CVE-2023 list

CVE-2023 records published after 2023

Page five of eight: records 4,001 to 5,000 of the 7,334 published after 2023, newest first. The first page carries the figures for After 2023.

CVE-2023 records published after 2023, newest first: records 4,001 to 5,000 of 7,334
CVE Summary CVSS EPSS Published Signals
CVE-2023-38107Foxit PDF Reader Annotation use-after-free remote code execution7.8CNA v3.00.5%2024-05-03Fix
CVE-2023-38106Foxit PDF Reader PDF File Parsing out-of-bounds read information disclosure3.3CNA v3.00.5%2024-05-03Fix
CVE-2023-38105Foxit PDF Reader PDF File Parsing out-of-bounds read information disclosure3.3CNA v3.00.5%2024-05-03Fix
CVE-2023-38104GStreamer RealMedia File Parsing integer overflow remote code execution8.8v3.11.4%2024-05-03Fix
CVE-2023-38103GStreamer RealMedia File Parsing integer overflow remote code execution8.8v3.11.5%2024-05-03Fix
CVE-2023-38102NETGEAR ProSAFE Network Management System createUser missing authorization privilege escalation8.8v3.11.4%2024-05-03Fix
CVE-2023-38101NETGEAR ProSAFE Network Management System SettingConfigController vulnerability8.8v3.12.1%2024-05-03Fix
CVE-2023-38100NETGEAR ProSAFE Network Management System clearAlertByIds SQL injection privilege escalation8.8v3.11.4%2024-05-03Fix
CVE-2023-38099NETGEAR ProSAFE Network Management System getNodesByTopologyMapSearch function SQL injection8.8v3.156.0%2024-05-03Fix
CVE-2023-38098NETGEAR ProSAFE Network Management System upload servlet unrestricted file upload8.8v3.111.7%2024-05-03MetasploitExploit codeKCVFix
CVE-2023-38097NETGEAR ProSAFE Network Management System process thread vulnerability8.8v3.12.1%2024-05-03Fix
CVE-2023-38096NETGEAR ProSAFE Network Management System MyHandlerInterceptor authentication bypass9.8v3.181.4%2024-05-03MetasploitExploit codeKCVFix
CVE-2023-38095NETGEAR ProSAFE Network Management System file upload controller unrestricted file upload8.8v3.165.3%2024-05-03Fix
CVE-2023-38094Kofax Power PDF replacePages stack-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38093Kofax Power PDF saveAs stack-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38092Kofax Power PDF importDataObject stack-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38091Kofax Power PDF response type confusion remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38090Kofax Power PDF popUpMenu heap-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38089Kofax Power PDF clearInterval out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38088Kofax Power PDF printf uninitialized variable remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38087Kofax Power PDF clearTimeOut out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38086Kofax Power PDF PDF File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-38085Kofax Power PDF JP2 File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-38084Kofax Power PDF PDF File Parsing memory corruption remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38083Kofax Power PDF JP2 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38082Kofax Power PDF GIF File Parsing memory corruption remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38081Kofax Power PDF JP2 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38080Kofax Power PDF PDF File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38079Kofax Power PDF JP2 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-38078Kofax Power PDF U3D File Parsing use-after-free information disclosure5.5v3.10.4%2024-05-03
CVE-2023-38077Kofax Power PDF U3D File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37407IBM Aspera Orchestrator command execution8.8CNA v3.10.9%2024-05-03Fix
CVE-2023-37359Kofax Power PDF U3D File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37358Kofax Power PDF U3D File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37357Kofax Power PDF PDF File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37356Kofax Power PDF GIF File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37355Kofax Power PDF JPG File Parsing use-after-free information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37354Kofax Power PDF PNG File Parsing out-of-bounds read remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37353Kofax Power PDF JPG File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37352Kofax Power PDF JPG File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37351Kofax Power PDF PDF File Parsing out-of-bounds read information disclosure5.5v3.10.4%2024-05-03
CVE-2023-37350Kofax Power PDF TIF File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37349Kofax Power PDF PDF File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37348Kofax Power PDF U3D File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37347Kofax Power PDF U3D File Parsing out-of-bounds read remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37346Kofax Power PDF TIF File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37345Kofax Power PDF J2K File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37344Kofax Power PDF BMP File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-37343Kofax Power PDF JP2 File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2024-05-03
CVE-2023-37342Kofax Power PDF PNG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.3%2024-05-03
CVE-2023-37341Kofax Power PDF PNG File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2024-05-03
CVE-2023-37340Kofax Power PDF PNG File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2024-05-03
CVE-2023-37339Kofax Power PDF PCX File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2024-05-03
CVE-2023-37338Kofax Power PDF GIF File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2024-05-03
CVE-2023-37337Kofax Power PDF JP2 File Parsing out-of-bounds write remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37336Kofax Power PDF TIF File Parsing out-of-bounds write remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37335Kofax Power PDF BMP File Parsing heap-based buffer overflow remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37334Kofax Power PDF PDF File Parsing out-of-bounds write remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37333Kofax Power PDF PCX File Parsing memory corruption remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37332Kofax Power PDF PNG File Parsing memory corruption remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37331Kofax Power PDF GIF File Parsing stack-based buffer overflow remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37330Kofax Power PDF exportAsText exposed dangerous method remote code execution7.8v3.10.3%2024-05-03
CVE-2023-37329GStreamer SRT File Parsing heap-based buffer overflow remote code execution8.8v3.11.6%2024-05-03Fix
CVE-2023-37328GStreamer PGS File Parsing heap-based buffer overflow remote code execution8.8v3.12.1%2024-05-03Fix
CVE-2023-37327GStreamer FLAC File Parsing integer overflow remote code execution8.8v3.11.7%2024-05-03Fix
