CVE-2023 records published in December 2023
This page lists the 2,568 CVE-2023 records published in December 2023, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists nine of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2023 list filters these records by severity or signal.
- Critical
- 42616.6% of these records
- Listed in CISA KEV
- 90.4% of these records
- Reported exploited
- 40.2% of these records
- Detection signal
- 562.2% of these records
- Exploit code
- 632.5% of these records
- Actionable vendor fix
- 1,87773.1% of these records
Figures as of 2026-10-24 13:46 UTC. Records published in December 2023 have had from about 34 months to about 35 months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-52286 | Tencent Distributed SQL information disclosure | 7.5v3.1 | 0.8% | 2023-12-31 | |
| CVE-2023-52284 | bytecodealliance Webassembly Micro Runtime double free | 5.5v3.1 | 0.3% | 2023-12-31 | Fix |
| CVE-2023-52277 | Royalapps Royaltsx out-of-bounds write | 7.8v3.1 | 0.2% | 2023-12-31 | |
| CVE-2023-52275 | TECNO Mobile Camon X missing authorization | 2.1v3.1 | 0.3% | 2023-12-31 | |
| CVE-2023-52269 | MDaemon Security Gateway cross-site scripting | 4.8v3.1 | 0.4% | 2023-12-31 | |
| CVE-2023-52267 | Hongliuliao Ehttp out-of-bounds read | 7.5v3.1 | 0.7% | 2023-12-31 | |
| CVE-2023-52266 | Hongliuliao Ehttp use-after-free | 7.5v3.1 | 0.7% | 2023-12-31 | |
| CVE-2023-52185 | Everest Backup WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-52182 | ARI Stream Quiz WordPress plugin PHP object injection | 8.8NVD v3.1 | 0.6% | 2023-12-31 | Fix |
| CVE-2023-52181 | Theme per user WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2023-12-31 | Fix |
| CVE-2023-52180 | Recipe Maker For Your Food Blog from Zip Recipes WordPress plugin SQL injection | 8.1v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-52134 | GEO my WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-52133 | Most And Least Read Posts Widget WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-52132 | WP Adminify WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-52131 | Page Generator WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-51547 | Fluent Support WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-51503 | WooPayments WordPress plugin Automattic insecure direct object reference | 7.5v3.1 | 0.5% | 2023-12-31 | Fix |
| CVE-2023-51469 | Checkout Mestres WP WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-12-31 | Fix |
| CVE-2023-51423 | WebinarIgnition WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-12-31 | Fix |
| CVE-2023-49777 | YITH WooCommerce Product Add-Ons WordPress plugin PHP object injection | 8.8NVD v3.1 | 0.7% | 2023-12-31 | Fix |
| CVE-2023-39157 | JetElements For Elementor WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 0.7% | 2023-12-31 | Fix |
| CVE-2023-7193 | MTab Bookmark Installation install.php access control | 8.1v3.1 | 0.4% | 2023-12-31 | |
| CVE-2023-7191 | S-cms reg.php SQL injection | 8.8v3.1 | 0.5% | 2023-12-31 | |
| CVE-2023-7190 | S-CMS SQL injection | 8.8v3.1 | 0.5% | 2023-12-31 | |
| CVE-2023-7189 | S-CMS statistics module SQL injection | 8.8v3.1 | 0.5% | 2023-12-31 | |
| CVE-2023-7188 | Shipping 100 Fahuo100 login.php SQL injection | 8.1v3.1 | 0.5% | 2023-12-31 | |
| CVE-2023-7187 | Totolink N350RT HTTP POST request stack-based overflow | 8.8v3.1 | 0.7% | 2023-12-31 | |
| CVE-2023-7186 | 7-card Fakabao notify.php SQL injection | 8.8v3.1 | 0.5% | 2023-12-31 | |
| CVE-2023-7185 | 7-card Fakabao wxpay_notify.php SQL injection | 8.8v3.1 | 0.5% | 2023-12-31 | |
| CVE-2023-7184 | 7-card Fakabao notify.php SQL injection | 8.8v3.1 | 0.5% | 2023-12-31 | |
| CVE-2023-7183 | 7-card Fakabao alipay_notify.php SQL injection | 8.8v3.1 | 0.6% | 2023-12-31 | |
| CVE-2023-7130 | code-projects College Notes Gallery login.php SQL injection | 8.8v3.1 | 0.7% | 2023-12-31 | |
| CVE-2023-6094 | OnCell G3150A-LTE Series: Web Server Transmits Cleartext Credentials | 5.3CNA v3.1 | 0.2% | 2023-12-31 | Fix |
| CVE-2023-6093 | OnCell G3150A-LTE Series: Clickjacking | 5.3CNA v3.1 | 0.3% | 2023-12-31 | Fix |
| CVE-2023-52265 | Idurarapp Idurar cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-30 | |
| CVE-2023-52264 | thirty bees Bees Blog cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-30 | |
| CVE-2023-52263 | Brave Browser open redirect | 6.1v3.1 | 0.5% | 2023-12-30 | |
| CVE-2023-52262 | Outdoorbits Little Backup Box arbitrary code execution | 9.8v3.1 | 0.9% | 2023-12-30 | |
| CVE-2023-52257 | Logobee cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-30 | |
| CVE-2023-52252 | Unified Remote XML external entity injection | 9.8v3.1 | 1.1% | 2023-12-30 | |
| CVE-2023-51136 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.6% | 2023-12-30 | Fix |
| CVE-2023-51135 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.6% | 2023-12-30 | Fix |
| CVE-2023-51133 | TOTOLINK X2000R out-of-bounds write | 9.8v3.1 | 0.6% | 2023-12-30 | Fix |
| CVE-2023-50651 | TOTOLINK X6000R OS command injection | 9.8v3.1 | 2.8% | 2023-12-30 | |
| CVE-2023-50589 | Embras Geosiap Erp SQL injection | 9.8v3.1 | 0.7% | 2023-12-30 | |
| CVE-2023-50578 | Mingsoft MCMS SQL injection | 9.8v3.1 | 2.2% | 2023-12-30 | Nuclei |
| CVE-2023-50559 | Openxiangshan Xiangshan information disclosure | 5.5v3.1 | 0.2% | 2023-12-30 | |
| CVE-2023-50550 | Layui cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-30 | Fix |
| CVE-2023-50110 | TestLink authentication bypass | 7.5v3.1 | 0.7% | 2023-12-30 | |
| CVE-2023-49299 | Apache DolphinScheduler: Arbitrary js execute as root for authenticated users | 8.8v3.1 | 1.4% | 2023-12-30 | Fix |
| CVE-2023-41544 | JeecgBoot server-side template injection | 9.8v3.1 | 2.7% | 2023-12-30 | |
| CVE-2023-41543 | Jeecg Boot SQL injection | 9.8v3.1 | 0.9% | 2023-12-30 | |
| CVE-2023-41542 | Jeecg Boot SQL injection | 9.8v3.1 | 0.9% | 2023-12-30 | |
| CVE-2023-38023 | An issue was discovered in SCONE Confidential Computing Platform before 5.8.0 for Intel SGX. Lack of pointer-alignment logic in __scone_dispatch and other entry functions allows a local attacker to access unauthorized information, aka an "AEPIC Leak." | 5.5v3.1 | 0.2% | 2023-12-30 | Fix |
| CVE-2023-38022 | An issue was discovered in Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform before 3.29 for Intel SGX. Insufficient pointer validation allows a local attacker to access unauthorized information. This relates to strlen and sgx_is_within_user. | 5.5v3.1 | 0.2% | 2023-12-30 | |
| CVE-2023-38021 | Fortanix Confidential Computing Manager enclave entry function vulnerability | 5.5v3.1 | 0.2% | 2023-12-30 | |
| CVE-2023-7181 | Muyun DedeBIZ Add Attachment unrestricted upload | 7.2v3.1 | 0.8% | 2023-12-30 | |
| CVE-2023-7180 | Tongda OA 2017 delete.php SQL injection | 4.3v3.1 | 0.5% | 2023-12-30 | |
| CVE-2023-7179 | Campcodes Online College Library System HTTP POST request category_row.php SQL injection | 8.8v3.1 | 0.7% | 2023-12-30 | |
| CVE-2023-7178 | Campcodes Online College Library System HTTP POST request book_row.php SQL injection | 7.2v3.1 | 0.7% | 2023-12-30 | |
| CVE-2023-7177 | Campcodes Online College Library System HTTP POST request book_add.php SQL injection | 8.8v3.1 | 0.7% | 2023-12-30 | |
| CVE-2023-7176 | Campcodes Online College Library System HTTP POST request return_add.php SQL injection | 8.8v3.1 | 0.7% | 2023-12-30 | |
| CVE-2023-7175 | Campcodes Online College Library System HTTP POST request borrow_add.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-30 | |
| CVE-2023-7173 | PHPGurukul Hospital Management System registration.php cross-site scripting | 5.4v3.1 | 1.5% | 2023-12-30 | |
| CVE-2023-7172 | PHPGurukul Hospital Management System Admin Dashboard SQL injection | 7.2v3.1 | 1.5% | 2023-12-30 | |
| CVE-2023-6998 | Lockscreen bypass in eWeLink App | 7.7v3.1 | 0.2% | 2023-12-30 | Fix |
| CVE-2023-52240 | Kantega-sso Kantega SAML SSO OIDC KERBEROS Single Sign-on cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-52174 | XnView Classic out-of-bounds write | 9.8v3.1 | 0.7% | 2023-12-29 | Fix |
| CVE-2023-52173 | XnView Classic out-of-bounds write | 9.8v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-52139 | Misskey vulnerable to improper authorization when accessing with third-party application | 9.1CNA v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-52137 | GitHub action tj-actions/verify-changed-files is vulnerable to command injection in output filenames | 7.7CNA v3.1 | 2.6% | 2023-12-29 | Fix |
| CVE-2023-52135 | WS Form LITE WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-52085 | Winter CMS local file inclusion through server side template injection | 3.3CNA v3.1 | 30.2% | 2023-12-29 | NucleiFix |
| CVE-2023-51688 | eCommerce Product Catalog WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-51687 | Product Catalog Simple WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-51676 | Happy Addons for Elementor WordPress plugin server side request forgery (SSRF) | 6.5v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51675 | Advanced Access Manager WordPress plugin open redirection | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51663 | Hail authentication can be bypassed by changing email address | 5.3CNA v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-51545 | Job Manager and Career WordPress plugin cross-site request forgery leading to PHP object injection | 8.8NVD v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51541 | Stock Ticker WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51527 | GPT3 AI Content Writer WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-51517 | Calculated Fields Form WordPress plugin open redirection | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51505 | Active Products Tables for WooCommerce WordPress plugin PHP object injection | 9.8v3.1 | 0.7% | 2023-12-29 | Fix |
| CVE-2023-51475 | WP MLM Unilevel WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-51473 | TerraClassifieds WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-51470 | Rencontre Dating Site WordPress plugin PHP object injection | 8.8NVD v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51468 | Rencontre Dating Site WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51435 | Honor Magic UI improper privilege management | 7.1CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51434 | Honor Magic UI buffer overflow | 9.3CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51433 | Honor Magic UI improper privilege management | 2.9CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-51432 | Honor Magic UI out-of-bounds read | 3.2CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51431 | Honor com.hihonor.phoneservice incorrect privilege assignment | 7.0CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-51430 | Honor Magic UI improper privilege management | 4.4CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51429 | Honor Magic OS improper privilege management | 6.0CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51428 | Honor Magic OS type confusion | 4.6CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51427 | Honor Magic OS type confusion | 4.6CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51426 | Honor Magic OS type confusion | 4.6CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51422 | WebinarIgnition WordPress plugin PHP object injection | 8.8NVD v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51421 | Verge3D WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51420 | Verge3D WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-51419 | BERTHA AI WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51417 | JVM rich text icons WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51414 | EnvíaloSimple WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51412 | Piotnet Forms WordPress plugin arbitrary file upload | 9.8v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-51411 | Frontend Admin by DynamiApps WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51410 | WP Mail Log WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-51402 | Ultimate Addons for WPBakery Page Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51399 | Back Button Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51397 | WP Remote Site Search WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51396 | Brizy Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51378 | Rise Blocks WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51374 | ZeroBounce Email Verification and Validation WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51373 | Google Photos Gallery with Shortcodes WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51372 | HashBar WordPress Notification Bar plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51371 | Bit Assist WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51361 | Sticky Chat Widget WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-51358 | Block IPs for Gravity Forms WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-51354 | Webba Booking WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-50902 | New User Approve WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-50901 | HT Mega WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-50896 | weForms WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-50893 | UpSolution Core WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-50892 | TheGem WordPress theme cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-50891 | Zoho Forms WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 1.1% | 2023-12-29 | Fix |
