CVE-2023 list

CVE-2023 records published in December 2023

Page two of three: records 1,001 to 2,000 of the 2,568 published in December 2023, newest first. The first page carries the figures for December 2023.

CVE-2023 records published in December 2023, newest first: records 1,001 to 2,000 of 2,568
CVE Summary CVSS EPSS Published Signals
CVE-2023-6890Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4v3.10.5%2023-12-16Fix
CVE-2023-6889Cross-site scripting (XSS) Stored in thorsten/phpMyFAQ5.4v3.10.5%2023-12-16Fix
CVE-2023-6885Tongda OA 2017 delete.php SQL injection9.8v3.10.7%2023-12-16
CVE-2023-6853kalcaddle KodExplorer app.php index server-side request forgery9.8v3.10.7%2023-12-16Fix
CVE-2023-6852kalcaddle KodExplorer app.php server-side request forgery9.8v3.10.8%2023-12-16Fix
CVE-2023-6851kalcaddle KodExplorer ZIP Archive app.php unzipList code injection9.8v3.10.9%2023-12-16Fix
CVE-2023-6850kalcaddle KodExplorer API endpoint unrestricted upload9.8v3.10.8%2023-12-16Fix
CVE-2023-6849kalcaddle kodbox app.php cover server-side request forgery9.8v3.10.9%2023-12-16Fix
CVE-2023-6848kalcaddle kodbox index.class.php check command injection9.8v3.12.3%2023-12-16Fix
CVE-2023-6559MW WP Form WordPress plugin arbitrary file deletion9.8v3.11.3%2023-12-16Fix
CVE-2023-50918MISP audit log access control vulnerability9.8v3.10.8%2023-12-15
CVE-2023-50917Mjdm MajorDoMo command injection9.8v3.138.3%2023-12-15NucleiMetasploitExploit code
CVE-2023-50871JetBrains YouTrack improper authorization4.3CNA v3.10.4%2023-12-15Fix
CVE-2023-50870JetBrains TeamCity cross-site request forgery4.3CNA v3.10.3%2023-12-15Fix
CVE-2023-50728Unauthenticated denial of service in the Octokit/webhooks library5.4CNA v3.10.7%2023-12-15Fix
CVE-2023-50723XWiki Platform administration interface configuration section display eval injection10.0CNA v3.11.2%2023-12-15Fix
CVE-2023-50722XWiki Platform XSS/CSRF remote code execution in XWiki.ConfigurableClass9.7CNA v3.10.7%2023-12-15Fix
CVE-2023-50721XWiki Platform RCE from account through SearchAdmin10.0CNA v3.178.8%2023-12-15Fix
CVE-2023-50720XWiki Platform Solr search discloses email addresses of users5.3CNA v3.159.1%2023-12-15NucleiFix
CVE-2023-50719XWiki Platform Solr search discloses password hashes of all users7.5CNA v3.183.5%2023-12-15NucleiFix
CVE-2023-50715home-assistant core user accounts disclosed to unauthenticated actors on the LAN4.3CNA v3.10.9%2023-12-15Fix
CVE-2023-50469Szlbt LBT-T300-T310 buffer overflow9.8v3.18.9%2023-12-15
CVE-2023-50266Bazarr proxy endpoint server-side request forgery5.3NVD v3.10.6%2023-12-15Fix
CVE-2023-50265Bazarr arbitrary file read in /API/swaggerui/static endpoint7.5NVD v3.10.9%2023-12-15Fix
CVE-2023-50264Bazarr arbitrary file read in /system/backup/download/ endpoint7.5NVD v3.10.9%2023-12-15Fix
CVE-2023-50089NETGEAR WNR2000 command injection9.8v3.14.0%2023-12-15Fix
CVE-2023-49898Apache StreamPark (incubating): Authenticated system users could trigger remote command execution7.2v3.12.3%2023-12-15Fix
CVE-2023-49829Tutor LMS WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-15Fix
CVE-2023-49823Bold Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.5%2023-12-15Fix
CVE-2023-49767Biteship WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-15Fix
CVE-2023-49749SureTriggers WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-15Fix
CVE-2023-49747Guest Author WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15Fix
CVE-2023-49744Gift Up Gift Cards for WordPress and WooCommerce plugin cross-site request forgery (CSRF)8.8v3.10.2%2023-12-15Fix
CVE-2023-49197DoFollow Case by Case WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2023-12-15Fix
CVE-2023-49191GDPR Cookie Consent by Supsystic WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-15
CVE-2023-49190Site Offline WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-15Fix
CVE-2023-49189Social Share Buttons and Analytics Plugin GetSocial.io WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-15Fix
CVE-2023-49188Track Geolocation Of Users Using Contact Form 7 WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-15Fix
CVE-2023-49187Adifier System WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-15Fix
CVE-2023-49185Doofinder for WooCommerce WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-15Fix
CVE-2023-49184Parallax Slider Block WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15Fix
CVE-2023-49183NextScripts WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-15Fix
CVE-2023-49182List all posts by Authors, nested Categories and Titles WordPress plugin cross-site scripting6.1NVD v3.10.4%2023-12-15Fix
CVE-2023-49181WP Event Manager WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15Fix
CVE-2023-49180Automatic Youtube Video Posts WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-15
CVE-2023-49179Event post WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15Fix
CVE-2023-49178HDW Player Plugin (Video Player and Video Gallery) WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-15
CVE-2023-49177which template file WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-15Fix
CVE-2023-49176WP Pocket URLs WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-15Fix
CVE-2023-49175KP Fastest Tawk.to Chat WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15
CVE-2023-49174Responsive Lightbox WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15Fix
CVE-2023-49170Forms by CaptainForm WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-15
CVE-2023-49169Ads by datafeedr.com WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15
CVE-2023-49165Client Dash WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15
CVE-2023-49160Formzu WP WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15Fix
CVE-2023-49159CommentLuv WordPress plugin server side request forgery (SSRF)7.5v3.10.4%2023-12-15
CVE-2023-48765Email Address Encoder WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-15Fix
CVE-2023-48624Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48623Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48622Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48621Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48620Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48619Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48618Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48617Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48616Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48615Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48614Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48613Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48612Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48611Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48610Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48609Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48608Adobe Experience Manager improper input validation3.5CNA v3.10.8%2023-12-15Fix
CVE-2023-48607Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48606Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48605Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48604Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48603Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48602Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48601Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48600Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48599Adobe Experience Manager cross-site scripting (DOM-based XSS)4.3CNA v3.10.6%2023-12-15Fix
CVE-2023-48598Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48597Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48596Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48595Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48594Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48593Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48592Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48591Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48590Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48589Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48588Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48587Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48586Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48585Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48584Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48583Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48582Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48581Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48580Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48579Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48578Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48577Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48576Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48575Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48574Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48573Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48572Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48571Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48570Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48569Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48568Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48567Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48566Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48565Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48564Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48563Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48562Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48561Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48560Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48559Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48558Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48557Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48556Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48555Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48554Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48553Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48552Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48551Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48550Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48549Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48548Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48547Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48546Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48545Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48544Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48543Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48542Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48541Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48540Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