CVE-2023-37326D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.10.8%2024-05-03Fix
CVE-2023-37324D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-37323D-Link DAP-2622 DDP Set SSID List PSK stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-37322D-Link DAP-2622 DDP Set SSID List RADIUS server stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37321D-Link DAP-2622 DDP Set SSID List RADIUS Secret stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37320D-Link DAP-2622 DDP Set SSID List SSID Name stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37319D-Link DAP-2622 DDP Set IPv6 Address stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37318D-Link DAP-2622 DDP Set IPv6 Address Secondary DNS stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37317D-Link DAP-2622 DDP Set IPv6 Address Primary DNS stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37316D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.10.8%2024-05-03Fix
CVE-2023-37315D-Link DAP-2622 DDP Set IPv6 Address Auth Password stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37314D-Link DAP-2622 DDP Set IPv6 Address Auth Username stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37313D-Link DAP-2622 DDP Set IPv4 Address Auth Username stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37312D-Link DAP-2622 DDP Set Device Info Device Name stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37311D-Link DAP-2622 DDP Set Device Info Auth Password stack-based buffer overflow remote code execution8.8v3.10.8%2024-05-03Fix
CVE-2023-37310D-Link DAP-2622 DDP Set Device Info Auth Username stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35756D-Link DAP-2622 DDP Set Date-Time Auth Password stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35755D-Link DAP-2622 DDP Set Date-Time Auth Username stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35754D-Link DAP-2622 DDP Set AG Profile NMS URL stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35753D-Link DAP-2622 DDP Set AG Profile UUID stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35752D-Link DAP-2622 DDP Set AG Profile Auth Password stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35751D-Link DAP-2622 DDP Set AG Profile Auth Username stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35750D-Link DAP-2622 DDP Get SSID List WPA PSK information disclosure6.5NVD v3.10.7%2024-05-03Fix
CVE-2023-35747D-Link DAP-2622 DDP Firmware Upgrade Auth Password stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35746D-Link DAP-2622 DDP Firmware Upgrade Auth Username stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35745D-Link DAP-2622 DDP Configuration Restore Filename stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35744D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.13.1%2024-05-03Exploit codeFix
CVE-2023-35743D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35742D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35741D-Link DAP-2622 DDP Configuration Backup Filename stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35740D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35739D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35738D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35737D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35736D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35735D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35734Sante DICOM Viewer Pro DCM File Parsing use-after-free information disclosure6.5v3.10.9%2024-05-03
CVE-2023-35733D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35732D-Link DAP-2622 DDP Reset Factory Auth Password stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35731D-Link DAP-2622 DDP Reset Factory Auth Username stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35730D-Link DAP-2622 DDP Reset Auth Password stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35729D-Link DAP-2622 DDP Reset Auth Username stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35728D-Link DAP-2622 DDP Reboot Auth Password stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35727D-Link DAP-2622 DDP Reboot Auth Username stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-35726D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35725D-Link DAP-2622 DDP service stack-based buffer overflow8.8v3.11.1%2024-05-03Fix
CVE-2023-35724D-Link DAP-2622 Telnet CLI Use of hard-coded credentials authentication bypass8.8v3.10.9%2024-05-03Fix
CVE-2023-35723D-Link DIR-X3260 prog.cgi SOAPAction command injection remote code execution8.8v3.11.5%2024-05-03Fix
CVE-2023-35722NETGEAR RAX30 UPnP command injection remote code execution8.8v3.11.3%2024-05-03Fix
CVE-2023-35721NETGEAR Multiple Routers curl_post improper certificate validation remote code execution8.8v3.11.0%2024-05-03Fix
CVE-2023-35720ASUS RT-AX92U lighttpd mod_webdav.so SQL injection information disclosure6.5CNA v3.00.5%2024-05-03Fix
CVE-2023-35718D-Link DAP-2622 DDP service stack-based buffer overflow8.8CNA v3.01.0%2024-05-03Fix
CVE-2023-35717TP-Link Tapo C210 Password Recovery authentication bypass8.8CNA v3.00.6%2024-05-03
CVE-2023-35716Ashlar-Vellum Cobalt AR File Parsing out-of-bounds read remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-35715Ashlar-Vellum Cobalt AR File Parsing uninitialized memory remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-35714Ashlar-Vellum Cobalt IGS File Parsing out-of-bounds read remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-35713Ashlar-Vellum Cobalt XE File Parsing uninitialized memory remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-35712Ashlar-Vellum Cobalt XE File Parsing uninitialized memory remote code execution7.8CISA ADP v3.10.4%2024-05-03
CVE-2023-35711Ashlar-Vellum Cobalt XE File Parsing untrusted pointer dereference remote code execution7.8v3.10.3%2024-05-03
CVE-2023-35710Ashlar-Vellum Cobalt stack-based buffer overflow remote code execution7.8CISA ADP v3.10.4%2024-05-03
CVE-2023-35709Ashlar-Vellum Cobalt heap-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-35701Apache Hive: Arbitrary command execution via JDBC driver6.6CISA ADP v3.11.1%2024-05-03Fix
CVE-2023-34311Ashlar-Vellum Cobalt untrusted pointer dereference remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34310Ashlar-Vellum Cobalt uninitialized memory remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34309Ashlar-Vellum Cobalt untrusted pointer dereference remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34308Ashlar-Vellum Graphite VC6 File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-34307Ashlar-Vellum Graphite VC6 File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-34306Ashlar-Vellum Graphite VC6 File Parsing stack-based buffer overflow remote code execution8.8v3.10.9%2024-05-03
CVE-2023-34305Ashlar-Vellum Cobalt out-of-bounds write remote code execution7.0CNA v3.00.3%2024-05-03