| CVE-2023-50889 | Beaver Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-50881 | Advanced Access Manager WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-50880 | BuddyPress WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-50879 | WordPress.com Editing Toolkit plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-50878 | MStore API WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-50837 | Login Lockdown WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-50572 | JLine vulnerable to out of memory error | 5.5NVD v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-50571 | Jeasy Easy Rules easy-rules-mvel vulnerable to remote code execution | 7.8v3.1 | 0.4% | 2023-12-29 | |
| CVE-2023-50570 | Seancfoley ip-address infinite loop | 5.5v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-50104 | zzcms ZZCMS 2023 has a file upload | 9.8v3.1 | 1.1% | 2023-12-29 | |
| CVE-2023-50071 | Customer Support System SQL injection | 8.8v3.1 | 13.8% | 2023-12-29 | Exploit code |
| CVE-2023-50070 | oretnom23 Customer Support System SQL injection | 8.8NVD v3.1 | 0.8% | 2023-12-29 | |
| CVE-2023-50069 | wiremock cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-29 | |
| CVE-2023-50035 | Small CRM SQL injection | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-49830 | Astra Pro WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 0.7% | 2023-12-29 | Fix |
| CVE-2023-47840 | Qode Essential Addons WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 1.4% | 2023-12-29 | Exploit codeFix |
| CVE-2023-47804 | Apache OpenOffice: Macro URL arbitrary script execution | 8.8v3.1 | 2.7% | 2023-12-29 | Fix |
| CVE-2023-46623 | WP EXtra WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-45751 | Nexter Extension WordPress plugin remote code execution (RCE) | 7.2NVD v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-44089 | Pandora FMS XSS in Visual console | 6.1CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-44088 | Pandora FMS SQL injection in Visual console | 5.9CNA v3.1 | 0.7% | 2023-12-29 | Exploit codeFix |
| CVE-2023-41815 | Pandora FMS XSS in file manager | 7.5CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-41814 | Pandora FMS XSS vulnerability messages | 3.7CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-41813 | Pandora FMS user notification settings edition | 3.0CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-40606 | Kanban Boards for WordPress plugin arbitrary code execution | 7.2NVD v3.1 | 0.8% | 2023-12-29 | |
| CVE-2023-32517 | MailChimp Subscribe Forms WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-32101 | Library Viewer WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-32095 | Rename Media Files WordPress plugin remote code execution (RCE) | 8.8NVD v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-31302 | Sesami Cash Point & Transport Optimizer cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-31301 | Sesami Cash Point & Transport Optimizer stored cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-31300 | Sesami Cash Point & Transport Optimizer cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2023-12-29 | |
| CVE-2023-31299 | Sesami Cash Point & Transport Optimizer cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-31298 | Sesami Cash Point & Transport Optimizer cross-site scripting | 4.8v3.1 | 0.4% | 2023-12-29 | |
| CVE-2023-31296 | Sesami Cash Point & Transport Optimizer CSV injection | 5.3v3.1 | 0.4% | 2023-12-29 | |
| CVE-2023-31295 | Sesami Cash Point & Transport Optimizer CSV injection | 7.5v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-31294 | Sesami Cash Point & Transport Optimizer CSV injection | 7.5v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-31293 | Sesami Cash Point & Transport Optimizer improper access control | 4.3v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-31292 | Sesami Cash Point & Transport Optimizer improper authentication | 5.5v3.1 | 0.2% | 2023-12-29 | |
| CVE-2023-31237 | Zephyr Project Manager WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-31229 | WP Directory Kit WordPress plugin open redirection | 6.1v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-31095 | Integration for Contact Form 7 HubSpot WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-28786 | Solid Security WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-29 | Fix |
| CVE-2023-25054 | RSVPMaker WordPress plugin David F code injection | 9.8v3.1 | 0.7% | 2023-12-29 | Fix |
| CVE-2023-23634 | Documize SQL injection | 9.8v3.1 | 1.1% | 2023-12-29 | |
| CVE-2023-23443 | Honor Magic OS type confusion | 4.6CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23442 | Honor Magic OS type confusion | 4.6CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23441 | Honor Magic UI out-of-bounds read | 6.0CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23440 | Honor LGE-AN00 information disclosure | 3.3CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23439 | Honor LGE-AN00 information disclosure | 4.0CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23438 | Honor LGE-AN00 improper privilege management | 4.0CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-23437 | Honor com.hihonor.vmall insecure storage of sensitive information | 3.3CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23436 | Honor Magic OS improper signature verification | 7.3CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-23435 | Honor Magic OS improper signature verification | 4.0CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-23434 | HonorBoardApp information disclosure | 4.0CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23433 | Honor NTH-AN00 improper signature verification | 4.0CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-23432 | Honor NTH-AN00 improper signature verification | 7.3CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-23431 | Honor NTH-AN00 improper signature verification | 7.3CNA v3.1 | 0.1% | 2023-12-29 | Fix |
| CVE-2023-23430 | Honor com.hihonor.magichome improper privilege management | 3.3CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-23429 | Honor Magic OS improper privilege management | 4.0CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-23428 | Honor Magic OS improper privilege management | 3.3CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-23427 | Honor Magic OS improper privilege management | 4.0CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-23426 | Honor FRI-AN00 information disclosure | 6.6CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-23424 | Honor NTH-AN00 code execution | 6.5CNA v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-22677 | WP Booklet WordPress plugin remote code execution (RCE) | 8.8v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-22676 | Advanced Custom Fields: Image Crop Add-on WordPress plugin broken access control | 8.8v3.1 | 0.4% | 2023-12-29 | |
| CVE-2023-7171 | Novel-Plus Friendly Link FriendLinkController.java cross-site scripting | 4.8v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-7166 | Novel-Plus HTTP POST request updateUserInfo cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-7161 | Netentsec NS-ASG Application Security Gateway Login SQL injection | 9.8v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-7160 | SourceCodester Engineers Online Portal Add Engineer cross-site scripting | 6.1v3.1 | 0.3% | 2023-12-29 | |
| CVE-2023-7159 | gopeak MasterLab User.php update unrestricted upload | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-7158 | MicroPython objslice.c slice_indices heap-based overflow | 9.8v3.1 | 1.2% | 2023-12-29 | Fix |
| CVE-2023-7157 | SourceCodester Free and Open Source Inventory Management System sell_return_data.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-7156 | Campcodes Online College Library System Search index.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-7155 | SourceCodester Free and Open Source Inventory Management System edit_product.php SQL injection | 8.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-7152 | MicroPython modselect.c poll_set_add_fd use-after-free | 9.8v3.1 | 0.9% | 2023-12-29 | |
| CVE-2023-7150 | Campcodes Chic Beauty Salon Product product-list.php unrestricted upload | 8.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-7149 | code-projects QR Code Generator cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-7148 | ShifuML shifu Java Expression Language DataPurifier.java code injection | 8.1v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-7147 | gopeak MasterLab User.php base64ImageContent unrestricted upload | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-7146 | gopeak MasterLab HTTP POST Request Feature.php sqlInjectDelete SQL injection | 9.8v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-7145 | gopeak MasterLab HTTP POST Request Framework.php sqlInject SQL injection | 9.8v3.1 | 0.7% | 2023-12-29 | |
| CVE-2023-7144 | gopeak MasterLab HTTP POST Request Feature.php sqlInject SQL injection | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-7143 | code-projects Client Details System regester.php cross-site scripting | 4.8v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-7142 | code-projects Client Details System clientview.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-7141 | code-projects Client Details System update-clients.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-29 | |
| CVE-2023-7114 | Mattermost cross-site request forgery | 7.1CNA v3.1 | 0.5% | 2023-12-29 | Fix |
| CVE-2023-7113 | Mattermost cross-site scripting | 3.7CNA v3.1 | 0.3% | 2023-12-29 | Fix |
| CVE-2023-7080 | Arbitrary remote code execution within Wrangler dev Workers sandbox | 8.5CNA v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-7079 | Arbitrary remote file read in Wrangler dev server | 6.4CNA v3.1 | 0.7% | 2023-12-29 | Fix |
| CVE-2023-7078 | Server-side request forgery (SSRF) in Miniflare | 7.5CNA v3.1 | 0.6% | 2023-12-29 | Fix |
| CVE-2023-6939 | Honor Magic UI type confusion | 4.0CNA v3.1 | 0.2% | 2023-12-29 | Fix |
| CVE-2023-4675 | SQLi i GM Informatics MDO | 9.8CNA v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-4674 | SQLi in Yazteks E-commerce Software | – | 0.3% | 2023-12-29 | |
| CVE-2023-4541 | SQLi in Weens Admin Panel | 9.8CNA v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-4468 | Poly Trio 8500/Trio 8800/Trio C60 Poly Lens Management Cloud Registration authorization | 7.6v3.1 | 0.3% | 2023-12-29 | |
| CVE-2023-4467 | Poly Trio 8800 Test Automation Mode backdoor | 6.6v3.1 | 0.3% | 2023-12-29 | |
| CVE-2023-4466 | Poly CCX 400/CCX 600/Trio 8800/Trio C60 Web interface protection mechanism | 4.9v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-4465 | Poly VVX 601 Configuration File Import unverified password change | 6.5v3.1 | 0.5% | 2023-12-29 | |
| CVE-2023-4464 | Poly VVX 601 Diagnostic Telnet Mode os command injection | 7.2v3.1 | 3.3% | 2023-12-29 | |
| CVE-2023-4463 | Poly CCX 400/CCX 600/Trio 8800/Trio C60 HTTP header denial of service | 7.5v3.1 | 1.0% | 2023-12-29 | |
| CVE-2023-4462 | Poly VVX 601 Web Configuration application random values | 5.9v3.1 | 0.9% | 2023-12-29 | |
| CVE-2023-52152 | Cybergarage Mupnp For C out-of-bounds read | 7.5v3.1 | 0.6% | 2023-12-28 | |
| CVE-2023-52084 | Winter CMS stored XSS through Backend ColorPicker FormWidget | 2.0CNA v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-52083 | wintercms winter stored XSS through privileged upload of Media Manager file followed by renaming | 2.0CNA v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-52082 | Lychee is vulnerable to an SQL injection in explain DB queries | 8.8CNA v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-52081 | ewen-lbh ffcss theme name lookup improper unicode handling | 5.3CNA v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-52079 | kriszyp msgpackr conversion of property names to strings can trigger infinite recursion | 6.8CNA v3.1 | 0.7% | 2023-12-28 | Fix |
| CVE-2023-51501 | Uncode Core WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.4% | 2023-12-28 | Fix |
| CVE-2023-51010 | Qd-metro Qingdao Metro AdSdkH5Activity vulnerability | 5.3v3.1 | 0.4% | 2023-12-28 | |
| CVE-2023-51006 | Zhwnl Chinese Perpetual Calendar openFile method vulnerability | 7.5v3.1 | 0.6% | 2023-12-28 | |
| CVE-2023-50874 | Ajax Load More WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-50873 | Marios Alexandrou Add Any Extension to Pages cross-site request forgery | 8.8v3.1 | 0.2% | 2023-12-28 | Fix |
| CVE-2023-50860 | Amelia WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-50859 | WP Crowdfunding WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-50858 | Anti Hacker WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-28 | Fix |
| CVE-2023-50857 | Recover WooCommerce Cart Abandonment WordPress plugin SQL command improper neutralization | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50856 | Funnel Builder for WordPress by FunnelKit plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50855 | Pre* Party Resource Hints WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50854 | Squirrly SEO - Advanced Pack WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50853 | Advanced Form Integration WordPress plugin SQL command improper neutralization | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50852 | BookIt WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50851 | Simply Schedule Appointments WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50849 | e2pdf WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50848 | 404 Solution WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50847 | Welcart e-Commerce WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50846 | RegistrationMagic WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50845 | GeoDirectory WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50844 | WP Mail Catcher WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50843 | Clockwork SMS Notfications WordPress plugin SQL injection | 7.2v3.1 | 0.5% | 2023-12-28 | |
| CVE-2023-50842 | MF Gig Calendar WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2023-12-28 | |
