CVE-2023 list

CVE-2023 records published after 2023

Page three of eight: records 2,001 to 3,000 of the 7,334 published after 2023, newest first. The first page carries the figures for After 2023.

CVE-2023 records published after 2023, newest first: records 2,001 to 3,000 of 7,334
CVE Summary CVSS EPSS Published Signals
CVE-2023-6605FFmpeg: Dash playlist SSRF vulnerability in FFmpeg7.2CISA ADP v3.10.4%2025-01-06Fix
CVE-2023-6604FFmpeg: Hls xbin demuxer DoS amplification in FFmpeg5.3CISA ADP v3.10.5%2025-01-06Fix
CVE-2023-6601FFmpeg: Hls unsafe file extension bypass in FFmpeg4.7CISA ADP v3.10.4%2025-01-06Fix
CVE-2023-48758JetEngine WordPress plugin broken access control7.1CNA v3.10.3%2025-01-02Fix
CVE-2023-48739Porto Theme Functionality WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-4780710WebAnalytics WordPress plugin broken access control4.3v3.10.3%2025-01-02
CVE-2023-47778LuckyWP Scripts Control WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-47693Ultimate Addons for Contact Form 7 WordPress plugin broken access control7.5CNA v3.10.5%2025-01-02Fix
CVE-2023-47692Flo Forms WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-47689Animator WordPress plugin unauthenticated plugin settings Change vulnerability6.5CNA v3.10.4%2025-01-02Fix
CVE-2023-47661Dragfy Addons for Elementor WordPress plugin broken access control + CSRF5.4CNA v3.10.4%2025-01-02
CVE-2023-47648EazyDocs WordPress plugin broken access control7.5CNA v3.10.5%2025-01-02Fix
CVE-2023-47647BadgeOS WordPress plugin broken access control4.3CNA v3.10.4%2025-01-02
CVE-2023-47557Visitor Traffic Real Time Statistics WordPress plugin broken access control4.3CNA v3.10.4%2025-01-02Fix
CVE-2023-47523Auto Tag Creator WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-47515Seers GDPR and CCPA Cookie Consent and Compliance WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-47241CoCart Headless ecommerce WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-47225Short URL WordPress plugin broken access control5.4CNA v3.10.4%2025-01-02
CVE-2023-47224WP Travel WordPress plugin broken access control7.5CNA v3.10.4%2025-01-02Fix
CVE-2023-47188Simple Job Board WordPress plugin broken access control9.8v3.10.4%2025-01-02Fix
CVE-2023-47187Animated Rotating Words WordPress plugin broken access control5.4CNA v3.10.4%2025-01-02Fix
CVE-2023-47183GiveWP WordPress plugin broken access control9.8v3.10.4%2025-01-02Fix
CVE-2023-47180Finale Lite WordPress plugin XLPlugins missing authorization6.5CNA v3.10.4%2025-01-02Fix
CVE-2023-47179WooODT Lite WordPress plugin arbitrary site option update vulnerability8.8CNA v3.11.0%2025-01-02Exploit codeFix
CVE-2023-46644WordPress CTA plugin broken access control6.5CNA v3.10.4%2025-01-02Fix
CVE-2023-46639kk Star Ratings WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46637Generate Dummy Posts WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02
CVE-2023-46635YITH WooCommerce Product Add-Ons WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46633WP Glossary WordPress plugin broken access control5.4CNA v3.10.4%2025-01-02
CVE-2023-46632My Shortcodes WordPress plugin broken access control7.1CNA v3.10.4%2025-01-02
CVE-2023-46631Product Recommendation Quiz for eCommerce WordPress plugin broken access control6.5CNA v3.10.4%2025-01-02Fix
CVE-2023-46628WP Word Count WordPress plugin broken access control4.3v3.10.3%2025-01-02
CVE-2023-46616Draw Attention WordPress plugin broken access control5.4CNA v3.10.3%2025-01-02Fix
CVE-2023-46612Mediabay WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02
CVE-2023-46611YOP Poll WordPress plugin Vote manipulation Due to Broken Captcha control vulnerability5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46610Quill Forms WordPress plugin broken access control + CSRF6.5CNA v3.10.4%2025-01-02Fix
CVE-2023-46609FeedFocal WordPress plugin broken access control6.5CNA v3.10.4%2025-01-02Fix
CVE-2023-46608DoLogin Security WordPress plugin Multiple broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46607WP iCal Availability WordPress plugin broken access control5.4CNA v3.10.3%2025-01-02
CVE-2023-46606AtomChat WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46605Convertful Your Ultimate On-Site Conversion Tool WordPress plugin broken access control5.3CNA v3.10.3%2025-01-02Fix
CVE-2023-46309wpDiscuz WordPress plugin broken access control7.3v3.10.4%2025-01-02Fix
CVE-2023-46206MW WP Form WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46203Just Custom Fields WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02
CVE-2023-46196Social proof testimonials and reviews by Repuso WordPress plugin broken access control4.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46195Headline Analyzer WordPress plugin broken access control6.5CNA v3.10.3%2025-01-02Fix
CVE-2023-46188Freesoul Deactivate Plugins WordPress plugin broken access control4.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46083Kali Forms WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46082Broken Link Checker Finder WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-46080ApplyOnline Application Form Builder and Manager WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-46079Ashe Extra WordPress plugin broken access control + CSRF5.4CNA v3.10.4%2025-01-02Fix
CVE-2023-46073DX Delete Attached Media WordPress plugin broken access control vulnerability + CSRF5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-45828RumbleTalk Live Group Chat WordPress plugin broken access control5.4CNA v3.10.8%2025-01-02Exploit codeFix
CVE-2023-45766Poll Maker WordPress plugin broken access control5.3v3.10.4%2025-01-02Fix
CVE-2023-45765WP ERP WordPress plugin broken access control4.3v3.10.3%2025-01-02Fix
CVE-2023-45760wpDiscuz WordPress plugin broken access control8.8v3.10.4%2025-01-02Fix
CVE-2023-45649Appointment Hour Booking WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-45636Backup and Migration WordPress plugin broken access control5.4CNA v3.10.4%2025-01-02Fix
CVE-2023-45633IMPress Listings WordPress plugin broken access control6.5CNA v3.10.3%2025-01-02
CVE-2023-45631Gallery Image and Video Gallery with Thumbnails WordPress plugin broken access control5.4v3.10.3%2025-01-02
CVE-2023-45275Kali Forms WordPress plugin WP Chill missing authorization6.5CNA v3.10.5%2025-01-02Fix
CVE-2023-4527210Web Map Builder for Google Maps WordPress plugin Notice Dismissal vulnerability4.3v3.10.3%2025-01-02Fix
CVE-2023-45271WowStore WordPress plugin WPXPO missing authorization4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-45110Bold Timeline Lite WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-45104BetterLinks WordPress plugin broken access control8.8v3.10.4%2025-01-02Fix
CVE-2023-45101Customer Reviews for WooCommerce WordPress plugin broken access control4.3v3.10.3%2025-01-02Fix
CVE-2023-45061WP Job Openings WordPress plugin broken access control5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-45045WP Custom Widget area WordPress plugin broken access control5.4CNA v3.10.4%2025-01-02
CVE-2023-45002WP User Frontend WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-44988WP Custom Admin Interface WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-44258Schema App Structured Data WordPress plugin broken access control + CSRF5.3CNA v3.10.4%2025-01-02Fix
CVE-2023-40327Putler Connector for WooCommerce WordPress plugin unauthenticated broken access control6.5CNA v3.10.3%2025-01-02Fix
CVE-2023-39994ARMember Premium WordPress plugin broken access control4.3CNA v3.10.3%2025-01-02Fix
CVE-2023-32240Woodmart WordPress theme broken access control5.4CNA v3.10.3%2025-01-02Fix
CVE-2023-23672GiveWP WordPress plugin arbitrary content deletion vulnerability5.4v3.10.4%2025-01-02Fix
CVE-2023-50850Woo Subscriptions WordPress plugin broken access control4.3CNA v3.10.4%2024-12-31Fix
CVE-2023-48775WP CleanFix WordPress plugin broken access control5.3CNA v3.10.4%2024-12-31Fix
CVE-2023-6603FFmpeg: Null pointer dereference in FFmpeg hls parsing7.5NVD v3.10.6%2024-12-31Fix
CVE-2023-6602FFmpeg: Improper handling of input format in tty demuxer of FFmpeg5.3CNA v3.10.5%2024-12-31Fix
CVE-2023-52718Huawei PT9030-15 unprotected alternate channel6.4CNA v3.10.2%2024-12-28Fix
CVE-2023-7266Huawei TC7001-10 unprotected alternate channel7.5CNA v3.10.3%2024-12-28Fix
CVE-2023-7263Huawei HarmonyOS AILife Solution path traversal7.3CNA v3.10.3%2024-12-28
CVE-2023-7300Huawei HarmonyOS AILife Solution path traversal8.0CNA v3.10.3%2024-12-26
CVE-2023-5117Exposure of sensitive information due to incompatible policies in GitLab3.7CNA v3.10.3%2024-12-25Fix
CVE-2023-31280Sierra Wireless AirVantage warranty checker tool information disclosure5.3CNA v3.10.4%2024-12-21
CVE-2023-31279Sierra Wireless AirVantage improper authentication8.1CNA v3.10.4%2024-12-21
CVE-2023-42867Apple GarageBand improper preservation of permissions7.8v3.10.2%2024-12-20Fix
CVE-2023-30443IBM Db2 denial of service5.3CNA v3.10.5%2024-12-19Fix
CVE-2023-23357QNAP QuLog Center cross-site scripting4.8CNA v3.10.4%2024-12-19Fix
CVE-2023-23356QNAP QuFirewall command injection5.5CNA v3.10.9%2024-12-19Fix
CVE-2023-23354QNAP QuLog Center cross-site scripting7.3CNA v3.10.5%2024-12-19Fix
CVE-2023-21586Adobe Acrobat Reader null pointer dereference5.5CNA v3.12.2%2024-12-19Fix
CVE-2023-7005Sciener TTLock App encryption protocol negotiation vulnerability7.5CISA ADP v3.10.3%2024-12-19
CVE-2023-4617Gaining remote control over Govee devices10.0CNA v3.10.6%2024-12-19Fix
CVE-2023-50956IBM Storage Defender Resiliency service information disclosure4.4CNA v3.10.4%2024-12-18Fix
CVE-2023-34990Fortinet FortiWLM relative path traversal9.6CNA v3.124.8%2024-12-18NucleiFix
CVE-2023-37940Liferay Portal edit Service Access Policy page cross-site scripting4.8CNA v3.10.3%2024-12-17Fix
CVE-2023-29476On-Premise Appliance web policy enforcement HTTP request smuggling9.1CISA ADP v3.10.4%2024-12-14
CVE-2023-44149Brands for WooCommerce WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-44147Comment Blacklist Updater WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-44142Inactive Logout WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13Fix
CVE-2023-41952Contact Form - WPManageNinja FluentForm missing authorization5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-41951rtMedia for WordPress, BuddyPress and bbPress plugin broken access control4.3CNA v3.10.6%2024-12-13Fix
CVE-2023-41875WP Directory Kit WordPress plugin broken access control9.8v3.10.6%2024-12-13Fix
CVE-2023-41873SAML Single Sign On SSO Login WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-41870WP Crowdfunding WordPress plugin broken access control8.8v3.10.6%2024-12-13Fix
CVE-2023-41869WP Accessibility Helper (WAH) WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-41866Automatic YouTube Gallery WordPress plugin broken access control4.3CNA v3.10.7%2024-12-13Fix
CVE-2023-41865Slider Pro WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-41862VS Contact Form WordPress plugin Sum Captcha bypass vulnerability5.3CNA v3.10.7%2024-12-13Fix
CVE-2023-41857Click To Tweet WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13
CVE-2023-41849Posts Like Dislike WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-41848Carousel Slider WordPress plugin broken access control5.3v3.10.5%2024-12-13Fix
CVE-2023-41803BitPay Checkout for WooCommerce WordPress plugin broken access control5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-41802Super Socializer WordPress plugin broken access control4.3v3.10.6%2024-12-13Fix
CVE-2023-41695Analytify WordPress plugin broken access control8.8v3.10.5%2024-12-13Fix
CVE-2023-41690WiserNotify Social Proof WordPress plugin broken access control5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-41689Post to Google My Business (Google Business Profile) WordPress plugin broken access control4.3CNA v3.10.4%2024-12-13Fix
CVE-2023-41688Bulk NoIndex and NoFollow Toolkit WordPress plugin broken access control5.4CNA v3.10.6%2024-12-13Fix
CVE-2023-41686Woocommerce Support System WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.3%2024-12-13Fix
CVE-2023-41683TelSender WordPress plugin broken access control + CSRF5.4CNA v3.10.6%2024-12-13Fix
CVE-2023-41671Abandoned Cart Lite for WooCommerce WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.5%2024-12-13Fix
CVE-2023-41664Easy Newsletter Signups WordPress plugin broken access control6.5CNA v3.10.5%2024-12-13
CVE-2023-41649Ovic Product Bundle WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13
CVE-2023-41133Secure Admin IP WordPress plugin IP spoofing5.3CNA v3.10.6%2024-12-13
CVE-2023-41132Category Slider for WooCommerce WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-41130Premmerce User Roles WordPress plugin broken access control8.1CNA v3.10.6%2024-12-13Fix