48539Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48538Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48537Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48536Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48535Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48534Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48533Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48532Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48531Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48530Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48529Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48528Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48527Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48526Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48525Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48524Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48523Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48522Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48521Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48520Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48519Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48518Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48517Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48516Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48515Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48514Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48513Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48512Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48511Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48510Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48509Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48508Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48507Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48506Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48505Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48504Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48503Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48502Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48501Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48500Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48499Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48498Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48497Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48496Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48495Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48494Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48493Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48492Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48491Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48490Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48489Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48488Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48487Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48486Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48485Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48484Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48483Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48482Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48481Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48480Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48479Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48478Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48477Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48476Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48475Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48474Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48473Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48472Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48471Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48470Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48469Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48468Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48467Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48466Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48465Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48464Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48463Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48462Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48461Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48460Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48459Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48458Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48457Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48456Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48455Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48454Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48453Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48452Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48451Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48450Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48449Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48448Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48447Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48446Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48445Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48444Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48443Adobe Experience Manager cross-site scripting (reflected XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48442Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48441Adobe Experience Manager improper access control5.3CNA v3.10.8%2023-12-15Fix
CVE-2023-48440Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-48395Kaifa Technology WebITR SQL injection6.5CNA v3.10.7%2023-12-15Fix
CVE-2023-48394Kaifa Technology WebITR arbitrary file upload8.8CNA v3.10.9%2023-12-15Fix
CVE-2023-48393Kaifa Technology WebITR Error Message Leakage4.3CNA v3.10.6%2023-12-15Fix
CVE-2023-48392Kaifa Technology WebITR hard-coded cryptographic key9.8CNA v3.10.6%2023-12-15Fix
CVE-2023-48390Multisuns EasyLog web+ command injection9.8CNA v3.11.1%2023-12-15
CVE-2023-48389Multisuns EasyLog web+ path traversal7.5CNA v3.11.3%2023-12-15
CVE-2023-48388Multisuns EasyLog web+ use of hard-coded password9.8CNA v3.10.9%2023-12-15
CVE-2023-48387TAIWAN-CA(TWCA) JCICSecurityTool improper input validation8.8v3.11.0%2023-12-15Fix
CVE-2023-48384ArmorX Global Technology Corporation ArmorX Spam SQL Injectoin9.8CNA v3.11.1%2023-12-15Fix
CVE-2023-48382Softnext Mail SQR Expert local file inclusion-26.5CNA v3.10.6%2023-12-15Fix
CVE-2023-48381Softnext Mail SQR Expert local file inclusion-16.5CNA v3.10.6%2023-12-15Fix
CVE-2023-48380Softnext Mail SQR Expert command injection8.0v3.10.7%2023-12-15Fix
CVE-2023-48379Softnext Mail SQR Expert Blind Server-Side Request Forgey (SSRF)5.3CNA v3.10.6%2023-12-15Fix
CVE-2023-48378Softnext Mail SQR Expert path traversal7.5CNA v3.11.3%2023-12-15Fix
CVE-2023-48376SmartStar Software CWS Web-Base arbitrary file upload9.8v3.11.0%2023-12-15Fix
CVE-2023-48375SmartStar Software CWS Web-Base broken access control8.8CNA v3.10.7%2023-12-15Fix
CVE-2023-48374SmartStar Software CWS Web-Base use of hard-coded credentials6.5v3.10.6%2023-12-15Fix
CVE-2023-48373ITPison OMICARD EDM 's SMS path traversal7.5CNA v3.11.3%2023-12-15Fix
CVE-2023-48372ITPison OMICARD EDM 's SMS SQL injection9.8CNA v3.11.1%2023-12-15Fix
CVE-2023-48371ITPison OMICARD EDM 's SMS arbitrary file upload9.8CNA v3.11.0%2023-12-15Fix
CVE-2023-48050Camsbiometrics Zkteco, Essl, Cams Biometrics Integration Module SQL injection9.8v3.10.8%2023-12-15
CVE-2023-48049Cybrosys Website Blog Search Cybrosys Techno Solutions SQL injection9.8v3.11.0%2023-12-15
CVE-2023-47065Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-47064Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2023-12-15Fix
CVE-2023-46279Apache Dubbo: Bypass deny serialize list check in Apache Dubbo9.8v3.11.7%2023-12-15Fix
CVE-2023-46116tutao tutanota remote code execution via insufficiently sanitized call to shell.openExternal9.3CNA v3.11.3%2023-12-15Fix
CVE-2023-42183Classic Lockss Daemon improper output encoding5.3v3.10.6%2023-12-15
CVE-2023-40954Gmarczynski Dynamic Progress Bar Grzegorz Marczynski SQL injection9.8v3.10.9%2023-12-15
CVE-2023-36878Microsoft Edge (Chromium-based) security feature bypass4.3CNA v3.10.9%2023-12-15Fix
CVE-2023-33222IDEMIA SIGMA Lite and Lite + stack buffer overflow when reading DESFire card6.8CNA v3.11.3%2023-12-15Fix
CVE-2023-33221IDEMIA SIGMA Lite and Lite + heap buffer overflow when reading DESFire card6.8CNA v3.11.0%2023-12-15Fix
CVE-2023-33220IDEMIA SIGMA Lite and Lite + stack buffer overflow when checking some attributes during retrofit9.1CNA v3.11.1%2023-12-15Fix
CVE-2023-33219IDEMIA SIGMA Lite and Lite + stack buffer overflow when checking retrofit package9.1CNA v3.11.1%2023-12-15Fix
CVE-2023-33218IDEMIA SIGMA Lite and Lite + stack buffer overflow in a binary run at upgrade startup9.1CNA v3.11.1%2023-12-15Fix
CVE-2023-33217IDEMIA SIGMA Lite and Lite + missing integrity check on upgrade package7.5CNA v3.10.7%2023-12-15Fix
CVE-2023-30867Apache StreamPark (incubating): Authenticated system users could trigger SQL injection4.9v3.10.9%2023-12-15Fix
CVE-2023-29234Bypass serialize checks in Apache Dubbo9.8v3.17.4%2023-12-15Fix
CVE-2023-28022HCL Connections is vulnerable to sensitive information disclosure3.5CNA v3.10.5%2023-12-15Fix
CVE-2023-27317Information disclosure vulnerability in ONTAP 94.3CNA v3.10.4%2023-12-15Fix
CVE-2023-6839WSO2 API Manager information disclosure through error messages5.3CNA v3.10.5%2023-12-15Fix
CVE-2023-6838WSO2 API Manager cross-site scripting6.1CNA v3.10.4%2023-12-15Fix
CVE-2023-6837Incorrect authorization in multiple WSO2 Products8.5CNA v3.10.5%2023-12-15Fix
CVE-2023-6836WSO2 products vulnerable to XML external entity attack4.6CNA v3.10.5%2023-12-15Fix
CVE-2023-6835WSO2 API Manager allows attackers to change the API rating4.3CNA v3.10.5%2023-12-15Fix
CVE-2023-6832Business Logic Errors in microweber/microweber4.3v3.10.5%2023-12-15Fix
CVE-2023-6831Path traversal: \..\filename in MLflow/MLflow8.1v3.13.3%2023-12-15NucleiFix
CVE-2023-6827Essential Real Estate WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8v3.11.3%2023-12-15Fix
CVE-2023-6826E2Pdf WordPress plugin authenticated (Administrator+) arbitrary file upload7.2v3.11.3%2023-12-15Fix
CVE-2023-6680Improper certificate validation in GitLab7.4CNA v3.10.4%2023-12-15Fix
CVE-2023-6553Backup Migration WordPress plugin unauthenticated remote code execution9.8v3.197.8%2023-12-15NucleiMetasploitExploit codeFix
CVE-2023-6051Improper control of generation of code (code injection) in GitLab5.7CNA v3.10.6%2023-12-15Fix