| CVE-2023-50841 | BookingPress WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50840 | Booking Manager WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50839 | JS Help Desk Best Help Desk and Support WordPress plugin SQL injection | 9.8NVD v3.1 | 2.0% | 2023-12-28 | NucleiFix |
| CVE-2023-50838 | NEX-Forms Ultimate Form Builder WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2023-12-28 | Fix |
| CVE-2023-50836 | HTML Forms WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-50692 | jizhiCMS file upload | 8.8v3.1 | 0.9% | 2023-12-28 | |
| CVE-2023-50470 | Seacms component admin_ Video.php cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-28 | |
| CVE-2023-50448 | Activeadmin potential CSV export data leak | 6.5v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-50445 | GL.iNet Gl-a1300 command injection | 7.8v3.1 | 9.1% | 2023-12-28 | MetasploitExploit codeKCV |
| CVE-2023-50267 | MeterSphere horizontal privilege escalation vulnerability of resources in project scope | 4.3CNA v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-50038 | Textpattern background arbitrary file upload | 8.8v3.1 | 0.8% | 2023-12-28 | |
| CVE-2023-49469 | Shaarli reflected cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-49230 | Peplink Balance Two missing authorization | 8.8v3.1 | 2.1% | 2023-12-28 | Nuclei |
| CVE-2023-49229 | Peplink Balance Two missing authorization | 4.3v3.1 | 0.5% | 2023-12-28 | |
| CVE-2023-49228 | Peplink Balance Two hard-coded credentials | 6.4v3.1 | 0.5% | 2023-12-28 | |
| CVE-2023-46989 | Innovadeluxe QuickOrder SQL injection | 7.8v3.1 | 0.2% | 2023-12-28 | Fix |
| CVE-2023-46987 | Seacms code injection | 8.8v3.1 | 1.3% | 2023-12-28 | |
| CVE-2023-45702 | HCL Launch agent as a Windows service is vulnerable to a denial of service | 6.2CNA v3.1 | 0.2% | 2023-12-28 | Fix |
| CVE-2023-45701 | HCL Launch is susceptible to sensitive information disclosure | 4.3CNA v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-36381 | Zippy WordPress plugin PHP object injection | 8.8v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-34829 | TP-Link Tapo cleartext transmission of sensitive information | 6.5v3.1 | 0.2% | 2023-12-28 | |
| CVE-2023-32795 | WooCommerce Product Add-ons WordPress plugin PHP object injection | 7.2v3.1 | 0.7% | 2023-12-28 | Fix |
| CVE-2023-32513 | GiveWP WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2023-12-28 | Fix |
| CVE-2023-27447 | WP SMS WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-28 | Fix |
| CVE-2023-7163 | D-Link D-View 8 Unauthenticated Probe-Core Server Communication | 9.8NVD v3.1 | 1.7% | 2023-12-28 | |
| CVE-2023-7140 | code-projects Client Details System manage-users.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-28 | |
| CVE-2023-7139 | code-projects Client Details System HTTP POST request regester.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-28 | |
| CVE-2023-7138 | code-projects Client Details System HTTP POST request admin SQL injection | 8.8v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-7137 | code-projects Client Details System HTTP POST request SQL injection | 8.8v3.1 | 17.0% | 2023-12-28 | |
| CVE-2023-7136 | code-projects Record Management System Document Type doctype.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-28 | |
| CVE-2023-7135 | code-projects Record Management System Offices offices.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-28 | |
| CVE-2023-7134 | SourceCodester Medicine Tracking System path traversal | 9.8v3.1 | 0.9% | 2023-12-28 | |
| CVE-2023-7133 | y_project RuoYi HTTP POST request login cross-site scripting | 6.1v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-7132 | code-projects Intern Membership Management System User Registration cross-site scripting | 5.4v3.1 | 0.6% | 2023-12-28 | |
| CVE-2023-7131 | code-projects Intern Membership Management System User Registration SQL injection | 9.8v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-7129 | code-projects Voting System Voters Login SQL injection | 8.8v3.1 | 0.6% | 2023-12-28 | |
| CVE-2023-7128 | code-projects Voting System Admin Login SQL injection | 8.8v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-7127 | code-projects Automated Voting System Login SQL injection | 9.8v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-7126 | code-projects Automated Voting System Admin Login SQL injection | 8.8v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-7124 | code-projects E-Commerce Site search.php cross-site scripting | 6.1v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-7123 | SourceCodester Medicine Tracking System SQL injection | 9.8v3.1 | 0.7% | 2023-12-28 | |
| CVE-2023-4672 | XSS in Talent Soft's ECOP | 6.1CNA v3.1 | 0.3% | 2023-12-28 | Fix |
| CVE-2023-4671 | SQLi in Talent Soft's ECOP | 9.8v3.1 | 0.7% | 2023-12-28 | Fix |
| CVE-2023-52077 | nexryai Nexkey admin API incorrect authorization | 8.9CNA v3.1 | 0.7% | 2023-12-27 | Fix |
| CVE-2023-52075 | ReVanced API vulnerable to denial of service due to lack of error caching | 7.5CNA v3.1 | 0.5% | 2023-12-27 | Fix |
| CVE-2023-51700 | WP-Mobile-BankID-Integration WordPress Database deserialization: Potential for object injection | 6.4CNA v3.1 | 0.5% | 2023-12-27 | Fix |
| CVE-2023-51697 | Audiobookshelf vulnerable to blind SSRF in `podcastUtils.js` | 4.3CNA v3.1 | 0.3% | 2023-12-27 | Fix |
| CVE-2023-51665 | Audiobookshelf vulnerable to blind SSRF in `Auth.js` | 4.3CNA v3.1 | 0.3% | 2023-12-27 | Fix |
| CVE-2023-51664 | Tj-actions/changed-files command injection in output filenames | 7.3CNA v3.1 | 3.4% | 2023-12-27 | Fix |
| CVE-2023-51443 | FreeSWITCH susceptible to denial of service via DTLS Hello packets during call initiation | 7.5CNA v3.1 | 1.5% | 2023-12-27 | Fix |
| CVE-2023-51084 | Hyavijava stack overflow | 9.8v3.1 | 0.7% | 2023-12-27 | |
| CVE-2023-51080 | HuTool hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method | 7.5v3.1 | 0.6% | 2023-12-27 | Fix |
| CVE-2023-51079 | Mvel mvel2 TimeOut error exists in the ParseTools.subCompileExpression method | 5.3v3.1 | 0.7% | 2023-12-27 | Fix |
| CVE-2023-51075 | HuTool hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function | 7.5v3.1 | 0.7% | 2023-12-27 | Fix |
| CVE-2023-51074 | Json-path out-of-bounds write | 5.3v3.1 | 0.7% | 2023-12-27 | Fix |
| CVE-2023-50255 | Zip path traversal in Deepin-compressor | 9.3CNA v3.1 | 1.1% | 2023-12-27 | Fix |
| CVE-2023-49003 | Simplemobiletools Simple Dialer missing authorization | 5.3v3.1 | 0.5% | 2023-12-27 | Exploit code |
| CVE-2023-49002 | Xenomtechnologies Phone Dialer-voice Call Dialer access restriction bypass | 7.5NVD v3.1 | 0.7% | 2023-12-27 | |
| CVE-2023-49001 | Indi Browser code injection | 9.8v3.1 | 0.8% | 2023-12-27 | |
| CVE-2023-49000 | ArtistScope Artisbrowser code injection | 9.8v3.1 | 0.9% | 2023-12-27 | |
| CVE-2023-47883 | Vladymix TV Browser code injection | 9.8NVD v3.1 | 1.9% | 2023-12-27 | |
| CVE-2023-47882 | Kami Vision YI IoT app WebViewActivity vulnerability | 7.1v3.1 | 0.5% | 2023-12-27 | Exploit code |
| CVE-2023-46919 | Fedirtsapana Simple HTTP Server Plus hard-coded credentials | 6.3v3.1 | 0.1% | 2023-12-27 | |
| CVE-2023-46918 | Fedirtsapana Simple HTTP Server Plus hard-coded credentials | 4.6v3.1 | 0.3% | 2023-12-27 | |
| CVE-2023-43955 | Fedirtsapana TV Bro code injection | 9.8NVD v3.1 | 1.3% | 2023-12-27 | |
| CVE-2023-43481 | TCL Browser TV Web - Browsehere code injection | 9.8v3.1 | 1.1% | 2023-12-27 | Exploit code |
| CVE-2023-40038 | Arris DG1670A improper authentication | 8.8v3.1 | 0.3% | 2023-12-27 | |
| CVE-2023-7116 | WeiYe-Jing datax-web HTTP POST request killJob os command injection | 9.8v3.1 | 9.9% | 2023-12-27 | Nuclei |
| CVE-2023-6879 | Heap buffer overflow in libaom | 9.8NVD v3.1 | 1.2% | 2023-12-27 | Fix |
| CVE-2023-6190 | Authenicated path traversal in İzmir Katip Çelebi University | 9.8v3.1 | 0.8% | 2023-12-27 | Fix |
| CVE-2023-4641 | Shadow-utils: Possible password leak during passwd(1) change | 5.5NVD v3.1 | 0.3% | 2023-12-27 | Fix |
| CVE-2023-3171 | Red Hat EAP eap-7: Heap exhaustion via deserialization | 7.5CNA v3.1 | 0.9% | 2023-12-27 | Fix |
| CVE-2023-52096 | steve-community Ocpp-jaxb SQL injection | 7.5v3.1 | 0.6% | 2023-12-26 | |
| CVE-2023-52086 | Startutorial PHP Backend For Resumable.js unrestricted file upload | 8.1v3.1 | 0.7% | 2023-12-26 | |
| CVE-2023-51654 | Brother Industries iPrint&Scan Desktop link following | 5.5v3.1 | 0.2% | 2023-12-26 | Fix |
| CVE-2023-51467 | Apache OFBiz: Pre-authentication remote code execution (RCE) | 9.8NVD v3.1 | 96.0% | 2023-12-26 | NucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-51363 | Buffalo VR-S1000 information disclosure | 6.5v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-51107 | Artifex MuPDF divide by zero | 7.5v3.1 | 0.7% | 2023-12-26 | |
| CVE-2023-51106 | Artifex MuPDF divide by zero | 7.5v3.1 | 0.7% | 2023-12-26 | Fix |
| CVE-2023-51105 | Artifex MuPDF divide by zero | 7.5v3.1 | 0.9% | 2023-12-26 | Fix |
| CVE-2023-51104 | Artifex MuPDF divide by zero | 7.5v3.1 | 0.9% | 2023-12-26 | Fix |
| CVE-2023-51103 | Artifex MuPDF divide by zero | 7.5v3.1 | 0.9% | 2023-12-26 | Fix |
| CVE-2023-51102 | Tenda W9 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-12-26 | |
| CVE-2023-51101 | Tenda W9 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-12-26 | |
| CVE-2023-51100 | Tenda W9 OS command injection | 9.8v3.1 | 1.8% | 2023-12-26 | |
| CVE-2023-51099 | Tenda W9 OS command injection | 9.8v3.1 | 1.9% | 2023-12-26 | |
| CVE-2023-51098 | Tenda W9 OS command injection | 9.8v3.1 | 1.8% | 2023-12-26 | |
| CVE-2023-51097 | Tenda W9 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-26 | |
| CVE-2023-51095 | Tenda M3 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-26 | |
| CVE-2023-51094 | Tenda M3 OS command injection | 9.8v3.1 | 1.1% | 2023-12-26 | |
| CVE-2023-51093 | Tenda M3 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-26 | Emerging Threats |
| CVE-2023-51092 | Tenda M3 out-of-bounds write | 9.8v3.1 | 12.9% | 2023-12-26 | |
| CVE-2023-51091 | Tenda M3 out-of-bounds write | 9.8v3.1 | 8.5% | 2023-12-26 | |
| CVE-2023-51090 | Tenda M3 out-of-bounds write | 9.8v3.1 | 0.7% | 2023-12-26 | |
| CVE-2023-50968 | Apache OFBiz: Arbitrary file properties reading and SSRF attack | 7.5v3.1 | 63.4% | 2023-12-26 | NucleiFix |
| CVE-2023-50339 | WESEEK GROWI User Management stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-50332 | WESEEK GROWI User Management improper authorization | 6.5v3.1 | 0.5% | 2023-12-26 | Fix |
| CVE-2023-50297 | Alfasado PowerCMS (PowerCMS 6 Series) open redirect | 6.1v3.1 | 0.4% | 2023-12-26 | Fix |
| CVE-2023-50294 | WESEEK GROWI cleartext storage of sensitive information | 6.5v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-50175 | WESEEK GROWI App settings stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-49949 | Passwork incorrect authorization | 8.1v3.1 | 0.6% | 2023-12-26 | |
| CVE-2023-49807 | WESEEK GROWI cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-49779 | WESEEK GROWI anchor tag stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-49598 | WESEEK GROWI event handlers of the pre tags stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-49438 | Open redirect vulnerability in Flask-Security-Too | 6.1v3.1 | 1.1% | 2023-12-26 | NucleiExploit codeFix |
| CVE-2023-49119 | WESEEK GROWI cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-26 | Fix |
| CVE-2023-49117 | Alfasado PowerCMS (PowerCMS 6 Series) cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-48003 | Asp.net Zero user messages open redirect | 6.1v3.1 | 0.5% | 2023-12-26 | |
| CVE-2023-47215 | WESEEK GROWI cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-46711 | Buffalo VR-S1000 hard-coded credentials | 4.6v3.1 | 0.2% | 2023-12-26 | Fix |
| CVE-2023-46699 | WESEEK GROWI User settings cross-site request forgery | 4.3v3.1 | 0.2% | 2023-12-26 | Fix |
| CVE-2023-46681 | Buffalo VR-S1000 command improper neutralization | 7.8v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-45741 | Buffalo VR-S1000 OS command injection | 6.8v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-45740 | WESEEK GROWI cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-45737 | WESEEK GROWI App settings stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-42436 | WESEEK GROWI presentation feature stored cross-site scripting | 5.4v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-28616 | Stormshield Network Security cleartext transmission of sensitive information | 7.5v3.1 | 0.3% | 2023-12-26 | Fix |
| CVE-2023-27150 | OpenCRX cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-26 | Fix |
| CVE-2023-7111 | code-projects Library Management System index.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-26 | |
| CVE-2023-6268 | JSON Content Importer WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2023-12-26 | Fix |
| CVE-2023-6250 | BestWebSoft's Like and Share WordPress plugin unauthenticated password Protected post read | 7.5NVD v3.1 | 0.5% | 2023-12-26 | Fix |
| CVE-2023-6166 | Quiz Maker WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2023-12-26 | Fix |
| CVE-2023-6155 | Quiz Maker WordPress plugin unauthenticated email Address disclosure | 5.3NVD v3.1 | 0.6% | 2023-12-26 | Fix |
| CVE-2023-6114 | Duplicator and Duplicator Pro backups tmp directory information disclosure | 7.5NVD v3.1 | 30.9% | 2023-12-26 | NucleiFix |
| CVE-2023-5991 | Hotel Booking Lite WordPress plugin unauthenticated arbitrary file download and deletion | 9.8NVD v3.1 | 3.3% | 2023-12-26 | NucleiFix |
| CVE-2023-5980 | BSK Forms Blacklist WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-12-26 | Fix |
| CVE-2023-5939 | rtMedia for WordPress, BuddyPress and bbPress plugin Admin+ RCE | 7.2NVD v3.1 | 1.3% | 2023-12-26 | Fix |
| CVE-2023-5931 | rtMedia for WordPress, BuddyPress and bbPress plugin Subscriber+ RCE | 8.8NVD v3.1 | 0.8% | 2023-12-26 | Fix |
| CVE-2023-5674 | WP Mail Log Contributor+ SQL injection in wml_logs/send_mail endpoint | 8.8NVD v3.1 | 10.8% | 2023-12-26 | Fix |