CVE-2023-40678Simple URLs WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13Fix
CVE-2023-40670ReviewX WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-40334HUSKY WordPress plugin broken access control8.8v3.10.5%2024-12-13Fix
CVE-2023-40331Accordion Slider WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-40213Justified Gallery WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-40203MailChimp Forms by MailMunch WordPress plugin broken access control8.8v3.10.7%2024-12-13Fix
CVE-2023-40011Cost Calculator Builder WordPress plugin broken access control5.4CNA v3.10.6%2024-12-13Fix
CVE-2023-40005Easy Digital Downloads WordPress plugin broken access control9.8v3.10.6%2024-12-13Fix
CVE-2023-40003WP Project Manager WordPress plugin broken access control9.8v3.10.5%2024-12-13Fix
CVE-2023-40001iThemes Sync WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-39997Popup by Supsystic WordPress plugin broken access control9.8v3.10.7%2024-12-13Fix
CVE-2023-39996Accordion and Accordion Slider WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-39995Portfolio and Projects WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-39920Redirection for Contact Form 7 WordPress plugin broken access control7.5CNA v3.10.6%2024-12-13Fix
CVE-2023-39305Yet Another Stars Rating WordPress plugin broken access control5.3CNA v3.10.4%2024-12-13Fix
CVE-2023-38514Social Share Icons and Social Share Buttons WordPress plugin broken access control4.3CNA v3.10.4%2024-12-13Fix
CVE-2023-38483Instant CSS WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13Fix
CVE-2023-38480Booster Elementor Addons WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13
CVE-2023-38479Simple Googlebot Visit WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-38477QR code MeCard/vCard generator WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-38475Donations Made Easy Smart Donations WordPress plugin broken access control8.8v3.10.6%2024-12-13
CVE-2023-38385Jupiter X Core WordPress plugin Multiple Auth. broken access control8.8v3.10.6%2024-12-13Fix
CVE-2023-38383Language WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13
CVE-2023-37989Easyship WooCommerce Shipping Rates WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13Fix
CVE-2023-37987YourMembership Single Sign On WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13Fix
CVE-2023-37984Quiz And Survey Master WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-37971WooCommerce Product Stock Alert WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13Fix
CVE-2023-37969Checkout with Zelle on Woocommerce WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-37967DirectoryPress WordPress plugin unauthenticated broken access control9.8v3.10.7%2024-12-13Fix
CVE-2023-37887WPSchoolPress WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13Fix
CVE-2023-36681Cryptocurrency Widgets Price Ticker and Coins List WordPress plugin broken access control9.8v3.10.9%2024-12-13Fix
CVE-2023-36680Image Regenerate and Select Crop WordPress plugin broken access control5.4CNA v3.10.6%2024-12-13Fix
CVE-2023-36531LiquidPoll WordPress plugin broken access control4.3CNA v3.11.1%2024-12-13Exploit codeFix
CVE-2023-36528kk Star Ratings WordPress plugin Rate manipulation due to IP spoofing5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-36526Duplicate Post Page Menu and Custom Post Type WordPress plugin broken access control5.4CNA v3.10.6%2024-12-13Fix
CVE-2023-36519SW Product Bundles WordPress plugin broken access control5.4CNA v3.10.6%2024-12-13
CVE-2023-36518Post Hit Counter WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13
CVE-2023-36510ReDi Restaurant Reservation WordPress plugin broken access control7.3CNA v3.10.5%2024-12-13Fix
CVE-2023-36509CHP Ads Block Detector WordPress plugin broken access control5.4CNA v3.10.4%2024-12-13Fix
CVE-2023-36506YITH WooCommerce Waitlist WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-35875Gutenverse Gutenberg Blocks Page Builder for Site Editor WordPress plugin broken access control5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-35777The Events Calendar WordPress plugin broken access control5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-35052Directorist WordPress plugin arbitrary content deletion vulnerability4.3CNA v3.10.4%2024-12-13Fix
CVE-2023-35051Contact Forms by Cimatti WordPress plugin broken access control8.8v3.10.5%2024-12-13Fix
CVE-2023-35046Dynamic Visibility for Elementor WordPress plugin broken access control5.4CNA v3.10.6%2024-12-13Fix
CVE-2023-35037Surfer WordPress plugin broken access control7.6CNA v3.10.6%2024-12-13Fix
CVE-2023-34387Constant Contact Forms WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-34381Zippy WordPress plugin broken access control5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-34376Change WooCommerce Add To Cart Button Text WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13
CVE-2023-34019Uncanny Toolkit for LearnDash WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13Fix
CVE-2023-34014Grid Plus WordPress plugin broken access control5.4CNA v3.10.4%2024-12-13Fix
CVE-2023-34009Social Media Share Buttons and Social Sharing Icons WordPress plugin broken access control + CSRF4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-33998Easy Social Icons WordPress plugin broken access control4.3CNA v3.10.4%2024-12-13Fix
CVE-2023-33996Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin broken access control8.8CNA v3.10.7%2024-12-13Fix
CVE-2023-33995Photo Gallery by 10Web WordPress plugin broken access control4.3v3.10.5%2024-12-13Fix
CVE-2023-33994Slimstat Analytics WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13Fix
CVE-2023-33928WordPress Backup and Migration plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-33324Easy Captcha WordPress plugin broken access control6.5CNA v3.10.6%2024-12-13
CVE-2023-33215Taggbox WordPress plugin broken access control5.4CNA v3.10.4%2024-12-13Fix
CVE-2023-32963Predictive Search for WooCommerce WordPress plugin broken access control5.3CNA v3.10.5%2024-12-13Fix
CVE-2023-32798Simple Page Ordering WordPress plugin broken access control5.3CNA v3.10.6%2024-12-13Fix
CVE-2023-32601Booking Ultra Pro Appointments Booking Calendar WordPress plugin broken access control5.4CNA v3.10.5%2024-12-13Fix
CVE-2023-32599reCAPTCHA for all WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-32593GS Pins for Pinterest WordPress plugin broken access control5.4CNA v3.10.4%2024-12-13Fix
CVE-2023-32586SoundCloud Is Gold WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13
CVE-2023-32585Portfolio Gallery Responsive Image Gallery WordPress plugin broken access control7.5CNA v3.10.8%2024-12-13Fix
CVE-2023-32581WP-Chatbot for Messenger WordPress plugin broken access control5.4CNA v3.10.6%2024-12-13Fix
CVE-2023-32574Injection Guard WordPress plugin broken access control4.3CNA v3.10.4%2024-12-13Fix
CVE-2023-32520WCP Contact Form WordPress plugin broken access control7.5CNA v3.10.8%2024-12-13
CVE-2023-32519WCP Contact Form WordPress plugin broken access control4.3CNA v3.10.5%2024-12-13
CVE-2023-32507Woo Custom Emails WordPress plugin broken access control7.3CNA v3.10.5%2024-12-13
CVE-2023-32506Link Whisper Free WordPress plugin unauthenticated broken access control6.5CNA v3.10.5%2024-12-13Fix
CVE-2023-30490Easing Slider WordPress plugin plugin settings reset vulnerability7.5CNA v3.10.8%2024-12-13
CVE-2023-28990Viral Mag WordPress theme authenticated arbitrary plugin activation vulnerability4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-27456Total WordPress theme authenticated arbitrary plugin activation4.3CNA v3.10.5%2024-12-13Fix
CVE-2023-25988Video Gallery YouTube Gallery WordPress plugin broken access control7.5CNA v3.10.8%2024-12-13Fix
CVE-2023-22697Survey Maker WordPress plugin broken access control9.8v3.10.6%2024-12-13Fix
CVE-2023-37395IBM Aspera Faspex information disclosure2.5CNA v3.10.1%2024-12-11Fix
CVE-2023-23472IBM InfoSphere Information Server information disclosure3.1CNA v3.10.3%2024-12-11Fix
CVE-2023-6947Best WordPress Gallery Plugin FooGallery authenticated (Contributor+) directory traversal7.7CNA v3.10.8%2024-12-10Fix
CVE-2023-51362My Sticky Elements WordPress plugin Premio missing authorization5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-51360Essential Blocks WordPress plugin Multiple Subscriber+ broken access control8.8v3.10.6%2024-12-09Fix
CVE-2023-51359Essential Blocks WordPress plugin Multiple Contributor+ broken access control8.8v3.10.6%2024-12-09Fix
CVE-2023-51357Conversios.io WordPress plugin missing authorization5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-51355MultiVendorX WordPress plugin broken access control8.2CNA v3.10.5%2024-12-09Fix
CVE-2023-51353Popup by Supsystic WordPress plugin broken access control9.8v3.10.6%2024-12-09Fix
CVE-2023-50904Poll Maker WordPress plugin broken access control5.3v3.10.7%2024-12-09Fix
CVE-2023-50903Metform Elementor Contact Form Builder WordPress plugin broken access control9.8v3.10.6%2024-12-09Fix
CVE-2023-50899Product Catalog Enquiry for WooCommerce by MultiVendorX WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09Fix
CVE-2023-50887User Feedback WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-50884LA-Studio Element Kit for Elementor WordPress plugin broken access control6.5CNA v3.10.6%2024-12-09Fix
CVE-2023-50882ProfilePress WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-50877Product Filter by WBW WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09Fix
CVE-2023-50876Molongui WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09Fix
CVE-2023-50375Translate WordPress Google Language Translator plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-50373Alt Manager WordPress plugin broken access control5.3CNA v3.10.6%2024-12-09Fix
CVE-2023-49861Social Media Feather WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49859Login With Ajax WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49858Custom Login WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49857Awesome Support WordPress plugin broken access control6.5v3.10.5%2024-12-09Fix
CVE-2023-49856Smart Forms WordPress plugin authenticated arbitrary options Change vulnerability8.8v3.10.5%2024-12-09Fix
CVE-2023-49851Square Thumbnails WordPress plugin broken access control + CSRF5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-49850WP Simple HTML Sitemap WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49849Shortcoder WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49848Sharkdropship dropshipping for Aliexpress, eBay, Amazon, etsy WordPress plugin broken access control6.5CNA v3.10.5%2024-12-09Fix
CVE-2023-49845Redirects WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09
CVE-2023-49835Post Duplicator WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49832Site Reviews WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-49831RegistrationMagic WordPress plugin broken access control7.5v3.10.6%2024-12-09Fix
CVE-2023-49818Webflow Pages WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-49817Flexible Woocommerce Checkout Field Editor WordPress plugin broken access control8.2CNA v3.10.6%2024-12-09
CVE-2023-49758WP Booking System WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49757Awesome Support WordPress plugin broken access control + CSRF5.4v3.10.5%2024-12-09Fix
CVE-2023-49756Eventin WordPress plugin authenticated Notice Dismissal vulnerability8.8v3.10.6%2024-12-09Fix
CVE-2023-49755Elementor Timeline Widget WordPress plugin Notice Dismissal vulnerability5.4CNA v3.10.5%2024-12-09Fix
CVE-2023-49754Bulk Edit Post Titles WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09
CVE-2023-49196Pagelayer WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-49194Importify (Dropshipping WooCommerce) WordPress plugin sensitive data exposure5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-49193Hubbub Lite WordPress plugin NerdPress missing authorization5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-49192Enhanced Text Widget WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-49167Database for CF7 WordPress plugin broken access control6.5CNA v3.10.6%2024-12-09Fix
CVE-2023-49158LadiApp WordPress plugin broken access control lead to XSS7.1CNA v3.10.5%2024-12-09
CVE-2023-49156GoDaddy Email Marketing WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09
CVE-2023-49154Button Generator easily Button Builder WordPress plugin broken access control5.3CNA v3.10.6%2024-12-09Fix
CVE-2023-48779360 Javascript Viewer WordPress plugin broken access control6.5CNA v3.10.6%2024-12-09Fix