CVE-2023-5512Improper control of generation of code (code injection) in GitLab4.8CNA v3.10.5%2023-12-15Fix
CVE-2023-5310Z-Wave denial of service caused by Stream of Packets5.7CNA v3.10.3%2023-12-15Fix
CVE-2023-5061Missing authorization in GitLab4.3CNA v3.10.4%2023-12-15Fix
CVE-2023-4020Gecko SDK PSA Attestation service out-of-bounds write9.0CNA v3.10.6%2023-12-15Fix
CVE-2023-3904Improper validation of specified type of input in GitLab4.3CNA v3.10.8%2023-12-15Fix
CVE-2023-3511Incorrect authorization in GitLab2.0CNA v3.10.4%2023-12-15Fix
CVE-2023-50713specklesystems speckle-server Speckle Server API Token privilege escalation6.5CNA v3.10.4%2023-12-14Fix
CVE-2023-50710Hono's named path parameters can be overridden in TrieRouter4.2CNA v3.10.6%2023-12-14Fix
CVE-2023-50566EyouCMS A stored cross-site scripting5.4v3.10.4%2023-12-14
CVE-2023-50565Rpcms component /logs/dopost.html cross-site scripting5.4v3.10.4%2023-12-14
CVE-2023-50564pluck-cms Pluck component /inc/modules_install.php arbitrary file upload8.8v3.129.1%2023-12-14Exploit code
CVE-2023-50563SEMCMS SQL injection9.8v3.10.6%2023-12-14
CVE-2023-50472DaveGamble cJSON null pointer dereference7.5v3.11.0%2023-12-14Fix
CVE-2023-50471DaveGamble cJSON null pointer dereference7.5v3.11.5%2023-12-14Fix
CVE-2023-50371Advanced Page Visit Counter WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14
CVE-2023-50370Livemesh Addons for WPBakery Page Builder WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-50369Alma Pay in installments or later for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-50368Shortcodes and extra features for Phlox WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-50269squid-cache squid SQUID-2023:10 denial of service in HTTP request parsing8.6CNA v3.157.6%2023-12-14Fix
CVE-2023-50137Cross-site scripting in JFinalcms5.4v3.10.4%2023-12-14
CVE-2023-50102Cross-site scripting in JFinalcms5.4v3.10.4%2023-12-14
CVE-2023-50101Cross-site scripting in JFinalcms5.4v3.10.4%2023-12-14
CVE-2023-50100Cross-site scripting in JFinalcms5.4v3.10.4%2023-12-14
CVE-2023-50073Leadscloud EmpireCMS SQL injection9.8v3.10.6%2023-12-14
CVE-2023-50017iteachyou Dreamer CMS cross-site request forgery8.8v3.10.4%2023-12-14
CVE-2023-50011PopojiCMS remote command execution7.2v3.12.0%2023-12-14
CVE-2023-49938SchedMD Slurm sbcast subsystem improper access control8.2v3.10.8%2023-12-14Fix
CVE-2023-49937SchedMD Slurm double free9.8v3.11.4%2023-12-14Fix
CVE-2023-49936SchedMD Slurm null pointer dereference7.5v3.11.1%2023-12-14Fix
CVE-2023-49935SchedMD Slurm insufficient session expiration8.8v3.11.0%2023-12-14Fix
CVE-2023-49934SchedMD Slurm SQL injection9.8v3.10.8%2023-12-14Fix
CVE-2023-49933SchedMD Slurm improper message integrity enforcement7.5v3.10.4%2023-12-14Fix
CVE-2023-49860WP Project Manager WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49847Annual Archive WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14
CVE-2023-49846Author Avatars List/Block WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49842Rocket Maintenance Mode and Coming Soon Page WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-14Fix
CVE-2023-49841Optin Forms WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-14Fix
CVE-2023-49836Cookie Bar WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49833Spectra WordPress plugin cross-site scripting (XSS)5.4v3.10.6%2023-12-14Fix
CVE-2023-49828Automattic WooPayments stored cross-site scripting5.4v3.10.4%2023-12-14Fix
CVE-2023-49827Soledad WordPress theme cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-49820Structured Content WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49813WP Photo Album Plus WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-49786Asterisk susceptible to denial of service via DTLS Hello packets during call initiation7.5CNA v3.15.3%2023-12-14Fix
CVE-2023-49771Smart External Link Click Monitor [Link Log] WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14
CVE-2023-49770Smart External Link Click Monitor [Link Log] WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-14
CVE-2023-49766Ultimate Addons for Contact Form 7 WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-49745Spiffy Calendar WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49743Dashboard Widgets Suite WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-14Fix
CVE-2023-49740Seraphinite Accelerator WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-49739PowerPack Pro for Elementor WordPress plugin reflected cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-49708Extension Joomstar.com SQLi vulnerability in Starshop component for Joomla9.8NVD v3.10.8%2023-12-14Fix
CVE-2023-49707Extension Joomlart.com SQLi vulnerability in S5 Register module for Joomla9.8NVD v3.10.8%2023-12-14Fix
CVE-2023-49347Ubuntu Budgie Budgie Extras insecure temporary file7.8NVD v3.10.3%2023-12-14Fix
CVE-2023-49346Ubuntu Budgie Budgie Extras insecure temporary file7.8NVD v3.10.3%2023-12-14Fix
CVE-2023-49345Ubuntu Budgie Budgie Extras insecure temporary file7.8NVD v3.10.3%2023-12-14Fix
CVE-2023-49344Ubuntu Budgie Budgie Extras insecure temporary file7.8NVD v3.10.3%2023-12-14Fix
CVE-2023-49343Ubuntu Budgie Budgie Extras resource exposure7.8NVD v3.10.3%2023-12-14Fix
CVE-2023-49342Ubuntu Budgie Budgie Extras insecure temporary file7.8NVD v3.10.3%2023-12-14Fix
CVE-2023-49294Asterisk path traversal4.9CNA v3.145.3%2023-12-14Fix
CVE-2023-49195Nested Pages WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-14Fix
CVE-2023-4917310to8 Online Appointment Booking System WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49172BrainCert HTML5 Virtual Classroom WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-49171Innovs HR WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-49168BP Better Messages WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49157Multiple Post Passwords WordPress plugin cross-site scripting (XSS)4.8v3.10.4%2023-12-14Fix
CVE-2023-49152Credit Tracker WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14
CVE-2023-49151Google Calendar Events WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49150Crypto Converter Widget WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-49149Currency Converter Calculator WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14Fix
CVE-2023-48925Buy-addons Bavideotab SQL injection9.8v3.10.5%2023-12-14Fix
CVE-2023-48780WP Catalogue WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14
CVE-2023-48771File Gallery WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14
CVE-2023-48770Aparat WordPress plugin cross-site scripting (XSS)5.4v3.10.4%2023-12-14
CVE-2023-48767MyTube PlayList WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14
CVE-2023-48756JetBlocks For Elementor WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-48676Acronis Cyber Protect Cloud Agent missing authorization3.3CNA v3.00.2%2023-12-14Fix
CVE-2023-48671Dell vApp Manager information disclosure7.5CNA v3.10.8%2023-12-14Fix
CVE-2023-48668Dell PowerProtect DD OS command injection8.2CNA v3.10.5%2023-12-14Fix
CVE-2023-48667Dell PowerProtect DD OS command injection7.2CNA v3.11.8%2023-12-14Fix
CVE-2023-48665Dell vApp Manager OS command injection7.2CNA v3.11.7%2023-12-14Fix
CVE-2023-48664Dell vApp Manager OS command injection7.2CNA v3.11.7%2023-12-14Fix
CVE-2023-48663Dell vApp Manager OS command injection7.2CNA v3.11.7%2023-12-14Fix
CVE-2023-48662Dell vApp Manager OS command injection7.2CNA v3.11.7%2023-12-14Fix
CVE-2023-48661Dell vApp Manager files accessible to external parties4.9CNA v3.10.6%2023-12-14Fix
CVE-2023-48660Dell vApp Manger path traversal7.5CNA v3.10.9%2023-12-14Fix
CVE-2023-48631Denial of service of regular expression in package @Adobe/Css-tools5.3CNA v3.11.1%2023-12-14Fix
CVE-2023-48085Nagios XI code injection9.8v3.175.8%2023-12-14Fix
CVE-2023-48084Nagios XI SQL injection9.8v3.133.7%2023-12-14NucleiExploit codeFix
CVE-2023-47261Dokmee Enterprise Content Management remote code execution9.8v3.11.5%2023-12-14
CVE-2023-46750Open redirect in Apache Shiro6.1v3.11.5%2023-12-14Fix
CVE-2023-46348Sunnytoo Sturls SQL injection9.8v3.10.8%2023-12-14Fix
CVE-2023-46144Phoenix Contact: PLCnext Control prone to download of code without integrity check6.5v3.10.3%2023-12-14Fix
CVE-2023-46143Phoenix Contact: Classic line industrial controllers prone to inadequate integrity check of PLC7.5CNA v3.10.3%2023-12-14Fix
CVE-2023-46142Phoenix Contact: Insufficient Read and Write Protection to Logic and Runtime Data in PLCnext Control8.8CNA v3.10.7%2023-12-14Fix
CVE-2023-46141Phoenix Contact Automation Worx Software Suite incorrect permission assignment9.8CNA v3.10.9%2023-12-14
CVE-2023-45894Parallels Remote Application Server remote code execution10.0v3.11.2%2023-12-14
CVE-2023-45185IBM i Access Client Solutions code execution7.4CNA v3.11.0%2023-12-14Fix
CVE-2023-45184IBM i Access Client Solutions insecure storage of sensitive information6.2CNA v3.11.6%2023-12-14Exploit codeFix
CVE-2023-45182IBM i Access Client Solutions information disclosure7.4CNA v3.10.6%2023-12-14Exploit codeFix
CVE-2023-44709Sammycage Plutosvg integer overflow9.8v3.10.8%2023-12-14
CVE-2023-44286Dell PowerProtect DD cross-site scripting8.8CNA v3.10.8%2023-12-14Fix
CVE-2023-44285Dell PowerProtect DD insufficient access control granularity7.8CNA v3.10.2%2023-12-14Fix
CVE-2023-44284Dell PowerProtect DD SQL injection4.3CNA v3.10.6%2023-12-14Fix
CVE-2023-44279Dell PowerProtect DD OS command injection6.7CNA v3.10.6%2023-12-14Fix
CVE-2023-44278Dell PowerProtect DD path traversal6.7CNA v3.10.3%2023-12-14Fix
CVE-2023-44277Dell PowerProtect DD OS command injection7.8CNA v3.10.6%2023-12-14Fix
CVE-2023-43042IBM Storage Virtualize information disclosure7.5CNA v3.10.7%2023-12-14Fix
CVE-2023-42801moonlight-common-c version string parsing buffer overflow7.6CNA v3.10.8%2023-12-14
CVE-2023-42800moonlight-stream moonlight-common-c buffer overflow due to use of `strcpy` in `performRtspHandshake`8.8CNA v3.11.7%2023-12-14
CVE-2023-42799moonlight-stream moonlight-common-c buffer overflow8.8CNA v3.11.7%2023-12-14
CVE-2023-41720Ivanti Connect Secure privilege escalation7.8v3.10.7%2023-12-14Fix
CVE-2023-41719Ivanti Connect Secure remote code execution7.2v3.13.4%2023-12-14Fix
CVE-2023-41618emlog cross-site scripting6.1v3.10.5%2023-12-14
CVE-2023-41151Softing OPC An improper error handling7.5v3.10.7%2023-12-14Fix
CVE-2023-40921Common-services Soliberte functions/point_list.php in Common services SQL injection9.8v3.10.5%2023-12-14Fix
CVE-2023-40659Extension Joomboost.com reflected XSS in Easy Quick Contact module for Joomla6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-40658Extension Deconf.net reflected XSS in Clicky Analytics Dashboard module for Joomla6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-40657Extension Artio.net reflected XSS in Joomdoc component for Joomla6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-40656Extension Plasma-web.ru reflected XSS in Quickform component for Joomla6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-40655Extension Mooj.org reflected XSS in Proforms Basic component for Joomla6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-40630Extension Joomcode.com unauthenticated LFI/SSRF in JCDashboards component for Joomla9.8NVD v3.10.7%2023-12-14