CVE-2023-34304Ashlar-Vellum Cobalt out-of-bounds access remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34303Ashlar-Vellum Cobalt out-of-bounds read remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34302Ashlar-Vellum Cobalt CO File Parsing stack-based buffer overflow remote code execution7.8CISA ADP v3.10.4%2024-05-03
CVE-2023-34301Ashlar-Vellum Cobalt CO File Parsing untrusted pointer dereference remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34300Ashlar-Vellum Cobalt XE File Parsing untrusted pointer dereference remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34299Ashlar-Vellum Cobalt CO File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34298Pulse Secure Client SetupService directory traversal local privilege escalation7.8CNA v3.01.0%2024-05-03Fix
CVE-2023-34297Sante DICOM Viewer Pro JP2 File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-34296Sante DICOM Viewer Pro DCM File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-34295Sante DICOM Viewer Pro DCM File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-34294Sante DICOM Viewer Pro DCM File Parsing use-after-free information disclosure6.5v3.10.8%2024-05-03
CVE-2023-34293Ashlar-Vellum Cobalt out-of-bounds write remote code execution8.8v3.10.8%2024-05-03
CVE-2023-34292Ashlar-Vellum Cobalt out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34291Ashlar-Vellum Cobalt out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34290Ashlar-Vellum Cobalt out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34289Ashlar-Vellum Cobalt heap-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34288Ashlar-Vellum Cobalt XE File Parsing uninitialized pointer remote code execution7.8v3.10.3%2024-05-03
CVE-2023-34287Ashlar-Vellum Cobalt CO File Parsing stack-based buffer overflow remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34286Ashlar-Vellum Cobalt CO File Parsing out-of-bounds write remote code execution7.8CNA v3.00.4%2024-05-03
CVE-2023-34285NETGEAR RAX30 cmsCli_authenticate stack-based buffer overflow remote code execution8.8v3.10.9%2024-05-03Fix
CVE-2023-34284NETGEAR RAX30 use of hard-coded credentials authentication bypass6.3v3.10.4%2024-05-03Fix
CVE-2023-34283NETGEAR RAX30 USB Share link following information disclosure4.6v3.10.6%2024-05-03Fix
CVE-2023-34282D-Link DIR-2150 HNAP incorrect implementation of authentication algorithm authentication bypass8.8v3.11.1%2024-05-03Fix
CVE-2023-34281D-Link DIR-2150 GetFirmwareStatus Target command injection remote code execution8.0v3.11.8%2024-05-03Fix
CVE-2023-34280D-Link DIR-2150 SetSysEmailSettings EmailTo command injection remote code execution8.0v3.11.8%2024-05-03Fix
CVE-2023-34279D-Link DIR-2150 GetDeviceSettings Target command injection remote code execution8.8v3.11.4%2024-05-03Fix
CVE-2023-34278D-Link DIR-2150 SetSysEmailSettings EmailFrom command injection remote code execution8.0v3.11.8%2024-05-03Fix
CVE-2023-34277D-Link DIR-2150 SetSysEmailSettings AccountName command injection remote code execution8.0v3.11.8%2024-05-03Fix
CVE-2023-34276D-Link DIR-2150 SetTriggerPPPoEValidate Username command injection remote code execution8.0v3.11.8%2024-05-03Fix
CVE-2023-34275D-Link DIR-2150 SetNTPServerSettings command injection remote code execution8.0v3.11.8%2024-05-03Fix
CVE-2023-34274D-Link DIR-2150 SOAP API interface authentication bypass8.8v3.11.1%2024-05-03Fix
CVE-2023-34273Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34272Fatek Automation FvDesigner FPJ File Parsing uninitialized pointer remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34271Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34270Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34269Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34268Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34267Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34266Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34265Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34264Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34263Fatek Automation FvDesigner FPJ File Parsing uninitialized pointer remote code execution7.8v3.10.4%2024-05-03
CVE-2023-34262Fatek Automation FvDesigner FPJ File Parsing out-of-bounds write remote code execution7.8v3.10.4%2024-05-03
CVE-2023-32179VIPRE Antivirus Plus FPQuarTransfer link following local privilege escalation7.8CNA v3.00.5%2024-05-03Fix
CVE-2023-32178VIPRE Antivirus Plus TelFileTransfer link following local privilege escalation7.8CNA v3.00.5%2024-05-03Fix
CVE-2023-32177VIPRE Antivirus Plus DeleteHistoryFile directory traversal local privilege escalation7.8CNA v3.00.7%2024-05-03Fix
CVE-2023-32176VIPRE Antivirus Plus SetPrivateConfig directory traversal local privilege escalation7.8CNA v3.00.7%2024-05-03Fix
CVE-2023-32175VIPRE Antivirus Plus link following local privilege escalation7.8CNA v3.00.5%2024-05-03Fix
CVE-2023-32174Unified Automation UaGateway NodeManagerOpcUa use-after-free remote code execution9.1CNA v3.01.9%2024-05-03Fix
CVE-2023-32173Unified Automation UaGateway AddServer XML injection denial of service5.8CNA v3.01.2%2024-05-03Fix
CVE-2023-32172Unified Automation UaGateway OPC UA server use-after-free denial of service6.5CNA v3.01.4%2024-05-03Fix
CVE-2023-32171Unified Automation UaGateway OPC UA server null pointer dereference denial of service6.5CNA v3.01.4%2024-05-03Fix
CVE-2023-32170Unified Automation UaGateway OPC UA server improper input validation denial of service6.5CNA v3.00.6%2024-05-03Fix
CVE-2023-32169D-Link D-View use of hard-coded cryptographic key authentication bypass9.8CNA v3.056.1%2024-05-03Fix
CVE-2023-32168D-Link D-View showUser improper authorization privilege escalation8.8CNA v3.01.6%2024-05-03Fix
CVE-2023-32167D-Link D-View uploadMib directory traversal arbitrary file creation or Deletion6.5CISA ADP v3.176.5%2024-05-03Fix
CVE-2023-32166D-Link D-View uploadFile directory traversal arbitrary file creation8.1CNA v3.074.3%2024-05-03Fix
CVE-2023-32165D-Link D-View TftpReceiveFileHandler directory traversal remote code execution9.8CNA v3.073.3%2024-05-03Fix
CVE-2023-32164D-Link D-View TftpSendFileThread directory traversal information disclosure7.5CNA v3.084.9%2024-05-03Fix
CVE-2023-32161PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-32160PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-32159PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-32158PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-32157Tesla Model 3 bsa_server BIP heap-based buffer overflow arbitrary code execution7.5v3.10.4%2024-05-03
CVE-2023-32156Tesla Model 3 Gateway Firmware signature validation Bypass8.8NVD v3.10.4%2024-05-03
CVE-2023-32155Tesla Model 3 bcmdhd out-of-bounds write local privilege escalation7.0v3.10.2%2024-05-03
CVE-2023-32154MikroTik RouterOS RADVD out-of-bounds write remote code execution7.5CNA v3.00.6%2024-05-03
CVE-2023-32153D-Link DIR-2640 EmailFrom command injection remote code execution6.8CNA v3.023.4%2024-05-03Fix