CVE-2023-48776canvasio3D Light WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09
CVE-2023-48774IdeaPush WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09Fix
CVE-2023-48750Void Elementor Post Grid Addon for Elementor Page builder WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-48740Easy Social Feed WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-48332Mail Bank #1 Mail SMTP Plugin for WordPress broken access control4.3CNA v3.10.5%2024-12-09
CVE-2023-48324Awesome Support HelpDesk WordPress plugin broken access control5.4v3.10.5%2024-12-09Fix
CVE-2023-48287TextMe SMS WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09Fix
CVE-2023-48286Accept Stripe Payments WordPress plugin broken access control8.2CNA v3.10.5%2024-12-09Fix
CVE-2023-48277Super Progressive Web Apps WordPress plugin broken access control4.3CNA v3.10.6%2024-12-09Fix
CVE-2023-48274WCMultiShipping WordPress plugin broken access control6.5CNA v3.10.5%2024-12-09Fix
CVE-2023-47871Contact Form to Any API WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09Fix
CVE-2023-47869wpForo WordPress plugin broken access control + CSRF5.4v3.10.3%2024-12-09Fix
CVE-2023-47849BlossomThemes Email Newsletter WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-47847PayTR Taksit Tablosu WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-47841Analytify WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-47838Conditional Fields for Contact Form 7 WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09Fix
CVE-2023-47836WP Meta and Date Remover WordPress plugin broken access control5.4CNA v3.10.4%2024-12-09Fix
CVE-2023-47832SearchIQ WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-47830Live Preview for Contact Form 7 WordPress plugin broken access control5.4CNA v3.10.4%2024-12-09
CVE-2023-47826Restaurant and Cafe Addon for Elementor WordPress plugin broken access control9.8v3.10.5%2024-12-09Fix
CVE-2023-47823FormCraft Contact Form Builder for WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-47822MP3 Audio Player for Music, Radio and Podcast by Sonaar WordPress plugin broken access control8.8v3.10.4%2024-12-09Fix
CVE-2023-47820WP Like Button WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09
CVE-2023-47805WPCafe WordPress plugin broken access control9.8v3.10.5%2024-12-09Fix
CVE-2023-47793Acme Fix Images WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09Fix
CVE-2023-47780EasyAzon Amazon Associates Affiliate WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09Fix
CVE-2023-47776miniorange otp verification WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09Fix
CVE-2023-47764Ditty WordPress plugin broken access control6.5CNA v3.10.4%2024-12-09Fix
CVE-2023-47763WP Custom Admin Interface WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-47762BetterDocs WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09Fix
CVE-2023-47761Simple 301 Redirects by BetterLinks WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09Fix
CVE-2023-47760Essential Blocks WordPress plugin broken access control8.8v3.10.4%2024-12-09Fix
CVE-2023-47756Welcome Email Editor WordPress plugin broken access control4.3CNA v3.10.3%2024-12-09Fix
CVE-2023-47698Japanized For WooCommerce WordPress plugin Multiple broken access control8.6CNA v3.10.4%2024-12-09Fix
CVE-2023-47694Mini Cart Drawer For WooCommerce WordPress plugin broken access control5.4CNA v3.10.4%2024-12-09Fix
CVE-2023-43962Xunrui CMS Public Edition v.4.6.1 cross-site scripting4.8CISA ADP v3.10.3%2024-12-09
CVE-2023-41953ProfilePress WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-32299Ni WooCommerce Sales Report WordPress plugin broken access control6.5CNA v3.10.4%2024-12-09Fix
CVE-2023-32293WRC Pricing Tables WordPress plugin broken access control5.3CNA v3.10.6%2024-12-09Fix
CVE-2023-32126SALERT WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-32117Integrate Google Drive WordPress plugin unauthenticated broken access control9.8CNA v3.17.3%2024-12-09Reported exploitedNucleiExploit codeFix
CVE-2023-32094Extended Post Status WordPress plugin broken access control5.4CNA v3.10.3%2024-12-09Fix
CVE-2023-31214WP Quick Post Duplicator WordPress plugin broken access control5.4CNA v3.10.3%2024-12-09Fix
CVE-2023-31073Shortcode to display post and user data WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-30873WP Docs WordPress plugin broken access control8.8v3.10.5%2024-12-09Fix
CVE-2023-30870Sharkdropship for AliExpress Dropship and Affiliate WordPress plugin Multiple broken access control6.5CNA v3.10.4%2024-12-09Fix
CVE-2023-30783Smart WooCommerce Search WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-30748Easy Appointments WordPress plugin Auth. stored cross-site scripting (XSS)6.1v3.10.3%2024-12-09Fix
CVE-2023-30488Featured Post Creative WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-30486Square WordPress theme broken access control4.3CNA v3.10.8%2024-12-09Exploit codeFix
CVE-2023-30479Stamped.io Product Reviews and UGC for WooCommerce WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-30476Blogger Buzz WordPress theme broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-29433tencentcloud-cos WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09
CVE-2023-29431qTranslate X Cleanup and WPML Import WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-29429User Registration WordPress plugin broken access control5.3v3.10.4%2024-12-09Fix
CVE-2023-29422Dynamics 365 Integration WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-29239LuckyWP Scripts Control WordPress plugin broken access control5.4CNA v3.10.4%2024-12-09Fix
CVE-2023-29237Muhammad Rehman Remove Duplicate Posts missing authorization6.3CNA v3.10.4%2024-12-09Fix
CVE-2023-29173Product Category Tree WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09
CVE-2023-28689JS Job Manager WordPress plugin broken access control6.5CNA v3.10.5%2024-12-09Fix
CVE-2023-28688TH Variation Swatches WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2024-12-09Fix
CVE-2023-28536Branded Social Images WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-28532Real Estate Directory WordPress theme authenticated arbitrary plugin activation4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-28417Dynamics 365 Integration WordPress plugin broken access control5.4CNA v3.10.4%2024-12-09Fix
CVE-2023-28416Chankhe WordPress theme authenticated arbitrary plugin activation vulnerability4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-28168WordPress Console plugin broken access control3.7CNA v3.10.4%2024-12-09
CVE-2023-28165Backup Bank: WordPress Backup plugin broken access control4.3CNA v3.10.4%2024-12-09
CVE-2023-27626Stock Ticker WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09Fix
CVE-2023-27625Site Reviews WordPress plugin broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-27454Rife Elementor Extensions and Templates WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09Fix
CVE-2023-27449Total Poll Lite WordPress plugin broken access control6.3CNA v3.10.4%2024-12-09Fix
CVE-2023-27428WP users media WordPress plugin broken access control5.4CNA v3.10.4%2024-12-09
CVE-2023-26522WP Repost WordPress plugin broken access control6.5CNA v3.10.6%2024-12-09
CVE-2023-26520Advanced Text Widget WordPress plugin broken access control5.3CNA v3.10.4%2024-12-09
CVE-2023-25993Top 10 Popular posts plugin for WordPress broken access control4.3CNA v3.10.4%2024-12-09Fix
CVE-2023-25966FileBird WordPress plugin broken access control6.5v3.10.6%2024-12-09Fix
CVE-2023-25959Apollo13 Framework Extensions WordPress plugin broken access control5.4CNA v3.10.6%2024-12-09Fix
CVE-2023-25791Fontiran WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09
CVE-2023-25714Quick Paypal Payments WordPress plugin broken access control7.5CNA v3.10.8%2024-12-09Fix
CVE-2023-25703Meta slider and carousel with lightbox WordPress plugin broken access control5.3CNA v3.10.5%2024-12-09Fix
CVE-2023-25486Clone WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09Fix
CVE-2023-25469Easy Table of Contents WordPress plugin broken access control5.4CNA v3.10.6%2024-12-09Fix
CVE-2023-25455WordPress Social Login and Register plugin arbitrary content deletion vulnerability5.3CNA v3.10.8%2024-12-09Fix
CVE-2023-25454Protected Posts Logout Button WordPress plugin broken access control6.5CNA v3.10.7%2024-12-09Fix
CVE-2023-25067We’re Open! WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09Fix
CVE-2023-25060Album and Image Gallery plus Lightbox WordPress plugin broken access control5.3CNA v3.10.6%2024-12-09Fix
CVE-2023-25048Fantastic Content Protector Free WordPress plugin broken access control5.3CNA v3.10.6%2024-12-09
CVE-2023-25037Booking Calendar Contact Form WordPress plugin broken access control4.3CNA v3.10.6%2024-12-09Fix
CVE-2023-25035Quick Contact Form WordPress plugin broken access control6.5CNA v3.10.7%2024-12-09Fix
CVE-2023-25026PayPal Brasil para WooCommerce WordPress plugin broken access control4.3CNA v3.10.6%2024-12-09Fix
CVE-2023-24407Booking calendar, Appointment Booking System WordPress plugin broken access control8.8v3.10.5%2024-12-09Fix
CVE-2023-24375WordPress Social Login and Register plugin broken access control3.5CNA v3.10.4%2024-12-09Fix
CVE-2023-23986Reviews and Rating Google My Business WordPress plugin broken access control5.4CNA v3.10.5%2024-12-09Fix
CVE-2023-23975Quick Event Manager WordPress plugin broken access control5.3CNA v3.10.7%2024-12-09Fix
CVE-2023-23895WP Time Slots Booking Form WordPress plugin broken access control7.2v3.10.7%2024-12-09Fix
CVE-2023-23893Simple Giveaways WordPress plugin broken access control5.3CNA v3.10.6%2024-12-09Fix
CVE-2023-23887Easy Google Analytics for WordPress plugin broken access control5.3CNA v3.10.6%2024-12-09
CVE-2023-23886WP-RecentComments WordPress plugin broken access control5.4CNA v3.10.6%2024-12-09
CVE-2023-23868Cost of Goods for WooCommerce WordPress plugin broken access control5.4CNA v3.10.6%2024-12-09Fix
CVE-2023-23834Spectra WordPress Gutenberg Blocks plugin broken access control + CSRF on Activate_Plugin9.8v3.10.6%2024-12-09Fix
CVE-2023-23825Spectra WordPress Gutenberg Blocks plugin broken access control + CSRF on Import_WPforms8.8v3.10.5%2024-12-09Fix
CVE-2023-23823Enhanced Text Widget WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09Fix
CVE-2023-23814Calendar Event Multi View WordPress plugin broken access control3.8CNA v3.10.5%2024-12-09Fix
CVE-2023-23726Tickera WordPress Event Ticketing plugin CSRF Leading to post Status Change5.4CNA v3.10.3%2024-12-09Fix
CVE-2023-23725Shortcodes by Angie Makes WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09
CVE-2023-23716Zendesk Support for WordPress plugin broken access control4.3CNA v3.10.5%2024-12-09Fix
CVE-2023-23715JobBoardWP Job Board Listings and Submissions WordPress plugin IDOR Leading to Job Removal8.8v3.10.5%2024-12-09Fix
CVE-2023-22708Kraken.io Image Optimizer WordPress plugin broken access control4.3CNA v3.10.7%2024-12-09Fix
CVE-2023-22701Ebook Store WordPress plugin broken authentication9.8v3.11.0%2024-12-09Fix
CVE-2023-7298Out-of-bounds write vulnerability in in Autodesk Desktop Software4.4CNA v3.10.3%2024-12-09Fix
CVE-2023-50913Oxide control plane software server-side request forgery9.1CISA ADP v3.10.4%2024-12-05
CVE-2023-48010STMicroelectronics SPC58 System Memory Protection Unit vulnerability9.8CISA ADP v3.10.5%2024-12-05
CVE-2023-52944Synology Surveillance Station ActionRule webapi component incorrect authorization4.3CNA v3.10.4%2024-12-04Fix
CVE-2023-52943Synology Surveillance Station Alert.Setting webapi component incorrect authorization4.3CNA v3.10.4%2024-12-04Fix
CVE-2023-6978WP Job Manager Company Profiles WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-12-04Fix
CVE-2023-52922Linux kernel CAN broadcast manager proc interface use-after-free7.8CNA v3.10.3%2024-11-28Fix
CVE-2023-29001Contiki-NG IPv6 source routing header processing uncontrolled recursion8.7CNA v4.00.6%2024-11-27Fix
CVE-2023-2142Mozilla Nunjucks autoescape bypass leads to cross-site scripting6.1CISA ADP v3.10.4%2024-11-26Fix
CVE-2023-1521Mozilla local privilege escalation in sccache7.8CISA ADP v3.10.4%2024-11-26Fix
CVE-2023-0163Mozilla prototype pollution in Convict8.4CISA ADP v3.10.3%2024-11-26Fix
CVE-2023-45181IBM Jazz Foundation cross-site scripting6.1CNA v3.10.3%2024-11-25Fix
CVE-2023-26280IBM Jazz Foundation improper access control5.3CNA v3.10.4%2024-11-25Fix
CVE-2023-7299DataGear resolveSql SQL injection9.8v3.10.6%2024-11-23
CVE-2023-52335Advantech iView ConfigurationServlet SQL injection information disclosure7.5v3.11.3%2024-11-22Fix
CVE-2023-52334Allegra downloadAttachmentGlobal directory traversal information disclosure6.5NVD v3.11.9%2024-11-22Fix
