2023-12-22Fix
CVE-2023-51707Array Networks ArrayOS AG command injection9.8v3.11.3%2023-12-22Fix
CVE-2023-51704mediawiki cross-site scripting6.1v3.10.7%2023-12-22Fix
CVE-2023-51662Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL)6.0CNA v3.10.3%2023-12-22Fix
CVE-2023-51661wasmerio wasmer filesystem sandbox not enforced in wasmer-cli8.4CNA v3.10.6%2023-12-22Fix
CVE-2023-51651Potential URI resolution path traversal in the AWS SDK for PHP6.0CNA v3.10.4%2023-12-22Fix
CVE-2023-51650dromara hertzbeat unauthorized access vulnerability on three interfaces7.5CNA v3.10.9%2023-12-22Fix
CVE-2023-51649Nautobot missing object-level permissions enforcement when running Job Buttons3.5CNA v3.10.5%2023-12-22Fix
CVE-2023-51451SSRF in symbolicator via invalid protocol4.3CNA v3.10.5%2023-12-22Fix
CVE-2023-51449gradio make the `/file` secure against file traversal attacks5.6CNA v3.128.3%2023-12-22NucleiFix
CVE-2023-51448cacti SQL injection vulnerability when managing SNMP Notification Receivers8.8CNA v3.167.3%2023-12-22Fix
CVE-2023-51387Expression injection vulnerability in HertzBeat7.2CNA v3.11.4%2023-12-22Fix
CVE-2023-51386Sandbox Accounts for Events vulnerable to privilege escalation to read running events data7.8CNA v3.10.2%2023-12-22Fix
CVE-2023-51035TOTOLINK EX1200L OS command injection9.8v3.11.3%2023-12-22
CVE-2023-51034TOTOLINK EX1200L unrestricted file upload9.8v3.11.1%2023-12-22
CVE-2023-51033TOTOLINK EX1200L OS command injection9.8v3.11.0%2023-12-22
CVE-2023-51028TOTOLINK EX1800T OS command injection9.8v3.11.0%2023-12-22
CVE-2023-51027TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51026TOTOLINK EX1800T code injection9.8v3.11.0%2023-12-22
CVE-2023-51025TOTOLINK EX1800T command injection9.8v3.11.0%2023-12-22
CVE-2023-51024TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51023TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51022TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51021TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51020TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51019TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51018TOTOLINK EX1800T code injection9.8v3.11.0%2023-12-22
CVE-2023-51017TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51016TOTOLINK EX1800T command injection9.8v3.11.0%2023-12-22
CVE-2023-51015TOTOLINK EX1800T code injection9.8v3.11.0%2023-12-22
CVE-2023-51014TOTOLINK EX1800T command injection9.8v3.11.0%2023-12-22
CVE-2023-51013TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51012TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-51011TOTOLINK EX1800T arbitrary command execution9.8v3.11.0%2023-12-22
CVE-2023-50928sandbox-accounts-for-events security misconfiguration leads to budget exceed7.1CNA v3.10.4%2023-12-22Fix
CVE-2023-50924engelsystem stored XSS in Overview and Output fields7.3CNA v3.10.3%2023-12-22Fix
CVE-2023-50731MindsDB has arbitrary file write in file.py9.1CNA v3.11.0%2023-12-22Fix
CVE-2023-50730Grackle has StackOverflowError in GraphQL query processing7.5CNA v3.10.8%2023-12-22Fix
CVE-2023-50727Resque vulnerable to reflected XSS in Queue endpoint6.3CNA v3.10.5%2023-12-22Fix
CVE-2023-50725Resque vulnerable to reflected XSS in resque-web failed and queues lists6.3CNA v3.10.5%2023-12-22Fix
CVE-2023-50714yiisoft yii2-authclient the Oauth2 PKCE implementation is vulnerable6.8CNA v3.10.5%2023-12-22Fix
CVE-2023-50712Improper neutralization of alternate XSS syntax in iris-web4.6CNA v3.10.3%2023-12-22Fix
CVE-2023-50708Yiisoft yii2-authclient OAuth and OpenID Connect state comparison vulnerability6.1CNA v3.10.7%2023-12-22Fix
CVE-2023-50259pymedusa Medusa blind SSRF in /home/testslack endpoint5.3CNA v3.10.6%2023-12-22Fix
CVE-2023-50258pymedusa Medusa blind SSRF in `/home/testdiscord` endpoint5.3CNA v3.10.7%2023-12-22Fix
CVE-2023-50254Deepin Reader RCE vulnerability due to a design flaw9.3CNA v3.12.1%2023-12-22Exploit codeFix
CVE-2023-50250cacti cross-site scripting vulnerability when Import XML template file5.4CNA v3.11.3%2023-12-22Fix
CVE-2023-50147TOTOLINK A3700R arbitrary command execution9.8v3.11.2%2023-12-22
CVE-2023-49792Nextcloud security-advisories bruteforce protection can be bypassed with misconfigured proxy5.3CNA v3.11.0%2023-12-22Fix
CVE-2023-49791Nextcloud security-advisories workflows do not require password confirmation on API level5.4CNA v3.10.6%2023-12-22Fix
CVE-2023-49790App PIN code can be bypassed in Nextcloud files iOS4.3CNA v3.10.3%2023-12-22Fix
CVE-2023-49689Job Portal multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-22
CVE-2023-49688Job Portal multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-22
CVE-2023-49391free5GC AMF denial of service7.5v3.11.0%2023-12-22
CVE-2023-49356Glensawyer MP3GAIN stack-based buffer overflow7.5v3.10.7%2023-12-22Fix
CVE-2023-49088Cacti data_debug.php cross-site scripting6.1CNA v3.11.3%2023-12-22Fix
CVE-2023-49086Cacti is vulnerable to cross-site scripting (XSS) DOM5.4CNA v3.11.5%2023-12-22Fix
CVE-2023-49085Cacti pollers.php SQL injection8.8CNA v3.174.5%2023-12-22MetasploitExploit codeKCVFix
CVE-2023-48704ClickHouse unauthenticated heap buffer overflow in Gorrila codec decompression7.0CNA v3.10.5%2023-12-22Fix
CVE-2023-48670Dell SupportAssist Client Consumer untrusted search path7.3CNA v3.10.2%2023-12-22Fix
CVE-2023-48308Calendar app returns full stacktrace when an error happens while editing appointment3.5CNA v3.10.5%2023-12-22Fix
CVE-2023-45957thirty bees component admin/AdminRequestSqlController.php stored cross-site scripting5.4v3.10.4%2023-12-22
CVE-2023-45165IBM AIX denial of service6.2CNA v3.10.2%2023-12-22Fix
CVE-2023-43741Buildkite Elastic CI for AWS time-of-check-time-of-use race condition7.0v3.10.2%2023-12-22Fix
CVE-2023-43116Buildkite Elastic CI for AWS symbolic link following7.8v3.10.3%2023-12-22Fix
CVE-2023-43088Dell CPG BIOS arbitrary code execution7.2CNA v3.10.3%2023-12-22Fix
CVE-2023-42465sudo authentication bypass7.0v3.10.5%2023-12-22Fix
CVE-2023-42017IBM Planning Analytics file upload8.0CNA v3.11.1%2023-12-22Fix
CVE-2023-39251Dell CPG BIOS improper input validation6.7CNA v3.10.2%2023-12-22Fix
CVE-2023-24609Rambus TLS Toolkit integer overflow7.5v3.10.7%2023-12-22
CVE-2023-7076slawkens MyAAC bugtracker.php cross-site scripting6.1v3.10.5%2023-12-22Fix
CVE-2023-7075code-projects Point of Sales and Inventory Management System checkout.php cross-site scripting6.1v3.10.5%2023-12-22
CVE-2023-7059SourceCodester School Visitor Log e-Book log-book.php cross-site scripting5.4v3.10.5%2023-12-22
CVE-2023-7058SourceCodester Simple Student Attendance System path traversal9.8v3.10.7%2023-12-22