| CVE-2023-5673 | WP Mail Log Contributor+ arbitrary file upload to RCE | 8.8NVD v3.1 | 1.1% | 2023-12-26 | Fix |
| CVE-2023-5672 | WP Mail Log Contributor+ LFI in wml_logs/send_mail endpoint | 6.5NVD v3.1 | 0.7% | 2023-12-26 | Fix |
| CVE-2023-5645 | WP Mail Log Contributor+ SQL injection in wml_logs endpoint | 8.8NVD v3.1 | 0.7% | 2023-12-26 | Fix |
| CVE-2023-5644 | WP Mail Log incorrect authorization in REST API endpoints | 7.6NVD v3.1 | 0.5% | 2023-12-26 | Fix |
| CVE-2023-5203 | WP Sessions Time Monitoring Full Automatic WordPress plugin unauthenticated SQL injection | 7.5NVD v3.1 | 2.2% | 2023-12-26 | NucleiFix |
| CVE-2023-5180 | Out-of-bounds write vulnerability exists in ODA Drawings SDK | 7.8CNA v3.1 | 0.2% | 2023-12-26 | Exploit codeFix |
| CVE-2023-51772 | One Identity Password Manager insufficient session expiration | 8.8v3.1 | 0.5% | 2023-12-25 | |
| CVE-2023-51771 | Starnight Micro HTTP Server buffer overflow | 9.8v3.1 | 0.7% | 2023-12-25 | |
| CVE-2023-49954 | 3CX SQL injection | 9.8NVD v3.1 | 2.2% | 2023-12-25 | |
| CVE-2023-49944 | BeyondTrust Privilege Management Challenge Response feature vulnerability | 6.7v3.1 | 0.2% | 2023-12-25 | Fix |
| CVE-2023-49880 | IBM Financial Transaction Manager for SWIFT Services data manipulation | 7.5CNA v3.1 | 0.5% | 2023-12-25 | Fix |
| CVE-2023-49328 | Wolterskluwer B.point argument injection | 7.2v3.1 | 1.0% | 2023-12-25 | |
| CVE-2023-49226 | Peplink Balance Two command injection | 7.2v3.1 | 3.4% | 2023-12-25 | |
| CVE-2023-48654 | One Identity Password Manager file upload | 9.8v3.1 | 1.0% | 2023-12-25 | |
| CVE-2023-48652 | Concrete CMS cross-site request forgery (CSRF) | 4.3v3.1 | 0.2% | 2023-12-25 | Fix |
| CVE-2023-47247 | SysAid On-Premise Knowledge Base article deletion vulnerability | 4.3v3.1 | 0.3% | 2023-12-25 | Fix |
| CVE-2023-47091 | Stormshield Network Security buffer overflow | 7.5v3.1 | 0.5% | 2023-12-25 | Fix |
| CVE-2023-43064 | IBM i code execution | 7.0CNA v3.1 | 0.2% | 2023-12-25 | Fix |
| CVE-2023-40236 | Pexip Virtual Meeting Rooms hard-coded credentials | 5.3v3.1 | 0.4% | 2023-12-25 | |
| CVE-2023-38826 | Follettlearning Solutions Destiny Follet Learning cross-site scripting | 6.1v3.1 | 0.4% | 2023-12-25 | |
| CVE-2023-38321 | Sierra Wireless ALEOS null pointer dereference | 7.5v3.1 | 1.1% | 2023-12-25 | Fix |
| CVE-2023-37225 | Pexip Infinity cross-site scripting | 6.1v3.1 | 0.3% | 2023-12-25 | |
| CVE-2023-37188 | Blosc C-Blosc2 null pointer dereference | 7.5v3.1 | 0.8% | 2023-12-25 | |
| CVE-2023-37187 | Blosc C-Blosc2 null pointer dereference | 7.5v3.1 | 0.8% | 2023-12-25 | |
| CVE-2023-37186 | Blosc C-Blosc2 null pointer dereference | 7.5v3.1 | 0.8% | 2023-12-25 | |
| CVE-2023-37185 | Blosc C-Blosc2 null pointer dereference | 7.5v3.1 | 0.8% | 2023-12-25 | |
| CVE-2023-36486 | ILIAS workflow engine remote command execution | 7.2v3.1 | 0.9% | 2023-12-25 | Fix |
| CVE-2023-36485 | ILIAS workflow engine remote command execution | 7.2v3.1 | 0.8% | 2023-12-25 | Fix |
| CVE-2023-31455 | Pexip Infinity improper input validation | 7.5v3.1 | 0.6% | 2023-12-25 | |
| CVE-2023-31297 | Sesami Cash Point & Transport Optimizer cross-site scripting | 4.8v3.1 | 0.3% | 2023-12-25 | |
| CVE-2023-31289 | Pexip Infinity improper input validation | 7.5v3.1 | 0.6% | 2023-12-25 | |
| CVE-2023-31224 | Jamf improper authentication | 9.8v3.1 | 0.6% | 2023-12-25 | Fix |
| CVE-2023-30451 | Path traversal in TYPO3 File Abstraction Layer Storages | 4.9v3.1 | 1.2% | 2023-12-25 | Fix |
| CVE-2023-28872 | ncp-e Secure Enterprise Client link following | 8.8v3.1 | 0.8% | 2023-12-25 | |
| CVE-2023-7104 | SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow | 7.3NVD v3.1 | 1.5% | 2023-12-25 | Fix |
| CVE-2023-7100 | PHPGurukul Restaurant Table Booking System bwdates-report-details.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-25 | |
| CVE-2023-7099 | PHPGurukul Nipah Virus Testing Management System bwdates-report-result.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-25 | |
| CVE-2023-7098 | icret EasyImages hide.php path traversal | 5.3v3.1 | 0.7% | 2023-12-25 | |
| CVE-2023-7097 | code-projects Water Billing System addbill.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-25 | |
| CVE-2023-7096 | code-projects Faculty Management System crud.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-25 | |
| CVE-2023-7095 | Totolink A7100RU HTTP POST request main buffer overflow | 9.8v3.1 | 13.7% | 2023-12-25 | |
| CVE-2023-7094 | Netentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosure | 7.5v3.1 | 0.9% | 2023-12-25 | |
| CVE-2023-7093 | KylinSoft kylin-system-updater com.kylin.systemupgrade service OS command injection | 7.8v3.1 | 0.9% | 2023-12-25 | |
| CVE-2023-51767 | OpenBSD OpenSSH authentication bypass | 7.0NVD v3.1 | 0.7% | 2023-12-24 | KCVFix |
| CVE-2023-51766 | Exim insufficient verification of data authenticity | 5.3v3.1 | 1.1% | 2023-12-24 | Emerging ThreatsFix |
| CVE-2023-51765 | Sendmail insufficient verification of data authenticity | 5.3v3.1 | 1.1% | 2023-12-24 | Emerging ThreatsFix |
| CVE-2023-51764 | Postfix insufficient verification of data authenticity | 5.3NVD v3.1 | 2.6% | 2023-12-24 | Emerging ThreatsExploit codeFix |
| CVE-2023-51763 | ActiveAdmin CSV injection leading to sensitive information disclosure | 9.8v3.1 | 0.9% | 2023-12-24 | Fix |
| CVE-2023-51714 | Qt HTTP/2 HPACK table integer overflow | 9.8NVD v3.1 | 1.0% | 2023-12-24 | Fix |
| CVE-2023-7102 | Barracuda ESG Appliance remote code execution (RCE) | 9.8NVD v3.1 | 44.6% | 2023-12-24 | MetasploitExploit codeFix |
| CVE-2023-7101 | Spreadsheet::ParseExcel remote code execution | 7.8NVD v3.1 | 19.1% | 2023-12-24 | KEVMetasploitExploit codeFix |
| CVE-2023-7092 | Uniway UW-302VP Admin Web interface wlan_basic_set.cgi cross-site request forgery | 4.3v3.1 | 0.4% | 2023-12-24 | |
| CVE-2023-7091 | Dreamer CMS uploadFile unrestricted upload | 8.8v3.1 | 0.9% | 2023-12-24 | |
| CVE-2023-49594 | instipod DuoUniversalKeycloakAuthenticator challenge functionality information disclosure | 6.5v3.1 | 1.2% | 2023-12-23 | Fix |
| CVE-2023-7090 | Sudo: Improper handling of ipa_hostname leads to privilege mismanagement | 8.8NVD v3.1 | 0.7% | 2023-12-23 | Fix |
| CVE-2023-7008 | systemd systemd-resolved: Unsigned name response in signed zone is not refused when dnssec=yes | 5.9NVD v3.1 | 0.8% | 2023-12-23 | Fix |
| CVE-2023-7002 | Backup Migration WordPress plugin authenticated (Admin+) OS command injection via URL | 7.2v3.1 | 30.6% | 2023-12-23 | Fix |
| CVE-2023-6972 | Backup Migration WordPress plugin unauthenticated path traversal to arbitrary file deletion | 9.8v3.1 | 1.4% | 2023-12-23 | Exploit codeFix |
| CVE-2023-6971 | Backup Migration WordPress plugin remote file inclusion | 9.8v3.1 | 6.4% | 2023-12-23 | Fix |
| CVE-2023-6744 | Divi WordPress theme authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.3% | 2023-12-23 | Fix |
| CVE-2023-5962 | ioLogik E1200 Series: Weak cryptographic algorithm | 6.5CNA v3.1 | 0.3% | 2023-12-23 | Fix |
| CVE-2023-5961 | ioLogik E1200 Series: Cross-site request forgery (CSRF) | 8.8CNA v3.1 | 0.4% | 2023-12-23 | Exploit codeFix |
| CVE-2023-51713 | ProFTPD out-of-bounds read | 7.5v3.1 | 4.2% | 2023-12-22 | NucleiFix |
| CVE-2023-51708 | Bentley Assetwise Alim For Transportation improper authentication | 8.6v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-51707 | Array Networks ArrayOS AG command injection | 9.8v3.1 | 1.3% | 2023-12-22 | Fix |
| CVE-2023-51704 | mediawiki cross-site scripting | 6.1v3.1 | 0.7% | 2023-12-22 | Fix |
| CVE-2023-51662 | Snowflake Connector .NET does not properly check the Certificate Revocation List (CRL) | 6.0CNA v3.1 | 0.3% | 2023-12-22 | Fix |
| CVE-2023-51661 | wasmerio wasmer filesystem sandbox not enforced in wasmer-cli | 8.4CNA v3.1 | 0.6% | 2023-12-22 | Fix |
| CVE-2023-51651 | Potential URI resolution path traversal in the AWS SDK for PHP | 6.0CNA v3.1 | 0.4% | 2023-12-22 | Fix |
| CVE-2023-51650 | dromara hertzbeat unauthorized access vulnerability on three interfaces | 7.5CNA v3.1 | 0.9% | 2023-12-22 | Fix |
| CVE-2023-51649 | Nautobot missing object-level permissions enforcement when running Job Buttons | 3.5CNA v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-51451 | SSRF in symbolicator via invalid protocol | 4.3CNA v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-51449 | gradio make the `/file` secure against file traversal attacks | 5.6CNA v3.1 | 28.3% | 2023-12-22 | NucleiFix |
| CVE-2023-51448 | cacti SQL injection vulnerability when managing SNMP Notification Receivers | 8.8CNA v3.1 | 67.3% | 2023-12-22 | Fix |
| CVE-2023-51387 | Expression injection vulnerability in HertzBeat | 7.2CNA v3.1 | 1.4% | 2023-12-22 | Fix |
| CVE-2023-51386 | Sandbox Accounts for Events vulnerable to privilege escalation to read running events data | 7.8CNA v3.1 | 0.2% | 2023-12-22 | Fix |
| CVE-2023-51035 | TOTOLINK EX1200L OS command injection | 9.8v3.1 | 1.3% | 2023-12-22 | |
| CVE-2023-51034 | TOTOLINK EX1200L unrestricted file upload | 9.8v3.1 | 1.1% | 2023-12-22 | |
| CVE-2023-51033 | TOTOLINK EX1200L OS command injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51028 | TOTOLINK EX1800T OS command injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51027 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51026 | TOTOLINK EX1800T code injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51025 | TOTOLINK EX1800T command injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51024 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51023 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51022 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51021 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51020 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51019 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51018 | TOTOLINK EX1800T code injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51017 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51016 | TOTOLINK EX1800T command injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51015 | TOTOLINK EX1800T code injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51014 | TOTOLINK EX1800T command injection | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51013 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51012 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-51011 | TOTOLINK EX1800T arbitrary command execution | 9.8v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-50928 | sandbox-accounts-for-events security misconfiguration leads to budget exceed | 7.1CNA v3.1 | 0.4% | 2023-12-22 | Fix |
| CVE-2023-50924 | engelsystem stored XSS in Overview and Output fields | 7.3CNA v3.1 | 0.3% | 2023-12-22 | Fix |
| CVE-2023-50731 | MindsDB has arbitrary file write in file.py | 9.1CNA v3.1 | 1.0% | 2023-12-22 | Fix |
| CVE-2023-50730 | Grackle has StackOverflowError in GraphQL query processing | 7.5CNA v3.1 | 0.8% | 2023-12-22 | Fix |
| CVE-2023-50727 | Resque vulnerable to reflected XSS in Queue endpoint | 6.3CNA v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-50725 | Resque vulnerable to reflected XSS in resque-web failed and queues lists | 6.3CNA v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-50714 | yiisoft yii2-authclient the Oauth2 PKCE implementation is vulnerable | 6.8CNA v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-50712 | Improper neutralization of alternate XSS syntax in iris-web | 4.6CNA v3.1 | 0.3% | 2023-12-22 | Fix |
| CVE-2023-50708 | Yiisoft yii2-authclient OAuth and OpenID Connect state comparison vulnerability | 6.1CNA v3.1 | 0.7% | 2023-12-22 | Fix |
| CVE-2023-50259 | pymedusa Medusa blind SSRF in /home/testslack endpoint | 5.3CNA v3.1 | 0.6% | 2023-12-22 | Fix |
| CVE-2023-50258 | pymedusa Medusa blind SSRF in `/home/testdiscord` endpoint | 5.3CNA v3.1 | 0.7% | 2023-12-22 | Fix |
| CVE-2023-50254 | Deepin Reader RCE vulnerability due to a design flaw | 9.3CNA v3.1 | 2.1% | 2023-12-22 | Exploit codeFix |
| CVE-2023-50250 | cacti cross-site scripting vulnerability when Import XML template file | 5.4CNA v3.1 | 1.3% | 2023-12-22 | Fix |
| CVE-2023-50147 | TOTOLINK A3700R arbitrary command execution | 9.8v3.1 | 1.2% | 2023-12-22 | |
| CVE-2023-49792 | Nextcloud security-advisories bruteforce protection can be bypassed with misconfigured proxy | 5.3CNA v3.1 | 1.0% | 2023-12-22 | Fix |
| CVE-2023-49791 | Nextcloud security-advisories workflows do not require password confirmation on API level | 5.4CNA v3.1 | 0.6% | 2023-12-22 | Fix |
| CVE-2023-49790 | App PIN code can be bypassed in Nextcloud files iOS | 4.3CNA v3.1 | 0.3% | 2023-12-22 | Fix |
| CVE-2023-49689 | Job Portal multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-22 | |
| CVE-2023-49688 | Job Portal multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-22 | |
| CVE-2023-49391 | free5GC AMF denial of service | 7.5v3.1 | 1.0% | 2023-12-22 | |
| CVE-2023-49356 | Glensawyer MP3GAIN stack-based buffer overflow | 7.5v3.1 | 0.7% | 2023-12-22 | Fix |
| CVE-2023-49088 | Cacti data_debug.php cross-site scripting | 6.1CNA v3.1 | 1.3% | 2023-12-22 | Fix |
| CVE-2023-49086 | Cacti is vulnerable to cross-site scripting (XSS) DOM | 5.4CNA v3.1 | 1.5% | 2023-12-22 | Fix |
| CVE-2023-49085 | Cacti pollers.php SQL injection | 8.8CNA v3.1 | 74.5% | 2023-12-22 | MetasploitExploit codeKCVFix |
| CVE-2023-48704 | ClickHouse unauthenticated heap buffer overflow in Gorrila codec decompression | 7.0CNA v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-48670 | Dell SupportAssist Client Consumer untrusted search path | 7.3CNA v3.1 | 0.2% | 2023-12-22 | Fix |
| CVE-2023-48308 | Calendar app returns full stacktrace when an error happens while editing appointment | 3.5CNA v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-45957 | thirty bees component admin/AdminRequestSqlController.php stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-22 | |