CVE-2023-52333Allegra saveFile directory traversal remote code execution7.3NVD v3.11.9%2024-11-22Fix
CVE-2023-52332Allegra serveMathJaxLibraries directory traversal information disclosure7.5v3.12.1%2024-11-22Fix
CVE-2023-51648Allegra getFileContentAsString directory traversal information disclosure6.5NVD v3.11.9%2024-11-22Fix
CVE-2023-51647Allegra saveInlineEdit directory traversal remote code execution4.7NVD v3.12.2%2024-11-22Fix
CVE-2023-51646Allegra uploadSimpleFile directory traversal remote code execution4.7NVD v3.11.8%2024-11-22Fix
CVE-2023-51645Allegra unzipFile directory traversal remote code execution4.7NVD v3.11.8%2024-11-22Fix
CVE-2023-51644Allegra SiteConfigAction improper access control remote code execution7.3NVD v3.12.0%2024-11-22Fix
CVE-2023-51643Allegra uploadFile directory traversal remote code execution4.7NVD v3.12.2%2024-11-22Fix
CVE-2023-51642Allegra loadFieldMatch deserialization of untrusted data remote code execution6.3NVD v3.11.3%2024-11-22Fix
CVE-2023-51641Allegra renderFieldMatch deserialization of Unstrusted Data remote code execution6.3NVD v3.11.3%2024-11-22Fix
CVE-2023-51640Allegra extarctZippedFile directory traversal remote code execution4.7NVD v3.11.8%2024-11-22Fix
CVE-2023-51639Allegra downloadExportedChart directory traversal authentication bypass9.8v3.12.5%2024-11-22Fix
CVE-2023-51638Allegra hard-coded credentials authentication bypass9.8v3.11.4%2024-11-22Fix
CVE-2023-51635NETGEAR RAX30 fing_dil stack-based buffer overflow remote code execution8.8v3.11.3%2024-11-22Fix
CVE-2023-51634NETGEAR RAX30 improper certificate validation remote code execution7.5v3.10.6%2024-11-22Fix
CVE-2023-39470PaperCut NG print.script.sandboxed Exposed Dangerous function remote code execution7.2v3.11.8%2024-11-22Fix
CVE-2023-24467Possible command injection in OpenText iManager8.8CNA v3.11.1%2024-11-22Fix
CVE-2023-24466Possible XML external entity injection in OpenText iManager7.5CNA v3.10.5%2024-11-22Fix
CVE-2023-52921Linux kernel amdgpu command submission chunk parsing use-after-free7.8CNA v3.10.2%2024-11-19Fix
CVE-2023-27609WP Roles at Registration WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-11-19
CVE-2023-21270Google Andrioid PermissionManagerServiceImpl.java privilege escalation7.8v3.10.1%2024-11-19Fix
CVE-2023-49952Joinmastodon mastodon cross-site scripting7.5CISA ADP v3.10.5%2024-11-18Fix
CVE-2023-39180Kernel: Ksmbd: Read request memory leak denial of service7.5NVD v3.11.4%2024-11-18Fix
CVE-2023-39179Kernel: Ksmbd: Read request out-of-bounds read information disclosure7.5NVD v3.11.1%2024-11-18Fix
CVE-2023-39176Kernel: Ksmbd: Transform header out-of-bounds read information disclosure7.5NVD v3.10.7%2024-11-18Fix
CVE-2023-43091Gnome-maps: Gnome maps is vulnerable to a code injection attack9.8CNA v3.11.0%2024-11-17Fix
CVE-2023-6110Openstack: Deleting a non existing access rule deletes another existing access rule in it's scope5.5CNA v3.10.5%2024-11-17Fix
CVE-2023-4639Red Hat Migration Toolkit for Runtimes 1 on RHEL 8 undertow: Cookie smuggling/spoofing7.4CNA v3.11.1%2024-11-17Fix
CVE-2023-1419Debezium: Script injection via connector parameter5.9CNA v3.10.4%2024-11-17Fix
CVE-2023-0657Keycloak: Impersonation via logout token exchange3.4CNA v3.10.3%2024-11-17Fix
CVE-2023-20154Cisco Modeling Labs External authentication bypass9.1CNA v3.10.9%2024-11-15Fix
CVE-2023-20125Cisco BroadWorks Network Server TCP denial of service8.6CNA v3.11.0%2024-11-15Fix
CVE-2023-20094Cisco TelePresence Collaboration Endpoint and RoomOS software information disclosure4.3CNA v3.10.3%2024-11-15Fix
CVE-2023-20093Cisco TelePresence Collaboration Endpoint and RoomOS software arbitrary file overwrite4.4CNA v3.10.2%2024-11-15Fix
CVE-2023-20092Cisco TelePresence Collaboration Endpoint and RoomOS software arbitrary file overwrite4.4CNA v3.10.2%2024-11-15Fix
CVE-2023-20091Cisco TelePresence Collaboration Endpoint and RoomOS software arbitrary file overwrite5.1CNA v3.10.2%2024-11-15Fix
CVE-2023-20090Cisco TelePresence Collaboration Endpoint and RoomOS software privilege escalation6.7CNA v3.10.2%2024-11-15Fix
CVE-2023-20060Cisco Prime Collaboration Deployment cross-site scripting6.1CNA v3.10.5%2024-11-15
CVE-2023-20039Cisco Industrial Network Director application data directory vulnerability5.5CNA v3.10.2%2024-11-15Fix
CVE-2023-20036Cisco Industrial Network Director command injection9.9CNA v3.113.8%2024-11-15Fix
CVE-2023-20004Cisco TelePresence Collaboration Endpoint and RoomOS software arbitrary file write4.4CNA v3.10.2%2024-11-15Fix
CVE-2023-4679gpac/gpac use-after-free5.5v3.10.3%2024-11-15Fix
CVE-2023-2332Stored cross-site scripting (XSS) in pimcore/pimcore4.8v3.10.4%2024-11-15Fix
CVE-2023-0737CSRF in wallabag/wallabag6.5v3.10.3%2024-11-15Fix
CVE-2023-0109Stored XSS in usememos/memos5.4NVD v3.10.4%2024-11-15Fix
CVE-2023-34049Salt security advisory release 2023-OCT-276.7CNA v3.10.2%2024-11-14Fix
CVE-2023-4458Kernel: Ksmbd: Smb2_open out-of-bounds read information disclosure7.5NVD v3.10.8%2024-11-14Fix
CVE-2023-4134Linux kernel cyttsp4_core touchscreen driver use-after-free5.5NVD v3.10.2%2024-11-14Fix
CVE-2023-38920PHPGurukul Cyber Cafe Management System cross-site scripting4.8CISA ADP v3.10.4%2024-11-13
CVE-2023-35686Google Android rgxta3d.c arbitrary code execution7.8v3.10.1%2024-11-13Fix
CVE-2023-35659Google Android devicemem_server.c arbitrary code execution7.8v3.10.1%2024-11-13Fix
CVE-2023-52268FreeScout End-User Portal module session fixation9.1CISA ADP v3.10.6%2024-11-12Exploit code
CVE-2023-50176Fortinet FortiOS A session fixation4.0CNA v3.10.4%2024-11-12Fix
CVE-2023-47543Fortinet FortiPortal insecure direct object reference5.1CNA v3.10.4%2024-11-12Fix
CVE-2023-44255Fortinet FortiManager personal information exposure3.9CNA v3.10.6%2024-11-12Fix
CVE-2023-32736Siemens SIMATIC S7-PLCSIM V16 deserialization of untrusted data7.0CNA v4.00.2%2024-11-12Fix
CVE-2023-40457Extreme Networks ExtremeXOS BGP daemon denial of service–0.3%2024-11-11
CVE-2023-27195Trimble TM4Web registration access code endpoint incorrect default permissions9.8CISA ADP v3.11.0%2024-11-08
CVE-2023-1973Red Hat JBoss Enterprise Application Platform 7 undertow denial of service7.5CNA v3.11.3%2024-11-07Fix
CVE-2023-1932Hibernate-validator: Rendering of invalid html with safehtml leads to html injection and XSS6.1CNA v3.10.5%2024-11-07Fix
CVE-2023-52920Linux kernel BPF verifier precision tracking null pointer dereference7.8CNA v3.10.3%2024-11-05Fix
CVE-2023-34445Cross-site scripting vulnerability on pages/ajax.render.php in Combodo iTop8.8CNA v3.10.3%2024-11-05Fix
CVE-2023-34444Cross-site scripting vulnerability on pages/ajax.searchform.php in Combodo iTop8.8CNA v3.10.3%2024-11-05Fix
CVE-2023-34443Cross-site scripting vulnerability in the run_query.php page in Combodo iTop8.8CNA v3.10.3%2024-11-05Fix
CVE-2023-29126Insecure loose comparison in Enel X JuiceBox8.8v3.10.3%2024-11-05Fix
CVE-2023-29125Heap overflow in CM_main.exe binary in Enel X JuiceBox8.0NVD v3.10.3%2024-11-05Fix
CVE-2023-29122Incorrect file ownership of privileged service's libraries in Enel X JuiceBox6.7CNA v3.10.2%2024-11-05
CVE-2023-29121Exposed TCF agent service in Enel X Juicebox8.8NVD v3.10.3%2024-11-05Fix
CVE-2023-29120Unauthorized remote command execution in Enel X Juicebox8.8NVD v3.10.3%2024-11-05Fix
CVE-2023-29119Enel X JuiceBox Pro unauthorized SQLite injection8.8NVD v3.10.3%2024-11-05Fix
CVE-2023-29118Unauthorized SQLite injection in Enel X Juicebox8.8NVD v3.10.3%2024-11-05Fix
CVE-2023-29117Authentication bypass in JuiceBox Web Manager interface8.8v3.10.3%2024-11-05Fix
CVE-2023-29116PHP information disclosure in Enel X JuiceBox4.3v3.10.2%2024-11-05Fix
CVE-2023-29115Denial of service via Web Management interface in Enel X JuiceBox6.5v3.10.3%2024-11-05Fix
CVE-2023-29114Unauthorized System Log Disclosure in Enel X JuiceBox5.7CNA v3.10.3%2024-11-05Fix
CVE-2023-52045STD42 elFinder cross-site scripting6.1CISA ADP v3.10.3%2024-10-31
CVE-2023-52044STD42 elFinder unrestricted file upload9.8CISA ADP v3.10.8%2024-10-31
CVE-2023-52066http.zig URL parameter handling CRLF injection7.2CISA ADP v3.10.3%2024-10-30
CVE-2023-5816Code Explorer WordPress plugin authenticated (Admin+) External file Reading4.9v3.10.5%2024-10-30Fix
CVE-2023-26248Content Censorship in the InterPlanetary File System (IPFS) via Kademlia DHT abuse5.3CISA ADP v3.10.2%2024-10-25
CVE-2023-50355HCL Sametime is impacted by generation of error messages containing sensitive information3.6CNA v3.10.2%2024-10-23Fix
CVE-2023-50310IBM CICS Transaction Gateway for Multiplatforms information disclosure4.9CNA v3.10.4%2024-10-23Fix
CVE-2023-52919Linux kernel NFC NCI acknowledge handling null pointer dereference5.5v3.10.2%2024-10-22Fix
CVE-2023-52918Linux kernel cx23885 PCI video driver init null pointer dereference5.5v3.10.2%2024-10-22Fix
CVE-2023-6243EventON PRO - WordPress Virtual Event Calendar plugin cross-site request forgery4.3CNA v3.10.2%2024-10-19Fix
CVE-2023-49570Insecure Trust of Basic Constraints certificate in Bitdefender Total Security HTTPS Scanning8.6CNA v4.00.2%2024-10-18Fix
CVE-2023-49567Bitdefender Total Security HTTPS scanning improper certificate validation8.6CNA v4.00.2%2024-10-18Fix
CVE-2023-6080Privilege escalation to SYSTEM in Lakeside Software Installer7.8NVD v3.10.2%2024-10-18Fix
CVE-2023-6058HTTPS certificate validation issue in Bitdefender Safepay (VA-11167)8.6CNA v4.00.2%2024-10-18Fix
CVE-2023-6057Bitdefender Total Security HTTPS scanning improper certificate validation8.6CNA v4.00.2%2024-10-18Fix
CVE-2023-6056Insecure Trust of Self-Signed Certificates in Bitdefender Total Security HTTPS Scanning (VA-11164)8.6CNA v4.00.2%2024-10-18Fix
CVE-2023-6055Improper certificate validation in Bitdefender Total Security HTTPS Scanning (VA-11158)8.6CNA v4.00.2%2024-10-18Fix
CVE-2023-39593MariaDB sys_exec function insecure permissions5.6CISA ADP v3.10.7%2024-10-17Exploit code
CVE-2023-26785MariaDB code injection9.8CISA ADP v3.12.2%2024-10-17
CVE-2023-6729Nokia SR OS: File Access Security vulnerability7.3CISA ADP v3.10.1%2024-10-17
CVE-2023-6728Nokia SR OS: BOF File Encryption vulnerability3.3CISA ADP v3.10.1%2024-10-17
CVE-2023-32266Code injection vulnerability found in OpenText Application Lifecycle Management (ALM),Quality Center5.3CNA v4.00.2%2024-10-16
CVE-2023-32196Rancher's External RoleTemplates can lead to privilege escalation7.5CNA v4.00.6%2024-10-16Fix
CVE-2023-32194Rancher permissions on namespaces in any API group grants edit permissions on namespaces in core8.6CNA v4.00.4%2024-10-16Fix
CVE-2023-32193Norman API cross-site scripting8.3CNA v3.10.5%2024-10-16Fix
CVE-2023-32192SUSE apiserver rancher API server cross-site scripting8.3CNA v3.10.4%2024-10-16Fix
CVE-2023-32191Rke's credentials are stored in the RKE1 Cluster state ConfigMap9.9CNA v3.10.7%2024-10-16Fix
CVE-2023-32190mlocate post-install script vulnerability8.5CNA v4.00.2%2024-10-16Fix
CVE-2023-32189Insecure handling SSH key in SUSE Manager when bootstrapping new clients6.4CNA v4.00.1%2024-10-16Fix
CVE-2023-32188SUSE neuvector JWT token compromise can allow malicious actions including remote code execution9.4CNA v4.00.5%2024-10-16Fix
CVE-2023-22650SUSE Rancher stale user cleanup improper authentication8.7CNA v4.00.6%2024-10-16Fix
CVE-2023-22649Rancher Audit Log leaks sensitive information8.4CNA v4.02.0%2024-10-16Fix
CVE-2023-7296BigBlueButton WordPress plugin authenticated (Author+) stored cross-site scripting6.4CNA v3.10.3%2024-10-16
CVE-2023-7295Video Grid WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-10-16Fix
CVE-2023-7294Paytium: Mollie payment forms and donations WordPress plugin unauthorized data modification6.5NVD v3.10.3%2024-10-16Fix
CVE-2023-7293Paytium: Mollie payment forms and donations WordPress plugin unauthorized access4.3v3.10.2%2024-10-16Fix
CVE-2023-7292Paytium Mollie payment forms and donations paytium_notice_dismiss function missing authorization4.3CNA v3.10.3%2024-10-16Fix
CVE-2023-7291Paytium: Mollie payment forms and donations WordPress plugin unauthorized access8.1v3.10.4%2024-10-16Fix
CVE-2023-7290Paytium: Mollie payment forms and donations WordPress plugin unauthorized access4.3v3.10.2%2024-10-16Fix
CVE-2023-7289Paytium Mollie payment forms and donations paytium_sw_save_api_keys function missing authorization4.3v3.10.3%2024-10-16Fix
CVE-2023-7288Paytium: Mollie payment forms and donations WordPress plugin unauthorized data modification4.3v3.10.3%2024-10-16Fix
CVE-2023-7287paytiumsupport Paytium subscription cancellation missing authorization5.4v3.10.3%2024-10-16Fix
CVE-2023-7286ACF Quick Edit Fields WordPress plugin authenticated (Contributor+) insecure direct object reference6.5CNA v3.10.4%2024-10-16Fix