CVE-2023-7057code-projects Faculty Management System yearlevel.php cross-site scripting6.1v3.10.5%2023-12-22
CVE-2023-7056code-projects Faculty Management System subjects.php cross-site scripting5.4v3.10.5%2023-12-22
CVE-2023-7055PHPGurukul Online Notes Sharing System Contact Information profile.php access control5.4v3.10.5%2023-12-22
CVE-2023-7054PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload5.4v3.10.5%2023-12-22
CVE-2023-7053PHPGurukul Online Notes Sharing System signup.php weak password8.8v3.10.8%2023-12-22
CVE-2023-7052PHPGurukul Online Notes Sharing System profile.php cross-site request forgery4.3v3.10.4%2023-12-22
CVE-2023-51656Apache IoTDB: Unsafe deserialize map in Sync tool9.8v3.11.0%2023-12-21Fix
CVE-2023-51655JetBrains IntelliJ IDEA acceptance of untrusted data6.3CNA v3.10.3%2023-12-21Fix
CVE-2023-51442Authentication bypass vulnerability in navidrome's subsonic endpoint8.6CNA v3.10.7%2023-12-21Fix
CVE-2023-51390Information disclosure vulnerability in Journalpump6.5CNA v3.10.3%2023-12-21Fix
CVE-2023-51380Incorrect authorization allows Read Access to issue Comments in GitHub Enterprise Server2.7CNA v3.10.5%2023-12-21Fix
CVE-2023-51379Incorrect authorization for issue Comments in GitHub Enterprise Server4.9CNA v3.10.6%2023-12-21Fix
CVE-2023-51052S-CMS ajax.php SQL injection9.8v3.10.5%2023-12-21
CVE-2023-51051S-CMS ajax.php SQL injection9.8v3.10.5%2023-12-21
CVE-2023-51050S-CMS ajax.php SQL injection9.8v3.10.5%2023-12-21
CVE-2023-51049S-CMS ajax.php SQL injection9.8v3.10.5%2023-12-21
CVE-2023-51048S-CMS A_newsauth parameter in ajax.php SQL injection9.8v3.10.5%2023-12-21
CVE-2023-50834WooCommerce Menu Extension WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21
CVE-2023-50833Colibri Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-21Fix
CVE-2023-50832Multi Step Form WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-21Fix
CVE-2023-50831CURCY WordPress plugin cross-site scripting (XSS)5.4v3.10.5%2023-12-21Fix
CVE-2023-50830Seos Contact Form WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-21
CVE-2023-50829Loan Repayment Calculator and Application Form WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2023-12-21Fix
CVE-2023-50828Ultimate Dashboard WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-21Fix
CVE-2023-50827Accredible Certificates and Open Badges WordPress plugin cross-site scripting (XSS)4.8v3.10.2%2023-12-21Fix
CVE-2023-50826Menu Image, Icons made easy WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-21Fix
CVE-2023-50825iframe Shortcode WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21
CVE-2023-50824Insert or Embed Articulate Content into WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21Fix
CVE-2023-50823CSS and JavaScript Toolbox WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21Fix
CVE-2023-50822Currency Converter Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21Fix
CVE-2023-50783Apache Airflow: Improper access control vulnerability on the varimport endpoint6.5v3.11.4%2023-12-21Fix
CVE-2023-50732xwiki-platform velocity execution without script right through tree macro8.3CNA v3.10.5%2023-12-21Fix
CVE-2023-50724Resque vulnerable to reflected cross-site scripting through pathname6.3CNA v3.10.5%2023-12-21Fix
CVE-2023-50481Blinksocks has weak encryption algorithms7.5v3.10.3%2023-12-21
CVE-2023-50477Nos Client privilege escalation9.8v3.10.7%2023-12-21
CVE-2023-50475Bcoin bsock uses weak hashing algorithms9.1v3.10.5%2023-12-21
CVE-2023-50473Billahmed Qbit Matui bill-ahmed qbit-matUI version cross-site scripting5.4v3.10.4%2023-12-21
CVE-2023-50377Simple Counter WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21
CVE-2023-49920Apache Airflow: Missing CSRF protection on DAG/trigger6.5v3.11.0%2023-12-21Fix
CVE-2023-49826Soledad WordPress theme PHP object injection9.8v3.10.6%2023-12-21Fix
CVE-2023-49778Sayfa Sayaç WordPress plugin PHP object injection9.8v3.10.8%2023-12-21
CVE-2023-49765Rate my Post WP Rating System WordPress plugin insecure direct object references (IDOR)6.5v3.10.4%2023-12-21Fix
CVE-2023-49762AppMySite WordPress plugin sensitive data exposure7.5v3.10.5%2023-12-21Fix
CVE-2023-49681Job Portal multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-49677Job Portal multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-49162BigCommerce WordPress plugin sensitive data exposure7.5v3.10.4%2023-12-21
CVE-2023-49084Local file inclusion (RCE) in Cacti8.1CNA v3.164.4%2023-12-21MetasploitExploit codeKCVFix
CVE-2023-49032ltb-project Self Service Password code injection9.8v3.11.2%2023-12-21
CVE-2023-48722Student Result Management System multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-48720Student Result Management System multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-48718Student Result Management System multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-48716Student Result Management System multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-48689Railway Reservation System multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-48687Railway Reservation System multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-48685Railway Reservation System multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-21
CVE-2023-48298ClickHouse integer underflow leading to stack overflow in FPC codec decompression5.9CNA v3.10.6%2023-12-21Fix
CVE-2023-48291Apache Airflow: Improper access control to DAG resources4.3v3.11.8%2023-12-21Fix
CVE-2023-48288WordPress Job Board and Recruitment Plugin JobWP sensitive data exposure7.5v3.10.5%2023-12-21Fix
CVE-2023-48116SmarterTools SmarterMail cross-site scripting5.4v3.10.4%2023-12-21Fix
CVE-2023-48115SmarterTools SmarterMail cross-site scripting5.4v3.10.4%2023-12-21Fix
CVE-2023-48114SmarterTools SmarterMail cross-site scripting5.4v3.10.4%2023-12-21Fix
CVE-2023-47527WP Edit Username WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21Fix
CVE-2023-47525Event Management Tickets Booking WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2023-12-21Fix
CVE-2023-47265Apache Airflow: DAG Params alllow to embed unchecked Javascript5.4v3.11.3%2023-12-21Fix
CVE-2023-47191Youzify WordPress plugin insecure direct object references (IDOR)6.5v3.10.4%2023-12-21Fix
CVE-2023-47093Stormshield Network Security crash6.5v3.10.3%2023-12-21Fix
CVE-2023-46649GitHub Enterprise Server race condition allows Administrative Access on Organization Repositories6.3CNA v3.10.2%2023-12-21Fix
CVE-2023-46648Insufficient entropy in GitHub Enterprise Server Management Console Invitation Token8.3CNA v3.10.7%2023-12-21Fix