| CVE-2023-45165 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2023-12-22 | Fix |
| CVE-2023-43741 | Buildkite Elastic CI for AWS time-of-check-time-of-use race condition | 7.0v3.1 | 0.2% | 2023-12-22 | Fix |
| CVE-2023-43116 | Buildkite Elastic CI for AWS symbolic link following | 7.8v3.1 | 0.3% | 2023-12-22 | Fix |
| CVE-2023-43088 | Dell CPG BIOS arbitrary code execution | 7.2CNA v3.1 | 0.3% | 2023-12-22 | Fix |
| CVE-2023-42465 | sudo authentication bypass | 7.0v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-42017 | IBM Planning Analytics file upload | 8.0CNA v3.1 | 1.1% | 2023-12-22 | Fix |
| CVE-2023-39251 | Dell CPG BIOS improper input validation | 6.7CNA v3.1 | 0.2% | 2023-12-22 | Fix |
| CVE-2023-24609 | Rambus TLS Toolkit integer overflow | 7.5v3.1 | 0.7% | 2023-12-22 | |
| CVE-2023-7076 | slawkens MyAAC bugtracker.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-22 | Fix |
| CVE-2023-7075 | code-projects Point of Sales and Inventory Management System checkout.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-22 | |
| CVE-2023-7059 | SourceCodester School Visitor Log e-Book log-book.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-22 | |
| CVE-2023-7058 | SourceCodester Simple Student Attendance System path traversal | 9.8v3.1 | 0.7% | 2023-12-22 | |
| CVE-2023-7057 | code-projects Faculty Management System yearlevel.php cross-site scripting | 6.1v3.1 | 0.5% | 2023-12-22 | |
| CVE-2023-7056 | code-projects Faculty Management System subjects.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-22 | |
| CVE-2023-7055 | PHPGurukul Online Notes Sharing System Contact Information profile.php access control | 5.4v3.1 | 0.5% | 2023-12-22 | |
| CVE-2023-7054 | PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload | 5.4v3.1 | 0.5% | 2023-12-22 | |
| CVE-2023-7053 | PHPGurukul Online Notes Sharing System signup.php weak password | 8.8v3.1 | 0.8% | 2023-12-22 | |
| CVE-2023-7052 | PHPGurukul Online Notes Sharing System profile.php cross-site request forgery | 4.3v3.1 | 0.4% | 2023-12-22 | |
| CVE-2023-51656 | Apache IoTDB: Unsafe deserialize map in Sync tool | 9.8v3.1 | 1.0% | 2023-12-21 | Fix |
| CVE-2023-51655 | JetBrains IntelliJ IDEA acceptance of untrusted data | 6.3CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-51442 | Authentication bypass vulnerability in navidrome's subsonic endpoint | 8.6CNA v3.1 | 0.7% | 2023-12-21 | Fix |
| CVE-2023-51390 | Information disclosure vulnerability in Journalpump | 6.5CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-51380 | Incorrect authorization allows Read Access to issue Comments in GitHub Enterprise Server | 2.7CNA v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-51379 | Incorrect authorization for issue Comments in GitHub Enterprise Server | 4.9CNA v3.1 | 0.6% | 2023-12-21 | Fix |
| CVE-2023-51052 | S-CMS ajax.php SQL injection | 9.8v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-51051 | S-CMS ajax.php SQL injection | 9.8v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-51050 | S-CMS ajax.php SQL injection | 9.8v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-51049 | S-CMS ajax.php SQL injection | 9.8v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-51048 | S-CMS A_newsauth parameter in ajax.php SQL injection | 9.8v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-50834 | WooCommerce Menu Extension WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | |
| CVE-2023-50833 | Colibri Page Builder WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-50832 | Multi Step Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-50831 | CURCY WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-50830 | Seos Contact Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-21 | |
| CVE-2023-50829 | Loan Repayment Calculator and Application Form WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-50828 | Ultimate Dashboard WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-50827 | Accredible Certificates and Open Badges WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.2% | 2023-12-21 | Fix |
| CVE-2023-50826 | Menu Image, Icons made easy WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-50825 | iframe Shortcode WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | |
| CVE-2023-50824 | Insert or Embed Articulate Content into WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-50823 | CSS and JavaScript Toolbox WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-50822 | Currency Converter Widget WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-50783 | Apache Airflow: Improper access control vulnerability on the varimport endpoint | 6.5v3.1 | 1.4% | 2023-12-21 | Fix |
| CVE-2023-50732 | xwiki-platform velocity execution without script right through tree macro | 8.3CNA v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-50724 | Resque vulnerable to reflected cross-site scripting through pathname | 6.3CNA v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-50481 | Blinksocks has weak encryption algorithms | 7.5v3.1 | 0.3% | 2023-12-21 | |
| CVE-2023-50477 | Nos Client privilege escalation | 9.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-50475 | Bcoin bsock uses weak hashing algorithms | 9.1v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-50473 | Billahmed Qbit Matui bill-ahmed qbit-matUI version cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-21 | |
| CVE-2023-50377 | Simple Counter WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | |
| CVE-2023-49920 | Apache Airflow: Missing CSRF protection on DAG/trigger | 6.5v3.1 | 1.0% | 2023-12-21 | Fix |
| CVE-2023-49826 | Soledad WordPress theme PHP object injection | 9.8v3.1 | 0.6% | 2023-12-21 | Fix |
| CVE-2023-49778 | Sayfa Sayaç WordPress plugin PHP object injection | 9.8v3.1 | 0.8% | 2023-12-21 | |
| CVE-2023-49765 | Rate my Post WP Rating System WordPress plugin insecure direct object references (IDOR) | 6.5v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-49762 | AppMySite WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-49681 | Job Portal multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-49677 | Job Portal multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-49162 | BigCommerce WordPress plugin sensitive data exposure | 7.5v3.1 | 0.4% | 2023-12-21 | |
| CVE-2023-49084 | Local file inclusion (RCE) in Cacti | 8.1CNA v3.1 | 64.4% | 2023-12-21 | MetasploitExploit codeKCVFix |
| CVE-2023-49032 | ltb-project Self Service Password code injection | 9.8v3.1 | 1.2% | 2023-12-21 | |
| CVE-2023-48722 | Student Result Management System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-48720 | Student Result Management System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-48718 | Student Result Management System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-48716 | Student Result Management System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-48689 | Railway Reservation System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-48687 | Railway Reservation System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-48685 | Railway Reservation System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-48298 | ClickHouse integer underflow leading to stack overflow in FPC codec decompression | 5.9CNA v3.1 | 0.6% | 2023-12-21 | Fix |
| CVE-2023-48291 | Apache Airflow: Improper access control to DAG resources | 4.3v3.1 | 1.8% | 2023-12-21 | Fix |
| CVE-2023-48288 | WordPress Job Board and Recruitment Plugin JobWP sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-48116 | SmarterTools SmarterMail cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-48115 | SmarterTools SmarterMail cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-48114 | SmarterTools SmarterMail cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-47527 | WP Edit Username WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-47525 | Event Management Tickets Booking WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-47265 | Apache Airflow: DAG Params alllow to embed unchecked Javascript | 5.4v3.1 | 1.3% | 2023-12-21 | Fix |
| CVE-2023-47191 | Youzify WordPress plugin insecure direct object references (IDOR) | 6.5v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-47093 | Stormshield Network Security crash | 6.5v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-46649 | GitHub Enterprise Server race condition allows Administrative Access on Organization Repositories | 6.3CNA v3.1 | 0.2% | 2023-12-21 | Fix |
| CVE-2023-46648 | Insufficient entropy in GitHub Enterprise Server Management Console Invitation Token | 8.3CNA v3.1 | 0.7% | 2023-12-21 | Fix |
| CVE-2023-46647 | GitHub Enterprise Server all versions improper privilege management | 8.0CNA v3.1 | 0.6% | 2023-12-21 | Fix |
| CVE-2023-46646 | GitHub Enterprise Server all versions improper access control | 5.3CNA v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-46645 | GitHub Enterprise Server GitHub Pages site builder path traversal | 6.8CNA v3.1 | 0.8% | 2023-12-21 | Fix |
| CVE-2023-46131 | Grails® data binding causes JVM crash and/or DoS | 6.5CNA v3.1 | 0.7% | 2023-12-21 | Fix |
| CVE-2023-45703 | HCL Launch is susceptible to a denial of service | 5.3CNA v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-45700 | HCL Launch is susceptible to an HTML injection | 4.3CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-45121 | Online Examination System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-45120 | Online Examination System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.6% | 2023-12-21 | |
| CVE-2023-45119 | Online Examination System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-45118 | Online Examination System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-45117 | Online Examination System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-45116 | Online Examination System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-45115 | Online Examination System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-44482 | Leave Management System Project multiple Authenticated SQL Injections (SQLi) | 8.8CNA v3.1 | 0.6% | 2023-12-21 | |
| CVE-2023-44481 | Leave Management System Project multiple Authenticated SQL Injections (SQLi) | 8.8CNA v3.1 | 0.6% | 2023-12-21 | |
| CVE-2023-41166 | Stormshield Network Security remote access commands vulnerability | 5.3v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-41097 | silabs.com GSDK potential Timing vulnerability in CBC PKCS7 padding calculations | 4.6CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-40058 | SolarWinds Access Rights Manager sensitive information disclosure | 6.5CNA v3.1 | 0.8% | 2023-12-21 | Fix |
| CVE-2023-37520 | HCL BigFix Platform is affected by Unathenticated stored cross-site scripting (XSS) | 7.7CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-37519 | HCL BigFix Platform is affected by Unathenticated stored cross-site scripting (XSS) | 7.7CNA v3.1 | 0.2% | 2023-12-21 | Fix |
| CVE-2023-32799 | WooCommerce Ship to Multiple Addresses WordPress plugin insecure direct object references (IDOR) | 6.5v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-32747 | WooCommerce Bookings WordPress plugin insecure direct object references (IDOR) | 7.5v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-32242 | Woodmart Core WordPress plugin PHP object injection | 9.8v3.1 | 0.8% | 2023-12-21 | Fix |
| CVE-2023-29487 | Heimdalsecurity Thor regular expression denial of service | 9.1v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-29486 | Heimdalsecurity Thor regular expression denial of service | 9.8v3.1 | 1.0% | 2023-12-21 | |
| CVE-2023-29485 | Heimdalsecurity Thor missing authentication | 9.8v3.1 | 1.0% | 2023-12-21 | |
| CVE-2023-28421 | WordPress Email Marketing Plugin WP Email Capture sensitive data exposure | 7.5v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-28025 | An HTML injection vulnerability can affect HCL BigFix Mobile / Modern Client Management | 6.6CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-27319 | Information disclosure vulnerability in ONTAP Mediator | 5.3CNA v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-22674 | Dashicons + Custom Post Types WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2023-12-21 | |
| CVE-2023-7051 | PHPGurukul Online Notes Sharing System manage-notes.php cross-site request forgery | 4.3v3.1 | 0.4% | 2023-12-21 | |
| CVE-2023-7050 | PHPGurukul Online Notes Sharing System profile.php cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-21 | |
| CVE-2023-7047 | Devolutions Remote Desktop Manager incorrect authorization | 4.4v3.1 | 0.2% | 2023-12-21 | Fix |
| CVE-2023-7042 | Kernel: Null pointer dereference in ath10k_wmi_tlv_op_pull_mgmt_tx_compl_ev | 5.5NVD v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-7041 | codelyfe Stupid Simple CMS rename.php path traversal | 5.4v3.1 | 0.9% | 2023-12-21 | |
| CVE-2023-7040 | codelyfe Stupid Simple CMS rename.php path traversal | 6.5v3.1 | 0.8% | 2023-12-21 | |
| CVE-2023-7039 | Byzoro S210 importexport.php injection | 9.8v3.1 | 14.2% | 2023-12-21 | |
| CVE-2023-7038 | Automad user creation cross-site request forgery | 6.5v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-7037 | Automad FileController.php import server-side request forgery | 8.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-7036 | Automad Content Type FileCollectionController.php upload unrestricted upload | 5.4v3.1 | 0.6% | 2023-12-21 | |
| CVE-2023-7035 | Automad setting post.php cross-site scripting | 5.4v3.1 | 0.6% | 2023-12-21 | |
| CVE-2023-7026 | Lightxun IPTV Gateway web_upload_template.html unrestricted upload | 6.5v3.1 | 0.6% | 2023-12-21 | |
| CVE-2023-7025 | KylinSoft hedron-domain-hook DBus init_kcm access control | 7.8v3.1 | 0.2% | 2023-12-21 | |
| CVE-2023-7024 | Google Chromium WebRTC heap buffer overflow | 8.8NVD v3.1 | 6.7% | 2023-12-21 | KEVFix |