CVE-2023-31493zoneminder remote code execution6.6CISA ADP v3.10.5%2024-10-15
CVE-2023-50780Apache ActiveMQ Artemis: Authenticated users could perform RCE via Jolokia MBeans8.8v3.116.5%2024-10-14Exploit codeFix
CVE-2023-48082Nagios XI cross-site scripting9.1CISA ADP v3.11.5%2024-10-14Fix
CVE-2023-42133PAX Technology POS terminals incorrect default permissions6.7CNA v3.10.2%2024-10-11Fix
CVE-2023-25581Deserialization of untrusted data in InternalAttributeHandler in pac4j9.2CNA v4.01.9%2024-10-10Exploit codeFix
CVE-2023-46586weborf CGI script handler vulnerability9.1CISA ADP v3.10.6%2024-10-09Fix
CVE-2023-45872Qt QML image loading denial of service6.5CISA ADP v3.10.4%2024-10-09Fix
CVE-2023-45361MediaWiki Vector skin user links vulnerability6.1CISA ADP v3.10.3%2024-10-09Fix
CVE-2023-45359MediaWiki Vector skin improper output encoding6.5CISA ADP v3.10.3%2024-10-09Fix
CVE-2023-37154nagios-plugins check_by_ssh command injection8.4CISA ADP v3.10.5%2024-10-09
CVE-2023-36325i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4 and IPv6 addresses that occurs when a tunneled, replayed message has a behavior discrepancy (it may be dropped, or may result in a Wrong Des3.7CISA ADP v3.10.5%2024-10-09
CVE-2023-52952Siemens HiMed Cockpit 12 pro unprotected alternate path9.3CNA v4.00.2%2024-10-08Fix
CVE-2023-6362WinHex buffer overflow7.3CNA v3.10.2%2024-10-07
CVE-2023-6361WinHex buffer overflow7.3CNA v3.10.2%2024-10-07
CVE-2023-26771Taskcafe cross-site scripting6.5CISA ADP v3.10.3%2024-10-04
CVE-2023-26770Taskcafe improper access control9.8CISA ADP v3.10.7%2024-10-04
CVE-2023-37822Eufy Homebase 2 insufficient entropy8.2v3.10.2%2024-10-03
CVE-2023-7273Cross-site request forgery in Kiteworks OwnCloud6.8CNA v3.10.2%2024-10-01
CVE-2023-3441Exposure of sensitive information due to incompatible policies in GitLab6.6CNA v3.10.6%2024-10-01Fix
CVE-2023-52950Synology Active Backup for Business Agent login component missing encryption5.3CNA v3.10.1%2024-09-26Fix
CVE-2023-52949Synology Active Backup for Business Agent proxy settings functionality missing authentication5.5CNA v3.10.2%2024-09-26Fix
CVE-2023-52948Synology Active Backup for Business Agent settings functionality missing encryption5.0CNA v3.10.1%2024-09-26Fix
CVE-2023-52947Synology Active Backup for Business Agent logout functionality missing authentication4.0CNA v3.10.2%2024-09-26Fix
CVE-2023-52946Synology Drive Client vss service component buffer overflow8.2CNA v3.10.5%2024-09-26Fix
CVE-2023-46175IBM Cloud Pak for Multicloud Management information disclosure4.4CNA v3.10.3%2024-09-26Fix
CVE-2023-51157ZKTeco Wdms cross-site scripting5.4v3.10.5%2024-09-25
CVE-2023-26691Cs-cart Multivendor path traversal7.2CISA ADP v3.11.2%2024-09-25
CVE-2023-26690Cs-cart Multivendor file upload8.8CISA ADP v3.10.7%2024-09-25
CVE-2023-26689Cs-cart Multivendor incorrect user management9.8CISA ADP v3.10.6%2024-09-25
CVE-2023-26688Cs-cart Multivendor cross-site scripting5.4CISA ADP v3.10.4%2024-09-25
CVE-2023-26687Cs-cart Multivendor path traversal8.8CISA ADP v3.11.3%2024-09-25
CVE-2023-26686Cs-cart Multivendor file upload9.8CISA ADP v3.10.7%2024-09-25
CVE-2023-25189Nokia BTS Web Element Manager information disclosure3.3CNA v3.10.1%2024-09-25
CVE-2023-5359W3 Total Cache WordPress plugin sensitive Credentials stored in Plaintext7.5NVD v3.10.8%2024-09-25Exploit codeFix
CVE-2023-46948Temenos T24 Browser reflected cross-site scripting5.4CISA ADP v3.10.4%2024-09-23
CVE-2023-7282Google Chrome Navigation inappropriate implementation4.3v3.10.2%2024-09-23Fix
CVE-2023-7281Google Chrome Compositing inappropriate implementation4.3v3.10.2%2024-09-23Fix
CVE-2023-47480Pure Data set*id function privilege escalation8.4CISA ADP v3.10.2%2024-09-20Fix
CVE-2023-27584Dragonfly2 vulnerable to hard coded cyptographic key9.8CNA v3.133.9%2024-09-19NucleiFix
CVE-2023-49203Technitium DNS Server network amplification7.5CISA ADP v3.10.6%2024-09-18
CVE-2023-47105Chaosblade vulnerable to OS command execution8.6CISA ADP v3.11.7%2024-09-18NucleiFix
CVE-2023-41612Govicture PC420 hard-coded credentials8.8CISA ADP v3.10.2%2024-09-18
CVE-2023-41611Govicture PC420 hard-coded credentials6.5CISA ADP v3.10.4%2024-09-18
CVE-2023-41610Govicture PC420 plaintext password storage8.8CISA ADP v3.10.4%2024-09-18
CVE-2023-30464CoreDNS cache poisoning via a birthday attack7.5CISA ADP v3.10.4%2024-09-18Fix
CVE-2023-28457Technitium DNS Server insufficient verification of data authenticity7.5CISA ADP v3.10.2%2024-09-18
CVE-2023-28456Technitium DNS Server network amplification7.5CISA ADP v3.10.5%2024-09-18
CVE-2023-28455Technitium DNS Server network amplification7.5CISA ADP v3.10.5%2024-09-18
CVE-2023-28452coredns authentication bypass by spoofing7.5v3.10.6%2024-09-18Fix
CVE-2023-28451Technitium DNS Server denial of service7.5CISA ADP v3.10.5%2024-09-18
CVE-2023-45854Shopkit shopping cart quantity integer overflow7.5CISA ADP v3.10.3%2024-09-16
CVE-2023-43753Intel(R) Processors with Intel(R) SGX information disclosure6.8CNA v4.00.2%2024-09-16Fix
CVE-2023-43626UEFI firmware for some Intel(R) Processors improper access control8.7CNA v4.00.1%2024-09-16Fix
CVE-2023-42772UEFI firmware for some Intel(R) reference processors untrusted pointer dereference8.7CNA v4.00.2%2024-09-16Fix
CVE-2023-41833UEFI firmware for some Intel(R) Processors race condition8.7CNA v4.00.1%2024-09-16Fix
CVE-2023-25546UEFI firmware for some Intel(R) Processors out-of-bounds read1.8CNA v4.00.1%2024-09-16Fix
CVE-2023-23904UEFI firmware for some Intel(R) Processors null pointer dereference6.9CNA v4.00.1%2024-09-16Fix
CVE-2023-22351UEFI firmware for some Intel(R) Processors out-of-bounds write6.9CNA v4.00.1%2024-09-16Fix
CVE-2023-3410Bricks WordPress theme authenticated (Bricks page Builder Access+) stored cross-site scripting5.4v3.10.3%2024-09-14Fix
CVE-2023-49069Siemens Mendix Runtime V10 response discrepancy6.9CNA v4.00.4%2024-09-10Fix
CVE-2023-44254Fortinet FortiAnalyzer insecure direct object reference4.7CNA v3.10.5%2024-09-10Fix
CVE-2023-37234Loftware Spectrum improper access control9.8v3.10.4%2024-09-10
CVE-2023-37233Loftware Spectrum XML external entity injection8.8v3.10.4%2024-09-10Fix
CVE-2023-37232Loftware Spectrum information disclosure7.5v3.10.4%2024-09-10
CVE-2023-37231Loftware Spectrum hard-coded password9.8CISA ADP v3.10.5%2024-09-10Fix
CVE-2023-37230Loftware Spectrum server-side request forgery8.8CISA ADP v3.10.4%2024-09-10
CVE-2023-37229Loftware Spectrum server-side request forgery8.8CISA ADP v3.10.4%2024-09-10
CVE-2023-37227Loftware Spectrum deserialization of untrusted data9.8CISA ADP v3.10.6%2024-09-10Fix
CVE-2023-37226Loftware Spectrum improper authentication9.8CISA ADP v3.10.6%2024-09-10Fix
CVE-2023-36103Tenda AC15 goform/SetIPTVCfg interface command injection9.8v3.11.4%2024-09-10
CVE-2023-30756Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) null pointer dereference8.2CNA v4.00.5%2024-09-10Fix
CVE-2023-30755Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) null pointer dereference5.9CNA v4.00.4%2024-09-10Fix
CVE-2023-28827Siemens SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) null pointer dereference8.2CNA v4.00.5%2024-09-10Fix
CVE-2023-6841Keycloak: Amount of attributes per object is not limited and it may lead to DoS7.5CNA v3.10.7%2024-09-10Fix
CVE-2023-2919Tutor LMS WordPress plugin cross-site request forgery via addon_enable_disable4.3CNA v3.10.2%2024-09-10Fix
CVE-2023-50883ONLYOFFICE Document Server cross-site scripting6.1v3.10.6%2024-09-09
CVE-2023-46809Node.js Node timing side channel7.4CISA ADP v3.11.3%2024-09-07Fix
CVE-2023-39333Node.js Node code injection5.3CISA ADP v3.10.9%2024-09-07Fix
CVE-2023-30587Node.js Node improper access control7.5CISA ADP v3.10.7%2024-09-07Fix
CVE-2023-30584Node.js Node path traversal7.7CISA ADP v3.10.4%2024-09-07Fix
CVE-2023-30583Node.js Node improper access control7.5CISA ADP v3.10.7%2024-09-07Fix
CVE-2023-30582Node.js Node improper access control5.3CISA ADP v3.10.6%2024-09-07Fix
CVE-2023-52916Linux kernel Aspeed video capture driver out-of-bounds write7.8CNA v3.10.2%2024-09-06Fix
CVE-2023-52915Linux kernel af9035 DVB USB I2C transfer null pointer dereference5.5v3.10.2%2024-09-06Fix
CVE-2023-51368QNAP QTS and QuTS hero null pointer dereference5.4CNA v3.10.3%2024-09-06Fix
CVE-2023-51367QNAP QTS and QuTS hero out-of-bounds write5.4CNA v3.10.4%2024-09-06Fix
CVE-2023-51366QNAP QTS and QuTS hero path traversal8.7CNA v3.10.5%2024-09-06Fix
CVE-2023-50366QNAP QTS and QuTS hero cross-site scripting4.3CNA v3.10.2%2024-09-06Fix
CVE-2023-50360QNAP Video Station SQL injection8.8CNA v3.10.4%2024-09-06Fix
CVE-2023-47563QNAP Video Station command injection7.4CNA v3.11.0%2024-09-06Fix
CVE-2023-45038QNAP Music Station improper authentication4.3CNA v3.11.2%2024-09-06NucleiFix
CVE-2023-39300QNAP QTS OS command injection7.2CNA v3.11.2%2024-09-06Fix
CVE-2023-39298QNAP QTS missing authorization7.8CNA v3.10.1%2024-09-06Fix
CVE-2023-34979QNAP QTS and QuTS hero OS command injection6.6CNA v3.11.1%2024-09-06Fix
CVE-2023-34974QNAP QTS and QuTS hero OS command injection8.8CNA v3.11.0%2024-09-06Fix
CVE-2023-51712Trusted Firmware-M information disclosure4.7v3.10.3%2024-09-05Fix
CVE-2023-49233Visual Planning Admin Center administrative functions privilege escalation8.8CISA ADP v3.10.4%2024-09-03
CVE-2023-7279Secure Systems Engineering Connaisseur Delegation Name targets_schema.json redos5.9v3.10.5%2024-09-02Fix
CVE-2023-7256Double free in libpcap with remote packet capture support4.4CNA v3.10.2%2024-08-31Fix
CVE-2023-45896Linux kernel ntfs3 filesystem driver out-of-bounds read7.1CISA ADP v3.10.2%2024-08-28Fix
CVE-2023-43078Dell Client Platform, Dell Dock Firmware link following6.7CNA v3.10.2%2024-08-28Fix
CVE-2023-26324GetApps application has code execution8.8CNA v3.10.6%2024-08-28Fix
CVE-2023-26323Xiaomi App Market has a code execution7.6CNA v3.10.6%2024-08-28Fix
CVE-2023-26322GetApps application has code execution8.8CNA v3.10.8%2024-08-28Fix
CVE-2023-26321The international version of Xiaomi File Manager has a path traversal6.3CNA v3.10.5%2024-08-28Fix
CVE-2023-49582Apache Portable Runtime (APR): Unexpected lax shared memory permissions5.5v3.10.3%2024-08-26Fix
CVE-2023-26315Xiaomi router has a command injection vulnerability after authorization6.5CNA v3.119.4%2024-08-26Fix
CVE-2023-48957PureVPN information disclosure5.3v3.10.4%2024-08-25
CVE-2023-6987String Locator WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-08-24Fix
CVE-2023-0926Custom Permalinks WordPress plugin Authenticated(Editor+) stored cross-site scripting5.4v3.10.3%2024-08-24Fix
CVE-2023-7260A path traversal vulnerability has been discovered in OpenText™ CX-E Voice6.9CNA v4.00.5%2024-08-22
CVE-2023-6452Forcepoint Web Security cross-site scripting9.6CNA v3.10.4%2024-08-22Fix
CVE-2023-52914Linux kernel io_uring poll requests memory leak5.5v3.10.2%2024-08-21Fix
CVE-2023-52913Linux kernel i915 GPU context registration use-after-free7.8CNA v3.10.2%2024-08-21Fix
CVE-2023-52912Linux kernel amdgpu buddy memory allocator on unload vulnerability5.5v3.10.2%2024-08-21Fix
CVE-2023-52911Linux kernel MSM Adreno GPU driver headless mode null pointer dereference5.5v3.10.2%2024-08-21Fix
CVE-2023-52910Linux kernel IOMMU IOVA allocator vulnerability8.8CNA v3.10.2%2024-08-21Fix
CVE-2023-52909Linux kernel NFS server open file cache null pointer dereference7.5CNA v3.10.6%2024-08-21Fix
CVE-2023-52908Linux kernel amdgpu resource manager debug print null pointer dereference5.5v3.10.2%2024-08-21Fix
CVE-2023-52907Linux kernel pn533 NFC USB driver use-after-free7.8CNA v3.10.2%2024-08-21Fix
CVE-2023-52906Linux kernel tc MPLS action attribute validation vulnerability7.8v3.10.2%2024-08-21Fix
CVE-2023-52905Linux kernel octeontx2 PF driver VF unbind vulnerability5.5v3.10.2%2024-08-21Fix
CVE-2023-52904Linux kernel USB audio driver null pointer dereference5.5v3.10.3%2024-08-21Fix
CVE-2023-52903Linux kernel io_uring I/O polling completions improper locking7.8CNA v3.10.2%2024-08-21Fix
CVE-2023-52902Linux kernel do_mmap error path memory leak5.5v3.10.2%2024-08-21Fix
CVE-2023-52901Linux kernel xHCI endpoint handling null pointer dereference5.5v3.10.2%2024-08-21Fix
CVE-2023-52900Linux kernel NILFS2 B-tree insertion vulnerability5.5v3.10.2%2024-08-21Fix
CVE-2023-52899Linux kernel kernel panic5.5v3.10.2%2024-08-21Fix
CVE-2023-52898Linux kernel xHCI host controller driver null pointer dereference4.7v3.10.2%2024-08-21Fix
CVE-2023-52897Linux kernel Btrfs qgroup accounting reachable assertion4.7v3.10.2%2024-08-21Fix
CVE-2023-52896Linux kernel Btrfs quota rescan null pointer dereference4.7v3.10.2%2024-08-21Fix
CVE-2023-52895Linux kernel io_uring multishot polling memory leak5.5v3.10.2%2024-08-21Fix
CVE-2023-52894Linux kernel USB gadget NCM function driver null pointer dereference5.5v3.10.2%2024-08-21Fix