CVE-2023-46647GitHub Enterprise Server all versions improper privilege management8.0CNA v3.10.6%2023-12-21Fix
CVE-2023-46646GitHub Enterprise Server all versions improper access control5.3CNA v3.10.5%2023-12-21Fix
CVE-2023-46645GitHub Enterprise Server GitHub Pages site builder path traversal6.8CNA v3.10.8%2023-12-21Fix
CVE-2023-46131Grails® data binding causes JVM crash and/or DoS6.5CNA v3.10.7%2023-12-21Fix
CVE-2023-45703HCL Launch is susceptible to a denial of service5.3CNA v3.10.5%2023-12-21Fix
CVE-2023-45700HCL Launch is susceptible to an HTML injection4.3CNA v3.10.3%2023-12-21Fix
CVE-2023-45121Online Examination System multiple Authenticated SQL Injections (SQLi)8.8v3.10.7%2023-12-21
CVE-2023-45120Online Examination System multiple Authenticated SQL Injections (SQLi)8.8v3.10.6%2023-12-21
CVE-2023-45119Online Examination System multiple Authenticated SQL Injections (SQLi)8.8v3.10.7%2023-12-21
CVE-2023-45118Online Examination System multiple Authenticated SQL Injections (SQLi)8.8v3.10.7%2023-12-21
CVE-2023-45117Online Examination System multiple Authenticated SQL Injections (SQLi)8.8v3.10.5%2023-12-21
CVE-2023-45116Online Examination System multiple Authenticated SQL Injections (SQLi)8.8v3.10.7%2023-12-21
CVE-2023-45115Online Examination System multiple Authenticated SQL Injections (SQLi)8.8v3.10.7%2023-12-21
CVE-2023-44482Leave Management System Project multiple Authenticated SQL Injections (SQLi)8.8CNA v3.10.6%2023-12-21
CVE-2023-44481Leave Management System Project multiple Authenticated SQL Injections (SQLi)8.8CNA v3.10.6%2023-12-21
CVE-2023-41166Stormshield Network Security remote access commands vulnerability5.3v3.10.4%2023-12-21Fix
CVE-2023-41097silabs.com GSDK potential Timing vulnerability in CBC PKCS7 padding calculations4.6CNA v3.10.3%2023-12-21Fix
CVE-2023-40058SolarWinds Access Rights Manager sensitive information disclosure6.5CNA v3.10.8%2023-12-21Fix
CVE-2023-37520HCL BigFix Platform is affected by Unathenticated stored cross-site scripting (XSS)7.7CNA v3.10.3%2023-12-21Fix
CVE-2023-37519HCL BigFix Platform is affected by Unathenticated stored cross-site scripting (XSS)7.7CNA v3.10.2%2023-12-21Fix
CVE-2023-32799WooCommerce Ship to Multiple Addresses WordPress plugin insecure direct object references (IDOR)6.5v3.10.5%2023-12-21Fix
CVE-2023-32747WooCommerce Bookings WordPress plugin insecure direct object references (IDOR)7.5v3.10.4%2023-12-21Fix
CVE-2023-32242Woodmart Core WordPress plugin PHP object injection9.8v3.10.8%2023-12-21Fix
CVE-2023-29487Heimdalsecurity Thor regular expression denial of service9.1v3.10.7%2023-12-21
CVE-2023-29486Heimdalsecurity Thor regular expression denial of service9.8v3.11.0%2023-12-21
CVE-2023-29485Heimdalsecurity Thor missing authentication9.8v3.11.0%2023-12-21
CVE-2023-28421WordPress Email Marketing Plugin WP Email Capture sensitive data exposure7.5v3.10.5%2023-12-21Fix
CVE-2023-28025An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management6.6CNA v3.10.3%2023-12-21Fix
CVE-2023-27319Information disclosure vulnerability in ONTAP Mediator5.3CNA v3.10.4%2023-12-21Fix
CVE-2023-22674Dashicons + Custom Post Types WordPress plugin broken access control8.8v3.10.3%2023-12-21
CVE-2023-7051PHPGurukul Online Notes Sharing System manage-notes.php cross-site request forgery4.3v3.10.4%2023-12-21
CVE-2023-7050PHPGurukul Online Notes Sharing System profile.php cross-site scripting5.4v3.10.5%2023-12-21
CVE-2023-7047Devolutions Remote Desktop Manager incorrect authorization4.4v3.10.2%2023-12-21Fix
CVE-2023-7042Kernel: Null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev5.5NVD v3.10.3%2023-12-21Fix
CVE-2023-7041codelyfe Stupid Simple CMS rename.php path traversal5.4v3.10.9%2023-12-21
CVE-2023-7040codelyfe Stupid Simple CMS rename.php path traversal6.5v3.10.8%2023-12-21
CVE-2023-7039Byzoro S210 importexport.php injection9.8v3.114.2%2023-12-21
CVE-2023-7038Automad user creation cross-site request forgery6.5v3.10.4%2023-12-21Fix
CVE-2023-7037Automad FileController.php import server-side request forgery8.8v3.10.7%2023-12-21
CVE-2023-7036Automad Content Type FileCollectionController.php upload unrestricted upload5.4v3.10.6%2023-12-21
CVE-2023-7035Automad setting post.php cross-site scripting5.4v3.10.6%2023-12-21
CVE-2023-7026Lightxun IPTV Gateway web_upload_template.html unrestricted upload6.5v3.10.6%2023-12-21
CVE-2023-7025KylinSoft hedron-domain-hook DBus init_kcm access control7.8v3.10.2%2023-12-21
CVE-2023-7024Google Chromium WebRTC heap buffer overflow8.8NVD v3.16.7%2023-12-21KEVFix
CVE-2023-7023Tongda OA 2017 delete.php SQL injection9.8v3.10.7%2023-12-21
CVE-2023-7022Tongda OA 2017 delete_all.php SQL injection9.8v3.10.7%2023-12-21
CVE-2023-7021Tongda OA 2017 delete_search.php SQL injection9.8v3.10.7%2023-12-21
CVE-2023-7020Tongda OA 2017 view.php SQL injection9.8v3.10.7%2023-12-21
CVE-2023-6847GitHub Enterprise Server private mode authentication bypass7.5CNA v3.10.8%2023-12-21Fix
CVE-2023-6804GitHub Enterprise Server improper privilege management allows for arbitrary workflows to be run6.5CNA v3.10.2%2023-12-21Fix
CVE-2023-6803GitHub Enterprise Server race condition allows Unauthorized Outside Collaborator5.8CNA v3.10.2%2023-12-21Fix
CVE-2023-6802Sensitive information in log file in GitHub Enterprise Server7.2CNA v3.10.7%2023-12-21Fix
CVE-2023-6746Sensitive information in log file in GitHub Enterprise Server8.1CNA v3.10.5%2023-12-21Fix
CVE-2023-6690GitHub Enterprise Server race condition3.9CNA v3.10.3%2023-12-21Fix
CVE-2023-6546Kernel: Gsm multiplexing race condition leads to privilege escalation7.0NVD v3.10.7%2023-12-21Exploit codeFix
CVE-2023-6145SQLi in Softomi E-commerce Software9.8CNA v3.10.5%2023-12-21Fix
CVE-2023-6122Reflected XSS in Softomi E-commerce Software6.1CNA v3.10.4%2023-12-21Fix
CVE-2023-5989Stored XSS in Uyumsoft ERP6.1v3.10.3%2023-12-21Fix
CVE-2023-5988Reflected XSS in Uyumsoft ERP6.1CNA v3.10.3%2023-12-21Fix
CVE-2023-5594Improper following of a certificate's chain of trust in ESET security products7.5CNA v3.10.4%2023-12-21Fix
CVE-2023-4256Tcpreplay: Tcprewrite: Double free in tcpedit_dlt_cleanup in plugins/dlt_plugins.c5.5NVD v3.10.3%2023-12-21Fix
CVE-2023-4255w3m backspace handling in checkType out-of-bounds write5.5NVD v3.10.3%2023-12-21Fix
CVE-2023-2585Red Hat Single Sign-On 7 keycloak: Client access via device auth request spoof3.5CNA v3.10.7%2023-12-21Fix
CVE-2023-2487Export All Posts WordPress plugin Smackcoders information disclosure7.5v3.10.5%2023-12-21Fix
CVE-2023-51462Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.4%2023-12-20Fix
CVE-2023-51461Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2023-12-20Fix