CVE-2023-32152D-Link DIR-2640 HNAP LoginPassword authentication bypass6.5CNA v3.028.9%2024-05-03Fix
CVE-2023-32151D-Link DIR-2640 DestNetwork command injection remote code execution6.8CNA v3.01.8%2024-05-03Fix
CVE-2023-32150D-Link DIR-2640 PrefixLen command injection remote code execution6.8CNA v3.026.9%2024-05-03Fix
CVE-2023-32149D-Link DIR-2640 prog.cgi Request Handling stack-based buffer overflow remote code execution8.8CNA v3.01.2%2024-05-03Fix
CVE-2023-32148D-Link DIR-2640 HNAP PrivateLogin authentication bypass6.5CNA v3.028.9%2024-05-03Fix
CVE-2023-32147D-Link DIR-2640 LocalIPAddress command injection remote code execution6.8CNA v3.01.8%2024-05-03Fix
CVE-2023-32146D-Link DAP-1360 multiple parameters stack-based buffer overflow remote code execution8.8CISA ADP v3.11.1%2024-05-03Fix
CVE-2023-32145D-Link DAP-1360 hard-coded credentials authentication bypass8.8v3.10.9%2024-05-03Fix
CVE-2023-32144D-Link DAP-1360 webproc COMM_MakeCustomMsg stack-based buffer overflow remote code execution8.8v3.11.0%2024-05-03Fix
CVE-2023-32143D-Link DAP-1360 webupg UPGCGI_CheckAuth numeric truncation remote code execution8.8CISA ADP v3.11.1%2024-05-03Fix
CVE-2023-32142D-Link DAP-1360 webproc var:page stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-32141D-Link DAP-1360 webproc WEB_DisplayPage stack-based buffer overflow remote code execution8.8v3.11.1%2024-05-03Fix
CVE-2023-32140D-Link DAP-1360 webproc var:sys_Token heap-based buffer overflow remote code execution7.5CISA ADP v3.10.9%2024-05-03Fix
CVE-2023-32139D-Link DAP-1360 webproc stack-based buffer overflow remote code execution8.8v3.11.0%2024-05-03Fix
CVE-2023-32138D-Link DAP-1360 webproc heap-based buffer overflow remote code execution8.8v3.10.9%2024-05-03Fix
CVE-2023-32137D-Link DAP-1360 webproc WEB_DisplayPage directory traversal information disclosure6.5v3.11.2%2024-05-03Fix
CVE-2023-32136D-Link DAP-1360 webproc var:menu stack-based buffer overflow remote code execution8.8v3.11.2%2024-05-03Fix
CVE-2023-32135Sante DICOM Viewer Pro DCM File Parsing use-after-free information disclosure6.5v3.10.8%2024-05-03
CVE-2023-32134Sante DICOM Viewer Pro DCM File Parsing use-after-free remote code execution8.8v3.10.9%2024-05-03
CVE-2023-32133Sante DICOM Viewer Pro J2K File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-32132Sante DICOM Viewer Pro DCM File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-32131Sante DICOM Viewer Pro DCM File Parsing out-of-bounds write remote code execution8.8v3.10.9%2024-05-03
CVE-2023-28952IBM Cognos Controller log injection5.3CNA v3.10.4%2024-05-03Fix
CVE-2023-27370NETGEAR RAX30 Device Configuration cleartext storage information disclosure5.7v3.10.3%2024-05-03Fix
CVE-2023-27369NETGEAR RAX30 soap_serverd stack-based buffer overflow authentication bypass8.8v3.10.8%2024-05-03Fix
CVE-2023-27368NETGEAR RAX30 soap_serverd stack-based buffer overflow authentication bypass8.8v3.10.8%2024-05-03Fix
CVE-2023-27367NETGEAR RAX30 libcms_cli command injection remote code execution8.0v3.11.4%2024-05-03Fix
CVE-2023-27366Foxit PDF Reader Doc object use-after-free remote code execution7.8CNA v3.00.5%2024-05-03Fix
CVE-2023-27365Foxit PDF Editor DOC File Parsing exposed dangerous method remote code execution7.8CNA v3.00.5%2024-05-03Fix
CVE-2023-27364Foxit PDF Editor XLS File Parsing exposed dangerous method remote code execution7.8CNA v3.00.5%2024-05-03Fix
CVE-2023-27363Foxit PDF Reader exportXFAData exposed dangerous method remote code execution7.8CNA v3.047.0%2024-05-03Exploit codeFix
CVE-2023-273623CX uncontrolled search path local privilege escalation7.8v3.10.4%2024-05-03Fix
CVE-2023-27361NETGEAR RAX30 rex_cgi JSON Parsing stack-based buffer overflow remote code execution8.0v3.10.9%2024-05-03Fix
CVE-2023-27360NETGEAR RAX30 lighttpd Misconfiguration remote code execution8.8v3.10.4%2024-05-03Fix
CVE-2023-27359TP-Link AX1800 hotplugd Firewall Rule race condition8.1NVD v3.11.2%2024-05-03
CVE-2023-27358NETGEAR RAX30 SOAP request SQL injection remote code execution8.8v3.10.9%2024-05-03Fix
CVE-2023-27357NETGEAR RAX30 GetInfo missing authentication information disclosure6.5v3.10.6%2024-05-03Fix
CVE-2023-27356NETGEAR RAX30 logCtrl command injection remote code execution8.0v3.11.2%2024-05-03Fix
CVE-2023-27349BlueZ Audio Profile AVRCP improper validation of array index remote code execution8.0v3.11.4%2024-05-03Fix
CVE-2023-27348PDF-XChange Editor TIF File Parsing use-after-free remote code execution7.8v3.10.5%2024-05-03Fix
CVE-2023-27347G DATA Total Security link following local privilege escalation7.8CNA v3.00.4%2024-05-03
CVE-2023-27346TP-Link AX1800 Firmware Parsing stack-based buffer overflow remote code execution8.8CNA v3.00.7%2024-05-03
CVE-2023-27345PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution7.8v3.10.5%2024-05-03Fix
CVE-2023-27344PDF-XChange Editor PDF File Parsing out-of-bounds write remote code execution7.8v3.10.5%2024-05-03Fix
CVE-2023-27343PDF-XChange Editor EMF File Parsing out-of-bounds write remote code execution7.8v3.10.5%2024-05-03Fix
CVE-2023-27342PDF-XChange Editor EMF File Parsing untrusted pointer dereference remote code execution7.8v3.10.5%2024-05-03Fix
CVE-2023-27341PDF-XChange Editor TIF File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-27340PDF-XChange Editor PNG File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-27339PDF-XChange Editor PNG File Parsing out-of-bounds write remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-27338PDF-XChange Editor TIF File Parsing use-after-free information disclosure5.5v3.10.6%2024-05-03Fix
CVE-2023-27337PDF-XChange Editor PDF File Parsing out-of-bounds read remote code execution7.8v3.10.6%2024-05-03Fix
CVE-2023-27336Softing edgeConnector Siemens OPC UA server null pointer dereference denial of service7.5CNA v3.00.8%2024-05-03
CVE-2023-27335Softing edgeAggregator client cross-site scripting remote code execution9.6v3.11.4%2024-05-03
CVE-2023-27334Softing edgeConnector Siemens ConditionRefresh resource exhaustion denial of service7.5CNA v3.01.4%2024-05-03Fix
CVE-2023-27333TP-Link Archer AX21 tmpServer command 0x422 stack-based buffer overflow remote code execution6.8CNA v3.00.7%2024-05-03
CVE-2023-27332TP-Link Archer AX21 tdpServer Logging stack-based buffer overflow remote code execution8.8CNA v3.00.7%2024-05-03
CVE-2023-27331Foxit PDF Reader Annotation use-after-free remote code execution7.8CNA v3.03.9%2024-05-03Fix
CVE-2023-27330Foxit PDF Reader XFA Annotation use-after-free remote code execution7.8CNA v3.03.9%2024-05-03Fix
CVE-2023-27329Foxit PDF Reader Annotation use-after-free remote code execution7.8CNA v3.03.9%2024-05-03Fix
CVE-2023-27328Parallels Desktop Toolgate XML injection local privilege escalation7.8CNA v3.00.3%2024-05-03KCVFix
CVE-2023-27327Parallels Desktop Toolgate time-of-check time-of-use local privilege escalation7.5CNA v3.00.4%2024-05-03Exploit codeKCVFix
CVE-2023-27326Parallels Desktop Toolgate directory traversal local privilege escalation8.2CNA v3.01.3%2024-05-03Exploit codeFix