| CVE-2023-7023 | Tongda OA 2017 delete.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-7022 | Tongda OA 2017 delete_all.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-7021 | Tongda OA 2017 delete_search.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-7020 | Tongda OA 2017 view.php SQL injection | 9.8v3.1 | 0.7% | 2023-12-21 | |
| CVE-2023-6847 | GitHub Enterprise Server private mode authentication bypass | 7.5CNA v3.1 | 0.8% | 2023-12-21 | Fix |
| CVE-2023-6804 | GitHub Enterprise Server improper privilege management allows for arbitrary workflows to be run | 6.5CNA v3.1 | 0.2% | 2023-12-21 | Fix |
| CVE-2023-6803 | GitHub Enterprise Server race condition allows Unauthorized Outside Collaborator | 5.8CNA v3.1 | 0.2% | 2023-12-21 | Fix |
| CVE-2023-6802 | Sensitive information in log file in GitHub Enterprise Server | 7.2CNA v3.1 | 0.7% | 2023-12-21 | Fix |
| CVE-2023-6746 | Sensitive information in log file in GitHub Enterprise Server | 8.1CNA v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-6690 | GitHub Enterprise Server race condition | 3.9CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-6546 | Kernel: Gsm multiplexing race condition leads to privilege escalation | 7.0NVD v3.1 | 0.7% | 2023-12-21 | Exploit codeFix |
| CVE-2023-6145 | SQLi in Softomi E-commerce Software | 9.8CNA v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-6122 | Reflected XSS in Softomi E-commerce Software | 6.1CNA v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-5989 | Stored XSS in Uyumsoft ERP | 6.1v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-5988 | Reflected XSS in Uyumsoft ERP | 6.1CNA v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-5594 | Improper following of a certificate's chain of trust in ESET security products | 7.5CNA v3.1 | 0.4% | 2023-12-21 | Fix |
| CVE-2023-4256 | Tcpreplay: Tcprewrite: Double free in tcpedit_dlt_cleanup in plugins/dlt_plugins.c | 5.5NVD v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-4255 | w3m backspace handling in checkType out-of-bounds write | 5.5NVD v3.1 | 0.3% | 2023-12-21 | Fix |
| CVE-2023-2585 | Red Hat Single Sign-On 7 keycloak: Client access via device auth request spoof | 3.5CNA v3.1 | 0.7% | 2023-12-21 | Fix |
| CVE-2023-2487 | Export All Posts WordPress plugin Smackcoders information disclosure | 7.5v3.1 | 0.5% | 2023-12-21 | Fix |
| CVE-2023-51462 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-51461 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-51460 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-51459 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-51458 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-51457 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-50993 | Ruijie Rg-ws6008 OS command injection | 9.8v3.1 | 1.2% | 2023-12-20 | |
| CVE-2023-50992 | Tenda I29 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-50990 | Tenda I29 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-50989 | Tenda I29 command injection | 9.8v3.1 | 2.0% | 2023-12-20 | |
| CVE-2023-50988 | Tenda I29 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-50987 | Tenda I29 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-50986 | Tenda I29 buffer overflow | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-50985 | Tenda I29 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-50984 | Tenda I29 out-of-bounds write | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-50983 | Tenda I29 command injection | 9.8v3.1 | 2.0% | 2023-12-20 | |
| CVE-2023-50707 | Uncontrolled resource consumption in EFACEC BCU 500 | 7.5NVD v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-50706 | Improper access control in EFACEC UC 500E | 4.3v3.1 | 0.2% | 2023-12-20 | Fix |
| CVE-2023-50705 | Exposure of sensitive information to an unauthorized actor in EFACEC UC 500E | 5.3v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-50704 | URL redirection to untrusted site (open redirect) in EFACEC UC 500E | 6.1v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-50703 | Cleartext transmission of sensitive information in EFACEC UC 500E | 5.9v3.1 | 0.3% | 2023-12-20 | Fix |
| CVE-2023-50639 | Iscute Cute Http File Server CuteHttpFileServer v.1.0 and v.2.0 cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-20 | |
| CVE-2023-50628 | Libming buffer overflow | 9.8v3.1 | 1.3% | 2023-12-20 | |
| CVE-2023-50249 | Sentry's Astro SDK vulnerable to ReDoS | 7.5CNA v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-50044 | Cesanta mJS buffer overflow | 9.8v3.1 | 0.9% | 2023-12-20 | |
| CVE-2023-49825 | Soledad WordPress theme SQL injection | 8.1v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-49814 | Symbiostock Lite WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.6% | 2023-12-20 | |
| CVE-2023-49776 | Sayfa Sayaç WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-12-20 | |
| CVE-2023-49773 | BCorp Shortcodes WordPress plugin PHP object injection | 9.8v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-49772 | Genesis Simple Love WordPress plugin PHP object injection | 9.8v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-49752 | Adifier System WordPress theme SQL injection | 9.8v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-49272 | Hotel Management multiple reflected cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-12-20 | |
| CVE-2023-49271 | Hotel Management multiple reflected cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-12-20 | |
| CVE-2023-49270 | Hotel Management multiple reflected cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-12-20 | |
| CVE-2023-49269 | Hotel Management multiple reflected cross-site scripting (XSS) | 5.4v3.1 | 0.4% | 2023-12-20 | |
| CVE-2023-49166 | MSync WordPress plugin SQL injection | 9.1v3.1 | 0.6% | 2023-12-20 | |
| CVE-2023-49161 | Bravo Translate WordPress plugin SQL injection | 9.1v3.1 | 0.6% | 2023-12-20 | |
| CVE-2023-48434 | Online Voting System Project multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-48433 | Online Voting System Project multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-47990 | Cuppacms SQL injection | 9.8v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-47852 | Link Whisper Free WordPress plugin SQL injection | 7.2v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-47784 | Slider Revolution WordPress plugin arbitrary file upload | 8.8v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-47707 | IBM Security Guardium Key Lifecycle Manager cross-site scripting | 5.4CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-47706 | IBM Security Guardium Key Lifecycle Manager file upload | 6.6CNA v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-47705 | IBM Security Guardium Key Lifecycle Manager improper input validation | 4.3CNA v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-47704 | IBM Security Guardium Key Lifecycle Manager information disclosure | 4.0CNA v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-47703 | IBM Security Guardium Key Lifecycle Manager information disclosure | 5.3CNA v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-47702 | IBM Security Guardium Key Lifecycle Manager directory traversal | 4.3CNA v3.1 | 1.0% | 2023-12-20 | Fix |
| CVE-2023-47507 | Master Slider Pro WordPress plugin PHP object injection | 9.8v3.1 | 0.4% | 2023-12-20 | |
| CVE-2023-47236 | iPages Flipbook WordPress plugin SQL injection | 4.9NVD v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-47161 | IBM UrbanCode Deploy denial of service | 5.3CNA v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-47118 | ClickHouse heap buffer overflow in T64 codec decompression | 7.0CNA v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-46311 | wpDiscuz WordPress plugin insecure direct object references (IDOR) | 6.5v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-46149 | Themify Ultra WordPress theme arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-46147 | Themify Ultra WordPress theme PHP object injection | 8.8v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-45887 | Nintendo Ds Wireless Communication arbitrary code execution | 9.8v3.1 | 1.6% | 2023-12-20 | |
| CVE-2023-45603 | User Submitted Posts WordPress plugin arbitrary file upload | 9.8v3.1 | 0.9% | 2023-12-20 | Fix |
| CVE-2023-42013 | IBM UrbanCode Deploy information disclosure | 5.3CNA v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-42012 | IBM UrbanCode Deploy denial of service | 6.2CNA v3.1 | 0.2% | 2023-12-20 | Fix |
| CVE-2023-41796 | Sunshine Photo Cart WordPress plugin insecure direct object references (IDOR) | 6.5v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-40555 | Flatsome WordPress theme PHP object injection | 9.8v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-40204 | Folders WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-40010 | HUSKY Products Filter for WooCommerce (formerly WOOF) WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-38519 | MainWP WordPress plugin SQL injection | 4.9NVD v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-38513 | Photo Engine WordPress plugin insecure direct object references (IDOR) | 5.4v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-37871 | WooCommerce GoCardless Gateway WordPress plugin insecure direct object references (IDOR) | 7.5v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-37544 | Apache Pulsar WebSocket Proxy: Improper authentication for WebSocket Proxy endpoint allows DoS | 7.5CNA v3.1 | 1.4% | 2023-12-20 | Fix |
| CVE-2023-36520 | Editorial Calendar WordPress plugin insecure direct object references (IDOR) | 8.1v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-35916 | WooPayments WordPress plugin Automattic insecure direct object reference | 7.5v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-35915 | WooPayments WordPress plugin SQL command improper neutralization | 9.8v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-35914 | WooCommerce Subscriptions WordPress plugin insecure direct object references (IDOR) | 7.5v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-35895 | IBM Informix JDBC code execution | 6.3CNA v3.1 | 0.9% | 2023-12-20 | Fix |
| CVE-2023-35876 | WooCommerce Square WordPress plugin insecure direct object references (IDOR) | 8.1v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-34385 | Export Import Menus WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-34007 | Download Monitor WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.9% | 2023-12-20 | Fix |
| CVE-2023-33330 | WooCommerce Follow-Up Emails WordPress plugin SQL injection | 8.1v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-33318 | WooCommerce Follow-Up Emails WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-33209 | SEO Change Monitor WordPress plugin SQL injection | 8.1v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-32743 | AutomateWoo WordPress plugin SQL injection | 4.9NVD v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-32590 | Subscribe to Category WordPress plugin SQL injection | 7.5NVD v3.1 | 1.8% | 2023-12-20 | NucleiExploit code |
| CVE-2023-32128 | Cryptocurrency Donation Box Bitcoin and Crypto Donations WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-31231 | Unlimited Elements For Elementor WordPress plugin arbitrary file upload | 6.5NVD v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-31215 | Dropshipping and Affiliation with Amazon WordPress plugin arbitrary file upload | 8.8NVD v3.1 | 0.6% | 2023-12-20 | |
| CVE-2023-31092 | Easy Bet WordPress plugin SQL injection | 8.1v3.1 | 0.6% | 2023-12-20 | |
| CVE-2023-30872 | BSK Forms Blacklist WordPress plugin SQL injection | 6.5NVD v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-30750 | CM Pop-Up banners WordPress plugin SQL injection | 8.1v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-30495 | Ultimate Addons for Contact Form 7 WordPress plugin SQL injection | 8.1v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-29432 | Houzez WordPress theme SQL injection | 9.8v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-29384 | WordPress Job Board and Recruitment Plugin JobWP arbitrary file upload | 9.8v3.1 | 1.4% | 2023-12-20 | Exploit codeFix |
| CVE-2023-29102 | Olive One Click Demo Import WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-29096 | Contact Form to DB by BestWebSoft WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-28788 | Advanced Page Visit Counter WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-28782 | Gravity Forms WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-28491 | Slideshow Gallery WordPress plugin SQL injection | 7.2v3.1 | 0.8% | 2023-12-20 | Fix |
| CVE-2023-28170 | Theme Demo Import WordPress plugin arbitrary file upload | 7.2NVD v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-27172 | Xpand-it Write-back Manager missing brute-force protection | 9.1v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-26525 | Dokan WordPress plugin SQL injection | 8.1v3.1 | 0.6% | 2023-12-20 | Fix |
| CVE-2023-25970 | Zendrop Global Dropshipping WordPress plugin arbitrary file upload | 9.8v3.1 | 0.9% | 2023-12-20 | Fix |
| CVE-2023-23970 | Corsa WordPress theme arbitrary file upload | 8.8NVD v3.1 | 0.8% | 2023-12-20 | |
| CVE-2023-7018 | Deserialization of untrusted data in huggingface/Transformers | 7.8NVD v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-6977 | mlflow/mlflow path traversal: \..\filename | 7.5NVD v3.1 | 3.9% | 2023-12-20 | NucleiFix |
| CVE-2023-6976 | mlflow/mlflow unrestricted upload of file with dangerous type | 8.8v3.1 | 1.0% | 2023-12-20 | Fix |
| CVE-2023-6975 | mlflow/mlflow path traversal: \..\filename | 9.8v3.1 | 2.0% | 2023-12-20 | Fix |
| CVE-2023-6974 | mlflow/mlflow server-side request forgery (SSRF) | 9.8v3.1 | 1.5% | 2023-12-20 | Fix |
| CVE-2023-6912 | Brute force vulnerability in M-Files user authentication | 7.5CNA v3.1 | 1.0% | 2023-12-20 | Fix |
| CVE-2023-6910 | Uncontrolled resource consumption in M-Files Server | 6.5CNA v3.1 | 0.9% | 2023-12-20 | Fix |