CVE-2023-51460Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2023-12-20Fix
CVE-2023-51459Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.4%2023-12-20Fix
CVE-2023-51458Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2023-12-20Fix
CVE-2023-51457Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2023-12-20Fix
CVE-2023-50993Ruijie Rg-ws6008 OS command injection9.8v3.11.2%2023-12-20
CVE-2023-50992Tenda I29 out-of-bounds write9.8v3.10.8%2023-12-20
CVE-2023-50990Tenda I29 out-of-bounds write9.8v3.10.8%2023-12-20
CVE-2023-50989Tenda I29 command injection9.8v3.12.0%2023-12-20
CVE-2023-50988Tenda I29 out-of-bounds write9.8v3.10.8%2023-12-20
CVE-2023-50987Tenda I29 out-of-bounds write9.8v3.10.8%2023-12-20
CVE-2023-50986Tenda I29 buffer overflow9.8v3.10.8%2023-12-20
CVE-2023-50985Tenda I29 out-of-bounds write9.8v3.10.8%2023-12-20
CVE-2023-50984Tenda I29 out-of-bounds write9.8v3.10.8%2023-12-20
CVE-2023-50983Tenda I29 command injection9.8v3.12.0%2023-12-20
CVE-2023-50707Uncontrolled resource consumption in EFACEC BCU 5007.5NVD v3.10.7%2023-12-20Fix
CVE-2023-50706Improper access control in EFACEC UC 500E4.3v3.10.2%2023-12-20Fix
CVE-2023-50705Exposure of sensitive information to an unauthorized actor in EFACEC UC 500E5.3v3.10.5%2023-12-20Fix
CVE-2023-50704URL redirection to untrusted site (open redirect) in EFACEC UC 500E6.1v3.10.4%2023-12-20Fix
CVE-2023-50703Cleartext transmission of sensitive information in EFACEC UC 500E5.9v3.10.3%2023-12-20Fix
CVE-2023-50639Iscute Cute Http File Server CuteHttpFileServer v.1.0 and v.2.0 cross-site scripting5.4v3.10.4%2023-12-20
CVE-2023-50628Libming buffer overflow9.8v3.11.3%2023-12-20
CVE-2023-50249Sentry's Astro SDK vulnerable to ReDoS7.5CNA v3.10.8%2023-12-20Fix
CVE-2023-50044Cesanta mJS buffer overflow9.8v3.10.9%2023-12-20
CVE-2023-49825Soledad WordPress theme SQL injection8.1v3.10.5%2023-12-20Fix
CVE-2023-49814Symbiostock Lite WordPress plugin arbitrary file upload7.2NVD v3.10.6%2023-12-20
CVE-2023-49776Sayfa Sayaç WordPress plugin SQL injection9.8v3.10.6%2023-12-20
CVE-2023-49773BCorp Shortcodes WordPress plugin PHP object injection9.8v3.10.7%2023-12-20
CVE-2023-49772Genesis Simple Love WordPress plugin PHP object injection9.8v3.10.7%2023-12-20
CVE-2023-49752Adifier System WordPress theme SQL injection9.8v3.10.6%2023-12-20Fix
CVE-2023-49272Hotel Management multiple reflected cross-site scripting (XSS)5.4v3.10.4%2023-12-20
CVE-2023-49271Hotel Management multiple reflected cross-site scripting (XSS)5.4v3.10.4%2023-12-20
CVE-2023-49270Hotel Management multiple reflected cross-site scripting (XSS)5.4v3.10.4%2023-12-20
CVE-2023-49269Hotel Management multiple reflected cross-site scripting (XSS)5.4v3.10.4%2023-12-20
CVE-2023-49166MSync WordPress plugin SQL injection9.1v3.10.6%2023-12-20
CVE-2023-49161Bravo Translate WordPress plugin SQL injection9.1v3.10.6%2023-12-20
CVE-2023-48434Online Voting System Project multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-20
CVE-2023-48433Online Voting System Project multiple Unauthenticated SQL Injections (SQLi)9.8CNA v3.10.7%2023-12-20
CVE-2023-47990Cuppacms SQL injection9.8v3.10.8%2023-12-20
CVE-2023-47852Link Whisper Free WordPress plugin SQL injection7.2v3.10.6%2023-12-20Fix
CVE-2023-47784Slider Revolution WordPress plugin arbitrary file upload8.8v3.10.7%2023-12-20Fix
CVE-2023-47707IBM Security Guardium Key Lifecycle Manager cross-site scripting5.4CNA v3.10.4%2023-12-20Fix
CVE-2023-47706IBM Security Guardium Key Lifecycle Manager file upload6.6CNA v3.10.8%2023-12-20Fix
CVE-2023-47705IBM Security Guardium Key Lifecycle Manager improper input validation4.3CNA v3.10.5%2023-12-20Fix
CVE-2023-47704IBM Security Guardium Key Lifecycle Manager information disclosure4.0CNA v3.10.6%2023-12-20Fix
CVE-2023-47703IBM Security Guardium Key Lifecycle Manager information disclosure5.3CNA v3.10.8%2023-12-20Fix
CVE-2023-47702IBM Security Guardium Key Lifecycle Manager directory traversal4.3CNA v3.11.0%2023-12-20Fix
CVE-2023-47507Master Slider Pro WordPress plugin PHP object injection9.8v3.10.4%2023-12-20
CVE-2023-47236iPages Flipbook WordPress plugin SQL injection4.9NVD v3.10.5%2023-12-20Fix
CVE-2023-47161IBM UrbanCode Deploy denial of service5.3CNA v3.10.8%2023-12-20Fix
CVE-2023-47118ClickHouse heap buffer overflow in T64 codec decompression7.0CNA v3.10.5%2023-12-20Fix
CVE-2023-46311wpDiscuz WordPress plugin insecure direct object references (IDOR)6.5v3.10.5%2023-12-20Fix
CVE-2023-46149Themify Ultra WordPress theme arbitrary file upload8.8NVD v3.10.6%2023-12-20Fix
CVE-2023-46147Themify Ultra WordPress theme PHP object injection8.8v3.10.5%2023-12-20Fix
CVE-2023-45887Nintendo Ds Wireless Communication arbitrary code execution9.8v3.11.6%2023-12-20
CVE-2023-45603User Submitted Posts WordPress plugin arbitrary file upload9.8v3.10.9%2023-12-20Fix
CVE-2023-42013IBM UrbanCode Deploy information disclosure5.3CNA v3.10.7%2023-12-20Fix
CVE-2023-42012IBM UrbanCode Deploy denial of service6.2CNA v3.10.2%2023-12-20Fix
CVE-2023-41796Sunshine Photo Cart WordPress plugin insecure direct object references (IDOR)6.5v3.10.4%2023-12-20Fix
CVE-2023-40555Flatsome WordPress theme PHP object injection9.8v3.10.5%2023-12-20Fix
CVE-2023-40204Folders WordPress plugin arbitrary file upload7.2NVD v3.10.8%2023-12-20Fix
CVE-2023-40010HUSKY Products Filter for WooCommerce (formerly WOOF) WordPress plugin SQL injection9.8v3.10.6%2023-12-20Fix
CVE-2023-38519MainWP WordPress plugin SQL injection4.9NVD v3.10.6%2023-12-20Fix
CVE-2023-38513Photo Engine WordPress plugin insecure direct object references (IDOR)5.4v3.10.4%2023-12-20Fix
CVE-2023-37871WooCommerce GoCardless Gateway WordPress plugin insecure direct object references (IDOR)7.5v3.10.6%2023-12-20Fix
CVE-2023-37544Apache Pulsar WebSocket Proxy: Improper authentication for WebSocket Proxy endpoint allows DoS7.5CNA v3.11.4%2023-12-20Fix
CVE-2023-36520Editorial Calendar WordPress plugin insecure direct object references (IDOR)8.1v3.10.4%2023-12-20Fix
CVE-2023-35916WooPayments WordPress plugin Automattic insecure direct object reference7.5v3.10.6%2023-12-20Fix
CVE-2023-35915WooPayments WordPress plugin SQL command improper neutralization9.8v3.10.7%2023-12-20Fix
CVE-2023-35914WooCommerce Subscriptions WordPress plugin insecure direct object references (IDOR)7.5v3.10.6%2023-12-20Fix
CVE-2023-35895IBM Informix JDBC code execution6.3CNA v3.10.9%2023-12-20Fix
CVE-2023-35876WooCommerce Square WordPress plugin insecure direct object references (IDOR)8.1v3.10.7%2023-12-20Fix
CVE-2023-34385Export Import Menus WordPress plugin arbitrary file upload8.8NVD v3.10.8%2023-12-20Fix