CVE-2023-40629Extension King-products.net SQLi vulnerability in LMS Lite component for Joomla9.8NVD v3.10.8%2023-12-14Fix
CVE-2023-40628Extension Extplorer.net reflected XSS in Extplorer component for Joomla6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-40627Extension MLWebTechnologies reflected XSS in LivingWord component for Joomla6.1NVD v3.10.4%2023-12-14Fix
CVE-2023-37457Asterisk's PJSIP_HEADER dialplan function can overwrite memory/cause crash when using update7.5CNA v3.11.1%2023-12-14Fix
CVE-2023-31546DedeBIZ cross-site scripting9.6v3.149.4%2023-12-14Exploit code
CVE-2023-25651SQL injection vulnerability in some ZTE Mobile Internet Products4.3CNA v3.10.3%2023-12-14Fix
CVE-2023-25650Arbitrary file download vulnerability in ZTE ZXCLOUD iRAI6.5CNA v3.10.6%2023-12-14Fix
CVE-2023-25648Weak Folder Permission vulnerability in ZTE ZXCLOUD iRAI6.5CNA v3.10.2%2023-12-14Fix
CVE-2023-25644Denial of service vulnerability in some ZTE Mobile Internet Products6.5CNA v3.10.7%2023-12-14Fix
CVE-2023-25643Two vulnerabilities in some ZTE Mobile Internet Products8.4CNA v3.11.8%2023-12-14Fix
CVE-2023-25642Two vulnerabilities in some ZTE Mobile Internet Products5.9CNA v3.10.5%2023-12-14Fix
CVE-2023-21751Microsoft Azure DevOps Server spoofing6.5CNA v3.11.0%2023-12-14Fix
CVE-2023-6707Google Chrome CSS use-after-free8.8v3.10.7%2023-12-14Fix
CVE-2023-6706Google Chrome FedCM use-after-free8.8v3.10.6%2023-12-14Fix
CVE-2023-6705Google Chrome WebRTC use-after-free8.8v3.10.7%2023-12-14Fix
CVE-2023-6704Google Chrome libavif use-after-free8.8v3.10.7%2023-12-14Fix
CVE-2023-6703Google Chrome Blink use-after-free8.8v3.10.6%2023-12-14Fix
CVE-2023-6702Google Chrome V8 type confusion8.8v3.143.5%2023-12-14Exploit codeFix
CVE-2023-6595WhatsUp Gold unauthenticated access to an API endpoint7.5CNA v3.10.8%2023-12-14Fix
CVE-2023-6572Command injection in gradio-app/Gradio8.1NVD v3.11.7%2023-12-14Exploit codeFix
CVE-2023-6571Cross-site scripting (XSS) Reflected in Kubeflow/Kubeflow6.1v3.10.4%2023-12-14
CVE-2023-6570Server-side request forgery (SSRF) in Kubeflow/Kubeflow6.5NVD v3.10.6%2023-12-14
CVE-2023-6569External control of file name or path in h2oai/h2o-38.2NVD v3.10.7%2023-12-14Fix
CVE-2023-6563Keycloak: Offline session token DoS7.7CNA v3.11.2%2023-12-14Fix
CVE-2023-6545Beckhoff: Open redirect in TwinCAT/BSD package Authelia-bhf4.7v3.10.4%2023-12-14Fix
CVE-2023-6407Schneider Electric Easy UPS Online Monitoring Software path traversal5.3CNA v3.10.2%2023-12-14Fix
CVE-2023-6368WhatsUp Gold unauthenticated access to an API endpoint5.9CNA v3.10.6%2023-12-14Fix
CVE-2023-6367WhatsUp Gold stored cross-site scripting (XSS) via Roles7.6CNA v3.10.5%2023-12-14Fix
CVE-2023-6366WhatsUp Gold stored cross-site scripting (XSS) via Alert Center7.6CNA v3.10.5%2023-12-14Fix
CVE-2023-6365WhatsUp Gold stored cross-site scripting (XSS) via Device Groups7.6CNA v3.10.5%2023-12-14Fix
CVE-2023-6364WhatsUp Gold stored cross-site scripting (XSS) via Dashboard7.6CNA v3.10.5%2023-12-14Fix
CVE-2023-6134Keycloak: Reflected XSS via wildcard in oidc redirect_uri4.6CNA v3.11.3%2023-12-14Fix
CVE-2023-5769Hitachi Energy RTU500 cross-site scripting5.4CNA v3.10.4%2023-12-14Fix
CVE-2023-5630Schneider Electric Trio Q-Series Ethernet Data Radio download without integrity check6.5CNA v3.10.3%2023-12-14
CVE-2023-5629Schneider Electric Trio Q-Series Ethernet Data Radio open redirect8.2CNA v3.10.4%2023-12-14Fix
CVE-2023-5592Phoenix Contact: ProConOs prone to download of code without integrity check7.5CNA v3.10.3%2023-12-14
CVE-2023-4694HP OfficeJet Pro Printers denial of service7.5v3.10.8%2023-12-14Fix
CVE-2023-4489Z/IP Gateway Use of Uninitialized PRNG when Generating S0 Encryption Key6.4CNA v3.10.5%2023-12-14Fix
CVE-2023-1904Octopus Deploy Octopus Server sensitive information in log files4.2CNA v3.10.4%2023-12-14Fix
CVE-2023-0757Phoenix Contact ProConOS prone to incorrect permission assignment for critical resource9.8CNA v3.10.9%2023-12-14
CVE-2023-0248Kantech Gen1 ioSmart card reader7.5CNA v3.10.3%2023-12-14Fix
CVE-2023-50779Missing permission check in Jenkins PaaSLane Estimate Plugin4.3v3.10.5%2023-12-13Fix
CVE-2023-50778Cross-site request forgery in Jenkins PaaSLane Estimate Plugin8.8v3.10.4%2023-12-13Fix
CVE-2023-50777Tokens stored in plain text by PaaSLane Estimate Plugin4.3v3.10.3%2023-12-13Fix
CVE-2023-50776Tokens stored in plain text by PaaSLane Estimate Plugin4.3v3.10.3%2023-12-13Fix
CVE-2023-50775Cross-site request forgery vulnerability in Jenkins Deployment Dashboard Plugin4.3v3.10.3%2023-12-13Fix
CVE-2023-50774Cross-site request forgery vulnerability in Jenkins HTMLResource Plugin8.1v3.10.5%2023-12-13Fix
CVE-2023-50773Displayed in plain text by Dingding JSON Pusher Plugin4.3v3.10.3%2023-12-13Fix
CVE-2023-50772Tokens stored in plain text by Dingding JSON Pusher Plugin4.3v3.10.3%2023-12-13Fix
CVE-2023-50771Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin6.1v3.10.6%2023-12-13Fix
CVE-2023-50770Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin6.7v3.10.3%2023-12-13Fix
CVE-2023-50769Jenkins Nexus Platform Plugin missing permission check4.3v3.10.5%2023-12-13Fix
CVE-2023-50768Jenkins Nexus Platform Plugin cross-site request forgery8.8v3.10.4%2023-12-13Fix
CVE-2023-50767Jenkins Nexus Platform Plugin missing permission check5.4v3.10.4%2023-12-13Fix
CVE-2023-50766Jenkins Nexus Platform Plugin cross-site request forgery8.8v3.10.4%2023-12-13Fix
CVE-2023-50765Missing permission check in Jenkins Scriptler Plugin4.3v3.10.5%2023-12-13Fix
CVE-2023-50764Arbitrary file deletion vulnerability in Jenkins Scriptler Plugin8.1v3.10.8%2023-12-13Fix
CVE-2023-50709cube-js cube denial of service attack on the cube-api endpoint6.5CNA v3.10.7%2023-12-13Fix
CVE-2023-50444Primx Zonecentral missing brute-force protection7.5v3.10.6%2023-12-13Fix
CVE-2023-50443Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which disks are opene4.6v3.10.3%2023-12-13Fix
CVE-2023-50442Encrypted folders created by PRIMX ZONECENTRAL through 2023.5 can be modified by a local attacker (with appropriate privileges) so that specific file types are excluded from encryption temporarily. (This modification can, however, be detected, as described in the Administrator Guide.)5.5v3.10.1%2023-12-13Fix
CVE-2023-50441Encrypted folders created by PRIMX ZONECENTRAL for Windows before Q.2021.2 (ANSSI qualification submission) or ZONECENTRAL for Windows before 2023.5 can be modified by an unauthenticated attacker to include a UNC reference so that it could trigger outbound network traffic from computers on which fol5.5v3.10.2%2023-12-13Fix
CVE-2023-50440Primx Zonecentral improper access control5.5v3.10.2%2023-12-13Fix
CVE-2023-50439PrimX ZED!, ZoneCentral and ZedMail information disclosure5.3v3.10.5%2023-12-13Fix
CVE-2023-50268jq has stack-based buffer overflow in decNaNs6.2CNA v3.10.4%2023-12-13Fix
CVE-2023-50262Dompdf possible DoS caused by infinite recursion when parsing SVG images5.3CNA v3.11.5%2023-12-13Fix
CVE-2023-50248CKAN out of memory error when submitting the dataset form with a specially-crafted field4.5CNA v3.10.6%2023-12-13Fix
CVE-2023-50246jq has heap-buffer-overflow vulnerability in the function decToString in decNumber.c6.2CNA v3.10.5%2023-12-13Fix
CVE-2023-49878IBM System Storage Virtualization Engine information disclosure4.3CNA v3.10.7%2023-12-13Fix
CVE-2023-49877IBM System Storage Virtualization Engine information disclosure4.3CNA v3.10.8%2023-12-13Fix
CVE-2023-49646Zoom Video Communications Zoom Clients some improper authentication6.4CNA v3.10.4%2023-12-13Fix
CVE-2023-49363RockOA SQL injection9.8v3.10.7%2023-12-13
CVE-2023-49296Arduino Create Agent vulnerable to reflected cross-site scripting6.3CNA v3.10.3%2023-12-13Fix
CVE-2023-48791Fortinet FortiPortal command injection7.9CNA v3.11.3%2023-12-13Fix
CVE-2023-48782Fortinet FortiWLM OS command injection8.6CNA v3.12.7%2023-12-13Emerging ThreatsFix
CVE-2023-48702Jellyfin possible remote code execution via custom FFmpeg binary7.2CNA v3.11.2%2023-12-13Fix
CVE-2023-48639Adobe Substance 3D Designer build 6942 vulnerability I7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-48638Adobe Substance 3D Designer build 6942 vulnerability III5.5CNA v3.10.3%2023-12-13Fix
CVE-2023-48637Adobe Substance 3D Designer build 6942 vulnerability II5.5CNA v3.10.3%2023-12-13Fix
CVE-2023-48636Adobe Substance 3D Designer build 6942 vulnerability IV5.5CNA v3.10.3%2023-12-13Fix
CVE-2023-48635Adobe After Effects AEP File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-12-13Fix
CVE-2023-48634Adobe After Effects AEP File Parsing memory corruption remote code execution7.8CNA v3.10.4%2023-12-13Fix
CVE-2023-48633Adobe After Effects AEP File Parsing use-after-free remote code execution7.8CNA v3.10.6%2023-12-13Fix
CVE-2023-48632Adobe After Effects AEP File Parsing out-of-bounds write remote code execution7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-48630Adobe Substance 3D Sampler OOBW vulnerability I7.8CNA v3.10.4%2023-12-13Fix
CVE-2023-48629Adobe Substance 3D Sampler OOBW vulnerability II7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-48628Adobe Substance 3D Sampler OOBW vulnerability III7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-48627Adobe Substance 3D Sampler OOBW vulnerability IV7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-48626Adobe Substance 3D Sampler OOBW vulnerability V7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-48625Adobe Substance 3D Sampler OOBW vulnerability VI7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-47624Audiobookshelf arbitrary file read6.5NVD v3.10.8%2023-12-13
CVE-2023-47623Scrypted reflected cross-site scripting6.1NVD v3.10.4%2023-12-13
CVE-2023-47620Scrypted reflected cross-site scripting6.1NVD v3.10.5%2023-12-13
CVE-2023-47619Audiobookshelf server-side request forgery and arbitrary file read6.5NVD v3.10.6%2023-12-13
CVE-2023-47579Relyum Rely-pcie improper access control7.5v3.10.6%2023-12-13Fix
CVE-2023-47578Relyum Rely-pcie cross-site request forgery8.8v3.10.3%2023-12-13Fix
CVE-2023-47577Relyum Rely-pcie insufficiently protected credentials9.8v3.10.7%2023-12-13Fix
CVE-2023-47576Relyum Rely-pcie command injection8.8v3.11.5%2023-12-13Fix
CVE-2023-47575Relyum Rely-pcie cross-site scripting6.1v3.10.4%2023-12-13Fix
CVE-2023-47574Relyum RELY-PCIe and RELY-REC firmware SMB configuration vulnerability5.9v3.10.5%2023-12-13Fix
CVE-2023-47573Relyum Rely-pcie missing authorization8.8v3.10.7%2023-12-13Fix
CVE-2023-47536Fortinet FortiOS improper access control2.8CNA v3.10.6%2023-12-13Fix
CVE-2023-47327Broken access control in Silverpeas4.3v3.10.5%2023-12-13Fix
CVE-2023-47326Cross-site request forgery in Silverpeas8.8v3.10.4%2023-12-13Fix
CVE-2023-47325Broken access control in Silverpeas5.4v3.10.4%2023-12-13Fix