CVE-2023-27325Parallels Desktop Updater improper initialization local privilege escalation7.8CISA ADP v3.10.4%2024-05-03Fix
CVE-2023-27324Parallels Desktop Updater improper initialization local privilege escalation7.8CNA v3.00.4%2024-05-03Fix
CVE-2023-27323Parallels Desktop Updater time-of-check time-of-use local privilege escalation7.8CNA v3.00.2%2024-05-03Fix
CVE-2023-27322Parallels Desktop service improper initialization local privilege escalation7.8CNA v3.00.4%2024-05-03Fix
CVE-2023-25457Slider Carousel Responsive Image Slider WordPress plugin broken access control5.3CNA v3.10.6%2024-05-03Fix
CVE-2023-23474IBM Cognos Controller information disclosure3.7CNA v3.10.4%2024-05-03Fix
CVE-2023-6363Mali GPU Kernel Driver allows improper GPU processing operations5.1CISA ADP v3.10.2%2024-05-03Fix
CVE-2023-51631D-Link DIR-X3260 prog.cgi SetUsersSettings stack-based buffer overflow remote code execution6.8CNA v3.01.0%2024-05-02Fix
CVE-2023-50685Hipcam RealServer client_port parameter denial of service7.5CISA ADP v3.11.2%2024-05-02Exploit code
CVE-2023-47727IBM QRadar Suite Software file manipulation4.3CNA v3.10.3%2024-05-02Fix
CVE-2023-41971Zscaler Client Connector Windows ZCC Upgrade DoS and privilege escalation through RPC Control5.3CNA v3.10.2%2024-05-02Fix
CVE-2023-41970Zscaler Client Connector repair App local code execution with arbitrary privileges6.0CNA v3.10.1%2024-05-02Fix
CVE-2023-37244Privilege escalation in N-able's AutomationManagerAgent7.0NVD v3.10.2%2024-05-02
CVE-2023-28798Zscaler Client Connector out-of-bounds write to heap in pacparser6.5CNA v3.10.4%2024-05-02Fix
CVE-2023-7067ShopLentor WordPress plugin improper authorization via woolentor_template_store4.3v3.10.3%2024-05-02Fix
CVE-2023-7064Shortcodes and extra features for Phlox WordPress plugin PHP object injection7.5CNA v3.10.9%2024-05-02Fix
CVE-2023-7030Collapse-O-Matic WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2024-05-02Fix
CVE-2023-6962WP Meta SEO WordPress plugin information exposure via Meta Description5.3CNA v3.10.4%2024-05-02Fix
CVE-2023-6961WP Meta SEO WordPress plugin unauthenticated stored cross-site scripting via Referer header6.1NVD v3.10.4%2024-05-02Fix
CVE-2023-6731WP Show Posts WordPress plugin improper authorization to information exposure4.3CNA v3.10.4%2024-05-02Fix
CVE-2023-6214HT Mega Absolute Addons For Elementor WordPress plugin sensitive information exposure7.5CNA v3.10.6%2024-05-02Fix
CVE-2023-52653Linux kernel SunRPC GSS context import memory leak5.5CISA ADP v3.10.3%2024-05-01Fix
CVE-2023-52652Linux kernel NTB device registration vulnerability5.5v3.10.3%2024-05-01Fix
CVE-2023-52650Linux kernel Tegra DSI driver null pointer dereference5.5v3.10.3%2024-05-01Fix
CVE-2023-52649Linux kernel VKMS LUT array vulnerability7.8v3.10.3%2024-05-01Fix
CVE-2023-52648Linux kernel vmwgfx plane state handling null pointer dereference5.5v3.10.2%2024-05-01Fix
CVE-2023-52647Linux kernel i.MX8 ISI crossbar subdev null pointer dereference5.5v3.10.2%2024-05-01Fix
CVE-2023-49606tinyproxy HTTP Connection headers parsing use-after-free9.8CNA v3.163.1%2024-05-01Reported exploitedExploit codeFix
CVE-2023-47212stb_vorbis.c comment functionality heap-based buffer overflow9.8CNA v3.11.4%2024-05-01
CVE-2023-47166Milesight UR32L improper authorization8.8CNA v3.10.6%2024-05-01
CVE-2023-46295Teledyne FLIR M300 web server server-side request forgery9.8CISA ADP v3.10.9%2024-05-01
CVE-2023-46294Teledyne FLIR M300 umSetup utility cleartext storage of sensitive information3.4CISA ADP v3.10.1%2024-05-01
CVE-2023-26793libmodbus heap-based buffer overflow9.8CISA ADP v3.10.7%2024-05-01Fix
CVE-2023-23022oretnom23 Employees Payroll Management System sourcecodester cross-site scripting6.1v3.10.5%2024-05-01
CVE-2023-23021oretnom23 POS Point of Sale System sourcecodester cross-site scripting6.1v3.10.5%2024-05-01
CVE-2023-23019oretnom23 Blog Site file main.php in sourcecodester oretnom23 cross-site scripting5.4CISA ADP v3.10.3%2024-05-01
CVE-2023-7241Webroot Antivirus COM-Hijacking LPE7.9CNA v3.10.2%2024-05-01Fix
CVE-2023-52728Linux Foundation onos-lib-go improper array index validation5.5CISA ADP v3.10.2%2024-04-30
CVE-2023-52727Linux Foundation onos-lib-go out-of-bounds read8.1CISA ADP v3.10.5%2024-04-30
CVE-2023-52726Linux Foundation Onos-ric-sdk-go infinite loop6.5CISA ADP v3.10.4%2024-04-30
CVE-2023-52725Linux Foundation Onos-kpimon out-of-bounds write6.5CISA ADP v3.10.4%2024-04-30
CVE-2023-52724Linux Foundation Onos-kpimon out-of-bounds write8.1CISA ADP v3.10.9%2024-04-30
CVE-2023-50915GOG Galaxy GalaxyClientService file handling denial of service6.5CISA ADP v3.10.7%2024-04-30
CVE-2023-50914GOG Galaxy GalaxyClientService interprocess communication privilege escalation6.7CISA ADP v3.10.7%2024-04-30
CVE-2023-50059Galxe platform Web3 authentication process vulnerability5.3CISA ADP v3.10.5%2024-04-30
CVE-2023-50053Foundation platform Web3 authentication process information disclosure7.6CISA ADP v3.10.5%2024-04-30
CVE-2023-49473JF6000 Cloud Media Collaboration Processing Platform improper access control9.8CISA ADP v3.10.5%2024-04-30
CVE-2023-46304Vtiger CRM injection8.1CISA ADP v3.11.7%2024-04-30Exploit code
CVE-2023-45385pqprintshippinglabels path traversal7.5CISA ADP v3.10.8%2024-04-30
CVE-2023-38002IBM Storage Scale session fixation5.0CNA v3.10.4%2024-04-30Fix
CVE-2023-52723KDE libksieve kmanagesieve session logging information disclosure7.1CISA ADP v3.10.5%2024-04-29Fix
CVE-2023-52080IEIT NF5280M6 UEFI firmware GetVariable runtime service buffer overflow7.7CISA ADP v3.10.2%2024-04-29
CVE-2023-51710EMS SQL Manager for Oracle DLL hijacking4.2CISA ADP v3.10.2%2024-04-29
CVE-2023-51254JFinalCMS cross-site scripting6.1CISA ADP v3.10.6%2024-04-29
CVE-2023-50434emdns DNS name resolver out-of-bounds read9.8CISA ADP v3.10.6%2024-04-29
CVE-2023-50433simple-dhcp-server DHCP packet parser type confusion6.5CISA ADP v3.10.3%2024-04-29
CVE-2023-50432simple-dhcp-server DHCP packet parser null pointer dereference5.3CISA ADP v3.10.5%2024-04-29
CVE-2023-48684Acronis Cyber Protect Cloud Agent missing authorization7.1CNA v3.00.2%2024-04-29Fix
CVE-2023-48683Acronis Cyber Protect Cloud Agent missing authorization7.1CNA v3.00.2%2024-04-29Fix
CVE-2023-46960PyPXE buffer overflow8.6CISA ADP v3.10.5%2024-04-29
CVE-2023-46566msoulier tftpy commit buffer overflow7.5CISA ADP v3.10.7%2024-04-29
CVE-2023-46565Buffer overflow vulnerability in osrg gobgp7.5CISA ADP v3.10.7%2024-04-29Fix
CVE-2023-46270MacPaw The Unarchiver before 4.3.6 contains vulnerability related to missing quarantine attributes for extracted items.3.3CISA ADP v3.10.1%2024-04-29
CVE-2023-31889ASUS RT-AC51U httpd resource exhaustion5.5CISA ADP v3.10.2%2024-04-29
CVE-2023-52722An issue was discovered in Artifex Ghostscript before 10.03.1. psi/zmisc1.c, when SAFER mode is used, allows eexec seeds other than the Type 1 standard.5.5CISA ADP v3.10.3%2024-04-28Fix