CVE-2023-34007Download Monitor WordPress plugin arbitrary file upload8.8NVD v3.10.9%2023-12-20Fix
CVE-2023-33330WooCommerce Follow-Up Emails WordPress plugin SQL injection8.1v3.10.6%2023-12-20Fix
CVE-2023-33318WooCommerce Follow-Up Emails WordPress plugin arbitrary file upload8.8NVD v3.10.8%2023-12-20Fix
CVE-2023-33209SEO Change Monitor WordPress plugin SQL injection8.1v3.10.6%2023-12-20Fix
CVE-2023-32743AutomateWoo WordPress plugin SQL injection4.9NVD v3.10.6%2023-12-20Fix
CVE-2023-32590Subscribe to Category WordPress plugin SQL injection7.5NVD v3.11.8%2023-12-20NucleiExploit code
CVE-2023-32128Cryptocurrency Donation Box Bitcoin and Crypto Donations WordPress plugin SQL injection7.2v3.10.7%2023-12-20Fix
CVE-2023-31231Unlimited Elements For Elementor WordPress plugin arbitrary file upload6.5NVD v3.10.7%2023-12-20Fix
CVE-2023-31215Dropshipping and Affiliation with Amazon WordPress plugin arbitrary file upload8.8NVD v3.10.6%2023-12-20
CVE-2023-31092Easy Bet WordPress plugin SQL injection8.1v3.10.6%2023-12-20
CVE-2023-30872BSK Forms Blacklist WordPress plugin SQL injection6.5NVD v3.10.6%2023-12-20Fix
CVE-2023-30750CM Pop-Up banners WordPress plugin SQL injection8.1v3.10.6%2023-12-20Fix
CVE-2023-30495Ultimate Addons for Contact Form 7 WordPress plugin SQL injection8.1v3.10.6%2023-12-20Fix
CVE-2023-29432Houzez WordPress theme SQL injection9.8v3.10.7%2023-12-20Fix
CVE-2023-29384WordPress Job Board and Recruitment Plugin JobWP arbitrary file upload9.8v3.11.4%2023-12-20Exploit codeFix
CVE-2023-29102Olive One Click Demo Import WordPress plugin arbitrary file upload7.2NVD v3.10.8%2023-12-20
CVE-2023-29096Contact Form to DB by BestWebSoft WordPress plugin SQL injection8.8v3.10.7%2023-12-20Fix
CVE-2023-28788Advanced Page Visit Counter WordPress plugin SQL injection8.8v3.10.7%2023-12-20Fix
CVE-2023-28782Gravity Forms WordPress plugin PHP object injection9.8v3.10.6%2023-12-20Fix
CVE-2023-28491Slideshow Gallery WordPress plugin SQL injection7.2v3.10.8%2023-12-20Fix
CVE-2023-28170Theme Demo Import WordPress plugin arbitrary file upload7.2NVD v3.10.8%2023-12-20
CVE-2023-27172Xpand-it Write-back Manager missing brute-force protection9.1v3.10.7%2023-12-20
CVE-2023-26525Dokan WordPress plugin SQL injection8.1v3.10.6%2023-12-20Fix
CVE-2023-25970Zendrop Global Dropshipping WordPress plugin arbitrary file upload9.8v3.10.9%2023-12-20Fix
CVE-2023-23970Corsa WordPress theme arbitrary file upload8.8NVD v3.10.8%2023-12-20
CVE-2023-7018Deserialization of untrusted data in huggingface/Transformers7.8NVD v3.10.7%2023-12-20Fix
CVE-2023-6977mlflow/mlflow path traversal: \..\filename7.5NVD v3.13.9%2023-12-20NucleiFix
CVE-2023-6976mlflow/mlflow unrestricted upload of file with dangerous type8.8v3.11.0%2023-12-20Fix
CVE-2023-6975mlflow/mlflow path traversal: \..\filename9.8v3.12.0%2023-12-20Fix
CVE-2023-6974mlflow/mlflow server-side request forgery (SSRF)9.8v3.11.5%2023-12-20Fix
CVE-2023-6912Brute force vulnerability in M-Files user authentication7.5CNA v3.11.0%2023-12-20Fix
CVE-2023-6910Uncontrolled resource consumption in M-Files Server6.5CNA v3.10.9%2023-12-20Fix
CVE-2023-6784Potential Use of the Sitefinity System for Distribution of Phishing Emails4.7CNA v3.10.4%2023-12-20Fix
CVE-2023-6769Stored XSS vulnerability in Amazing Little poll4.6v3.10.7%2023-12-20
CVE-2023-6768Authentication bypass vulnerability in Amazing Little poll9.8v3.11.0%2023-12-20
CVE-2023-6689Cross-site request forgery in EFACEC BCU 5008.8v3.10.3%2023-12-20Fix
CVE-2023-6562Kakadu SDK path traversal7.5NVD v3.10.7%2023-12-20Fix
CVE-2023-5011Student Information System multiple Authenticated SQL Injections (SQLi)8.8v3.10.7%2023-12-20
CVE-2023-5010Student Information System multiple Authenticated SQL Injections (SQLi)8.8CNA v3.10.7%2023-12-20
CVE-2023-5007Student Information System multiple Authenticated SQL Injections (SQLi)8.8CNA v3.10.7%2023-12-20
CVE-2023-3742Google Chrome ADB insufficient policy enforcement6.8v3.10.2%2023-12-20Fix
CVE-2023-0011Command execution through Serial interface of u-blox TOBY-L26.8NVD v3.10.5%2023-12-20Fix
CVE-2023-50835Advanced Category Template WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-19
CVE-2023-50762Mozilla Thunderbird PGP/MIME message parsing vulnerability4.3v3.10.6%2023-12-19Fix
CVE-2023-50761Mozilla Thunderbird S/MIME signature date verification vulnerability4.3v3.10.6%2023-12-19Fix
CVE-2023-50466Weintek CMT2078X command injection8.8v3.11.9%2023-12-19
CVE-2023-50376Simple Membership WordPress plugin Unauth. reflected cross-site scripting (XSS)6.1NVD v3.10.5%2023-12-19Fix
CVE-2023-50272HPE Integrated Lights-out 5 (iLO 5), HPE Integrated Lights-out 6 (iLO 6) authentication bypass7.5CNA v3.10.6%2023-12-19Fix
CVE-2023-49819Structured Content WordPress plugin PHP object injection9.8v3.10.7%2023-12-19Fix
CVE-2023-49812WP Photo Album Plus WordPress plugin insecure direct object references (IDOR)7.5v3.10.5%2023-12-19Fix
CVE-2023-49764Advanced Database Cleaner WordPress plugin SQL injection7.2v3.10.7%2023-12-19Fix
CVE-2023-49750Couponis Demo WordPress theme SQL injection9.8v3.10.8%2023-12-19Fix
CVE-2023-49736Apache Superset: SQL injection on where_in JINJA macro6.5CNA v3.11.2%2023-12-19Fix
CVE-2023-49734Apache Superset: Privilege escalation7.7CNA v3.11.0%2023-12-19Fix
CVE-2023-49706Linotp race condition6.8v3.10.6%2023-12-19Fix
CVE-2023-49489kodcloud KodExplorer Reflective cross-site scripting6.1v3.10.7%2023-12-19Nuclei
CVE-2023-49164Ocean Extra WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-19Fix
CVE-2023-49147PDF24 Creator MSI installer repair function vulnerability7.8v3.10.5%2023-12-19
CVE-2023-49006Phpsysinfo cross-site request forgery (CSRF)6.5v3.10.5%2023-12-19Fix
CVE-2023-49004D-Link Dir-850l code injection9.8v3.11.9%2023-12-19
CVE-2023-48764WordPress Brute Force Protection Stop Brute Force Attacks plugin SQL injection7.2v3.10.7%2023-12-19Fix
CVE-2023-48751Participants Database WordPress plugin broken access control8.8v3.10.3%2023-12-19Fix
CVE-2023-48741ChatBot WordPress plugin SQL injection7.2v3.10.7%2023-12-19Fix
CVE-2023-48738Porto Theme WordPress plugin SQL command improper neutralization9.8v3.10.8%2023-12-19Fix
CVE-2023-48327WC Vendors Marketplace WordPress plugin SQL injection7.2v3.10.7%2023-12-19Fix
CVE-2023-47754Delete Duplicate Posts WordPress plugin broken access control9.8v3.10.5%2023-12-19Fix
CVE-2023-47267Thegreenbow VPN Client improper privilege management9.8v3.10.8%2023-12-19Fix
CVE-2023-47146IBM QRadar SIEM information disclosure4.9CNA v3.10.7%2023-12-19Fix
CVE-2023-46804Ivanti Avalanche out-of-bounds write7.5v3.14.1%2023-12-19Fix