CVE-2023-52893Linux kernel GSMI EFI variable driver null pointer dereference5.5v3.10.2%2024-08-21Fix
CVE-2023-49198Apache SeaTunnel Web: Arbitrary file read7.5v3.10.9%2024-08-21Fix
CVE-2023-29929Kemptechnologies Loadmaster buffer overflow7.5CISA ADP v3.10.7%2024-08-21Exploit code
CVE-2023-22576Dell Repository Manager (DRM) improper privilege management7.0CNA v3.10.1%2024-08-21Fix
CVE-2023-52889Linux kernel AppArmor socket creation null pointer dereference5.5v3.10.2%2024-08-17Fix
CVE-2023-5505BackWPup WordPress plugin authenticated (Administrator+) directory traversal6.8v3.11.0%2024-08-17Fix
CVE-2023-4730LadiApp init_endpoint function missing authorization5.3CNA v3.10.5%2024-08-17
CVE-2023-4604Slideshow, Image Slider by 2J WordPress plugin reflected cross-site scripting via post6.1CNA v3.10.3%2024-08-17
CVE-2023-4507Admission AppManager WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2024-08-17
CVE-2023-4027Radio Player WordPress plugin missing authorization to settings update5.3CNA v3.10.4%2024-08-17Fix
CVE-2023-4025Radio Player WordPress plugin missing authorization to Player update5.3v3.10.4%2024-08-17Fix
CVE-2023-4024Radio Player WordPress plugin missing authorization to Player deletion5.3CNA v3.10.5%2024-08-17Fix
CVE-2023-3419tagDiv Opt-In Builder WordPress plugin authenticated (Admin+) SQL injection7.2CNA v3.10.6%2024-08-17Fix
CVE-2023-3416tagDiv Opt-In Builder WordPress plugin authenticated (Admin+) SQL injection7.2CNA v3.10.6%2024-08-17Fix
CVE-2023-3409Bricks WordPress theme cross-site request forgery via reset_settings4.3v3.10.2%2024-08-17Fix
CVE-2023-3408Bricks WordPress theme cross-site request forgery via save_settings4.3CNA v3.10.2%2024-08-17Fix
CVE-2023-1604Short URL WordPress plugin cross-site request forgery via configuration_page4.7CNA v3.10.2%2024-08-17
CVE-2023-0714Wpmet Metform Elementor Contact Form Builder arbitrary file upload9.8v3.11.0%2024-08-17Fix
CVE-2023-47728IBM QRadar Suite Software information disclosure6.5CNA v3.10.5%2024-08-16Fix
CVE-2023-7049Custom Field For WP Job Manager WordPress plugin insecure direct object reference4.3CNA v3.10.4%2024-08-16Fix
CVE-2023-50315IBM WebSphere Application Server information disclosure5.3CNA v3.10.3%2024-08-14Fix
CVE-2023-50314IBM WebSphere Application Server Libery information disclosure5.3CNA v3.10.3%2024-08-14Fix
CVE-2023-49144Intel(R) Server Platforms OpenBMC firmware for some out-of-bounds read8.1CNA v4.00.2%2024-08-14Fix
CVE-2023-49141Intel(R) Processors stream cache mechanism some improper isolation7.3CNA v4.00.3%2024-08-14Fix
CVE-2023-48361Intel(R) CSME firmware for some improper initialization4.6CNA v4.00.2%2024-08-14Fix
CVE-2023-43747Intel(R) Connectivity Performance Suite software installers incorrect default permissions5.4CNA v4.00.1%2024-08-14Fix
CVE-2023-43489Intel(R) CIP software improper access control6.8CNA v4.00.1%2024-08-14Fix
CVE-2023-42667Intel(R) Core(TM) Ultra Processor stream cache mechanism improper isolation7.3CNA v4.00.2%2024-08-14Fix
CVE-2023-40067Intel(R) CSME firmware for some unchecked return value5.7CNA v4.00.2%2024-08-14Fix
CVE-2023-38655Intel(R) AMT and Intel(R) Standard Manageability denial of service6.9CNA v4.00.5%2024-08-14Fix
CVE-2023-35123Intel(R) Server Platforms OpenBMC firmware for some improper error handling5.9CNA v4.00.4%2024-08-14Fix
CVE-2023-34424Intel(R) CSME firmware for some improper input validation6.7CNA v4.00.2%2024-08-14Fix
CVE-2023-31366AMD μProf Tool improper input validation3.3CNA v3.10.2%2024-08-13Fix
CVE-2023-31356AMD EPYC™ 7003 Processors incomplete cleanup4.4CNA v3.10.2%2024-08-13Fix
CVE-2023-31349AMD μProf Tool incorrect default permissions7.3CNA v3.10.2%2024-08-13Fix
CVE-2023-31348AMD μProf Tool DLL hijacking7.3CNA v3.10.2%2024-08-13Fix
CVE-2023-31341AMD μProf Tool out-of-bounds write7.3CNA v3.10.1%2024-08-13Fix
CVE-2023-31339AMD Zynq™ UltraScale+™ MPSoC/RFSoC ARM® Trusted firmware used improper input validation4.8CNA v3.10.2%2024-08-13Fix
CVE-2023-31310AMD Radeon™ RX 6000 Series Graphics Cards Power Management firmware improper input validation5.0CNA v3.10.1%2024-08-13
CVE-2023-31307AMD Radeon™ RX 6000 Series Graphics Cards Power Management firmware improper array index validation2.3CNA v3.10.2%2024-08-13Fix
CVE-2023-31305AMD Radeon™ RX 6000 Series Graphics Cards weak random number generator1.9CNA v3.10.1%2024-08-13
CVE-2023-31304AMD Radeon™ RX 6000 Series Graphics Cards SMU improper input validation2.3CNA v3.10.2%2024-08-13
CVE-2023-26211Fortinet FortiSOAR cross-site scripting6.4CNA v3.10.7%2024-08-13Fix
CVE-2023-20591AMD EPYC™ 7003 Series Processors improper initialization6.5CNA v3.10.3%2024-08-13Fix
CVE-2023-20584AMD EPYC processors IOMMU vulnerability5.3CNA v3.10.2%2024-08-13Fix
CVE-2023-20578AMD EPYC™ 7001 Processors SMM time-of-check time-of-use race condition7.5CNA v3.10.1%2024-08-13Fix
CVE-2023-20518AMD EPYC™ 9004 Series Processors ASP incomplete cleanup1.9CNA v3.10.1%2024-08-13Fix
CVE-2023-20513AMD Radeon™ RX 6000 Series Graphics Cards out-of-bounds write3.3CNA v3.10.1%2024-08-13
CVE-2023-20512AMD Radeon™ RX 6000 Series Graphics Cards hard-coded credentials1.9CNA v3.10.1%2024-08-13
CVE-2023-20510AMD Radeon™ RX 6000 Series Graphics Cards denial of service4.7CNA v3.10.1%2024-08-13Fix
CVE-2023-20509AMD Radeon™ RX 6000 Series Graphics Cards out-of-bounds read5.2CNA v3.10.1%2024-08-13
CVE-2023-50810Sonos S1 and S2 software U-Boot bootloader code injection6.0CISA ADP v3.10.8%2024-08-12
CVE-2023-50809Sonos S1 and S2 software mt7615 wireless driver stack-based buffer overflow7.8CISA ADP v3.10.4%2024-08-12
CVE-2023-48171OWASP DefectDojo improper privilege management8.8v3.10.6%2024-08-12
CVE-2023-41884ZoneMinder improper neutralization of special elements used in an SQL command in watch.php7.1CNA v3.10.5%2024-08-12Fix
CVE-2023-38018IBM Aspera Shares session fixation6.3CNA v3.10.4%2024-08-12Fix
CVE-2023-31315AMD 3rd Gen AMD EPYC™ Processors model specific register improper input validation7.5CNA v3.10.6%2024-08-12Fix
CVE-2023-7249OpenText Directory Services path traversal6.3CNA v4.00.6%2024-08-12Fix
CVE-2023-7066Siemens Teamcenter Visualization and JT2Go out-of-bounds read7.3CNA v4.00.2%2024-08-12Fix
CVE-2023-40261Diebold Nixdorf Vynamic Security Suite improper initialization6.8v3.10.4%2024-08-08Fix
CVE-2023-33206Diebold Nixdorf Vynamic Security Suite improper integrity check validation6.8NVD v3.10.3%2024-08-08Fix
CVE-2023-28865Diebold Nixdorf Vynamic Security Suite insufficient verification of data authenticity6.6v3.10.3%2024-08-08Fix
CVE-2023-24064Diebold Nixdorf Vynamic Security Suite Pre-Boot Authorization vulnerability6.8v3.10.4%2024-08-08Fix
CVE-2023-24063Diebold Nixdorf Vynamic Security Suite improper integrity check validation6.8v3.10.3%2024-08-08Fix
CVE-2023-24062Diebold Nixdorf Vynamic Security Suite improper input validation6.8v3.10.4%2024-08-08Fix
CVE-2023-7265Huawei HarmonyOS permission verification vulnerability in the lock screen module4.0CNA v3.10.1%2024-08-08Fix
CVE-2023-40819Devlop.systems ID4PORTAIS improper parameter handling6.1v3.10.3%2024-08-06
CVE-2023-28806Zscaler Client Connector improper input validation5.7CNA v3.10.2%2024-08-06Fix
CVE-2023-5000Horizontal scrolling announcements WordPress plugin SQL injection8.8CNA v3.10.6%2024-08-06Fix
CVE-2023-31355AMD 3rd Gen AMD EPYC™ Processors memory corruption6.0CNA v3.10.4%2024-08-05Exploit codeFix
CVE-2023-52209WPForms User Registration WordPress plugin authenticated privilege escalation8.0CNA v3.10.4%2024-08-01Fix
CVE-2023-28149InsydeH2O IhisiServiceSmm module vulnerability6.1CISA ADP v3.10.1%2024-07-31
CVE-2023-28074Dell BSAFE Micro Edition Suite out-of-bounds read6.2CNA v3.10.2%2024-07-31Fix
CVE-2023-1577Lenovo Driver Manager privilege escalation7.8CNA v3.10.2%2024-07-31Fix
CVE-2023-52888Linux kernel vcodec double free5.5v3.10.2%2024-07-30Fix
CVE-2023-48396Apache SeaTunnel Web: Authentication bypass9.1CISA ADP v3.10.7%2024-07-30Fix
CVE-2023-38001IBM Aspera Orchestrator cross-site request forgery6.5CNA v3.10.3%2024-07-30Fix
CVE-2023-33976TensorFlow segfault in array_ops.upper_bound7.5CNA v3.10.4%2024-07-30Fix
CVE-2023-26289IBM Aspera Orchestrator HTTP header injection5.4CNA v3.10.3%2024-07-30Fix
CVE-2023-26288IBM Aspera Orchestrator session fixation5.5CNA v3.10.2%2024-07-30Fix
CVE-2023-52887Linux kernel J1939 transport protocol reachable assertion7.5CNA v3.10.7%2024-07-29Fix
CVE-2023-42959Apple macOS race condition7.0v3.10.1%2024-07-29Fix
CVE-2023-42958Apple macOS insecure permissions7.8v3.10.2%2024-07-29Fix
CVE-2023-42957Apple macOS insecure permissions3.3v3.10.2%2024-07-29Fix
CVE-2023-42949Apple iOS and iPadOS temporary directory vulnerability3.3v3.10.2%2024-07-29Fix
CVE-2023-42948Apple macOS information disclosure3.3v3.10.2%2024-07-29Fix
CVE-2023-42943Apple macOS out-of-bounds read5.5v3.10.2%2024-07-29Fix
CVE-2023-42925Apple macOS information disclosure3.3v3.10.2%2024-07-29Fix
CVE-2023-42918Apple macOS insecure permissions6.3NVD v3.10.2%2024-07-29Fix
CVE-2023-40398Apple iOS, iPadOS and macOS sandbox vulnerability8.8v3.10.2%2024-07-29Fix
CVE-2023-40396Apple tvOS command injection7.8v3.10.2%2024-07-29Fix
CVE-2023-50700Deepin dde-file-manager insecure permissions7.8CISA ADP v3.10.2%2024-07-26
CVE-2023-49921Elasticsearch insertion of sensitive information into log file5.2CNA v3.10.4%2024-07-26Fix
CVE-2023-38522Apache Traffic Server: Incomplete field name check allows request smuggling7.5v3.11.0%2024-07-26Fix
CVE-2023-7271Huawei HarmonyOS privilege escalation vulnerability in the NMS module5.5CNA v3.10.1%2024-07-25Fix
CVE-2023-48362Apache Drill: XXE vulnerability in XML Format Reader8.8NVD v3.10.8%2024-07-24Fix
CVE-2023-45249Acronis Cyber Infrastructure (ACI) insecure default Password9.8CNA v3.053.3%2024-07-24KEVNucleiMetasploitExploit codeFix
CVE-2023-32471Dell Edge Gateway 5200 out-of-bounds read6.0CNA v3.10.2%2024-07-24Fix
CVE-2023-32466Dell Edge Gateway 3200 out-of-bounds write5.7CNA v3.10.2%2024-07-24Fix
CVE-2023-7269ArtPlacer Widget WordPress plugin stored XSS via CSRF7.5CISA ADP v3.10.2%2024-07-19Fix
CVE-2023-7268ArtPlacer Widget WordPress plugin Subscriber+ arbitrary widget deletion6.5CISA ADP v3.10.4%2024-07-19Fix
CVE-2023-50304IBM Engineering Requirements Management DOORS XML external entity injection7.1CNA v3.10.6%2024-07-18Fix
CVE-2023-40704Philips Vue PACS use of default credentials9.8v3.10.3%2024-07-18
CVE-2023-6708SVG Support WordPress plugin authenticated (Author+) cross-site scripting via SVG5.4CNA v3.10.3%2024-07-18Fix
CVE-2023-52291Apache StreamPark (incubating): Unchecked maven build params could trigger remote command execution4.7NVD v3.11.6%2024-07-17Fix
CVE-2023-43971Lizhipay Acg-faka cross-site scripting6.1v3.10.4%2024-07-17
CVE-2023-42010IBM Sterling B2B Integrator Standard Edition information disclosure3.1CNA v3.10.3%2024-07-17Fix
CVE-2023-7272Eclipse Parsson stack overflow with deeply nested objects8.6CNA v3.10.6%2024-07-17Fix
CVE-2023-4976Pure Storage FlashBlade management interface authentication privilege escalation9.3CNA v4.00.4%2024-07-17
CVE-2023-52886Linux kernel USB hub port initialization race condition6.4v3.10.3%2024-07-16Fix
CVE-2023-52290Apache StreamPark (incubating): Unchecked SQL query fields trigger SQL injection8.1CISA ADP v3.10.6%2024-07-16Fix
CVE-2023-31456Fluid Topics platform There is an server-side request forgery5.4CISA ADP v3.10.2%2024-07-16
CVE-2023-7013Google Chrome Compositing inappropriate implementation4.7v3.10.2%2024-07-16Fix
CVE-2023-7012Google Chrome Permission Prompts improper input validation9.6v3.10.3%2024-07-16Fix
CVE-2023-7011Google Chrome Picture in Picture inappropriate implementation6.5v3.10.4%2024-07-16Emerging ThreatsFix
CVE-2023-7010Google Chrome WebRTC use-after-free8.8v3.10.4%2024-07-16Fix
CVE-2023-4860Google Chrome Skia inappropriate implementation9.6v3.10.4%2024-07-16Fix
CVE-2023-49566Apache Linkis DataSource: JDBC Datasource module with DB2 has JNDI injection8.8v3.10.8%2024-07-15Fix
CVE-2023-46801Apache Linkis DataSource: DataSource remote code execution8.8v3.11.2%2024-07-15Fix
CVE-2023-41916Apache Linkis DataSource allows arbitrary file reading6.5v3.10.7%2024-07-15Fix
CVE-2023-52885Linux kernel SunRPC TCP listener use-after-free8.1CNA v3.10.6%2024-07-14Fix
CVE-2023-39329Openjpeg: Resource exhaustion will occur in the opj_t1_decode_cblks function in the tcd.c6.5CNA v3.10.6%2024-07-13Fix
CVE-2023-39327Openjpeg: Malicious files can cause the program to enter a large loop4.3CNA v3.10.6%2024-07-13Fix
CVE-2023-41093Silicon Labs Simplicity SDK use-after-free3.1CNA v3.10.2%2024-07-12
CVE-2023-35006IBM Security ReaQta HTML injection5.4CNA v3.10.3%2024-07-10Fix
CVE-2023-33860IBM Security ReaQta information disclosure5.3CNA v3.10.2%2024-07-10Fix