| CVE-2023-6784 | Potential Use of the Sitefinity System for Distribution of Phishing Emails | 4.7CNA v3.1 | 0.4% | 2023-12-20 | Fix |
| CVE-2023-6769 | Stored XSS vulnerability in Amazing Little poll | 4.6v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-6768 | Authentication bypass vulnerability in Amazing Little poll | 9.8v3.1 | 1.0% | 2023-12-20 | |
| CVE-2023-6689 | Cross-site request forgery in EFACEC BCU 500 | 8.8v3.1 | 0.3% | 2023-12-20 | Fix |
| CVE-2023-6562 | Kakadu SDK path traversal | 7.5NVD v3.1 | 0.7% | 2023-12-20 | Fix |
| CVE-2023-5011 | Student Information System multiple Authenticated SQL Injections (SQLi) | 8.8v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-5010 | Student Information System multiple Authenticated SQL Injections (SQLi) | 8.8CNA v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-5007 | Student Information System multiple Authenticated SQL Injections (SQLi) | 8.8CNA v3.1 | 0.7% | 2023-12-20 | |
| CVE-2023-3742 | Google Chrome ADB insufficient policy enforcement | 6.8v3.1 | 0.2% | 2023-12-20 | Fix |
| CVE-2023-0011 | Command execution through Serial interface of u-blox TOBY-L2 | 6.8NVD v3.1 | 0.5% | 2023-12-20 | Fix |
| CVE-2023-50835 | Advanced Category Template WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-19 | |
| CVE-2023-50762 | Mozilla Thunderbird PGP/MIME message parsing vulnerability | 4.3v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-50761 | Mozilla Thunderbird S/MIME signature date verification vulnerability | 4.3v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-50466 | Weintek CMT2078X command injection | 8.8v3.1 | 1.9% | 2023-12-19 | |
| CVE-2023-50376 | Simple Membership WordPress plugin Unauth. reflected cross-site scripting (XSS) | 6.1NVD v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-50272 | HPE Integrated Lights-out 5 (iLO 5), HPE Integrated Lights-out 6 (iLO 6) authentication bypass | 7.5CNA v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-49819 | Structured Content WordPress plugin PHP object injection | 9.8v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-49812 | WP Photo Album Plus WordPress plugin insecure direct object references (IDOR) | 7.5v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-49764 | Advanced Database Cleaner WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-49750 | Couponis Demo WordPress theme SQL injection | 9.8v3.1 | 0.8% | 2023-12-19 | Fix |
| CVE-2023-49736 | Apache Superset: SQL injection on where_in JINJA macro | 6.5CNA v3.1 | 1.2% | 2023-12-19 | Fix |
| CVE-2023-49734 | Apache Superset: Privilege escalation | 7.7CNA v3.1 | 1.0% | 2023-12-19 | Fix |
| CVE-2023-49706 | Linotp race condition | 6.8v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-49489 | kodcloud KodExplorer Reflective cross-site scripting | 6.1v3.1 | 0.7% | 2023-12-19 | Nuclei |
| CVE-2023-49164 | Ocean Extra WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-19 | Fix |
| CVE-2023-49147 | PDF24 Creator MSI installer repair function vulnerability | 7.8v3.1 | 0.5% | 2023-12-19 | |
| CVE-2023-49006 | Phpsysinfo cross-site request forgery (CSRF) | 6.5v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-49004 | D-Link Dir-850l code injection | 9.8v3.1 | 1.9% | 2023-12-19 | |
| CVE-2023-48764 | WordPress Brute Force Protection Stop Brute Force Attacks plugin SQL injection | 7.2v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-48751 | Participants Database WordPress plugin broken access control | 8.8v3.1 | 0.3% | 2023-12-19 | Fix |
| CVE-2023-48741 | ChatBot WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-48738 | Porto Theme WordPress plugin SQL command improper neutralization | 9.8v3.1 | 0.8% | 2023-12-19 | Fix |
| CVE-2023-48327 | WC Vendors Marketplace WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-47754 | Delete Duplicate Posts WordPress plugin broken access control | 9.8v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-47267 | Thegreenbow VPN Client improper privilege management | 9.8v3.1 | 0.8% | 2023-12-19 | Fix |
| CVE-2023-47146 | IBM QRadar SIEM information disclosure | 4.9CNA v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-46804 | Ivanti Avalanche out-of-bounds write | 7.5v3.1 | 4.1% | 2023-12-19 | Fix |
| CVE-2023-46803 | Ivanti Avalanche out-of-bounds write | 7.5v3.1 | 4.1% | 2023-12-19 | Fix |
| CVE-2023-46624 | Parcel Pro WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-19 | Fix |
| CVE-2023-46266 | Ivanti Avalanche denial of service | 9.1v3.1 | 3.5% | 2023-12-19 | Fix |
| CVE-2023-46265 | Ivanti Avalanche XML external entity injection | 9.8v3.1 | 4.0% | 2023-12-19 | Fix |
| CVE-2023-46264 | Ivanti Avalanche unrestricted file upload | 9.8v3.1 | 90.2% | 2023-12-19 | Fix |
| CVE-2023-46263 | Ivanti Avalanche unrestricted file upload | 9.8v3.1 | 81.9% | 2023-12-19 | Fix |
| CVE-2023-46262 | Ivanti Avalanche server-side request forgery | 7.5v3.1 | 82.8% | 2023-12-19 | Fix |
| CVE-2023-46261 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 11.3% | 2023-12-19 | Fix |
| CVE-2023-46260 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 9.8% | 2023-12-19 | Fix |
| CVE-2023-46259 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 11.3% | 2023-12-19 | Fix |
| CVE-2023-46258 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 6.8% | 2023-12-19 | Fix |
| CVE-2023-46257 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 11.3% | 2023-12-19 | Fix |
| CVE-2023-46225 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 11.3% | 2023-12-19 | Fix |
| CVE-2023-46224 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 6.8% | 2023-12-19 | Fix |
| CVE-2023-46223 | Ivanti Avalanche stack-based buffer overflow | 9.8v3.1 | 6.8% | 2023-12-19 | Fix |
| CVE-2023-46222 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 6.8% | 2023-12-19 | Fix |
| CVE-2023-46221 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 6.8% | 2023-12-19 | Fix |
| CVE-2023-46220 | Ivanti Avalanche out-of-bounds write | 9.8v3.1 | 11.3% | 2023-12-19 | Fix |
| CVE-2023-46217 | Ivanti Wavelink out-of-bounds write | 9.8v3.1 | 36.4% | 2023-12-19 | Fix |
| CVE-2023-46216 | Ivanti Wavelink out-of-bounds write | 9.8v3.1 | 36.4% | 2023-12-19 | Fix |
| CVE-2023-46212 | WP EXtra WordPress plugin broken access control | 8.8v3.1 | 0.2% | 2023-12-19 | Fix |
| CVE-2023-46154 | e2pdf WordPress plugin PHP object injection | 7.2v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-46104 | Apache Superset: Allows for uncontrolled resource consumption via a ZIP bomb | 6.5CNA v3.1 | 1.7% | 2023-12-19 | Fix |
| CVE-2023-45172 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2023-12-19 | Fix |
| CVE-2023-45105 | affiliate-toolkit WordPress Affiliate plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-19 | Fix |
| CVE-2023-44991 | Media File Renamer WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-44983 | Aruba HiSpeed Cache WordPress plugin sensitive data exposure | 7.5v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-44982 | Perfect Images WordPress plugin Jordy Meow information disclosure | 7.5v3.1 | 1.4% | 2023-12-19 | NucleiFix |
| CVE-2023-43870 | Paxton Net2 hard-coded credentials | 9.8NVD v3.1 | 0.4% | 2023-12-19 | Fix |
| CVE-2023-43826 | Apache Guacamole: Integer overflow in handling of VNC image buffers | 7.5CNA v3.1 | 0.9% | 2023-12-19 | Fix |
| CVE-2023-42940 | Apple macOS information disclosure | 5.7v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-42015 | IBM UrbanCode Deploy HTML injection | 4.3CNA v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-41727 | Ivanti Wavelink out-of-bounds write | 9.8v3.1 | 36.4% | 2023-12-19 | Fix |
| CVE-2023-41648 | Login and Logout Redirect WordPress plugin open redirection | 6.1v3.1 | 0.4% | 2023-12-19 | |
| CVE-2023-40602 | Doofinder for WooCommerce WordPress plugin open redirection | 6.1v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-38481 | Integration for WooCommerce and Zoho CRM WordPress plugin open redirection | 6.1v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-38478 | Integration for WooCommerce and QuickBooks WordPress plugin open redirection | 6.1v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-38126 | Softing edgeAggregator Restore Configuration directory traversal remote code execution | 7.2v3.1 | 71.0% | 2023-12-19 | Fix |
| CVE-2023-37982 | Integration for Contact Form 7 and Salesforce WordPress plugin open redirection | 6.1v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-37390 | Themesflat Addons For Elementor WordPress plugin PHP object injection | 9.8v3.1 | 0.8% | 2023-12-19 | Fix |
| CVE-2023-35883 | Core Web Vitals and PageSpeed Booster WordPress plugin open redirection | 6.1v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-34382 | Dokan WordPress plugin PHP object injection | 8.8v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-34027 | Recently Viewed Products WordPress plugin PHP object injection | 9.8v3.1 | 0.8% | 2023-12-19 | |
| CVE-2023-25715 | GamiPress WordPress plugin broken access control | 6.5v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-6945 | SourceCodester Online Student Management System edit-student-detail.php cross-site scripting | 4.8v3.1 | 0.6% | 2023-12-19 | |
| CVE-2023-6940 | mlflow/mlflow command injection | 8.8NVD v3.1 | 1.2% | 2023-12-19 | Fix |
| CVE-2023-6932 | Linux kernel A use-after-free | 7.0NVD v3.1 | 0.4% | 2023-12-19 | Fix |
| CVE-2023-6931 | Out-of-bounds write in Linux kernel's Performance Events system component | 7.0NVD v3.1 | 0.7% | 2023-12-19 | Exploit codeFix |
| CVE-2023-6930 | Improper access control in EuroTel ETL3100 | 9.8v3.1 | 0.8% | 2023-12-19 | |
| CVE-2023-6929 | Authorization bypass through user-controlled key in EuroTel ETL3100 | 9.8v3.1 | 0.8% | 2023-12-19 | |
| CVE-2023-6928 | EuroTel ETL3100 improper restriction of excessive authentication attempts | 9.8v3.1 | 0.8% | 2023-12-19 | |
| CVE-2023-6918 | Libssh: Missing checks for return values for digests | 5.3NVD v3.1 | 1.4% | 2023-12-19 | Fix |
| CVE-2023-6913 | Session hijacking on Imou Life app | 8.1v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-6873 | Mozilla Firefox memory safety bugs | 8.8v3.1 | 0.8% | 2023-12-19 | Fix |
| CVE-2023-6872 | Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of users running in a private tab. This vulnerability affects Firefox < 121. | 6.5v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-6871 | Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler. This vulnerability affects Firefox < 121. | 4.3v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-6870 | Mozilla Firefox Toast notification handling vulnerability | 4.3v3.1 | 0.4% | 2023-12-19 | Fix |
| CVE-2023-6869 | Mozilla Firefox dialog element sandboxing vulnerability | 6.5v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-6868 | Mozilla Firefox push notification subscriptions vulnerability | 4.3v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-6867 | Mozilla Firefox ESR clickjacking | 6.1v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-6866 | Mozilla Firefox improper exception handling | 8.8v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-6865 | Mozilla Firefox ESR uninitialized memory use | 6.5v3.1 | 0.9% | 2023-12-19 | Fix |
| CVE-2023-6864 | Mozilla Firefox ESR memory safety bugs | 8.8v3.1 | 1.2% | 2023-12-19 | Fix |
| CVE-2023-6863 | Mozilla Firefox ESR undefined behavior | 8.8v3.1 | 1.0% | 2023-12-19 | Fix |
| CVE-2023-6862 | Mozilla Firefox ESR `nsDNSService::Init` use-after-free | 8.8v3.1 | 1.0% | 2023-12-19 | Fix |
| CVE-2023-6861 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 1.4% | 2023-12-19 | Fix |
| CVE-2023-6860 | Mozilla Firefox ESR sandbox escape | 6.5v3.1 | 1.0% | 2023-12-19 | Fix |
| CVE-2023-6859 | Mozilla Firefox ESR use-after-free | 8.8v3.1 | 1.1% | 2023-12-19 | Fix |
| CVE-2023-6858 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 1.5% | 2023-12-19 | Fix |
| CVE-2023-6857 | Mozilla Firefox ESR race condition | 5.3v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-6856 | Mozilla Firefox ESR out-of-bounds write | 8.8v3.1 | 20.5% | 2023-12-19 | Fix |
| CVE-2023-6730 | Deserialization of untrusted data in huggingface/Transformers | 8.8NVD v3.1 | 0.9% | 2023-12-19 | Fix |
| CVE-2023-6711 | Hitachi Energy RTU500 series CMU firmware buffer overflow | 5.9CNA v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-6488 | WP Shortcodes Plugin Shortcodes Ultimate WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2023-12-19 | Fix |
| CVE-2023-6315 | Panasonic Control FPWIN Pro out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2023-12-19 | |
| CVE-2023-6314 | Panasonic Control FPWIN Pro stack-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2023-12-19 | |
| CVE-2023-6280 | XML external entity Reference on 52North Wps | 7.5v3.1 | 0.6% | 2023-12-19 | Fix |
| CVE-2023-6135 | Mozilla Firefox observable discrepancy | 4.3v3.1 | 0.7% | 2023-12-19 | Fix |
| CVE-2023-5432 | Jquery news ticker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-19 | Fix |
| CVE-2023-5413 | Image horizontal reel scroll slideshow WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2023-12-19 | Fix |
| CVE-2023-1514 | Hitachi Energy RTU500 Scripting Interface improper certificate validation | 7.4CNA v3.1 | 0.3% | 2023-12-19 | Fix |
| CVE-2023-51385 | OpenBSD OpenSSH OS command injection | 6.5NVD v3.1 | 19.8% | 2023-12-18 | Exploit codeFix |
| CVE-2023-51384 | OpenBSD OpenSSH improper access control | 5.5NVD v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2023-50981 | Cryptopp Crypto++ infinite loop | 7.5v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-50980 | Cryptopp Crypto++ denial of service | 7.5v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-50979 | Cryptopp Crypto++ observable discrepancy | 5.9v3.1 | 0.6% | 2023-12-18 | Fix |
| CVE-2023-50976 | redpanda missing authorization | 9.8v3.1 | 1.0% | 2023-12-18 | |