CVE-2023-1000cyanomiko dcnnt-py Notification notifications.py main command injection6.3CNA v3.11.3%2024-04-27Fix
CVE-2023-52646Linux kernel aio ring remapping null pointer dereference5.5v3.10.2%2024-04-26Fix
CVE-2023-51794FFmpeg buffer overflow7.8CISA ADP v3.10.2%2024-04-26Fix
CVE-2023-51365QNAP QTS, QuTS hero and QuTScloud path traversal8.7CNA v3.134.8%2024-04-26Fix
CVE-2023-51364QNAP QTS, QuTS hero and QuTScloud path traversal8.7CNA v3.139.7%2024-04-26Fix
CVE-2023-50364QNAP Systems QTS buffer overflow6.4CNA v3.10.9%2024-04-26Fix
CVE-2023-50363QNAP QTS and QuTS hero incorrect authorization7.4CNA v3.10.4%2024-04-26Fix
CVE-2023-50362QNAP Systems QTS buffer overflow5.0CNA v3.10.8%2024-04-26Fix
CVE-2023-50361QNAP Systems QTS buffer overflow5.0CNA v3.10.8%2024-04-26Fix
CVE-2023-47252Insyde Kernel out-of-bounds write6.3CISA ADP v3.10.1%2024-04-26Fix
CVE-2023-47222QNAP Media Streaming add-on information disclosure9.6CNA v3.10.5%2024-04-26Fix
CVE-2023-41291QNAP QuFirewall path traversal5.5CNA v3.10.4%2024-04-26Fix
CVE-2023-41290QNAP QuFirewall path traversal4.1CNA v3.10.5%2024-04-26Fix
CVE-2023-26603JumpCloud Agent installer repair action privilege escalation5.9CISA ADP v3.10.2%2024-04-26
CVE-2023-6116Hanwha Vision XRN-420S remote code execution without authentication using stack overflow8.9CNA v3.10.7%2024-04-26
CVE-2023-6096Hanwha Vision HRX-1620 using a inappropriate encryption logic7.4CNA v3.10.1%2024-04-26
CVE-2023-6095Hanwha Vision HRX-1620 remote code execution without authentication using memory overflow8.9CNA v3.10.7%2024-04-26
CVE-2023-52220MonsterInsights WordPress plugin broken access control4.3CNA v3.10.4%2024-04-25Fix
CVE-2023-51484wp-buy Login as User or Customer (User Switching) improper authentication9.8CNA v3.10.7%2024-04-25Fix
CVE-2023-51482Eazy Plugin Manager WordPress plugin Auth. arbitrary options update lead to RCE9.9CNA v3.10.7%2024-04-25Fix
CVE-2023-51478Build App Online WordPress plugin unauthenticated account takeover9.8v3.10.7%2024-04-25Fix
CVE-2023-6787Keycloak: Session hijacking via re-authentication6.5CNA v3.10.7%2024-04-25Fix
CVE-2023-6717Keycloak: Xss via assertion consumer service URL in saml post-binding flow6.0CNA v3.10.7%2024-04-25Fix
CVE-2023-6596Red Hat OpenShift Container Platform resource exhaustion7.5CNA v3.10.8%2024-04-25Fix
CVE-2023-6544Keycloak: Authorization bypass5.4CNA v3.11.1%2024-04-25Fix
CVE-2023-6484Keycloak: Log injection during webauthn authentication or registration5.3CNA v3.11.0%2024-04-25Fix
CVE-2023-6237OpenSSL excessive time spent checking invalid RSA public keys5.9CISA ADP v3.12.3%2024-04-25Fix
CVE-2023-5675Quarkus: Authorization flaw in quarkus resteasy reactive and classic6.5CNA v3.10.5%2024-04-25Fix
CVE-2023-3597Keycloak: Secondary factor bypass in step-up authentication5.0CNA v3.10.6%2024-04-25Fix
CVE-2023-51477BuddyBoss WordPress theme Unauth. arbitrary WordPress settings Change vulnerability9.8CNA v3.10.7%2024-04-24Fix
CVE-2023-51472Checkout Mestres WP WordPress plugin unauthenticated account takeover9.8CNA v3.10.7%2024-04-24Fix
CVE-2023-51471Checkout Mestres WP WordPress plugin unauthenticated arbitrary options update vulnerability8.2CNA v3.10.6%2024-04-24Fix
CVE-2023-51425Rencontre WordPress plugin unauthenticated account takeover9.8CNA v3.10.6%2024-04-24Fix
CVE-2023-51405BookingPress WordPress plugin Booking Price manipulation vulnerability9.8v3.10.7%2024-04-24Fix
CVE-2023-48763JetFormBuilder WordPress plugin content injection5.3CNA v3.10.4%2024-04-24Fix
CVE-2023-47774Jetpack WordPress plugin Auth. Iframe injection5.4v3.10.3%2024-04-24Fix
CVE-2023-47504Elementor WordPress plugin Auth. arbitrary Attachment read vulnerability9.8v3.11.5%2024-04-24Exploit codeFix
CVE-2023-32127Multi Rating WordPress plugin Unauth arbitrary rating value change5.3CNA v3.10.4%2024-04-24
CVE-2023-31090Unlimited Elements For Elementor WordPress plugin Unrestricted Zip Extraction vulnerability8.8NVD v3.10.8%2024-04-24Fix
CVE-2023-25790WoodMart WordPress theme Unauth arbitrary shortcodes injection5.3CNA v3.10.5%2024-04-24Fix
CVE-2023-25785WP Post Rating WordPress plugin Vote manipulation vulnerability5.3CNA v3.10.4%2024-04-24
CVE-2023-23989RegistrationMagic WordPress plugin content injection6.5v3.10.4%2024-04-24Fix
CVE-2023-23985Quiz Maker WordPress plugin content spoofing5.3v3.10.4%2024-04-24Fix
CVE-2023-23976RegistrationMagic WordPress plugin arbitrary Price Change7.5v3.10.5%2024-04-24Fix
CVE-2023-20249Cisco TelePresence Management Suite (TMS) cross-site scripting5.4CNA v3.10.4%2024-04-24Fix
CVE-2023-20248Cisco TelePresence Management Suite (TMS) cross-site scripting5.4CISA ADP v3.10.4%2024-04-24Fix
CVE-2023-7253Import WP WordPress plugin Admin+ server-side request forgery6.1CISA ADP v3.10.6%2024-04-24Fix
CVE-2023-48184QuickJS use-after-free3.9CISA ADP v3.10.3%2024-04-23Fix
CVE-2023-48183QuickJS null pointer dereference7.5CISA ADP v3.10.6%2024-04-23Fix
CVE-2023-47731IBM QRadar Suite Software cross-site scripting5.4CNA v3.10.3%2024-04-23Fix
CVE-2023-6833Information exposure vulnerability in Hitachi Ops Center Administrator4.4CNA v3.10.2%2024-04-23Fix
CVE-2023-38302Sharp Android Wi-Fi and Bluetooth MAC address system properties information disclosure4.3CISA ADP v3.10.4%2024-04-22
CVE-2023-38301Android device serial number system property information disclosure3.4CISA ADP v3.10.2%2024-04-22
CVE-2023-38300Orbic Android IMEI and ICCID system properties information disclosure6.2CISA ADP v3.10.2%2024-04-22
CVE-2023-38299Android IMEI system property vulnerability5.5CISA ADP v3.10.2%2024-04-22
CVE-2023-38298TCL Android IMEI system property vulnerability8.8CISA ADP v3.10.5%2024-04-22
CVE-2023-38297Android com.factory.mmigroup pre-installed app improper access control8.4CISA ADP v3.11.1%2024-04-22
CVE-2023-38296TCL Android ICCID system property information disclosure8.0CISA ADP v3.10.3%2024-04-22
CVE-2023-38295TCL Android screen recorder and SOS system services incorrect default permissions7.8CISA ADP v3.10.2%2024-04-22
CVE-2023-38294Itel Android com.transsion.autotest.factory pre-installed app incorrect default permissions6.1CISA ADP v3.10.2%2024-04-22
CVE-2023-38293Nokia Android com.tracfone.tfstatus pre-installed app command injection7.3CISA ADP v3.10.8%2024-04-22
CVE-2023-38292TCL Android com.tct.gcs.hiddenmenuproxy pre-installed app improper privilege management8.7CISA ADP v3.10.4%2024-04-22
CVE-2023-38291Android Wi-Fi MAC address system property vulnerability7.1CISA ADP v3.10.2%2024-04-22
CVE-2023-38290Android com.evenwell.fqc pre-installed app vulnerability7.8CISA ADP v3.10.2%2024-04-22
CVE-2023-7252Tickera ticket access insecure direct object reference5.3CISA ADP v3.10.5%2024-04-22Fix
CVE-2023-51798FFmpeg buffer overflow7.8CISA ADP v3.10.3%2024-04-19Fix
CVE-2023-51797FFmpeg buffer overflow6.7CISA ADP v3.10.4%2024-04-19Fix
CVE-2023-51796FFmpeg buffer overflow3.6CISA ADP v3.10.2%2024-04-19Fix
CVE-2023-51795FFmpeg buffer overflow8.0CISA ADP v3.10.3%2024-04-19Fix
CVE-2023-51793FFmpeg buffer overflow7.8CISA ADP v3.10.3%2024-04-19Fix