CVE-2023-33859IBM Security ReaQta information disclosure5.3CNA v3.10.4%2024-07-10Fix
CVE-2023-32472Dell PowerSwitch Z9664F-ON BIOS out-of-bounds write5.7CNA v3.10.2%2024-07-10Fix
CVE-2023-32467Dell PowerSwitch Z9664F-ON BIOS improper initialization5.7CNA v3.10.2%2024-07-10Fix
CVE-2023-7062Advanced File Manager Shortcodes WordPress plugin authenticated (Contributor+) directory traversal8.8CNA v3.10.7%2024-07-10Fix
CVE-2023-7061Advanced File Manager Shortcode WordPress plugin authenticated (Contributor+) arbitrary file upload8.8CNA v3.10.8%2024-07-10Fix
CVE-2023-6813Login by Auth0 WordPress plugin reflected cross-site scripting via wle6.1CNA v3.10.4%2024-07-10Fix
CVE-2023-52891Siemens SIMATIC Energy Manager Basic sequential memory allocation5.3CNA v3.10.5%2024-07-09Fix
CVE-2023-52238Siemens RUGGEDCOM RST2228 information disclosure2.3CNA v4.00.4%2024-07-09Fix
CVE-2023-52237Siemens RUGGEDCOM i800 information disclosure7.7CNA v4.00.4%2024-07-09Fix
CVE-2023-50807Samsung Exynos Modem 5123 out-of-bounds write8.1CNA v3.10.4%2024-07-09Fix
CVE-2023-50806Samsung Exynos Modem 5123 out-of-bounds read8.4CNA v3.10.2%2024-07-09Fix
CVE-2023-50805Samsung Exynos Modem 5123 out-of-bounds write8.1CNA v3.10.4%2024-07-09Fix
CVE-2023-50181Fortinet FortiADC improper access control4.8CNA v3.10.3%2024-07-09Fix
CVE-2023-50179Fortinet FortiADC improper certificate validation4.7CNA v3.10.2%2024-07-09Fix
CVE-2023-50178Fortinet FortiADC improper certificate validation7.2CNA v3.10.2%2024-07-09Fix
CVE-2023-48194Tenda AC8V4 out-of-bounds write9.8v3.10.6%2024-07-09Exploit code
CVE-2023-40702Ping Identity PingOne MFA Integration Kit for PingFederate skipMFA action authentication bypass7.7CNA v4.00.4%2024-07-09Fix
CVE-2023-40356Ping Identity PingOne MFA Integration Kit for PingFederate MFA device pairing authentication bypass8.7CNA v4.00.4%2024-07-09Fix
CVE-2023-39328Openjpeg: Denail of service via crafted image file5.5CNA v3.10.2%2024-07-09Fix
CVE-2023-38055Easy Appointments services endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38054Easy Appointments customers endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38053Easy Appointments settings endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38052Easy Appointments admins endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38051Easy Appointments secretaries endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38050Easy Appointments webhooks endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38049Easy Appointments appointments endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38048Easy Appointments providers endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-38047Easy Appointments categories endpoint insecure direct object reference8.1NVD v3.10.4%2024-07-09
CVE-2023-32737Siemens SIMATIC STEP 7 Safety V18 deserialization of untrusted data7.0CNA v4.00.2%2024-07-09Fix
CVE-2023-32735Siemens SIMATIC STEP 7 Safety V16 deserialization of untrusted data7.0CNA v4.00.2%2024-07-09Fix
CVE-2023-21114Google Android multiple locations insecure permissions7.8v3.10.1%2024-07-09Fix
CVE-2023-21113Google Android multiple locations insecure permissions7.8v3.10.1%2024-07-09Fix
CVE-2023-3290A BOLA vulnerability in POST /customers in EasyAppointments5.0NVD v3.10.3%2024-07-09
CVE-2023-3289A BOLA vulnerability in POST /services in EasyAppointments6.5NVD v3.10.3%2024-07-09
CVE-2023-3288A BOLA vulnerability in POST /providers in EasyAppointments8.8NVD v3.10.3%2024-07-09
CVE-2023-3287A BOLA vulnerability in POST /admins in EasyAppointments8.8NVD v3.10.4%2024-07-09
CVE-2023-3286A BOLA vulnerability in POST /secretaries in EasyAppointments6.5NVD v3.10.3%2024-07-09
CVE-2023-3285A BOLA vulnerability in POST /appointments in EasyAppointments7.7CNA v3.10.3%2024-07-09
CVE-2023-50383Realtek rtl819x Jungle SDK boa formWsc functionality OS command injection7.2CNA v3.11.9%2024-07-08
CVE-2023-50382Realtek rtl819x Jungle SDK boa formWsc functionality OS command injection7.2CNA v3.11.9%2024-07-08
CVE-2023-50381Realtek rtl819x Jungle SDK boa formWsc functionality OS command injection7.2CNA v3.13.2%2024-07-08
CVE-2023-50330Realtek rtl819x Jungle SDK boa getInfo functionality stack-based buffer overflow7.2v3.11.1%2024-07-08
CVE-2023-50244Realtek rtl819x Jungle SDK boa formIpQoS functionality stack-based buffer overflow7.2CNA v3.11.4%2024-07-08
CVE-2023-50243Realtek rtl819x Jungle SDK boa formIpQoS functionality stack-based buffer overflow7.2CNA v3.11.4%2024-07-08
CVE-2023-50240Realtek rtl819x Jungle SDK boa set_RadvdInterfaceParam functionality stack-based buffer overflow7.2CNA v3.11.4%2024-07-08
CVE-2023-50239Realtek rtl819x Jungle SDK boa set_RadvdInterfaceParam functionality stack-based buffer overflow7.2CNA v3.11.4%2024-07-08
CVE-2023-49867Realtek rtl819x Jungle SDK boa formWsc functionality stack-based buffer overflow7.2CNA v3.11.1%2024-07-08
CVE-2023-49595Realtek rtl819x Jungle SDK boa rollback_control_code functionality stack-based buffer overflow7.2CNA v3.10.9%2024-07-08
CVE-2023-49593LevelOne WBR-6013 active debug code7.2CNA v3.11.1%2024-07-08
CVE-2023-49073Realtek rtl819x Jungle SDK boa formFilter functionality stack-based buffer overflow7.2CNA v3.10.9%2024-07-08
CVE-2023-48270Realtek rtl819x Jungle SDK boa formDnsv6 functionality stack-based buffer overflow7.2CNA v3.10.9%2024-07-08
CVE-2023-47856Realtek rtl819x Jungle SDK boa set_RadvdPrefixParam functionality stack-based buffer overflow7.2CNA v3.11.4%2024-07-08
CVE-2023-47677Realtek rtl819x Jungle SDK boa CSRF protection functionality cross-site request forgery8.8v3.10.4%2024-07-08
CVE-2023-46685LevelOne WBR-6013 telnetd functionality hard-coded credentials9.8CNA v3.11.0%2024-07-08
CVE-2023-45742Realtek rtl819x Jungle SDK boa updateConfigIntoFlash functionality integer overflow7.2v3.11.2%2024-07-08
CVE-2023-45215Realtek rtl819x Jungle SDK boa setRepeaterSsid functionality stack-based buffer overflow7.2CNA v3.11.0%2024-07-08
CVE-2023-41251Realtek rtl819x Jungle SDK boa formRoute functionality stack-based buffer overflow7.2v3.11.3%2024-07-08
CVE-2023-34435Realtek rtl819x Jungle SDK improper signature verification7.2v3.10.5%2024-07-08
CVE-2023-52340Linux kernel denial of service7.5v3.10.9%2024-07-05Fix
CVE-2023-521697-Zip NTFS handler out-of-bounds read8.2CISA ADP v3.11.0%2024-07-03Fix
CVE-2023-521687-Zip NTFS handler heap-based buffer overflow8.4CISA ADP v3.10.3%2024-07-03Fix
CVE-2023-51778Jungo Windriver out-of-bounds write5.5v3.10.2%2024-07-02Fix
CVE-2023-51777Jungo Windriver denial of service5.5v3.10.2%2024-07-02Fix
CVE-2023-51776Jungo Windriver improper privilege management7.8v3.10.2%2024-07-02Fix
CVE-2023-41928Remote server offers deprecated TLS protocol in Kiloview P1/P2 devices5.3CNA v3.10.1%2024-07-02
CVE-2023-41927Weak TLS Cipher Suites Supported in Kiloview P1/P2 devices5.3CNA v3.10.1%2024-07-02
CVE-2023-41926Insufficiently protected credentials in Kiloview P1/P2 devices8.8CNA v3.10.3%2024-07-02
CVE-2023-41923Weak password requirements in Kiloview P1/P2 devices7.2CNA v3.10.3%2024-07-02
CVE-2023-41922Improper neutralization of input during web page generation in Kiloview P1/P2 devices5.4NVD v3.10.2%2024-07-02
CVE-2023-41921Download of code without integrity check in Kiloview P1/P2 devices9.8CNA v3.10.3%2024-07-02
CVE-2023-41920Authentication bypass by primary weakness in Kiloview P1/P2 devices9.8CNA v3.10.4%2024-07-02
CVE-2023-41919Kiloview P1 and P2 hard-coded credentials9.8NVD v3.10.4%2024-07-02
CVE-2023-41918Missing authentication for critical function in Kiloview P1/P2 devices10.0CNA v3.10.6%2024-07-02
CVE-2023-41917Improper input validation in Kiloview P1/P2 devices allows for remote code execution10.0CNA v3.10.7%2024-07-02
CVE-2023-24531Output of go env does not sanitize values in cmd/go9.8CISA ADP v3.10.8%2024-07-02Fix
CVE-2023-43554Qualcomm Snapdragon FastRPC driver memory corruption8.4CNA v3.10.1%2024-07-01Fix
CVE-2023-50964IBM InfoSphere Information Server cross-site scripting5.4CNA v3.10.3%2024-06-30Fix
CVE-2023-50954IBM InfoSphere Information Server information disclosure4.3CNA v3.10.4%2024-06-30Fix
CVE-2023-50953IBM InfoSphere Information Server information disclosure5.4CNA v3.10.3%2024-06-30Fix
CVE-2023-50952IBM InfoSphere Information Server server-side request forgery5.4CNA v3.10.2%2024-06-30Fix
CVE-2023-35022IBM InfoSphere Information Server improper authentication3.3CNA v3.10.2%2024-06-30Fix
CVE-2023-4017Goya WordPress theme unauthenticated reflected cross-site scripting via Multiple parameters6.1CNA v3.10.4%2024-06-29Fix
CVE-2023-47803Synology Camera Firmware path traversal5.3CNA v3.10.7%2024-06-28Fix
CVE-2023-47802Synology Camera Firmware OS command injection7.2CNA v3.11.5%2024-06-28Fix
CVE-2023-52892phpseclib Name confusion in x509 Subject Alternative Name fields7.5CISA ADP v3.10.4%2024-06-27Fix
CVE-2023-42014IBM Sterling B2B Integrator Standard Edition cross-site scripting5.4CNA v3.10.3%2024-06-27Fix
CVE-2023-42011IBM Sterling B2B Integrator clickjacking4.3CNA v3.10.2%2024-06-27Fix
CVE-2023-38371IBM Security Access Manager Docker information disclosure5.9CNA v3.10.5%2024-06-27Fix
CVE-2023-38370IBM Security Access Manager Docker information disclosure7.5CNA v3.10.7%2024-06-27Fix
CVE-2023-38368IBM Security Access Manager Docker information disclosure5.5CNA v3.10.2%2024-06-27Fix
CVE-2023-30998IBM Security Access Manager Docker privilege escalation7.8CNA v3.10.2%2024-06-27Fix
CVE-2023-30997IBM Security Access Manager Docker privilege escalation7.8CNA v3.10.2%2024-06-27Fix
CVE-2023-30430IBM Security Verify Access information disclosure5.5CNA v3.10.2%2024-06-27Fix
CVE-2023-7270SoftMaker Software Office local privilege escalation via MSI installer5.3CISA ADP v3.10.3%2024-06-27Fix
CVE-2023-26877Softexpert Excellence Suite v.2.1 file upload6.3CISA ADP v3.10.4%2024-06-26
CVE-2023-37541HCL Connections is vulnerable to broken access control3.5CNA v3.10.3%2024-06-25Fix
CVE-2023-6198Baicells Snap Router hard coded credential9.3CNA v3.10.4%2024-06-25
CVE-2023-5038Hanwha Vision A-Series unauthenticated DoS8.7CNA v4.00.4%2024-06-25Fix
CVE-2023-50029module "M4 PDF Extensions" PHP injection10.0CISA ADP v3.10.8%2024-06-24Exploit code
CVE-2023-49793Path traversal in `CodeChecker server` in the endpoint of `CodeChecker store`6.5CNA v3.10.7%2024-06-24Fix
CVE-2023-45196Adminer and AdminerEvo denial of service via HTTP redirect7.5v3.10.6%2024-06-24Fix
CVE-2023-45195Adminer and AdminerEvo SSRF5.3v3.10.4%2024-06-24Fix
CVE-2023-52884Linux kernel cyapa touchpad driver improper locking4.4CISA ADP v3.10.2%2024-06-21Fix
CVE-2023-51375EmbedPress WordPress plugin broken access control8.8v3.10.3%2024-06-21Fix
CVE-2023-45673Arbitrary code execution on click of PDF links in Joplin8.9CNA v3.11.0%2024-06-21Fix
CVE-2023-45197Adminer and AdminerEvo vulnerable to directory traversal and file upload9.8v3.10.7%2024-06-21Fix
CVE-2023-39517Joplin HTML sanitizer map link handling cross-site scripting8.2CNA v3.10.5%2024-06-21Fix
CVE-2023-38506Cross-site scripting (XSS) when pasting HTML into the rich text editor in Joplin8.2CNA v3.10.4%2024-06-21Fix
CVE-2023-38389Jupiter X Core WordPress plugin unauthenticated account takeover9.8v3.11.4%2024-06-21Fix
CVE-2023-37898Safe mode cross-site scripting (XSS) vulnerability in Joplin8.2CNA v3.10.4%2024-06-21Fix
CVE-2023-3352WPMU DEV Smush resmush list deletion missing authorization4.3CNA v3.10.3%2024-06-21Fix
CVE-2023-52883Linux kernel AMDGPU VM buffer object handling null pointer dereference7.5CISA ADP v3.10.6%2024-06-20Fix
CVE-2023-49113Sensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer7.8CISA ADP v3.10.2%2024-06-20Fix
CVE-2023-49112Insecure direct object reference in Kiuwan SAST6.5CISA ADP v3.10.5%2024-06-20Fix
CVE-2023-49111Reflected cross-site-scripting in Kiuwan SAST6.5CISA ADP v3.10.6%2024-06-20Fix
CVE-2023-49110XML external entity injection in Kiuwan SAST7.2CISA ADP v3.10.8%2024-06-20Fix
CVE-2023-25646Permission and access control vulnerability in ZTE H388X7.1CNA v3.10.2%2024-06-20Fix
CVE-2023-3204Materialis WordPress theme missing authorization to limited arbitrary options update6.5CNA v3.10.4%2024-06-20Fix
CVE-2023-50900Master Slider WordPress plugin cross-site request forgery (CSRF)4.3v3.10.2%2024-06-19
CVE-2023-48761JetElements For Elementor WordPress plugin broken access control6.3v3.10.3%2024-06-19Fix
CVE-2023-48760JetElements For Elementor WordPress plugin unauthenticated broken access control9.8v3.10.4%2024-06-19Fix
CVE-2023-48759JetElements For Elementor WordPress plugin Crocoblock missing authorization7.5v3.10.4%2024-06-19Fix
CVE-2023-47788Jetpack WordPress plugin Contributor+ broken access control8.8v3.10.4%2024-06-19Fix
CVE-2023-47783Thrive Theme Builder WordPress theme Multiple authenticated broken access control8.3CNA v3.10.4%2024-06-19Fix