CVE-2023-46803Ivanti Avalanche out-of-bounds write7.5v3.14.1%2023-12-19Fix
CVE-2023-46624Parcel Pro WordPress plugin open redirection6.1v3.10.4%2023-12-19Fix
CVE-2023-46266Ivanti Avalanche denial of service9.1v3.13.5%2023-12-19Fix
CVE-2023-46265Ivanti Avalanche XML external entity injection9.8v3.14.0%2023-12-19Fix
CVE-2023-46264Ivanti Avalanche unrestricted file upload9.8v3.190.2%2023-12-19Fix
CVE-2023-46263Ivanti Avalanche unrestricted file upload9.8v3.181.9%2023-12-19Fix
CVE-2023-46262Ivanti Avalanche server-side request forgery7.5v3.182.8%2023-12-19Fix
CVE-2023-46261Ivanti Avalanche out-of-bounds write9.8v3.111.3%2023-12-19Fix
CVE-2023-46260Ivanti Avalanche out-of-bounds write9.8v3.19.8%2023-12-19Fix
CVE-2023-46259Ivanti Avalanche out-of-bounds write9.8v3.111.3%2023-12-19Fix
CVE-2023-46258Ivanti Avalanche out-of-bounds write9.8v3.16.8%2023-12-19Fix
CVE-2023-46257Ivanti Avalanche out-of-bounds write9.8v3.111.3%2023-12-19Fix
CVE-2023-46225Ivanti Avalanche out-of-bounds write9.8v3.111.3%2023-12-19Fix
CVE-2023-46224Ivanti Avalanche out-of-bounds write9.8v3.16.8%2023-12-19Fix
CVE-2023-46223Ivanti Avalanche stack-based buffer overflow9.8v3.16.8%2023-12-19Fix
CVE-2023-46222Ivanti Avalanche out-of-bounds write9.8v3.16.8%2023-12-19Fix
CVE-2023-46221Ivanti Avalanche out-of-bounds write9.8v3.16.8%2023-12-19Fix
CVE-2023-46220Ivanti Avalanche out-of-bounds write9.8v3.111.3%2023-12-19Fix
CVE-2023-46217Ivanti Wavelink out-of-bounds write9.8v3.136.4%2023-12-19Fix
CVE-2023-46216Ivanti Wavelink out-of-bounds write9.8v3.136.4%2023-12-19Fix
CVE-2023-46212WP EXtra WordPress plugin broken access control8.8v3.10.2%2023-12-19Fix
CVE-2023-46154e2pdf WordPress plugin PHP object injection7.2v3.10.7%2023-12-19Fix
CVE-2023-46104Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb6.5CNA v3.11.7%2023-12-19Fix
CVE-2023-45172IBM AIX denial of service6.2CNA v3.10.2%2023-12-19Fix
CVE-2023-45105affiliate-toolkit WordPress Affiliate plugin open redirection6.1v3.10.4%2023-12-19Fix
CVE-2023-44991Media File Renamer WordPress plugin sensitive data exposure7.5v3.10.6%2023-12-19Fix
CVE-2023-44983Aruba HiSpeed Cache WordPress plugin sensitive data exposure7.5v3.10.6%2023-12-19Fix
CVE-2023-44982Perfect Images WordPress plugin Jordy Meow information disclosure7.5v3.11.4%2023-12-19NucleiFix
CVE-2023-43870Paxton Net2 hard-coded credentials9.8NVD v3.10.4%2023-12-19Fix
CVE-2023-43826Apache Guacamole: Integer overflow in handling of VNC image buffers7.5CNA v3.10.9%2023-12-19Fix
CVE-2023-42940Apple macOS information disclosure5.7v3.10.7%2023-12-19Fix
CVE-2023-42015IBM UrbanCode Deploy HTML injection4.3CNA v3.10.6%2023-12-19Fix
CVE-2023-41727Ivanti Wavelink out-of-bounds write9.8v3.136.4%2023-12-19Fix
CVE-2023-41648Login and Logout Redirect WordPress plugin open redirection6.1v3.10.4%2023-12-19
CVE-2023-40602Doofinder for WooCommerce WordPress plugin open redirection6.1v3.10.5%2023-12-19Fix
CVE-2023-38481Integration for WooCommerce and Zoho CRM WordPress plugin open redirection6.1v3.10.5%2023-12-19Fix
CVE-2023-38478Integration for WooCommerce and QuickBooks WordPress plugin open redirection6.1v3.10.5%2023-12-19Fix
CVE-2023-38126Softing edgeAggregator Restore Configuration directory traversal remote code execution7.2v3.171.0%2023-12-19Fix
CVE-2023-37982Integration for Contact Form 7 and Salesforce WordPress plugin open redirection6.1v3.10.5%2023-12-19Fix
CVE-2023-37390Themesflat Addons For Elementor WordPress plugin PHP object injection9.8v3.10.8%2023-12-19Fix
CVE-2023-35883Core Web Vitals and PageSpeed Booster WordPress plugin open redirection6.1v3.10.5%2023-12-19Fix
CVE-2023-34382Dokan WordPress plugin PHP object injection8.8v3.10.7%2023-12-19Fix
CVE-2023-34027Recently Viewed Products WordPress plugin PHP object injection9.8v3.10.8%2023-12-19
CVE-2023-25715GamiPress WordPress plugin broken access control6.5v3.10.5%2023-12-19Fix
CVE-2023-6945SourceCodester Online Student Management System edit-student-detail.php cross-site scripting4.8v3.10.6%2023-12-19
CVE-2023-6940mlflow/mlflow command injection8.8NVD v3.11.2%2023-12-19Fix
CVE-2023-6932Linux kernel A use-after-free7.0NVD v3.10.4%2023-12-19Fix
CVE-2023-6931Out-of-bounds write in Linux kernel's Performance Events system component7.0NVD v3.10.7%2023-12-19Exploit codeFix
CVE-2023-6930Improper access control in EuroTel ETL31009.8v3.10.8%2023-12-19
CVE-2023-6929Authorization bypass through user-controlled key in EuroTel ETL31009.8v3.10.8%2023-12-19
CVE-2023-6928EuroTel ETL3100 improper restriction of excessive authentication attempts9.8v3.10.8%2023-12-19
CVE-2023-6918Libssh: Missing checks for return values for digests5.3NVD v3.11.4%2023-12-19Fix
CVE-2023-6913Session hijacking on Imou Life app8.1v3.10.7%2023-12-19Fix
CVE-2023-6873Mozilla Firefox memory safety bugs8.8v3.10.8%2023-12-19Fix
CVE-2023-6872Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users running in a private tab. This vulnerability affects Firefox < 121.6.5v3.10.6%2023-12-19Fix
CVE-2023-6871Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox < 121.4.3v3.10.5%2023-12-19Fix
CVE-2023-6870Mozilla Firefox Toast notification handling vulnerability4.3v3.10.4%2023-12-19Fix
CVE-2023-6869Mozilla Firefox dialog element sandboxing vulnerability6.5v3.10.6%2023-12-19Fix
CVE-2023-6868Mozilla Firefox push notification subscriptions vulnerability4.3v3.10.5%2023-12-19Fix
CVE-2023-6867Mozilla Firefox ESR clickjacking6.1v3.10.7%2023-12-19Fix
CVE-2023-6866Mozilla Firefox improper exception handling8.8v3.10.7%2023-12-19Fix
CVE-2023-6865Mozilla Firefox ESR uninitialized memory use6.5v3.10.9%2023-12-19Fix
CVE-2023-6864Mozilla Firefox ESR memory safety bugs8.8v3.11.2%2023-12-19Fix
CVE-2023-6863Mozilla Firefox ESR undefined behavior8.8v3.11.0%2023-12-19Fix
CVE-2023-6862Mozilla Firefox ESR `nsDNSService::Init` use-after-free8.8v3.11.0%2023-12-19Fix
CVE-2023-6861Mozilla Firefox ESR out-of-bounds write8.8v3.11.4%2023-12-19Fix
CVE-2023-6860Mozilla Firefox ESR sandbox escape6.5v3.11.0%2023-12-19Fix
CVE-2023-6859Mozilla Firefox ESR use-after-free8.8v3.11.1%2023-12-19Fix
CVE-2023-6858Mozilla Firefox ESR out-of-bounds write8.8v3.11.5%2023-12-19Fix
CVE-2023-6857Mozilla Firefox ESR race condition5.3v3.10.7%2023-12-19Fix
CVE-2023-6856Mozilla Firefox ESR out-of-bounds write8.8v3.120.5%2023-12-19Fix
CVE-2023-6730Deserialization of untrusted data in huggingface/Transformers8.8NVD v3.10.9%2023-12-19Fix
CVE-2023-6711Hitachi Energy RTU500 series CMU firmware buffer overflow5.9CNA v3.10.7%2023-12-19Fix
CVE-2023-6488WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting5.4v3.10.5%2023-12-19Fix