CVE-2023-47324Cross-site scripting in Silverpeas5.4v3.10.5%2023-12-13Fix
CVE-2023-47323Missing access control in Silverpeas7.5v3.10.8%2023-12-13Fix
CVE-2023-47322Cross-site request forgery in Silverpeas8.8v3.10.4%2023-12-13Fix
CVE-2023-47321Broken access control in Silverpeas4.9v3.10.6%2023-12-13Fix
CVE-2023-47320Broken access control in Silverpeas8.1v3.10.7%2023-12-13Fix
CVE-2023-47081Adobe Substance 3D Stager out-of-bounds read5.5CNA v3.10.3%2023-12-13Fix
CVE-2023-47080Adobe Substance 3D Stager out-of-bounds read5.5CNA v3.10.3%2023-12-13Fix
CVE-2023-47079Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-12-13Fix
CVE-2023-47078Adobe Dimension USD File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-12-13Fix
CVE-2023-47077Adobe InDesign CC 2023 memory corruption vulnerability VI5.5CNA v3.10.3%2023-12-13Fix
CVE-2023-47076Adobe InDesign CC 2023 memory corruption vulnerability IV5.5CNA v3.10.3%2023-12-13Fix
CVE-2023-47075Adobe Illustrator JP2 File Parsing use-after-free remote code execution7.8CNA v3.10.5%2023-12-13Fix
CVE-2023-47074Adobe Illustrator JP2 File Parsing out-of-bounds read remote code execution7.8CNA v3.10.4%2023-12-13Fix
CVE-2023-47063Adobe Illustrator 2023 CC memory corruption Out-Of-Bounds-Write vulnerability IV7.8CNA v3.10.3%2023-12-13Fix
CVE-2023-47062Adobe Dimension GLTF File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-12-13Fix
CVE-2023-47061Adobe Dimension GLB File Parsing out-of-bounds read information disclosure5.5CNA v3.10.4%2023-12-13Fix
CVE-2023-46727GLPI SQL injection through inventory agent request8.6CNA v3.167.7%2023-12-13Fix
CVE-2023-46726GLPI remote code execution from LDAP server configuration form on PHP7.2CNA v3.11.3%2023-12-13Fix
CVE-2023-46713Fortinet FortiWeb log injection4.9CNA v3.10.5%2023-12-13Fix
CVE-2023-46675Kibana insertion of sensitive information into log file8.0CNA v3.10.7%2023-12-13Fix
CVE-2023-46671Kibana insertion of sensitive information into log file8.0CNA v3.10.7%2023-12-13Fix
CVE-2023-46247Vyper has incorrect storage layout for contracts containing large arrays7.5CNA v3.10.7%2023-12-13Fix
CVE-2023-45864Samsung Exynos 9820 race condition4.7v3.10.1%2023-12-13Fix
CVE-2023-45801Nadatel DVR improper authentication7.5v3.10.7%2023-12-13Fix
CVE-2023-45800Hanbiro groupware SQL command improper neutralization7.5v3.10.6%2023-12-13Fix
CVE-2023-45725Apache CouchDB, IBM Cloudant: Privilege escalation using _design Documents5.7v3.11.2%2023-12-13Fix
CVE-2023-45587Fortinet FortiSandbox cross-site scripting3.4CNA v3.10.4%2023-12-13Fix
CVE-2023-45174IBM AIX privilege escalation8.4CNA v3.10.2%2023-12-13Fix
CVE-2023-45170IBM AIX privilege escalation8.4CNA v3.10.2%2023-12-13Fix
CVE-2023-45166IBM AIX privilege escalation8.4CNA v3.10.2%2023-12-13Fix
CVE-2023-44362Adobe Prelude MP4 file uninitialized variable information disclosure5.5CNA v3.10.4%2023-12-13Fix
CVE-2023-44252Fortinet FortiWAN improper authentication8.6CNA v3.10.7%2023-12-13Fix
CVE-2023-44251Fortinet FortiWAN path traversal8.1CNA v3.10.8%2023-12-13Fix
CVE-2023-43813glpi authenticated SQL injection6.5CNA v3.130.9%2023-12-13Emerging ThreatsFix
CVE-2023-43586Zoom Video Communications Zoom Desktop Client path traversal7.3CNA v3.11.0%2023-12-13Fix
CVE-2023-43585Zoom Video Communications Zoom Mobile App improper access control7.1CNA v3.10.6%2023-12-13Fix
CVE-2023-43583Zoom Video Communications Zoom Mobile App hard-coded credentials4.9CNA v3.10.6%2023-12-13Fix
CVE-2023-43122Samsung Exynos 980 out-of-bounds write4.6v3.10.3%2023-12-13Fix
CVE-2023-42495Dasan Networks W-web improper neutralization of special elements used in an OS command9.8v3.11.5%2023-12-13
CVE-2023-42483Samsung Exynos 1080 time-of-check time-of-use race condition4.7v3.10.1%2023-12-13Fix
CVE-2023-41844Fortinet FortiSandbox cross-site scripting3.4CNA v3.10.4%2023-12-13Fix
CVE-2023-41678Fortinet FortiOS A double free8.3CNA v3.11.1%2023-12-13Fix
CVE-2023-41673Fortinet FortiADC improper authorization6.9CNA v3.10.4%2023-12-13Fix
CVE-2023-41621emlog cross-site scripting6.1v3.11.1%2023-12-13Nuclei
CVE-2023-40716Fortinet FortiTester OS command injection6.5CNA v3.10.2%2023-12-13Fix
CVE-2023-36639Fortinet FortiProxy format string7.0CNA v3.11.1%2023-12-13Fix
CVE-2023-34194Tinyxml reachable assertion7.5NVD v3.11.4%2023-12-13Fix
CVE-2023-31210Checkmk privilege escalation in agent via LD_LIBRARY_PATH8.8CNA v3.10.5%2023-12-13Fix
CVE-2023-6795PAN-OS: OS command injection vulnerability in the Web interface5.5CNA v3.11.1%2023-12-13Fix
CVE-2023-6794PAN-OS: File upload vulnerability in the Web interface5.5CNA v3.10.6%2023-12-13Fix
CVE-2023-6793PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator2.7CNA v3.10.6%2023-12-13Fix
CVE-2023-6792PAN-OS: OS command injection vulnerability in the XML API5.5CNA v3.11.1%2023-12-13Fix
CVE-2023-6791PAN-OS: Plaintext Disclosure of External System Integration Credentials4.9CNA v3.10.6%2023-12-13Fix
CVE-2023-6790PAN-OS: DOM-based cross-site scripting (XSS) vulnerability in the Web interface8.8CNA v3.10.7%2023-12-13Fix
CVE-2023-6789PAN-OS: Stored cross-site scripting (XSS) vulnerability in the Web interface4.3CNA v3.10.4%2023-12-13Fix
CVE-2023-6775CodeAstro POS and Inventory Management System item_con cross-site scripting6.1v3.10.6%2023-12-13
CVE-2023-6774CodeAstro POS and Inventory Management System register_account cross-site scripting5.4v3.10.7%2023-12-13
CVE-2023-6773CodeAstro POS and Inventory Management System User Creation register_account access control8.8v3.10.7%2023-12-13
CVE-2023-6772Otcms ind_backstage.php SQL injection7.2v3.10.6%2023-12-13
CVE-2023-6771SourceCodester Simple Student Attendance System actions.class.php save_attendance SQL injection9.8v3.10.6%2023-12-13
CVE-2023-6767SourceCodester Wedding Guest e-Book add-guest.php cross-site scripting6.1v3.10.6%2023-12-13
CVE-2023-6766PHPGurukul Teacher Subject Allocation Management System cross-site request forgery3.5NVD v3.10.5%2023-12-13
CVE-2023-6765SourceCodester Online Tours and Travels Management System email_setup.php prepare SQL injection9.8v3.10.7%2023-12-13
CVE-2023-6762Thecosy IceCMS article handler vulnerability4.3v3.10.7%2023-12-13
CVE-2023-6761Thecosy IceCMS User Data access control8.8v3.10.8%2023-12-13
CVE-2023-6760Thecosy IceCMS user session handling vulnerability5.4v3.10.6%2023-12-13
CVE-2023-6759Thecosy IceCMS Love resource improper enforcement of a single, unique action7.5v3.11.0%2023-12-13
CVE-2023-6758Thecosy IceCMS API PlanetCommentList access control4.3v3.10.7%2023-12-13
CVE-2023-6757Thecosy IceCMS API PlanetUser information disclosure6.5v3.11.0%2023-12-13
CVE-2023-6756Thecosy IceCMS Captcha login excessive authentication9.8v3.11.3%2023-12-13
CVE-2023-6755DedeBIZ content_batchup_action.php SQL injection7.2v3.10.7%2023-12-13
CVE-2023-6753Path traversal in MLflow/MLflow8.8NVD v3.11.1%2023-12-13Fix
CVE-2023-6723Unrestricted upload of file with dangerous type in Repox9.8v3.10.8%2023-12-13
CVE-2023-6722Relative path traversal in Repox7.5v3.10.8%2023-12-13
CVE-2023-6721Improper restriction of XML external entity reference in Repox7.5v3.10.6%2023-12-13
CVE-2023-6720Cross-site scripting in Repox5.4v3.10.4%2023-12-13
CVE-2023-6719Cross-site scripting in Repox6.1v3.10.4%2023-12-13
CVE-2023-6718Authentication bypass using an alternate path or channel in Repox7.5NVD v3.10.9%2023-12-13
CVE-2023-6660FreeBSD NFS client data corruption and kernel memory disclosure6.5v3.10.6%2023-12-13Fix
CVE-2023-6534FreeBSD TCP spoofing vulnerability in pf(4)7.5v3.10.7%2023-12-13Fix
CVE-2023-6478Red Hat Enterprise Linux 6 Extended Lifecycle Support integer overflow7.5NVD v3.11.6%2023-12-13Fix
CVE-2023-6381Improper input validation in Newsletter Software SuperMailer5.5v3.10.2%2023-12-13
CVE-2023-6380Open redirect in Alkacon Software OpenCms6.1v3.11.6%2023-12-13NucleiFix
CVE-2023-6379Cross-site scripting in Alkacon Software OpenCms6.1v3.11.8%2023-12-13NucleiFix
CVE-2023-6377X.Org X server XKB button action handling out-of-bounds read7.8NVD v3.11.6%2023-12-13Fix
CVE-2023-50495NCurse v6.4-20230418 was discovered to contain a segmentation fault via the component _nc_wrap_entry().6.5NVD v3.11.0%2023-12-12Fix
CVE-2023-50424Escalation of privileges in SAP BTP Security Services Integration library9.1CNA v3.11.1%2023-12-12Fix
CVE-2023-50423Escalation of privileges in SAP BTP Security Services Integration library ([Python] cloud-pysec)9.1CNA v3.11.1%2023-12-12Fix
CVE-2023-50422Escalation of privileges in SAP BTP Security Services Integration library9.1CNA v3.11.4%2023-12-12Fix
CVE-2023-50263Nautobot allows unauthenticated db-file-storage views3.7CNA v3.10.8%2023-12-12Fix
CVE-2023-50252php-svg-lib unsafe attributes merge when parsing `use` tag8.3CNA v3.123.9%2023-12-12Fix
CVE-2023-50251php-svg-lib possible DoS caused by infinite recursion when parsing SVG document5.3CNA v3.10.9%2023-12-12Fix
CVE-2023-50247h2o QUIC state exhaustion DoS3.7CNA v3.10.9%2023-12-12Fix
CVE-2023-49994Espeak-ng incorrect comparison5.5v3.10.4%2023-12-12Fix
CVE-2023-49993Espeak-ng buffer overflow5.3v3.10.4%2023-12-12Fix
CVE-2023-49992Espeak-ng out-of-bounds write5.3v3.10.4%2023-12-12Fix
CVE-2023-49991Espeak-ng out-of-bounds write5.3v3.10.4%2023-12-12Fix
CVE-2023-49990Espeak-ng buffer overflow5.3v3.10.4%2023-12-12Fix
CVE-2023-49923Enterprise Search insertion of sensitive information into log file6.8CNA v3.10.6%2023-12-12Fix
CVE-2023-49922Beats insertion of sensitive information into log file6.8CNA v3.10.7%2023-12-12Fix
CVE-2023-49874Mattermost IDOR when updating the tasks of a private playbook run4.3CNA v3.10.4%2023-12-12Fix
CVE-2023-49809Mattermost crash4.3CNA v3.10.6%2023-12-12Fix
CVE-2023-49713JTEKT ELECTRONICS GC-A22W-CW denial of service7.5v3.11.0%2023-12-12Fix
CVE-2023-49695ELECOM WRC-X3000GSN OS command injection6.8v3.10.9%2023-12-12Fix
CVE-2023-49692Siemens RUGGEDCOM RM1224 LTE(4G) EU OS command injection7.2CNA v3.10.6%2023-12-12Fix
CVE-2023-49691Siemens RUGGEDCOM RM1224 LTE(4G) EU OS command injection7.2CNA v3.10.6%2023-12-12Fix
CVE-2023-49607Mattermost playbook plugin crash via missing interface type assertion4.3CNA v3.10.6%2023-12-12Fix
CVE-2023-49587Command injection vulnerability in SAP Solution Manager6.4CNA v3.10.4%2023-12-12Fix
CVE-2023-49584SAP Fiori Launchpad HTTP request smuggling4.3CNA v3.10.5%2023-12-12Fix
CVE-2023-49583Escalation of privileges in SAP BTP Security Services Integration library ([Node.js] @SAP/xssec)9.1CNA v3.11.1%2023-12-12Fix
CVE-2023-49581SQL injection vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform4.1CNA v3.10.5%2023-12-12Fix
CVE-2023-49580Information disclosure in SAP GUI for Windows and SAP GUI for Java7.3CNA v3.10.5%2023-12-12Fix
CVE-2023-49578Denial of service (DOS) in SAP Cloud Connector3.5CNA v3.10.3%2023-12-12Fix
CVE-2023-49577Cross-site scripting (XSS) vulnerability in the SAP HCM (SMART PAYE solution)6.1CNA v3.10.4%2023-12-12Fix
CVE-2023-49563Voltronic Power SNMP Web Pro cross-site scripting6.1v3.10.5%2023-12-12