CVE-2023-51792libde265 v1.0.12 buffer overflow3.3CISA ADP v3.10.2%2024-04-19Fix
CVE-2023-51791FFmpeg buffer overflow7.8CISA ADP v3.10.3%2024-04-19Fix
CVE-2023-50260Wazuh's vulnerability in host_deny AR script allows arbitrary command execution8.8CNA v3.141.2%2024-04-19Fix
CVE-2023-50010FFmpeg buffer overflow7.8CISA ADP v3.10.5%2024-04-19Fix
CVE-2023-50009FFmpeg heap-based buffer overflow8.0CISA ADP v3.10.4%2024-04-19Fix
CVE-2023-50008FFmpeg buffer overflow7.8CISA ADP v3.10.4%2024-04-19Fix
CVE-2023-50007FFmpeg stack-based buffer overflow4.0CISA ADP v3.10.4%2024-04-19Fix
CVE-2023-49963DYMO LabelWriter Print Server hard-coded credentials8.8CISA ADP v3.10.3%2024-04-19
CVE-2023-49502FFmpeg buffer overflow8.8CISA ADP v3.11.5%2024-04-19Fix
CVE-2023-49501FFmpeg buffer overflow8.0CISA ADP v3.10.4%2024-04-19Fix
CVE-2023-49275Wazuh vulnerable to null pointer dereference in wazuh-analysisd6.5CNA v3.10.9%2024-04-19Fix
CVE-2023-47435hexo-theme-matery verifyPassword function authentication bypass9.8CISA ADP v3.10.6%2024-04-19
CVE-2023-37400IBM Aspera Faspex privilege escalation7.8CNA v3.10.2%2024-04-19Fix
CVE-2023-37397IBM Aspera Faspex inadequate encryption strength3.6CNA v3.10.1%2024-04-19Fix
CVE-2023-37396IBM Aspera Faspex information disclosure2.5CNA v3.10.1%2024-04-19Fix
CVE-2023-27279IBM Aspera Faspex denial of service6.5CNA v3.10.7%2024-04-19Fix
CVE-2023-22869IBM Aspera Faspex information disclosure5.5CNA v3.10.2%2024-04-19Fix
CVE-2023-50885Store Locator WordPress plugin arbitrary file deletion6.8CNA v3.10.6%2024-04-18Fix
CVE-2023-49768WP-FormAssembly WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-04-18Fix
CVE-2023-49742Support Genix WordPress plugin broken access control lead to arbitrary file upload9.9CNA v3.10.8%2024-04-18Fix
CVE-2023-47843CataBlog WordPress plugin arbitrary file deletion7.6CNA v3.10.5%2024-04-18
CVE-2023-41864PeproDev CF7 Database WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.2%2024-04-18Fix
CVE-2023-6897EAN for WooCommerce WordPress plugin insecure direct object reference4.3CNA v3.10.4%2024-04-18Fix
CVE-2023-6892EAN for WooCommerce WordPress plugin stored cross-site scripting5.4v3.10.3%2024-04-18Fix
CVE-2023-4509Octopus Deploy Octopus Server cleartext transmission of sensitive information4.3CNA v3.10.2%2024-04-18Fix
CVE-2023-3758Sssd: Race condition during authorization leads to gpo policies functioning inconsistently7.1CNA v3.11.0%2024-04-18Fix
CVE-2023-3675Secomea GateManager insufficient input validation when downloading certain file types6.5CNA v3.10.5%2024-04-18Fix
CVE-2023-52645Linux kernel MediaTek power domain driver race condition4.7v3.10.2%2024-04-17Fix
CVE-2023-52644Linux kernel b43 Wi-Fi driver vulnerability6.3v3.10.2%2024-04-17Fix
CVE-2023-52643Linux kernel IIO core sysfs registration memory leak5.5v3.10.2%2024-04-17Fix
CVE-2023-52642Linux kernel rc missing authorization7.8v3.10.2%2024-04-17Fix
CVE-2023-51500Uncode Core WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2024-04-17Fix
CVE-2023-51418JVM rich text icons WordPress plugin arbitrary file deletion7.7CNA v3.10.5%2024-04-17Fix
CVE-2023-46060Tenda AC500 buffer overflow7.5CISA ADP v3.10.8%2024-04-17Emerging Threats
CVE-2023-45744Peplink Smart Reader improper access control8.8v3.11.3%2024-04-17Fix
CVE-2023-45209Peplink Smart Reader information disclosure7.5v3.11.4%2024-04-17Fix
CVE-2023-44227Simple File List WordPress plugin arbitrary file deletion7.5CNA v3.10.6%2024-04-17Fix
CVE-2023-43491Peplink Smart Reader information disclosure7.5v3.11.5%2024-04-17Fix
CVE-2023-40146Peplink Smart Reader /bin/login functionality privilege escalation9.8v3.11.4%2024-04-17Fix
CVE-2023-39367Peplink Smart Reader web interface mac2name functionality OS command injection7.2NVD v3.137.7%2024-04-17Fix
CVE-2023-36505Ninja Forms WordPress plugin arbitrary file deletion7.2v3.10.6%2024-04-17Fix
CVE-2023-25043Data Tables Generator by Supsystic WordPress plugin broken access control4.3CNA v3.10.5%2024-04-17Fix
CVE-2023-6805RSS Aggregator by Feedzy WordPress plugin server-side request forgery6.4CNA v3.10.3%2024-04-17Fix
CVE-2023-5407Honeywell C300 stack-based buffer overflow5.9CNA v3.10.4%2024-04-17Fix
CVE-2023-5406Honeywell Experion Server out-of-bounds write5.9CNA v3.10.7%2024-04-17Fix
CVE-2023-5405Honeywell Experion Server out-of-bounds write5.9CNA v3.10.4%2024-04-17Fix
CVE-2023-5404Honeywell Experion Server heap-based buffer overflow8.1CNA v3.10.7%2024-04-17Fix
CVE-2023-5403Honeywell Experion Server stack-based buffer overflow8.1CNA v3.10.7%2024-04-17
CVE-2023-5401Honeywell Experion Server stack-based buffer overflow8.1CNA v3.10.7%2024-04-17
CVE-2023-5400Honeywell Experion Server heap-based buffer overflow8.1CNA v3.10.7%2024-04-17
CVE-2023-5398Honeywell Experion Server denial of service5.9CNA v3.10.4%2024-04-17
CVE-2023-5397Honeywell Experion Server remote code execution8.1CNA v3.10.8%2024-04-17
CVE-2023-5396Honeywell Experion Server buffer access with incorrect length7.4CNA v3.10.7%2024-04-17
CVE-2023-5395Honeywell Experion Server stack-based buffer overflow8.1CNA v3.10.7%2024-04-17Fix
CVE-2023-4235oFono SMS deliver report decoder stack-based buffer overflow8.1CNA v3.10.9%2024-04-17Fix
CVE-2023-4234oFono SMS submit report decoder stack-based buffer overflow8.1CNA v3.11.1%2024-04-17Fix
CVE-2023-4233oFono SMS address field decoder stack-based buffer overflow8.1CNA v3.11.0%2024-04-17Fix
CVE-2023-4232oFono SMS status report decoder stack-based buffer overflow8.1CNA v3.11.0%2024-04-17Fix
CVE-2023-51391Micrium OS Network uC-HTTP server header parsing invalid pointer dereference vulnerability7.5CNA v3.10.8%2024-04-16Fix
CVE-2023-50872Accredible Credential.net certificate API information disclosure7.5CISA ADP v3.10.4%2024-04-16
CVE-2023-45000LiteSpeed Cache WordPress plugin unauthenticated broken access control on API5.3NVD v3.10.4%2024-04-16Fix
CVE-2023-40000LiteSpeed Cache WordPress plugin unauthenticated site Wide stored XSS6.1NVD v3.154.9%2024-04-16NucleiExploit codeFix
CVE-2023-52144Product Feed Manager WordPress plugin directory traversal5.5CNA v3.10.4%2024-04-15Fix
CVE-2023-48710iTop limit pages/exec.php script to PHP files9.8CNA v3.10.7%2024-04-15Fix
CVE-2023-48709iTop vulnerable to potential formula injection in Excel/CSV export file8.0CNA v3.11.0%2024-04-15Fix
CVE-2023-47626iTop vulnerable to XSS vulnerability in authent-token8.8CNA v3.10.4%2024-04-15Fix
CVE-2023-47622iTop vulnerable to XSS vulnerability in dashlet refresh8.8CNA v3.10.4%2024-04-15Fix
CVE-2023-47123iTop vulnerable to XSS vulnerability in n:n relations tagset widget8.7CNA v3.10.3%2024-04-15Fix
CVE-2023-45808iTop missing silo check on extkey in console and portal4.1CNA v3.10.3%2024-04-15Fix
CVE-2023-45503Macs Cms Macrob7 SQL injection5.3CISA ADP v3.10.9%2024-04-15Exploit code
CVE-2023-44396iTop vulnerable to XSS in dashlet modifications ajax endpoints6.8CNA v3.10.4%2024-04-15Fix
CVE-2023-43790iTop vulnerable to XSS in friendlyname in object details5.7CNA v3.10.4%2024-04-15Fix