| CVE-2023-50372 | Custom Post Type Page Template WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-49855 | Menu Bar Cart Icon For WooCommerce By Binary Carpenter WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-49854 | Caddy WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49853 | PayTR Taksit Tablosu WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-49844 | WPPerformanceTester WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-49843 | First Order Discount Woocommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49840 | Multi Currency For WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49821 | LiveChat WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49763 | CSprite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-49761 | Product Enquiry for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49760 | WPsoonOnlinePage WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-49759 | WooDiscuz WooCommerce Comments WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-49163 | teachPress WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49155 | Button Generator easily Button Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49153 | Cross-Site Request Forgery (CSRF) vulnerability in Saiful Islam Add to Cart Text Changer and Customize Button, Add Custom Icon.This issue affects Add to Cart Text Changer and Customize Button, Add Custom Icon: from n/a through 2.0. | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-49148 | Affiliate Booster WordPress plugin Kulwant Nagi cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-48795 | Jadaptive Maverick Synergy Java SSH API improper integrity check validation | 5.9NVD v3.1 | 93.5% | 2023-12-18 | Reported exploitedNucleiKCVFix |
| CVE-2023-48781 | MkRapel Regiones y Ciudades de Chile para WC WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-48778 | Product Size Chart For WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-48773 | WooCommerce Login Redirect WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-48772 | Arul Prasad J Prevent Landscape Rotation cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-48769 | Chat Bubble WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-48768 | CodeAstrology Quantity Plus Minus Button for WooCommerce cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-48766 | SVGator Add Animated SVG Easily WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-48762 | JetElements For Elementor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-18 | Fix |
| CVE-2023-48755 | teachPress WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-47806 | Saint Systems Disable User Login cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-47789 | WooCommerce Canada Post Shipping WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-47787 | WooCommerce Bookings WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-47741 | IBM i information disclosure | 5.3CNA v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-47558 | Who Hit The Page Hit Counter WordPress plugin SQL injection | 6.5NVD v3.1 | 0.7% | 2023-12-18 | |
| CVE-2023-47530 | Redirect 404 Error Page to Homepage or Custom Page with Logs WordPress plugin SQL injection | 7.2v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-47506 | Master Slider Pro WordPress plugin SQL injection | 8.8v3.1 | 0.7% | 2023-12-18 | |
| CVE-2023-47038 | Perl: Write past buffer end via illegal user-defined unicode property | 7.8NVD v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-46686 | Gallagher Command Centre Diagnostics Service reliance on untrusted input in a security decision | 5.5CNA v3.1 | 0.5% | 2023-12-18 | Fix |
| CVE-2023-46617 | AdFoxly Ad Manager, AdSense Ads and Ads.txt WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | |
| CVE-2023-46177 | IBM MQ Appliance information disclosure | 6.5CNA v3.1 | 1.3% | 2023-12-18 | Fix |
| CVE-2023-41967 | Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of the Controller's default diagnostic password and physical access to the Controller to view its configuration through the diagnostic web pages. This issue affe | 2.4CNA v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-41314 | Apache Doris: Missing API authentication allowed DoS | 8.2v3.1 | 0.9% | 2023-12-18 | Fix |
| CVE-2023-40691 | IBM Cloud Pak for Business Automation information disclosure | 4.9CNA v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-39509 | Bosch Camera Firmware command injection | 7.2CNA v3.1 | 1.5% | 2023-12-18 | Fix |
| CVE-2023-35867 | Bosch BVMS man-in-the-middle | 5.9CNA v3.1 | 0.6% | 2023-12-18 | Fix |
| CVE-2023-34168 | WP Report Post WordPress plugin SQL injection | 8.8v3.1 | 0.9% | 2023-12-18 | |
| CVE-2023-33331 | WooCommerce Product Vendors WordPress plugin SQL injection | 7.2v3.1 | 0.9% | 2023-12-18 | Fix |
| CVE-2023-33214 | Taggbox WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-32728 | Zabbix code injection in zabbix_agent2 smart.disk.get caused by smartctl plugin | 4.6CNA v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-32727 | Zabbix code execution vulnerability in icmpping | 6.8CNA v3.1 | 0.9% | 2023-12-18 | Fix |
| CVE-2023-32726 | Zabbix possible buffer overread from reading DNS responses | 3.9CNA v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-32725 | Zabbix Frontend URL widget in scheduled reports vulnerability | 9.6CNA v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-32230 | Bosch Video Recording Manager denial of service | 7.5CNA v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-28053 | Dell NetWorker Virtual Edition weak cryptographic algorithm | 5.3CNA v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2023-24590 | Gallagher Controller 6000 format string | 7.5CNA v3.1 | 0.6% | 2023-12-18 | Fix |
| CVE-2023-23584 | Gallagher Command Centre Server response discrepancy | 4.3CNA v3.1 | 0.5% | 2023-12-18 | Fix |
| CVE-2023-23576 | Gallagher Command Centre Server incorrect behavior order | 4.3CNA v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-23570 | Gallagher Command Centre client-side enforcement of server-side security | 5.4CNA v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-22439 | Gallagher Controller 6000/ Controller 7000 improper input validation | 3.1CNA v3.1 | 0.5% | 2023-12-18 | Fix |
| CVE-2023-6927 | Keycloak: Open redirect via form_post.jwt jarm response mode | 4.6CNA v3.1 | 1.1% | 2023-12-18 | Fix |
| CVE-2023-6911 | WSO2 Registry stored cross-site scripting (XSS) | 4.8CNA v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2023-6909 | Path traversal: \..\filename in MLflow/MLflow | 7.5v3.1 | 89.7% | 2023-12-18 | Reported exploitedNucleiFix |
| CVE-2023-6908 | DFIRKuiper TAR Archive case_management.py unzip_file path traversal | 5.9v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-6907 | codelyfe Stupid Simple CMS Deletion interface delete.php improper authentication | 9.1v3.1 | 1.2% | 2023-12-18 | |
| CVE-2023-6906 | Totolink A7100RU HTTP POST request main buffer overflow | 9.8v3.1 | 1.9% | 2023-12-18 | |
| CVE-2023-6905 | Jahastech NxFilter Bind request LDAP injection | 9.8v3.1 | 0.7% | 2023-12-18 | |
| CVE-2023-6817 | Linux kernel A use-after-free | 7.8NVD v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-6778 | Cross-site scripting (XSS) Stored in allegroai/clearml-server | 5.4v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2023-6691 | Code injection vulnerability in Cambium ePMP Force 300-25 | 7.8v3.1 | 0.4% | 2023-12-18 | |
| CVE-2023-6483 | Improper authentication vulnerability in ADiTaaS | 9.8v3.1 | 1.2% | 2023-12-18 | Fix |
| CVE-2023-6355 | Gallagher Controller 7000 fuse value selection vulnerability | 6.8CNA v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2023-6295 | SiteOrigin Widgets Bundle local file inclusion | 7.2NVD v3.1 | 1.0% | 2023-12-18 | Fix |
| CVE-2023-6289 | Swift Performance Lite WordPress plugin unauthenticated Configuration export | 4.3NVD v3.1 | 0.9% | 2023-12-18 | Exploit codeFix |
| CVE-2023-6272 | Theme My Login 2FA WordPress plugin Lack of Rate Limiting | 9.8NVD v3.1 | 0.9% | 2023-12-18 | Fix |
| CVE-2023-6228 | LibTIFF: Heap-based buffer overflow in cpstriptotile in tools/tiffcp.c | 5.5NVD v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2023-6222 | Quttera Web Malware Scanner WordPress plugin Admin+ path traversal | 7.2NVD v3.1 | 1.1% | 2023-12-18 | Fix |
| CVE-2023-6203 | The Events Calendar WordPress plugin unauthenticated arbitrary password Protected post read | 7.5NVD v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-6077 | Slider - Ultimate Responsive Image Slider WordPress plugin Subscriber+ arbitrary post access | 6.5NVD v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-6065 | Quttera Web Malware Scanner WordPress plugin directory listing to sensitive data exposure | 5.3NVD v3.1 | 18.6% | 2023-12-18 | NucleiFix |
| CVE-2023-5949 | SmartCrawl WordPress SEO checker plugin unauthenticated password Protected post disclosure | 7.5NVD v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-5886 | Soflyy Export any WordPress data to XML/CSV cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2023-12-18 | Fix |
| CVE-2023-5882 | Soflyy Export any WordPress data to XML/CSV cross-site request forgery | 8.8NVD v3.1 | 0.6% | 2023-12-18 | Fix |
| CVE-2023-5384 | Infinispan: Credentials returned from configuration as clear text | 7.2CNA v3.1 | 0.5% | 2023-12-18 | Fix |
| CVE-2023-5348 | Product Catalog Enquiry for WooCommerce WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.5% | 2023-12-18 | Fix |
| CVE-2023-5236 | Infinispan: Circular reference on marshalling leads to DoS | 4.4CNA v3.1 | 1.1% | 2023-12-18 | Fix |
| CVE-2023-5115 | Ansible: Malicious role archive can cause ansible-galaxy to overwrite arbitrary files | 6.3CNA v3.1 | 1.0% | 2023-12-18 | Fix |
| CVE-2023-5056 | Red Hat Service Interconnect 1 for RHEL 9 skupper-operator: Privelege escalation via config map | 4.1NVD v3.1 | 0.3% | 2023-12-18 | Fix |
| CVE-2023-5005 | Autocomplete Location field Contact Form 7 WordPress plugin Admin+ Store cross-site scripting | 4.8NVD v3.1 | 0.4% | 2023-12-18 | Fix |
| CVE-2023-4724 | Soflyy WP All Export wp_query parameter remote command execution | 7.2NVD v3.1 | 1.2% | 2023-12-18 | Fix |
| CVE-2023-4320 | Red Hat Satellite personal access token creation integer overflow | 7.6CNA v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-4311 | Vrm 360 3D Model Viewer WordPress plugin Contributor+ arbitrary file upload Leading to RCE | 8.8NVD v3.1 | 1.0% | 2023-12-18 | |
| CVE-2023-3629 | Infinispan: Non-admins should not be able to get cache config via rest API | 4.3CNA v3.1 | 0.7% | 2023-12-18 | Fix |
| CVE-2023-3628 | infinispan infispan: Rest bulk ops don't check permissions | 6.5CNA v3.1 | 0.8% | 2023-12-18 | Fix |
| CVE-2023-3430 | OpenImageIO: Heap-buffer-overflow in file src/gif.imageio/gifinput.cpp | 7.5NVD v3.1 | 1.2% | 2023-12-18 | Fix |
| CVE-2023-50965 | Starnight Micro HTTP Server out-of-bounds write | 9.8v3.1 | 1.5% | 2023-12-17 | Exploit code |
| CVE-2023-50271 | HP-UX System Management Homepage, Disclosure of Information | 7.2CNA v3.1 | 0.5% | 2023-12-17 | Fix |
| CVE-2023-49834 | realmag777 FOX cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-17 | Fix |
| CVE-2023-49824 | Product Catalog Feed by PixelYourSite WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2023-12-17 | Fix |
| CVE-2023-49816 | Innovative Solutions Fix My Feed RSS Repair cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-17 | |
| CVE-2023-49775 | CSV Importer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-17 | Fix |
| CVE-2023-49769 | Integrate Google Drive WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-17 | Fix |
| CVE-2023-49751 | Block for Font Awesome WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-17 | Fix |
| CVE-2023-24380 | Simple Wp Sitemap WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2023-12-17 | |
| CVE-2023-6904 | Jahastech NxFilter config,admin.jsp cross-site request forgery | 8.8v3.1 | 0.3% | 2023-12-17 | |
| CVE-2023-6903 | Netentsec NS-ASG Application Security Gateway SQL injection | 9.8v3.1 | 0.7% | 2023-12-17 | |
| CVE-2023-6902 | codelyfe Stupid Simple CMS upload.php unrestricted upload | 9.8v3.1 | 1.0% | 2023-12-17 | |
| CVE-2023-6901 | codelyfe Stupid Simple CMS HTTP POST request handle-command.php os command injection | 9.8v3.1 | 2.9% | 2023-12-17 | |
| CVE-2023-6900 | rmountjoy92 DashMachine delete_file path traversal | 9.1v3.1 | 1.1% | 2023-12-17 | |
| CVE-2023-6899 | rmountjoy92 DashMachine Config save_config code injection | 9.8v3.1 | 1.0% | 2023-12-17 | |
| CVE-2023-6898 | SourceCodester Best Courier Management System manage_user.php SQL injection | 9.8v3.1 | 0.6% | 2023-12-17 | |
| CVE-2023-6896 | SourceCodester Simple Image Stack Website cross-site scripting | 6.1v3.1 | 0.6% | 2023-12-17 | |
| CVE-2023-6895 | Hikvision Intercom Broadcasting System ping.php os command injection | 9.8v3.1 | 89.1% | 2023-12-17 | Reported exploitedNucleiEmerging ThreatsExploit code |
| CVE-2023-6894 | Hikvision Intercom Broadcasting System Log file system.html information disclosure | 6.5v3.1 | 1.0% | 2023-12-17 | |
| CVE-2023-6893 | Hikvision Intercom Broadcasting System exportrecord.php path traversal | 7.5v3.1 | 70.2% | 2023-12-17 | |
| CVE-2023-6891 | PeaZip library dragdropfilesdll.dll uncontrolled search path | 7.8v3.1 | 0.3% | 2023-12-17 | Fix |
| CVE-2023-6888 | PHZ76 RtspServer RtspMesaage.cpp ParseRequestLine stack-based overflow | 9.8v3.1 | 1.0% | 2023-12-17 | |
| CVE-2023-6887 | saysky ForestBlog Image upload img unrestricted upload | 9.8v3.1 | 0.9% | 2023-12-17 | |
| CVE-2023-6886 | xnx3 wangmarket role management page code injection | 9.8v3.1 | 0.9% | 2023-12-17 | |
| CVE-2023-3907 | Improper User Management in GitLab | 4.9CNA v3.1 | 0.7% | 2023-12-17 | Fix |
| CVE-2023-50784 | UnrealIRCd websockets buffer overflow | 7.5v3.1 | 1.9% | 2023-12-16 | Fix |
| CVE-2023-39340 | Ivanti Connect Secure denial of service | 7.5v3.1 | 2.4% | 2023-12-16 | Fix |