CVE-2023-49279Umbraco CMS vulnerable to stored XSS via SVG file upload3.7CNA v3.10.4%2023-12-12Fix
CVE-2023-49278Umbraco CMS brute force exploit can be used to collect valid usernames5.3CNA v3.10.5%2023-12-12Fix
CVE-2023-49274Umbraco CMS SMTP misconfiguration exposes potential registered user email3.7CNA v3.10.5%2023-12-12Fix
CVE-2023-49273Umbraco CMS vulnerable to privilege escalation using spoofing5.4CNA v3.10.4%2023-12-12Fix
CVE-2023-49143JTEKT ELECTRONICS GC-A22W-CW denial of service7.5v3.11.0%2023-12-12Fix
CVE-2023-49140JTEKT ELECTRONICS GC-A22W-CW denial of service7.5v3.11.0%2023-12-12Fix
CVE-2023-49089Umbraco CMS possible path traversal when creating packages from backoffice7.7CNA v3.10.6%2023-12-12Fix
CVE-2023-49058Directory traversal vulnerability in SAP Master DATA Governance3.5CNA v3.10.6%2023-12-12Fix
CVE-2023-48677Acronis Cyber Protect Home Office uncontrolled search path7.3CNA v3.00.2%2023-12-12Fix
CVE-2023-48642Archerirm Archer cross-site scripting5.4v3.10.5%2023-12-12Fix
CVE-2023-48641Archerirm Archer insecure direct object reference8.8v3.10.5%2023-12-12Fix
CVE-2023-48431Siemens SINEC INS improper check for exceptional conditions6.8CNA v3.10.6%2023-12-12Fix
CVE-2023-48430Siemens SINEC INS crash2.7CNA v3.10.6%2023-12-12Fix
CVE-2023-48429Siemens SINEC INS crash2.7CNA v3.10.6%2023-12-12Fix
CVE-2023-48428Siemens SINEC INS OS command injection7.2CNA v3.10.6%2023-12-12Fix
CVE-2023-48427Siemens SINEC INS improper certificate validation8.1CNA v3.10.5%2023-12-12Fix
CVE-2023-48313Umbraco contains a DOM-XSS4.3CNA v3.10.4%2023-12-12Fix
CVE-2023-48227Umbraco CMS Backoffice User can bypass Publish restriction4.3CNA v3.10.4%2023-12-12Fix
CVE-2023-48225Laf env causes sensitive information disclosure8.9CNA v3.10.8%2023-12-12Fix
CVE-2023-46701Mattermost Inaccessible Post information leak via Run Timeline IDOR6.5CNA v3.10.4%2023-12-12Fix
CVE-2023-46456GL.iNet Gl-ar300m file upload9.8v3.124.7%2023-12-12
CVE-2023-46455GL.iNet Gl-ar300m path traversal7.5v3.147.0%2023-12-12Nuclei
CVE-2023-46454GL.iNet Gl-ar300m OS command injection9.8v3.123.5%2023-12-12Exploit code
CVE-2023-46285Siemens Opcenter Execution Foundation improper input validation7.5CNA v3.10.9%2023-12-12Fix
CVE-2023-46284Siemens Opcenter Execution Foundation buffer overflow7.5CNA v3.10.9%2023-12-12Fix
CVE-2023-46283Siemens Opcenter Execution Foundation buffer overflow7.5CNA v3.10.9%2023-12-12Fix
CVE-2023-46282Siemens Opcenter Execution Foundation cross-site scripting7.1CNA v3.10.5%2023-12-12Fix
CVE-2023-46281Siemens Opcenter Execution Foundation permissive cross-domain policy7.1CNA v3.10.9%2023-12-12Fix
CVE-2023-46219curl missing encryption5.3v3.11.1%2023-12-12Fix
CVE-2023-46156Siemens SIMATIC Drive Controller CPU 1504D TF use-after-free7.5CNA v3.11.2%2023-12-12Fix
CVE-2023-45847Mattermost Playbook plugin crash via Run Checklist4.3CNA v3.10.6%2023-12-12Fix
CVE-2023-45316Mattermost reflected client side path traversal leading to CSRF in Playbooks7.3CNA v3.10.3%2023-12-12Fix
CVE-2023-43364Searchor CLI's Search vulnerable to arbitrary Code using Eval9.8v3.12.6%2023-12-12Exploit codeFix
CVE-2023-42932Apple macOS logic flaw5.5v3.10.3%2023-12-12Fix
CVE-2023-42926Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42924Apple macOS incorrect permission assignment5.5v3.10.3%2023-12-12Fix
CVE-2023-42923Apple iOS and iPadOS Private Browsing missing authentication5.3v3.10.7%2023-12-12Fix
CVE-2023-42922Apple macOS information disclosure5.5v3.10.3%2023-12-12Fix
CVE-2023-42919Apple macOS information disclosure5.5v3.10.4%2023-12-12Fix
CVE-2023-42914Apple macOS sandbox escape6.3v3.10.6%2023-12-12Fix
CVE-2023-42912Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42911Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42910Apple macOS out-of-bounds write8.8v3.10.9%2023-12-12Fix
CVE-2023-42909Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42908Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42907Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42906Apple macOS out-of-bounds write7.8v3.10.8%2023-12-12Fix
CVE-2023-42905Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42904Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42903Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42902Apple macOS out-of-bounds write7.8v3.10.4%2023-12-12Fix
CVE-2023-42901Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42900Apple macOS information disclosure5.5v3.10.3%2023-12-12Fix
CVE-2023-42899Apple macOS arbitrary code execution7.8v3.10.4%2023-12-12Fix
CVE-2023-42898Apple tvOS arbitrary code execution5.5v3.10.5%2023-12-12Fix
CVE-2023-42897Apple iOS and iPadOS information disclosure4.6v3.10.3%2023-12-12Fix
CVE-2023-42894Apple macOS Contacts information disclosure5.5v3.10.3%2023-12-12Fix
CVE-2023-42891Apple macOS improper authentication5.5v3.10.3%2023-12-12Fix
CVE-2023-42890Apple Safari code injection8.8v3.13.2%2023-12-12Fix
CVE-2023-42886Apple macOS out-of-bounds read7.8v3.10.3%2023-12-12Fix
CVE-2023-42884Apple macOS information disclosure5.5v3.10.4%2023-12-12Fix
CVE-2023-42883Apple Safari denial of service5.5v3.10.7%2023-12-12Fix
CVE-2023-42882Apple macOS out-of-bounds write7.8v3.10.3%2023-12-12Fix
CVE-2023-42874Apple macOS Accessibility Keyboard secure text fields vulnerability2.4v3.10.3%2023-12-12Fix
CVE-2023-42481Improper access control vulnerability in SAP Commerce Cloud8.1CNA v3.10.5%2023-12-12Fix
CVE-2023-42479Cross-site scripting (XSS) vulnerability in SAP Biller Direct6.1CNA v3.10.4%2023-12-12Fix
CVE-2023-42478Cross-site scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform7.5CNA v3.10.6%2023-12-12Fix
CVE-2023-42476Cross-site scripting vulnerability in SAP BusinessObjects Web Intelligence6.8CNA v3.10.6%2023-12-12Fix
CVE-2023-41963JTEKT ELECTRONICS GC-A22W-CW denial of service7.5v3.11.0%2023-12-12Fix
CVE-2023-41623emlog media.php SQL injection7.2v3.10.8%2023-12-12Exploit code
CVE-2023-41337h2o vulnerable to TLS session resumption misdirection6.1CNA v3.10.2%2023-12-12Fix
CVE-2023-41120EnterpriseDB Postgres Advanced Server resource exposure6.5v3.10.5%2023-12-12Fix
CVE-2023-41119EnterpriseDB Postgres Advanced Server improper privilege management8.8v3.10.6%2023-12-12Fix
CVE-2023-41118EnterpriseDB Postgres Advanced Server authentication bypass8.8v3.10.8%2023-12-12Fix
CVE-2023-41117EnterpriseDB Postgres Advanced Server uncontrolled search path9.8v3.10.8%2023-12-12Fix
CVE-2023-41116EnterpriseDB Postgres Advanced Server materialized view refresh vulnerability4.3v3.10.4%2023-12-12Fix
CVE-2023-41115EnterpriseDB Postgres Advanced Server UTL_ENCODE vulnerability6.5v3.10.6%2023-12-12Fix
CVE-2023-41114EnterpriseDB Postgres Advanced Server get_url_as_text and get_url_as_bytea functions vulnerability6.5v3.10.6%2023-12-12Fix
CVE-2023-41113EnterpriseDB Postgres Advanced Server information disclosure4.3v3.10.5%2023-12-12Fix
CVE-2023-40446Apple macOS arbitrary code execution7.8v3.10.3%2023-12-12Fix
CVE-2023-38694Umbraco CMS vulnerable to possible injection of HTML in an unintended form3.5CNA v3.10.4%2023-12-12Fix
CVE-2023-38380Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) memory leak8.7CNA v4.01.0%2023-12-12Fix
CVE-2023-36696Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.9%2023-12-12Fix
CVE-2023-36654Prolion Cryptospike log-download REST API endpoint path traversal6.5v3.11.2%2023-12-12
CVE-2023-36652Prolion Cryptospike users searching REST API endpoint SQL injection4.3v3.10.6%2023-12-12
CVE-2023-36651Prolion Cryptospike hard-coded credentials7.2v3.11.0%2023-12-12
CVE-2023-36650Prolion Cryptospike update system missing integrity check7.2v3.10.4%2023-12-12
CVE-2023-36649Prolion Cryptospike sensitive information in log files9.1v3.10.9%2023-12-12
CVE-2023-36648Prolion Cryptospike internal data streaming system missing authentication8.2v3.11.0%2023-12-12
CVE-2023-36647Prolion Cryptospike hard-coded credentials7.5v3.10.8%2023-12-12
CVE-2023-36646Prolion Cryptospike incorrect authorization8.8v3.10.8%2023-12-12
CVE-2023-36391Microsoft Windows local Security Authority subsystem service elevation of privilege7.8CNA v3.17.2%2023-12-12Fix
CVE-2023-36020Microsoft Dynamics 365 (on-premises) cross-site scripting7.6CNA v3.11.0%2023-12-12Fix
CVE-2023-36019Microsoft Power Platform Connector spoofing9.6CNA v3.115.8%2023-12-12Fix
CVE-2023-36012Microsoft Windows DHCP server service information disclosure5.3CNA v3.12.0%2023-12-12Fix
CVE-2023-36011Microsoft Windows win32k elevation of privilege7.8CNA v3.10.7%2023-12-12Fix
CVE-2023-36010Microsoft Defender denial of service7.5CNA v3.12.7%2023-12-12Fix
CVE-2023-36009Microsoft Word information disclosure5.5CNA v3.11.2%2023-12-12Fix
CVE-2023-36006Microsoft WDAC OLE DB provider for SQL server remote code execution8.8CNA v3.11.9%2023-12-12Fix
CVE-2023-36005Microsoft Windows Telephony Server elevation of privilege7.5CNA v3.123.9%2023-12-12Fix
CVE-2023-36004Microsoft Windows DPAPI (Data Protection Application Programming interface) spoofing7.5CNA v3.11.4%2023-12-12Fix
CVE-2023-36003Microsoft Windows XAML Diagnostics elevation of privilege6.7CNA v3.12.8%2023-12-12Exploit codeFix
CVE-2023-35644Microsoft Windows Sysmain service elevation of privilege7.8CNA v3.16.3%2023-12-12Fix
CVE-2023-35643Microsoft Windows DHCP server service information disclosure7.5CNA v3.12.6%2023-12-12Fix
CVE-2023-35642Microsoft Windows Internet Connection Sharing (ICS) denial of service6.5CNA v3.11.3%2023-12-12Fix
CVE-2023-35641Microsoft Windows internet Connection Sharing (ICS) remote code execution8.8CNA v3.17.2%2023-12-12Fix
CVE-2023-35639Microsoft ODBC driver remote code execution8.8CNA v3.12.4%2023-12-12Fix
CVE-2023-35638Microsoft Windows DHCP server service denial of service7.5CNA v3.13.3%2023-12-12Fix
CVE-2023-35636Microsoft Outlook information disclosure6.5CNA v3.117.7%2023-12-12Emerging ThreatsExploit codeFix
CVE-2023-35635Microsoft Windows Kernel denial of service5.5CNA v3.11.0%2023-12-12Fix
CVE-2023-35634Microsoft Windows Bluetooth driver remote code execution8.0CNA v3.11.0%2023-12-12Fix
CVE-2023-35633Microsoft Windows Kernel elevation of privilege7.8CNA v3.18.7%2023-12-12Fix
CVE-2023-35632Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.8CNA v3.16.5%2023-12-12Fix
CVE-2023-35631Microsoft Windows win32k elevation of privilege7.8CNA v3.16.5%2023-12-12Fix
CVE-2023-35630Microsoft Windows internet Connection Sharing (ICS) remote code execution8.8CNA v3.16.1%2023-12-12Fix
CVE-2023-35629Microsoft USBHUB Device driver remote code execution6.8CNA v3.10.9%2023-12-12Fix
CVE-2023-35628Microsoft Windows MSHTML Platform remote code execution8.1CNA v3.192.8%2023-12-12Emerging ThreatsFix
CVE-2023-35625Microsoft Azure Machine Learning Compute Instance for SDK users information disclosure4.7CNA v3.10.7%2023-12-12Fix
CVE-2023-35624Microsoft Azure Connected Machine Agent elevation of privilege7.3CNA v3.10.9%2023-12-12Fix
CVE-2023-35622Microsoft Windows DNS spoofing7.5CNA v3.11.6%2023-12-12Fix
CVE-2023-35621Microsoft Dynamics 365 Finance and Operations denial of service7.5CNA v3.12.3%2023-12-12Fix
CVE-2023-35619Microsoft Outlook for Mac spoofing5.3CNA v3.11.2%2023-12-12Fix