CVE-2023-47771Essential Grid WordPress plugin Multiple authenticated broken access control8.3CNA v3.10.4%2024-06-19Fix
CVE-2023-47770BeTheme WordPress theme Contributor+ broken access control7.6CNA v3.10.3%2024-06-19Fix
CVE-2023-47681WooCommerce Checkout Manager WordPress plugin broken access control6.5CNA v3.19.2%2024-06-19Fix
CVE-2023-46148Themify Ultra WordPress theme authenticated arbitrary settings Change vulnerability8.8v3.10.4%2024-06-19Fix
CVE-2023-46146Themify Ultra WordPress theme Multiple broken access control8.8v3.10.4%2024-06-19Fix
CVE-2023-45658Nexter WordPress theme broken access control7.6CNA v3.10.4%2024-06-19Fix
CVE-2023-44151Pre-Publish Checklist WordPress plugin broken access control8.8v3.10.4%2024-06-19Fix
CVE-2023-44148Astra Bulk Edit WordPress plugin broken access control8.8v3.10.4%2024-06-19Fix
CVE-2023-41805Broken access control vulnerability in multiple Brainstorm Force plugins6.5v3.10.3%2024-06-19Fix
CVE-2023-40608Paid Memberships Pro CCBill Gateway WordPress plugin unauthenticated broken access control8.2CNA v3.10.4%2024-06-19Fix
CVE-2023-40004Unauth. Access Token Manipulation vulnerability in multiple ServMask WordPress plugins7.3CNA v3.111.0%2024-06-19Fix
CVE-2023-39998BeTheme WordPress theme Author+ broken access control7.2v3.10.5%2024-06-19Fix
CVE-2023-39993Elements kit Elementor addons WordPress plugin Wpmet missing authorization4.3v3.10.4%2024-06-19Fix
CVE-2023-39990Paid Memberships Pro WordPress plugin broken access control8.8v3.10.5%2024-06-19Fix
CVE-2023-39922Avada WordPress theme authenticated broken access control8.8v3.10.4%2024-06-19Fix
CVE-2023-39312Avada WordPress theme Auth. Unrestricted Zip Extraction vulnerability8.8NVD v3.10.6%2024-06-19Fix
CVE-2023-39310Avada Builder WordPress plugin authenticated broken access control5.4CNA v3.10.5%2024-06-19Fix
CVE-2023-38394Jupiter X Core WordPress plugin Multiple Auth. broken access control8.8v3.10.4%2024-06-19Fix
CVE-2023-38393Ninja Forms WordPress plugin Subscriber+ broken access control8.8v3.10.5%2024-06-19Fix
CVE-2023-38386Ninja Forms WordPress plugin Contributor+ broken access control9.8v3.10.5%2024-06-19Fix
CVE-2023-37872WooCommerce Ship to Multiple Addresses WordPress plugin broken access control6.5CNA v3.10.5%2024-06-19Fix
CVE-2023-37870WooCommerce Warranty Requests WordPress plugin broken access control8.1CNA v3.10.4%2024-06-19Fix
CVE-2023-37869Premium Addons PRO WordPress plugin broken access control8.8v3.10.6%2024-06-19Fix
CVE-2023-36684Brainstorm Force Convert Pro missing authorization9.8v3.10.6%2024-06-19Fix
CVE-2023-36683Schema Pro WordPress plugin broken access control6.5CNA v3.10.6%2024-06-19Fix
CVE-2023-36676Spectra WordPress plugin broken access control8.8v3.10.5%2024-06-19Fix
CVE-2023-36516LearnPress WordPress plugin authenticated broken access control8.8v3.10.5%2024-06-19Fix
CVE-2023-36515LearnPress WordPress plugin unauthenticated broken access control9.8v3.10.4%2024-06-19Fix
CVE-2023-36512AutomateWoo WordPress plugin broken access control6.5CNA v3.10.4%2024-06-19Fix
CVE-2023-35050Elementor Pro WordPress plugin Auth. broken access control5.4CNA v3.10.3%2024-06-19Fix
CVE-2023-35049WooCommerce Stripe Payment Gateway WordPress plugin unauthenticated broken access control9.8v3.10.6%2024-06-19Fix
CVE-2023-25697GamiPress WordPress plugin CSRF Leading to settings Change6.3v3.10.2%2024-06-19Fix
CVE-2023-6692Ultimate Blocks WordPress Blocks plugin stored cross-site scripting6.4CNA v3.10.3%2024-06-19Fix
CVE-2023-6495YARPP Yet Another Related Posts WordPress plugin Authenticated(Administrator+) cross-site scripting4.8v3.10.3%2024-06-19Fix
CVE-2023-47726IBM QRadar Suite improper input validation7.1CNA v3.10.4%2024-06-18Fix
CVE-2023-5527Business Directory WordPress plugin authenticated (Author+) CSV injection8.0v3.10.5%2024-06-18Fix
CVE-2023-37058Unionman Jlink AX1800 insecure permissions9.8v3.10.6%2024-06-17
CVE-2023-37057Unionman Jlink AX1800 authentication mechanism authentication bypass9.8CISA ADP v3.10.9%2024-06-17
CVE-2023-27636Progress Sitefinity cross-site scripting5.4v3.11.3%2024-06-16Exploit code
CVE-2023-6696Popup Builder WordPress plugin unauthorized access8.1v3.10.5%2024-06-15Fix
CVE-2023-51523WooCommerce Easy Duplicate Product WordPress plugin broken access control4.3CNA v3.10.3%2024-06-14Fix
CVE-2023-51516Business Directory Plugin Easy Listing Directories for WordPress broken access control5.4v3.10.3%2024-06-14Fix
CVE-2023-51507Quiz And Survey Master WordPress plugin broken access control5.3v3.10.3%2024-06-14Fix
CVE-2023-51497WooCommerce Ship to Multiple Addresses WordPress plugin broken access control5.4v3.10.3%2024-06-14Fix
CVE-2023-51496WooCommerce Warranty Requests WordPress plugin broken access control5.3v3.10.3%2024-06-14Fix
CVE-2023-51495WooCommerce Warranty Requests WordPress plugin broken access control6.5v3.10.4%2024-06-14Fix
CVE-2023-51377Everest Forms WordPress plugin broken access control5.3v3.10.3%2024-06-14Fix
CVE-2023-51376ProjectHuddle Client Site WordPress plugin broken access control4.3v3.10.3%2024-06-14Fix
CVE-2023-37394WP Dummy Content Generator WordPress plugin broken access control5.3v3.10.3%2024-06-14Fix
CVE-2023-36695Sublanguage WordPress plugin broken access control8.8v3.10.4%2024-06-14Fix
CVE-2023-36694Kingkong Board WordPress plugin broken access control6.3CNA v3.10.3%2024-06-14
CVE-2023-36504BBS e-Popup WordPress plugin broken access control9.8v3.10.5%2024-06-14
CVE-2023-35045Fat Rat Collect WordPress plugin broken access control4.3CNA v3.10.4%2024-06-14Fix
CVE-2023-35040SendPress Newsletters WordPress plugin broken access control9.8v3.10.4%2024-06-14
CVE-2023-29174SKU Label Changer For WooCommerce WordPress plugin broken access control6.5CNA v3.10.4%2024-06-14Fix
CVE-2023-6492Simple Sitemap WordPress plugin cross-site request forgery via admin_notices4.3CNA v3.10.2%2024-06-14Fix
CVE-2023-52890NTFS-3G ntfs_uppercase_mbs use-after-free4.5CISA ADP v3.10.2%2024-06-13Fix
CVE-2023-35860Moderncampus Omni Cms path traversal5.3v3.10.8%2024-06-13Fix
CVE-2023-35859Moderncampus Omni Cms blog function of Modern Campus - reflected cross-site scripting6.1v3.10.3%2024-06-13Fix
CVE-2023-35858Moderncampus Omni Cms XPath injection5.3CISA ADP v3.10.5%2024-06-13
CVE-2023-52177Integrate Google Drive WordPress plugin broken access control6.3v3.10.3%2024-06-12Fix
CVE-2023-52117ProfileGrid WordPress plugin broken access control6.3v3.10.3%2024-06-12Fix
CVE-2023-51680Quotes for WooCommerce WordPress plugin broken access control6.3v3.10.3%2024-06-12Fix
CVE-2023-51679BulkGate SMS Plugin for WooCommerce WordPress plugin broken access control5.4v3.10.3%2024-06-12Fix
CVE-2023-51671FunnelKit Checkout WordPress plugin authenticated plugin settings Change vulnerability5.4v3.10.3%2024-06-12Fix
CVE-2023-51670FunnelKit Checkout WordPress plugin authenticated arbitrary plugin activation vulnerability4.3v3.10.3%2024-06-12Fix
CVE-2023-51537Awesome Support WordPress plugin broken access control7.3v3.10.3%2024-06-12Fix
CVE-2023-51526Simple Staff List WordPress plugin broken access control4.3CNA v3.10.3%2024-06-12Fix
CVE-2023-51524weForms WordPress plugin broken access control8.8v3.10.3%2024-06-12Fix
CVE-2023-51413Piotnet Forms WordPress plugin broken access control5.3CNA v3.10.3%2024-06-12Fix
CVE-2023-49559Gqlparser denial of service vulnerability via the parserDirectives function3.7CISA ADP v3.10.6%2024-06-12Fix
CVE-2023-48280Consensu.io WordPress plugin broken access control7.5CNA v3.10.4%2024-06-12Fix
CVE-2023-47845Grab and Save WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-06-12
CVE-2023-47828wpMandrill WordPress plugin broken access control4.3v3.10.3%2024-06-12
CVE-2023-44234WP GPX Maps WordPress plugin broken access control4.3v3.10.3%2024-06-12Fix
CVE-2023-41240Pricing Deals for WooCommercePricing Deals for WooCommerce WordPress plugin broken access control5.3v3.10.3%2024-06-12
CVE-2023-40672Sticky Social Media Icons WordPress plugin broken access control5.4CNA v3.10.4%2024-06-12
CVE-2023-40603Simple Org Chart WordPress plugin broken access control5.3v3.10.4%2024-06-12Fix
CVE-2023-40209Highcompress Image Compressor WordPress plugin broken access control4.3v3.10.3%2024-06-12Fix
CVE-2023-38395WP Clone Menu WordPress plugin broken access control4.3v3.10.3%2024-06-12
CVE-2023-29267IBM Db2 denial of service5.3CNA v3.10.6%2024-06-12Fix
CVE-2023-25030Buy Me a Coffee WordPress plugin broken access control4.3v3.10.3%2024-06-12Fix
CVE-2023-52233POST SMTP Mailer WordPress plugin broken access control on API9.8v3.10.4%2024-06-11Fix
CVE-2023-52227MailerLite WooCommerce integration WordPress plugin broken access control4.3CNA v3.10.4%2024-06-11Fix
CVE-2023-52224Revolut Gateway for WooCommerce WordPress plugin broken access control4.3CNA v3.10.6%2024-06-11Fix
CVE-2023-52217WooCommerce Conversion Tracking WordPress plugin broken access control6.3v3.10.2%2024-06-11Fix
CVE-2023-52199ActivityPub WordPress plugin unauthenticated broken access control6.5CNA v3.10.3%2024-06-11Fix
CVE-2023-52186WooCommerce Product Vendors WordPress plugin unauthenticated broken access control5.3v3.10.3%2024-06-11Fix
CVE-2023-52183WordPress Backup and Migration plugin broken access control5.4CNA v3.10.4%2024-06-11Fix
CVE-2023-52179Product Expiry for WooCommerce WordPress plugin broken access control5.4CNA v3.10.3%2024-06-11Fix
CVE-2023-51682MC4WP WordPress plugin broken access control5.3v3.10.4%2024-06-11Fix
CVE-2023-51519Slider by Soliloquy Responsive Image Slider for WordPress plugin broken access control4.3v3.10.4%2024-06-11Fix
CVE-2023-51498WooCommerce Canada Post Shipping WordPress plugin broken access control5.3CNA v3.10.4%2024-06-11Fix
CVE-2023-50763Siemens SIMATIC CP 1542SP-1 infinite loop6.9CNA v4.00.4%2024-06-11Fix
CVE-2023-48273Preloader for Website WordPress plugin unauthenticated broken access control5.3CNA v3.10.5%2024-06-11Fix
CVE-2023-46720Fortinet FortiOS A stack-based buffer overflow6.3CNA v3.10.3%2024-06-11Fix
CVE-2023-38533Siemens TIA Administrator insecure temporary file4.8CNA v4.00.1%2024-06-11Fix
CVE-2023-33922Elementor WordPress plugin broken access control4.3v3.10.3%2024-06-11Fix
CVE-2023-28775Yoast SEO Premium WordPress plugin unauthenticated Zapier API Key reset vulnerability5.3v3.10.4%2024-06-11Fix
CVE-2023-25799Tutor LMS WordPress plugin Multiple broken access control8.8v3.10.5%2024-06-11Fix
CVE-2023-23775Fortinet FortiSOAR SQL injection5.9CNA v3.10.8%2024-06-11
CVE-2023-7264Build App Online WordPress plugin account takeover via weak password reset Mechanism9.8v3.10.6%2024-06-11Fix
CVE-2023-6748Custom Field Template WordPress plugin Authenticated(Contributor+) information exposure4.3v3.10.3%2024-06-11Fix
CVE-2023-6745Custom Field Template WordPress plugin stored cross-site scripting5.4v3.10.3%2024-06-11Fix
CVE-2023-4727Red Hat Certificate System ca: Token authentication bypass7.5CNA v3.10.7%2024-06-11Fix
CVE-2023-40389Apple macOS information disclosure5.5v3.10.2%2024-06-10Fix
CVE-2023-52232Booster Plus for WooCommerce WordPress plugin arbitrary Post/Page deletion vulnerability6.5v3.10.3%2024-06-09Fix
CVE-2023-52230Booster Plus for WooCommerce WordPress plugin arbitrary WordPress option disclosure vulnerability6.5v3.10.4%2024-06-09Fix
CVE-2023-51494WooCommerce Product Vendors WordPress plugin broken access control9.8v3.10.4%2024-06-09Fix
CVE-2023-45188IBM Engineering Lifecycle Optimization Publishing file upload6.5CNA v3.10.7%2024-06-09Fix
CVE-2023-34003WooCommerce Box Office WordPress plugin missing authorization5.3v3.10.3%2024-06-09Fix
CVE-2023-31080Unlimited Elements For Elementor WordPress plugin Multiple broken access control8.8v3.10.4%2024-06-09Fix
CVE-2023-23640MainWP UpdraftPlus Extension WordPress plugin Subscriber+ arbitrary plugin activation vulnerability8.8v3.10.3%2024-06-09Fix
CVE-2023-23639MainWP Staging Extension WordPress plugin Subscriber+ arbitrary plugin activation vulnerability8.8v3.10.3%2024-06-09Fix
CVE-2023-45707HCL Connections Docs is vulnerable to cross-site scripting (XSS)4.4CNA v3.10.3%2024-06-08
CVE-2023-49224Precor touchscreen console SSH authorized_keys file hard-coded credentials8.0CISA ADP v3.10.3%2024-06-07
CVE-2023-49223Precor touchscreen console /etc/passwd root password hard-coded credentials8.8CISA ADP v3.10.3%2024-06-07
CVE-2023-49222Precor touchscreen console SSH private key hard-coded credentials8.8CISA ADP v3.10.3%2024-06-07
CVE-2023-49221Precor touchscreen console service menu access code hard-coded credentials7.8CISA ADP v3.10.2%2024-06-07
CVE-2023-32475Dell CPG BIOS missing integrity check7.6CNA v3.10.2%2024-06-07Fix
CVE-2023-7261Google Omaha inappropriate implementation7.8v3.10.2%2024-06-07Exploit codeFix
CVE-2023-6876Clever Fox WordPress plugin unauthorized access5.4v3.10.4%2024-06-07Fix