CVE-2023-6315Panasonic Control FPWIN Pro out-of-bounds read7.8CNA v3.10.3%2023-12-19
CVE-2023-6314Panasonic Control FPWIN Pro stack-based buffer overflow7.8CNA v3.10.3%2023-12-19
CVE-2023-6280XML external entity Reference on 52North Wps7.5v3.10.6%2023-12-19Fix
CVE-2023-6135Mozilla Firefox observable discrepancy4.3v3.10.7%2023-12-19Fix
CVE-2023-5432Jquery news ticker WordPress plugin stored cross-site scripting5.4v3.10.4%2023-12-19Fix
CVE-2023-5413Image horizontal reel scroll slideshow WordPress plugin stored cross-site scripting5.4v3.10.4%2023-12-19Fix
CVE-2023-1514Hitachi Energy RTU500 Scripting Interface improper certificate validation7.4CNA v3.10.3%2023-12-19Fix
CVE-2023-51385OpenBSD OpenSSH OS command injection6.5NVD v3.119.8%2023-12-18Exploit codeFix
CVE-2023-51384OpenBSD OpenSSH improper access control5.5NVD v3.10.4%2023-12-18Fix
CVE-2023-50981Cryptopp Crypto++ infinite loop7.5v3.10.8%2023-12-18Fix
CVE-2023-50980Cryptopp Crypto++ denial of service7.5v3.10.8%2023-12-18Fix
CVE-2023-50979Cryptopp Crypto++ observable discrepancy5.9v3.10.6%2023-12-18Fix
CVE-2023-50976redpanda missing authorization9.8v3.11.0%2023-12-18
CVE-2023-50372Custom Post Type Page Template WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-49855Menu Bar Cart Icon For WooCommerce By Binary Carpenter WordPress plugin cross-site request forgery8.8v3.10.3%2023-12-18
CVE-2023-49854Caddy WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-49853PayTR Taksit Tablosu WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-49844WPPerformanceTester WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-49843First Order Discount Woocommerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-49840Multi Currency For WooCommerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-49821LiveChat WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-49763CSprite WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-49761Product Enquiry for WooCommerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-49760WPsoonOnlinePage WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-49759WooDiscuz WooCommerce Comments WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-49163teachPress WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-49155Button Generator easily Button Builder WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-49153Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam Add to Cart Text Changer and Customize Button, Add Custom Icon.This issue affects Add to Cart Text Changer and Customize Button, Add Custom Icon: from n/a through 2.0.8.8v3.10.3%2023-12-18Fix
CVE-2023-49148Affiliate Booster WordPress plugin Kulwant Nagi cross-site request forgery8.8v3.10.3%2023-12-18Fix
CVE-2023-48795Jadaptive Maverick Synergy Java SSH API improper integrity check validation5.9NVD v3.193.5%2023-12-18Reported exploitedNucleiKCVFix
CVE-2023-48781MkRapel Regiones y Ciudades de Chile para WC WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-48778Product Size Chart For WooCommerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-48773WooCommerce Login Redirect WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-48772Arul Prasad J Prevent Landscape Rotation cross-site request forgery8.8v3.10.3%2023-12-18Fix
CVE-2023-48769Chat Bubble WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-48768CodeAstrology Quantity Plus Minus Button for WooCommerce cross-site request forgery8.8v3.10.3%2023-12-18Fix
CVE-2023-48766SVGator Add Animated SVG Easily WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-48762JetElements For Elementor WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-18Fix
CVE-2023-48755teachPress WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-47806Saint Systems Disable User Login cross-site request forgery8.8v3.10.3%2023-12-18Fix
CVE-2023-47789WooCommerce Canada Post Shipping WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-47787WooCommerce Bookings WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-47741IBM i information disclosure5.3CNA v3.10.3%2023-12-18Fix
CVE-2023-47558Who Hit The Page Hit Counter WordPress plugin SQL injection6.5NVD v3.10.7%2023-12-18
CVE-2023-47530Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin SQL injection7.2v3.10.7%2023-12-18Fix
CVE-2023-47506Master Slider Pro WordPress plugin SQL injection8.8v3.10.7%2023-12-18
CVE-2023-47038Perl: Write past buffer end via illegal user-defined unicode property7.8NVD v3.10.8%2023-12-18Fix
CVE-2023-46686Gallagher Command Centre Diagnostics Service reliance on untrusted input in a security decision5.5CNA v3.10.5%2023-12-18Fix
CVE-2023-46617AdFoxly Ad Manager, AdSense Ads and Ads.txt WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18
CVE-2023-46177IBM MQ Appliance information disclosure6.5CNA v3.11.3%2023-12-18Fix
CVE-2023-41967Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its configuration through the diagnostic web pages. This issue affe2.4CNA v3.10.3%2023-12-18Fix
CVE-2023-41314Apache Doris: Missing API authentication allowed DoS8.2v3.10.9%2023-12-18Fix
CVE-2023-40691IBM Cloud Pak for Business Automation information disclosure4.9CNA v3.10.7%2023-12-18Fix
CVE-2023-39509Bosch Camera Firmware command injection7.2CNA v3.11.5%2023-12-18Fix
CVE-2023-35867Bosch BVMS man-in-the-middle5.9CNA v3.10.6%2023-12-18Fix
CVE-2023-34168WP Report Post WordPress plugin SQL injection8.8v3.10.9%2023-12-18
CVE-2023-33331WooCommerce Product Vendors WordPress plugin SQL injection7.2v3.10.9%2023-12-18Fix
CVE-2023-33214Taggbox WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-18Fix
CVE-2023-32728Zabbix code injection in zabbix_agent2 smart.disk.get caused by smartctl plugin4.6CNA v3.10.8%2023-12-18Fix
CVE-2023-32727Zabbix code execution vulnerability in icmpping6.8CNA v3.10.9%2023-12-18Fix
CVE-2023-32726Zabbix possible buffer overread from reading DNS responses3.9CNA v3.10.7%2023-12-18Fix
CVE-2023-32725Zabbix Frontend URL widget in scheduled reports vulnerability9.6CNA v3.10.8%2023-12-18Fix
CVE-2023-32230Bosch Video Recording Manager denial of service7.5CNA v3.10.7%2023-12-18Fix
CVE-2023-28053Dell NetWorker Virtual Edition weak cryptographic algorithm5.3CNA v3.10.4%2023-12-18Fix
CVE-2023-24590Gallagher Controller 6000 format string7.5CNA v3.10.6%2023-12-18Fix
CVE-2023-23584Gallagher Command Centre Server response discrepancy4.3CNA v3.10.5%2023-12-18Fix
CVE-2023-23576Gallagher Command Centre Server incorrect behavior order4.3CNA v3.10.3%2023-12-18Fix
CVE-2023-23570Gallagher Command Centre client-side enforcement of server-side security5.4CNA v3.10.7%2023-12-18Fix