CVE-2023-34064VMware Workspace ONE Launcher privilege escalation4.6v3.10.4%2023-12-12Fix
CVE-2023-31048Exposure of sensitive information in OPC UA .NET Standard Reference Server5.3v3.10.8%2023-12-12Fix
CVE-2023-28604Fluid Components TYPO3 extension vulnerable to cross-site scripting6.1v3.10.5%2023-12-12Fix
CVE-2023-28465HL7 FHIR Partial Path Zip Slip due to bypass of7.5v3.11.3%2023-12-12Exploit codeFix
CVE-2023-26920fast-xml-parser vulnerable to prototype pollution through tag or attribute name6.5v3.11.2%2023-12-12Fix
CVE-2023-21740Microsoft Windows Media remote code execution7.8CNA v3.11.1%2023-12-12Fix
CVE-2023-20275Cisco Adaptive Security Appliance (ASA) Software origin validation error4.1CNA v3.10.4%2023-12-12Fix
CVE-2023-6727Mattermost leak inaccessible playbook information via Channel Action IDOR3.1CNA v3.10.4%2023-12-12Fix
CVE-2023-6710Modcluster Mod Proxy Cluster mod_cluster/mod_proxy_cluster: Stored cross-site scripting5.4CNA v3.12.2%2023-12-12Exploit codeFix
CVE-2023-6709Improper neutralization of special elements used in a template engine in MLflow/MLflow8.8NVD v3.10.9%2023-12-12Fix
CVE-2023-6687Elastic Agent insertion of sensitive information into log file6.8CNA v3.10.6%2023-12-12Fix
CVE-2023-6593Devolutions Remote Desktop Manager insecure permissions9.8v3.10.7%2023-12-12Fix
CVE-2023-6547Mattermost playbooks access/modification by removed team member3.7CNA v3.10.3%2023-12-12Fix
CVE-2023-6542Improper export of android application components in SAP Emarsys SDK ANDROID7.1CNA v3.10.2%2023-12-12Fix
CVE-2023-6193Cloudflare quiche unbounded queuing of path validation messages in cloudflare-quiche5.3CNA v3.10.8%2023-12-12Fix
CVE-2023-5764Ansible: Template injection7.1CNA v3.10.5%2023-12-12Fix
CVE-2023-5536Canonical Ubuntu Server incorrect default permissions5.0CNA v3.10.2%2023-12-12Fix
CVE-2023-5379Red Hat Undertow AJP listener denial of service7.5CNA v3.11.0%2023-12-12Fix
CVE-2023-4958Stackrox: Missing HTTP security headers allows for clickjacking in web UI6.1CNA v3.10.6%2023-12-12Fix
CVE-2023-4932Reflected cross-site scripting in Sas5.4v3.10.6%2023-12-12Fix
CVE-2023-4421Mozilla NSS observable discrepancy6.5v3.10.6%2023-12-12Fix
CVE-2023-3517Hitachi Vantara Pentaho Data Integration and Analytics improper control of resource identifiers8.8v3.10.6%2023-12-12Fix
CVE-2023-50465Monicahq Monica stored cross-site scripting5.4v3.10.6%2023-12-11Exploit codeFix
CVE-2023-50245OpenEXR-viewer buffer overflow9.8CNA v3.11.1%2023-12-11Exploit codeFix
CVE-2023-49964Hyland Alfresco Content Services server-side template injection8.8NVD v3.134.7%2023-12-11
CVE-2023-49805louislam uptime-kuma uptime Kuma missing origin validation in WebSockets6.0CNA v3.10.4%2023-12-11Fix
CVE-2023-49804louislam uptime-kuma Uptime Kuma Password Change vulnerability6.7CNA v3.10.3%2023-12-11Fix
CVE-2023-49803@koa/cors has overly permissive origin policy8.6CNA v3.10.3%2023-12-11Fix
CVE-2023-49802MantisBT LinkedCustomFields cross-site scripting6.7CNA v3.10.7%2023-12-11Fix
CVE-2023-49796MindsDB arbitrary file write5.3CNA v3.10.5%2023-12-11Fix
CVE-2023-49795MindsDB server-side request forgery6.5CNA v3.10.4%2023-12-11Fix
CVE-2023-49494DedeCMS cross-site scripting6.1v3.11.1%2023-12-11Nuclei
CVE-2023-49490XunRuiCMS cross-site scripting6.1v3.10.4%2023-12-11
CVE-2023-49488Openfiler A cross-site scripting6.1v3.10.4%2023-12-11
CVE-2023-49418TOTOLINK A7000R out-of-bounds write9.8v3.10.9%2023-12-11
CVE-2023-49417TOTOLINK A7000R out-of-bounds write9.8v3.10.9%2023-12-11
CVE-2023-49355jqlang jq out-of-bounds write7.5v3.11.2%2023-12-11Fix
CVE-2023-48715Tuleap vulnerable to cross-site scripting on the edition page of a release5.4CNA v3.10.5%2023-12-11Fix
CVE-2023-48425Google Android code execution9.8v3.10.4%2023-12-11Fix
CVE-2023-48424Google Android privilege escalation9.8v3.10.3%2023-12-11Fix
CVE-2023-48417Google Android missing authorization9.8v3.10.3%2023-12-11Fix
CVE-2023-45292Captcha verification bypass in github.com/mojocn/base64Captcha5.3v3.10.3%2023-12-11Fix
CVE-2023-6679Kernel: Null pointer dereference in dpll_pin_parent_pin_set in drivers/dpll/dpll_netlink.c5.5NVD v3.10.3%2023-12-11Fix
CVE-2023-6671Cross-site request forgery on OPEN JOURNAL SYSTEMS8.8v3.10.2%2023-12-11
CVE-2023-6659Campcodes Web-Based Student Clearance System login.php SQL injection7.5v3.10.6%2023-12-11
CVE-2023-6538Hitachi Vantara System Management Unit configuration backup access information disclosure6.5NVD v3.11.6%2023-12-11Exploit codeFix
CVE-2023-6194Eclipse Memory Analyzer (tools.mat) XML external entity injection2.8CNA v3.10.3%2023-12-11
CVE-2023-6186The Document Foundation LibreOffice link targets allow arbitrary script execution8.3CNA v3.10.8%2023-12-11Fix
CVE-2023-6185The Document Foundation LibreOffice GStreamer integration improper input validation8.3CNA v3.11.0%2023-12-11Fix
CVE-2023-6181Google Android code execution9.8v3.10.4%2023-12-11Fix
CVE-2023-6035EazyDocs WordPress plugin Subscriber + SQLi8.8NVD v3.10.9%2023-12-11Fix
CVE-2023-5955Contact Form Email WordPress plugin Editor+ stored cross-site scripting4.8NVD v3.10.5%2023-12-11Fix
CVE-2023-5940WP Not Login Hide WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2023-12-11
CVE-2023-5907File Manager WordPress plugin Admin+ arbitrary OS File/Folder access + path traversal6.5NVD v3.10.9%2023-12-11Fix
CVE-2023-5757WP Crowdfunding WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2023-12-11Fix
CVE-2023-5750EmbedPress WordPress plugin reflected XSS6.1NVD v3.10.5%2023-12-11Fix
CVE-2023-5749EmbedPress WordPress plugin reflected XSS6.1NVD v3.10.5%2023-12-11Fix
CVE-2023-5500Frauscher: FDS102 for FAdC/FAdCi remote code execution8.8CNA v3.11.0%2023-12-11
CVE-2023-50463caddyserver caddy header spoofing in caddy-geo-ip6.5v3.10.7%2023-12-10
CVE-2023-50457zammad incorrect authorization4.3v3.10.4%2023-12-10Fix
CVE-2023-50456zammad open redirect5.3v3.10.4%2023-12-10Fix
CVE-2023-50455zammad resource exhaustion7.5v3.10.7%2023-12-10Fix
CVE-2023-50454zammad improper certificate validation5.9v3.10.3%2023-12-10Fix
CVE-2023-50453Zammad signshow endpoint vulnerability5.3v3.10.5%2023-12-10Fix
CVE-2023-50449Directory traversal in JFinalCMS7.5v3.11.2%2023-12-10
CVE-2023-50446Mullvad VPN incorrect permission assignment7.8v3.10.2%2023-12-10Fix
CVE-2023-6658SourceCodester Simple Student Attendance System SQL injection9.8v3.10.8%2023-12-10
CVE-2023-6657SourceCodester Simple Student Attendance System student_form.php SQL injection9.8v3.10.9%2023-12-10
CVE-2023-6656DeepFaceLab DFLJPG.py deserialization7.5v3.10.9%2023-12-10
CVE-2023-6655Hongjing e-HR Login interface loadhistroyorgtree SQL injection9.8v3.13.8%2023-12-10Nuclei
CVE-2023-6654Phpems Session Data session.cls.php deserialization8.8v3.11.7%2023-12-10Exploit code
CVE-2023-6653PHPGurukul Teacher Subject Allocation Management System cross-site request forgery4.3v3.10.4%2023-12-10
CVE-2023-6652code-projects Matrimonial Site register.php register SQL injection9.8v3.10.9%2023-12-10
CVE-2023-6651code-projects Matrimonial Site SQL injection9.8v3.10.9%2023-12-10
CVE-2023-6650SourceCodester Simple Invoice Generator System login.php cross-site scripting6.1v3.10.8%2023-12-10
CVE-2023-6649PHPGurukul Teacher Subject Allocation Management System index.php cross-site scripting6.1v3.10.8%2023-12-10
CVE-2023-6648PHPGurukul Nipah Virus Testing Management System password-recovery.php SQL injection9.8v3.11.0%2023-12-10
CVE-2023-6647AMTT HiBOS SQL injection9.8v3.11.0%2023-12-10
CVE-2023-5870PostgreSQL: Role pg_signal_backend can signal certain superuser processes4.4NVD v3.12.6%2023-12-10Fix
CVE-2023-5869PostgreSQL: Buffer overrun from integer overflow in array modification8.8NVD v3.14.3%2023-12-10Fix
CVE-2023-5868PostgreSQL: Memory disclosure in aggregate function calls4.3NVD v3.12.8%2023-12-10Fix
CVE-2023-50431Linux kernel information disclosure5.5NVD v3.10.3%2023-12-09Fix
CVE-2023-50430Goodix Fingerprint Sensor improper authentication6.4v3.10.4%2023-12-09
CVE-2023-50429Izybat Orange Casiers SQL injection9.1v3.10.7%2023-12-09
CVE-2023-50428Bitcoin Core and Bitcoin Knots datacarrier size limit vulnerability5.3v3.10.8%2023-12-09
CVE-2023-49800Denial of service by abusing `fetchOptions.retry` in nuxt-api-party7.5CNA v3.10.8%2023-12-09Fix
CVE-2023-49799Server-side request forgery in nuxt-api-party7.5CNA v3.10.8%2023-12-09Fix
CVE-2023-49798Duplicated execution of subcalls in OpenZeppelin Contracts5.9CNA v3.10.5%2023-12-09Fix
CVE-2023-49797Local privilege escalation in pyinstaller on Windows8.8CNA v3.10.3%2023-12-09Fix
CVE-2023-47722IBM API Connect information disclosure6.2CNA v3.10.2%2023-12-09Fix
CVE-2023-47465gpac denial of service5.5v3.10.2%2023-12-09
CVE-2023-47254DrayTek Vigor167 CLI interface OS command injection9.8v3.12.2%2023-12-09
CVE-2023-46932gpac heap-based buffer overflow9.8v3.11.1%2023-12-09
CVE-2023-28874Seafile open redirect6.1v3.10.5%2023-12-09Fix
CVE-2023-28873Seafile wiki and discussion pages cross-site scripting5.4v3.10.4%2023-12-09Fix
CVE-2023-28871ncp-e Secure Enterprise Client link following4.3v3.10.6%2023-12-09
CVE-2023-28870ncp-e Secure Enterprise Client Support Assistant in NCP insecure permissions6.5v3.10.7%2023-12-09
CVE-2023-28869ncp-e Secure Enterprise Client link following6.5v3.10.8%2023-12-09
CVE-2023-28868ncp-e Secure Enterprise Client link following8.1v3.10.9%2023-12-09
CVE-2023-28527IBM Informix Dynamic Server buffer overflow6.2CNA v3.10.2%2023-12-09Fix
CVE-2023-28526IBM Informix Dynamic Server buffer overflow6.2CNA v3.10.2%2023-12-09Fix
CVE-2023-28523IBM Informix Dynamic Server buffer overflow8.4CNA v3.10.3%2023-12-09Fix
CVE-2023-6646LinkDing cross-site scripting5.4v3.10.6%2023-12-09Fix
CVE-2023-6560Kernel: Io_uring out of boundary memory access in __io_uaddr_map5.5NVD v3.10.3%2023-12-09Fix
CVE-2023-6394Quarkus: Graphql operations over websockets bypass7.4CNA v3.10.8%2023-12-09Fix
CVE-2023-6120Welcart e-Commerce WordPress plugin authenticated (Administrator+) directory traversal2.7NVD v3.10.5%2023-12-09Fix
CVE-2023-5756Digital Publications by Supsystic WordPress plugin cross-site request forgery via AJAX action8.8v3.10.3%2023-12-09Fix
CVE-2023-49788CollaboraOnline online path traversal7.2CNA v3.10.5%2023-12-08Fix
CVE-2023-49782Cross-site-scripting vulnerability in error message passing in Richdocumentscode7.1CNA v3.10.4%2023-12-08Fix
CVE-2023-49487Cross-site scripting in JFinalCMS5.4v3.10.4%2023-12-08
CVE-2023-49486Cross-site scripting in JFinalCMS5.4v3.10.4%2023-12-08
CVE-2023-49485Cross-site scripting in JFinalCMS5.4v3.10.4%2023-12-08
CVE-2023-49484iteachyou Dreamer CMS cross-site scripting5.4v3.10.4%2023-12-08
CVE-2023-49444Html-js DoraCMS An arbitrary file upload5.4v3.10.5%2023-12-08
CVE-2023-49443Html-js DoraCMS missing brute-force protection9.8v3.10.8%2023-12-08
CVE-2023-49007NETGEAR RBR750 Firmware out-of-bounds write9.8v3.19.0%2023-12-08
CVE-2023-48929Franklin-electric System Sentinel Anyware session fixation9.8v3.10.8%2023-12-08
CVE-2023-48928Franklin-electric System Sentinel Anyware open redirect6.1v3.10.5%2023-12-08
CVE-2023-48423Google Android dhcp4_Main.c out-of-bounds write9.8v3.10.5%2023-12-08Fix
CVE-2023-48422Google Android protocolnetadapter.cpp out-of-bounds read5.5v3.10.1%2023-12-08Fix
CVE-2023-48421Google Android pixel_gpu_slc.c out-of-bounds write7.8v3.10.1%2023-12-08Fix
CVE-2023-48420Google Android race condition6.4v3.10.1%2023-12-08Fix
CVE-2023-48416Google Android multiple locations null pointer dereference7.5v3.10.5%2023-12-08Fix
CVE-2023-48415Google Android protocolembmsadapter.cpp out-of-bounds read5.5v3.10.1%2023-12-08Fix
CVE-2023-48414Google Android the Pixel Camera driver use-after-free6.7v3.10.1%2023-12-08Fix
CVE-2023-48413Google Android protocolnetadapter.cpp out-of-bounds read4.9v3.10.4%2023-12-08Fix
CVE-2023-48412Google Android mali_gralloc_buffer.h information disclosure5.5v3.10.1%2023-12-08Fix
CVE-2023-48411Google Android protocolmiscadapter.cpp out-of-bounds read5.5v3.10.1%2023-12-08Fix
CVE-2023-48410Google Android cd_codec.c out-of-bounds read7.5v3.10.4%2023-12-08Fix
CVE-2023-48409Google Android mali_kbase_core_linux.c out-of-bounds write7.8v3.10.1%2023-12-08KCVFix
CVE-2023-48408Google Android protocolnetadapter.cpp out-of-bounds read5.5v3.10.1%2023-12-08Fix
CVE-2023-48407Google Android logic flaw7.8v3.10.1%2023-12-08Fix
CVE-2023-48406Google Android improper privilege management6.7v3.10.1%2023-12-08Fix
CVE-2023-48405Google Android logic flaw6.7v3.10.1%2023-12-08Fix
CVE-2023-48404Google Android protocolmiscadapter.cpp out-of-bounds read7.5v3.10.4%2023-12-08Fix
CVE-2023-48403Google Android sms_PduCodec.c out-of-bounds read7.5v3.10.4%2023-12-08Fix
CVE-2023-48402Google Android ppcfw.c elevation of privilege7.8v3.10.1%2023-12-08Fix
CVE-2023-48401Google Android protocoladapter.cpp out-of-bounds read5.5v3.10.1%2023-12-08Fix
CVE-2023-48399Google Android protocolmiscadapter.cpp out-of-bounds read5.5v3.10.1%2023-12-08Fix
CVE-2023-48398Google Android protocolnetadapter.cpp out-of-bounds read7.5v3.10.3%2023-12-08Fix
CVE-2023-48397Google Android protocolcalladapter.cpp out-of-bounds read4.9v3.10.4%2023-12-08Fix
CVE-2023-48311jupyterhub dockerspawner any image allowed by default8.0CNA v3.10.6%2023-12-08Fix
CVE-2023-48122Microweber allows a remote attacker to obtain sensitive information via the HTTP GET method7.5v3.10.8%2023-12-08Fix
CVE-2023-47565QNAP VioStor NVR OS command injection8.0CNA v3.173.3%2023-12-08KEVEmerging ThreatsFix
CVE-2023-46499Cross-site scripting in Evershop6.1v3.10.5%2023-12-08Fix
CVE-2023-46498Code execution in Evershop9.8v3.11.3%2023-12-08Fix
CVE-2023-46497Directory traversal in Evershop5.4v3.10.8%2023-12-08Fix
CVE-2023-46496Directory traversal in Evershop8.3v3.11.2%2023-12-08Fix
CVE-2023-46495Cross-site scripting in Evershop6.1v3.10.5%2023-12-08Fix
CVE-2023-46494Cross-site scripting in Evershop6.1v3.10.5%2023-12-08Fix
CVE-2023-46493Directory traversal in Evershop5.3v3.11.0%2023-12-08Fix
CVE-2023-46157MGT-COMMERCE CloudPanel OS command injection8.8v3.12.3%2023-12-08Fix
CVE-2023-45866Canonical Ubuntu improper authentication6.3NVD v3.17.9%2023-12-08Exploit codeFix
CVE-2023-43744Zultys Mx-virtual An OS command injection7.2v3.12.0%2023-12-08
CVE-2023-43743Zultys Mx-virtual SQL injection8.8v3.10.7%2023-12-08
CVE-2023-43742Zultys Mx-virtual An authentication bypass9.8v3.10.9%2023-12-08
CVE-2023-43305Line studio kent mini-app information disclosure8.2v3.10.6%2023-12-08
CVE-2023-34320Arm: Guests can trigger a deadlock on Cortex-A775.5v3.10.2%2023-12-08Fix
CVE-2023-32975QNAP QTS and QuTS hero buffer overflow4.9CNA v3.10.9%2023-12-08Fix
CVE-2023-32968QNAP QTS and QuTS hero buffer overflow4.5CNA v3.10.8%2023-12-08Fix
CVE-2023-32460Dell PowerEdge Platform missing authentication8.8CNA v3.10.2%2023-12-08Fix
CVE-2023-26158Mockjs vulnerable to prototype pollution via the Util.extend function8.2v3.10.8%2023-12-08
CVE-2023-23372QNAP QTS QuTS hero cross-site scripting6.5CNA v3.10.5%2023-12-08Fix
CVE-2023-6622Kernel: Null pointer dereference vulnerability in nft_dynset_init5.5NVD v3.10.3%2023-12-08Fix
CVE-2023-6619SourceCodester Simple Student Attendance System class_form.php SQL injection9.8v3.10.8%2023-12-08
CVE-2023-6618SourceCodester Simple Student Attendance System index.php file inclusion8.8v3.10.9%2023-12-08
CVE-2023-6617SourceCodester Simple Student Attendance System attendance.php SQL injection9.8v3.10.8%2023-12-08
CVE-2023-6616SourceCodester Simple Student Attendance System index.php cross-site scripting6.1v3.10.6%2023-12-08
CVE-2023-6615Typecho manage-users.php information disclosure5.3v3.10.7%2023-12-08
CVE-2023-6614Typecho page manage-pages.php backdoor2.7v3.10.6%2023-12-08
CVE-2023-6613Typecho Logo options-theme.php cross-site scripting4.8v3.10.6%2023-12-08
CVE-2023-6612Totolink X5000R cstecgi.cgi setWizardCfg os command injection9.8v3.130.7%2023-12-08
CVE-2023-6611Tongda OA 2017 delete.php SQL injection7.5v3.10.6%2023-12-08
CVE-2023-6610Kernel: Oob access in smb2_dump_detail7.1NVD v3.10.4%2023-12-08Fix
CVE-2023-6609osCommerce all-products cross-site scripting6.1v3.10.4%2023-12-08
CVE-2023-6608Tongda OA 2017 delete.php SQL injection7.5v3.10.6%2023-12-08
CVE-2023-6607Tongda OA 2017 delete.php SQL injection7.5v3.10.7%2023-12-08
CVE-2023-6606Kernel: Out-of-bounds read vulnerability in smbcalcsize7.1NVD v3.10.5%2023-12-08Fix
CVE-2023-6599Missing Standardized Error Handling Mechanism in microweber/microweber4.3v3.10.5%2023-12-08Fix
CVE-2023-6507Python CPython groups not dropped before running subprocess when using empty extra_groups parameter6.1CNA v3.11.3%2023-12-08Fix
CVE-2023-6337Vault may be vulnerable to a denial of service7.5CNA v3.10.8%2023-12-08Fix
CVE-2023-6245Internet Computer Candid infinite decoding loop through specially crafted payload7.5CNA v3.11.2%2023-12-08Fix
CVE-2023-6146Stored XSS vulnerability in QualysGuard VM/PC5.7CNA v3.10.4%2023-12-08Fix
CVE-2023-5008Student Information System unauthenticated SQL injection9.8CNA v3.10.9%2023-12-08
CVE-2023-50164Apache Struts: File upload component had a directory traversal9.8v3.180.8%2023-12-07Emerging ThreatsExploit codeFix
CVE-2023-50002Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-50001Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-50000Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49999Tenda W30E out-of-bounds write9.8v3.12.2%2023-12-07
CVE-2023-49967Typecho XML entity expansion7.5v3.10.7%2023-12-07
CVE-2023-49958Dallmann-consulting Open Charge Point Protocol improper input validation7.5v3.10.6%2023-12-07
CVE-2023-49957An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. It permits multiple transactions with the same connectorId and idTag, contrary to the expected ConcurrentTx status. This could result in critical transaction management and billing7.5v3.10.5%2023-12-07
CVE-2023-49956An issue was discovered in Dalmann OCPP.Core before 1.3.0 for OCPP (Open Charge Point Protocol) for electric vehicles. A StopTransaction message with any random transactionId terminates active transactions.7.5v3.10.7%2023-12-07
CVE-2023-49955Dallmann-consulting Open Charge Point Protocol denial of service7.5v3.10.7%2023-12-07
CVE-2023-49746SpeedyCache WordPress plugin server side request forgery (SSRF)4.3v3.10.3%2023-12-07Fix
CVE-2023-49493DedeCMS cross-site scripting6.1v3.10.4%2023-12-07
CVE-2023-49492DedeCMS cross-site scripting6.1v3.10.4%2023-12-07
CVE-2023-49468struktur libde265 buffer overflow8.8v3.10.9%2023-12-07Fix
CVE-2023-49467struktur libde265 out-of-bounds write8.8v3.10.8%2023-12-07Fix
CVE-2023-49465struktur libde265 out-of-bounds write8.8v3.10.8%2023-12-07Fix
CVE-2023-49464libheif v1.17.5 was discovered to contain a segmentation violation via the function UncompressedImageCodec::get_luma_bits_per_pixel_from_configuration_unci.8.8v3.10.8%2023-12-07Fix
CVE-2023-49463struktur libheif find_exif_tag function vulnerability8.8v3.10.8%2023-12-07Fix
CVE-2023-49462struktur libheif exif.cc vulnerability8.8v3.10.8%2023-12-07Fix
CVE-2023-49460struktur libheif UncompressedImageCodec::decode_uncompressed_image vulnerability8.8v3.10.8%2023-12-07Fix
CVE-2023-49437Tenda AX12 command injection9.8v3.12.4%2023-12-07
CVE-2023-49436Tenda AX9 command injection9.8v3.12.4%2023-12-07
CVE-2023-49435Tenda AX9 command injection9.8v3.12.4%2023-12-07
CVE-2023-49434Tenda AX9 out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49433Tenda AX9 out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49432Tenda AX9 out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49431Tenda AX9 command injection9.8v3.12.4%2023-12-07
CVE-2023-49430Tenda AX9 out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49429Tenda AX9 SQL injection9.8v3.12.4%2023-12-07
CVE-2023-49428Tenda AX12 command injection9.8v3.12.5%2023-12-07
CVE-2023-49426Tenda AX12 out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49425Tenda AX12 out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49424Tenda AX12 stack-based buffer overflow9.8v3.10.9%2023-12-07
CVE-2023-49411Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49410Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49409Tenda AX3 command execution9.8v3.11.5%2023-12-07
CVE-2023-49408Tenda AX3 out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49406Tenda W30E command execution9.8v3.11.5%2023-12-07
CVE-2023-49405Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49404Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49403Tenda W30E out-of-bounds write9.8v3.12.2%2023-12-07
CVE-2023-49402Tenda W30E out-of-bounds write9.8v3.10.9%2023-12-07
CVE-2023-49225CommScope ZoneDirector Ruckus Access Point products cross-site scripting6.1v3.10.4%2023-12-07Fix
CVE-2023-48958gpac MPD URL resolver memory leak5.5v3.10.3%2023-12-07
CVE-2023-48861Baidu Ttplayer DLL hijacking7.8v3.10.3%2023-12-07
CVE-2023-48860TOTOLINK N300RT remote code execution9.8v3.11.4%2023-12-07
CVE-2023-48841PHP Jabbers Appointment Scheduler CSV injection8.8v3.11.2%2023-12-07
CVE-2023-48840PHP Jabbers Appointment Scheduler resource exhaustion7.5v3.11.1%2023-12-07
CVE-2023-48839PHP Jabbers Appointment Scheduler cross-site scripting5.4v3.10.4%2023-12-07
CVE-2023-48838PHP Jabbers Appointment Scheduler cross-site scripting5.4v3.10.5%2023-12-07
CVE-2023-48837PHP Jabbers Car Rental Script cross-site scripting5.4v3.10.5%2023-12-07
CVE-2023-48836PHP Jabbers Car Rental Script cross-site scripting5.4v3.10.5%2023-12-07
CVE-2023-48835PHP Jabbers Car Rental Script CSV injection8.8v3.11.2%2023-12-07
CVE-2023-48834PHP Jabbers Car Rental Script resource exhaustion7.5v3.11.1%2023-12-07
CVE-2023-48833PHP Jabbers Time Slots Booking Calendar resource exhaustion7.5v3.11.1%2023-12-07
CVE-2023-48831PHP Jabbers Availability Booking Calendar resource exhaustion7.5v3.11.2%2023-12-07
CVE-2023-48830PHP Jabbers Shuttle Booking Software CSV injection8.8v3.11.2%2023-12-07
CVE-2023-48828PHP Jabbers Time Slots Booking Calendar cross-site scripting5.4v3.10.5%2023-12-07
CVE-2023-48827PHP Jabbers Time Slots Booking Calendar cross-site scripting5.4v3.10.5%2023-12-07