CVE-2023-22439Gallagher Controller 6000/ Controller 7000 improper input validation3.1CNA v3.10.5%2023-12-18Fix
CVE-2023-6927Keycloak: Open redirect via form_post.jwt jarm response mode4.6CNA v3.11.1%2023-12-18Fix
CVE-2023-6911WSO2 Registry stored cross-site scripting (XSS)4.8CNA v3.10.4%2023-12-18Fix
CVE-2023-6909Path traversal: \..\filename in MLflow/MLflow7.5v3.189.7%2023-12-18Reported exploitedNucleiFix
CVE-2023-6908DFIRKuiper TAR Archive case_management.py unzip_file path traversal5.9v3.10.8%2023-12-18Fix
CVE-2023-6907codelyfe Stupid Simple CMS Deletion interface delete.php improper authentication9.1v3.11.2%2023-12-18
CVE-2023-6906Totolink A7100RU HTTP POST request main buffer overflow9.8v3.11.9%2023-12-18
CVE-2023-6905Jahastech NxFilter Bind request LDAP injection9.8v3.10.7%2023-12-18
CVE-2023-6817Linux kernel A use-after-free7.8NVD v3.10.3%2023-12-18Fix
CVE-2023-6778Cross-site scripting (XSS) Stored in allegroai/clearml-server5.4v3.10.4%2023-12-18Fix
CVE-2023-6691Code injection vulnerability in Cambium ePMP Force 300-257.8v3.10.4%2023-12-18
CVE-2023-6483Improper authentication vulnerability in ADiTaaS9.8v3.11.2%2023-12-18Fix
CVE-2023-6355Gallagher Controller 7000 fuse value selection vulnerability6.8CNA v3.10.4%2023-12-18Fix
CVE-2023-6295SiteOrigin Widgets Bundle local file inclusion7.2NVD v3.11.0%2023-12-18Fix
CVE-2023-6289Swift Performance Lite WordPress plugin unauthenticated Configuration export4.3NVD v3.10.9%2023-12-18Exploit codeFix
CVE-2023-6272Theme My Login 2FA WordPress plugin Lack of Rate Limiting9.8NVD v3.10.9%2023-12-18Fix
CVE-2023-6228LibTIFF: Heap-based buffer overflow in cpstriptotile in tools/tiffcp.c5.5NVD v3.10.4%2023-12-18Fix
CVE-2023-6222Quttera Web Malware Scanner WordPress plugin Admin+ path traversal7.2NVD v3.11.1%2023-12-18Fix
CVE-2023-6203The Events Calendar WordPress plugin unauthenticated arbitrary password Protected post read7.5NVD v3.10.8%2023-12-18Fix
CVE-2023-6077Slider - Ultimate Responsive Image Slider WordPress plugin Subscriber+ arbitrary post access6.5NVD v3.10.7%2023-12-18Fix
CVE-2023-6065Quttera Web Malware Scanner WordPress plugin directory listing to sensitive data exposure5.3NVD v3.118.6%2023-12-18NucleiFix
CVE-2023-5949SmartCrawl WordPress SEO checker plugin unauthenticated password Protected post disclosure7.5NVD v3.10.8%2023-12-18Fix
CVE-2023-5886Soflyy Export any WordPress data to XML/CSV cross-site request forgery8.8NVD v3.10.6%2023-12-18Fix
CVE-2023-5882Soflyy Export any WordPress data to XML/CSV cross-site request forgery8.8NVD v3.10.6%2023-12-18Fix
CVE-2023-5384Infinispan: Credentials returned from configuration as clear text7.2CNA v3.10.5%2023-12-18Fix
CVE-2023-5348Product Catalog Enquiry for WooCommerce WordPress plugin unauthenticated stored XSS6.1NVD v3.10.5%2023-12-18Fix
CVE-2023-5236Infinispan: Circular reference on marshalling leads to DoS4.4CNA v3.11.1%2023-12-18Fix
CVE-2023-5115Ansible: Malicious role archive can cause ansible-galaxy to overwrite arbitrary files6.3CNA v3.11.0%2023-12-18Fix
CVE-2023-5056Red Hat Service Interconnect 1 for RHEL 9 skupper-operator: Privelege escalation via config map4.1NVD v3.10.3%2023-12-18Fix
CVE-2023-5005Autocomplete Location field Contact Form 7 WordPress plugin Admin+ Store cross-site scripting4.8NVD v3.10.4%2023-12-18Fix
CVE-2023-4724Soflyy WP All Export wp_query parameter remote command execution7.2NVD v3.11.2%2023-12-18Fix
CVE-2023-4320Red Hat Satellite personal access token creation integer overflow7.6CNA v3.10.7%2023-12-18Fix
CVE-2023-4311Vrm 360 3D Model Viewer WordPress plugin Contributor+ arbitrary file upload Leading to RCE8.8NVD v3.11.0%2023-12-18
CVE-2023-3629Infinispan: Non-admins should not be able to get cache config via rest API4.3CNA v3.10.7%2023-12-18Fix
CVE-2023-3628infinispan infispan: Rest bulk ops don't check permissions6.5CNA v3.10.8%2023-12-18Fix
CVE-2023-3430OpenImageIO: Heap-buffer-overflow in file src/gif.imageio/gifinput.cpp7.5NVD v3.11.2%2023-12-18Fix
CVE-2023-50965Starnight Micro HTTP Server out-of-bounds write9.8v3.11.5%2023-12-17Exploit code
CVE-2023-50271HP-UX System Management Homepage, Disclosure of Information7.2CNA v3.10.5%2023-12-17Fix
CVE-2023-49834realmag777 FOX cross-site request forgery8.8v3.10.3%2023-12-17Fix
CVE-2023-49824Product Catalog Feed by PixelYourSite WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-17Fix
CVE-2023-49816Innovative Solutions Fix My Feed RSS Repair cross-site request forgery8.8v3.10.3%2023-12-17
CVE-2023-49775CSV Importer WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-17Fix
CVE-2023-49769Integrate Google Drive WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-17Fix
CVE-2023-49751Block for Font Awesome WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-17Fix
CVE-2023-24380Simple Wp Sitemap WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-17
CVE-2023-6904Jahastech NxFilter config,admin.jsp cross-site request forgery8.8v3.10.3%2023-12-17
CVE-2023-6903Netentsec NS-ASG Application Security Gateway SQL injection9.8v3.10.7%2023-12-17
CVE-2023-6902codelyfe Stupid Simple CMS upload.php unrestricted upload9.8v3.11.0%2023-12-17
CVE-2023-6901codelyfe Stupid Simple CMS HTTP POST request handle-command.php os command injection9.8v3.12.9%2023-12-17
CVE-2023-6900rmountjoy92 DashMachine delete_file path traversal9.1v3.11.1%2023-12-17
CVE-2023-6899rmountjoy92 DashMachine Config save_config code injection9.8v3.11.0%2023-12-17
CVE-2023-6898SourceCodester Best Courier Management System manage_user.php SQL injection9.8v3.10.6%2023-12-17
CVE-2023-6896SourceCodester Simple Image Stack Website cross-site scripting6.1v3.10.6%2023-12-17
CVE-2023-6895Hikvision Intercom Broadcasting System ping.php os command injection9.8v3.189.1%2023-12-17Reported exploitedNucleiEmerging ThreatsExploit code
CVE-2023-6894Hikvision Intercom Broadcasting System Log file system.html information disclosure6.5v3.11.0%2023-12-17
CVE-2023-6893Hikvision Intercom Broadcasting System exportrecord.php path traversal7.5v3.170.2%2023-12-17
CVE-2023-6891PeaZip library dragdropfilesdll.dll uncontrolled search path7.8v3.10.3%2023-12-17Fix
CVE-2023-6888PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflow9.8v3.11.0%2023-12-17
CVE-2023-6887saysky ForestBlog Image upload img unrestricted upload9.8v3.10.9%2023-12-17
CVE-2023-6886xnx3 wangmarket role management page code injection9.8v3.10.9%2023-12-17
CVE-2023-3907Improper User Management in GitLab4.9CNA v3.10.7%2023-12-17Fix
CVE-2023-50784UnrealIRCd websockets buffer overflow7.5v3.11.9%2023-12-16Fix
CVE-2023-39340Ivanti Connect Secure denial of service7.5v3.12.4%2023-12-16Fix