CVE-2023-38511iTop Dashboard editor vulnerable dashboard config file parameter5.0CNA v3.10.7%2024-04-15Fix
CVE-2023-33806Hikvision Ds-d5b86rb/b Hikvision Interactive Tablet insecure default configuration7.8CISA ADP v3.10.2%2024-04-15
CVE-2023-7201Everest Backup WordPress plugin Admin+ arbitrary file upload6.5CISA ADP v3.10.6%2024-04-15Fix
CVE-2023-6067WP User Profile Avatar WordPress plugin Contributor+ stored XSS5.4CISA ADP v3.10.4%2024-04-15Fix
CVE-2023-4857Lenovo SMM missing authentication7.5CNA v3.10.5%2024-04-15
CVE-2023-4856Lenovo SMM OS command injection8.8CNA v3.10.7%2024-04-15
CVE-2023-4855Lenovo SMM OS command injection7.2CNA v3.11.1%2024-04-15
CVE-2023-6494WPC Smart Quick View for WooCommerce WordPress plugin stored cross-site scripting4.4CNA v3.10.3%2024-04-13Fix
CVE-2023-52211WP Job Manager WordPress plugin broken access control5.3CNA v3.10.4%2024-04-12Fix
CVE-2023-51515Uncode Core WordPress plugin privilege escalation8.8CNA v3.10.5%2024-04-12Fix
CVE-2023-51499WooCommerce Shipping Per Product WordPress plugin broken access control4.3CNA v3.10.4%2024-04-12Fix
CVE-2023-51409AI Engine WordPress plugin unauthenticated arbitrary file upload9.8v3.163.3%2024-04-12NucleiExploit codeFix
CVE-2023-50307IBM Sterling B2B Integrator cross-site scripting5.4CNA v3.10.3%2024-04-12Fix
CVE-2023-49528FFmpeg buffer overflow8.0CISA ADP v3.10.4%2024-04-12Fix
CVE-2023-47714IBM Sterling File Gateway cross-site scripting4.8CNA v3.10.3%2024-04-12Fix
CVE-2023-45186IBM Sterling B2B Integrator cross-site scripting4.8CNA v3.10.3%2024-04-12Fix
CVE-2023-44857Cobham Sailor 600 Vsat Ku code injection8.1CISA ADP v3.10.9%2024-04-12
CVE-2023-44856Cobham Sailor 600 Vsat Ku cross-site scripting6.1CISA ADP v3.10.5%2024-04-12
CVE-2023-44855Cobham Sailor 600 Vsat Ku cross-site scripting6.5CISA ADP v3.10.5%2024-04-12
CVE-2023-44854Cobham Sailor 600 Vsat Ku cross-site scripting6.1CISA ADP v3.10.5%2024-04-12
CVE-2023-44853Cobham Sailor 600 Vsat Ku code injection4.8CISA ADP v3.10.3%2024-04-12
CVE-2023-44852Cobham Sailor 600 Vsat Ku cross-site scripting8.2CISA ADP v3.10.6%2024-04-12
CVE-2023-6678Inefficient regular expression complexity in GitLab4.3CNA v3.10.6%2024-04-12Fix
CVE-2023-6489Inefficient regular expression complexity in GitLab4.3CNA v3.10.6%2024-04-12Fix
CVE-2023-51672FunnelKit Checkout WordPress plugin unauthenticated arbitrary Post/Page deletion vulnerability7.5CNA v3.10.5%2024-04-11Fix
CVE-2023-51142ZKTeco BioTime information disclosure7.5CISA ADP v3.10.7%2024-04-11
CVE-2023-51141ZKTeco BioTime insecure direct object reference6.5CISA ADP v3.10.7%2024-04-11
CVE-2023-50949IBM QRadar improper certificate validation5.9CNA v3.10.3%2024-04-11Fix
CVE-2023-48865Reportico affected by Incorrect Access Control6.5CISA ADP v3.10.6%2024-04-11
CVE-2023-32295Easy!Appointments WordPress plugin arbitrary file deletion6.3CISA ADP v3.10.5%2024-04-11Fix
CVE-2023-32228Bosch AMS and BIS AMC2-4WCF and AMC2-2WCF controllers vulnerability4.6CNA v3.10.2%2024-04-11Fix
CVE-2023-29483Potential DoS via the Tudoor mechanism in eventlet and Dnspython7.0CISA ADP v3.11.9%2024-04-11Fix
CVE-2023-27607Points and Rewards for WooCommerce WordPress plugin settings Change vulnerability5.4CNA v3.10.4%2024-04-11Fix
CVE-2023-6811Language Translate Widget for WordPress WordPress plugin stored cross-site scripting7.2CNA v3.10.4%2024-04-11Fix
CVE-2023-6257Inline Related Posts WordPress plugin Subscriber+ password Protected post read4.3CISA ADP v3.10.5%2024-04-11Fix
CVE-2023-5394Honeywell Experion Server stack-based buffer overflow7.4CNA v3.10.7%2024-04-11
CVE-2023-5393Honeywell Experion Server improper length parameter handling7.4CNA v3.10.7%2024-04-11
CVE-2023-5392Honeywell C300 information disclosure7.5CNA v3.10.5%2024-04-11
CVE-2023-52070Jfreechart out-of-bounds read8.4CISA ADP v3.10.2%2024-04-10Fix
CVE-2023-50347Insecure SQL interface affects HCL DRYiCE MyXalytics3.7CNA v3.10.6%2024-04-10Fix
CVE-2023-40148PingFederate server side request forgery6.5CNA v3.10.5%2024-04-10
CVE-2023-6916Information disclosure via audit records for OpenAPI requests in Guardian/CMC7.5CNA v4.00.6%2024-04-10Fix
CVE-2023-6385WordPress Ping Optimizer plugin Log Clearing via CSRF4.3CISA ADP v3.10.2%2024-04-10
CVE-2023-6236Red Hat JBoss Enterprise Application Platform OIDC session token store vulnerability7.3CNA v3.10.3%2024-04-10Fix
CVE-2023-2794oFono SMS decoder stack-based buffer overflow8.1CNA v3.11.3%2024-04-10Fix
CVE-2023-50821Siemens SIMATIC PCS 7 buffer overflow6.9CNA v4.00.2%2024-04-09Fix
CVE-2023-49913TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.9%2024-04-09
CVE-2023-49912TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.8%2024-04-09
CVE-2023-49911TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.8%2024-04-09
CVE-2023-49910TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.8%2024-04-09
CVE-2023-49909TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.8%2024-04-09
CVE-2023-49908TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.8%2024-04-09
CVE-2023-49907TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.8%2024-04-09
CVE-2023-49906TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) stack-based buffer overflow8.8v3.11.9%2024-04-09
CVE-2023-49134TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) command execution9.8v3.11.7%2024-04-09
CVE-2023-49133TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) command execution9.8v3.11.7%2024-04-09
CVE-2023-49074TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) denial of service7.5v3.113.5%2024-04-09
CVE-2023-48784Fortinet FortiOS format string6.1CNA v3.10.8%2024-04-09Fix
CVE-2023-48724TP-Link AC1350 Wireless MU-MIMO Gigabit Access Point (EAP225 V3) memory corruption7.5CNA v3.11.5%2024-04-09
CVE-2023-47542Fortinet FortiManager server-side template injection6.3CNA v3.10.3%2024-04-09Fix
CVE-2023-47541Fortinet FortiSandbox path traversal6.5CNA v3.10.3%2024-04-09Fix
CVE-2023-47540Fortinet FortiSandbox OS command injection6.5CNA v3.10.6%2024-04-09Fix
CVE-2023-45590Fortinet FortiClientLinux code injection9.4CNA v3.11.5%2024-04-09Fix
CVE-2023-41677Fortinet FortiOS A insufficiently protected credentials7.5CNA v3.10.8%2024-04-09Fix
CVE-2023-7046WP Encryption WordPress plugin information disclosure7.5CNA v3.10.4%2024-04-09Fix
CVE-2023-6999Pods Custom Content Types and Fields Authenticated (Contributor+) remote code execution8.8CNA v3.11.3%2024-04-09Fix
CVE-2023-6993Custom post types, Custom Fields and more WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2024-04-09Fix
CVE-2023-6967Pods Custom Content Types and Fields Authenticated (Contributor+) SQL injection via shortcode8.8CNA v3.10.8%2024-04-09Fix
CVE-2023-6965Pods Custom Content Types and fields missing authorization4.3CNA v3.10.6%2024-04-09Fix
CVE-2023-6964Gutenberg Blocks by Kadence Blocks WordPress plugin server-side request forgery6.4NVD v3.10.4%2024-04-09Fix
CVE-2023-6799WP Reset WordPress plugin sensitive information exposure due to insufficient randomness5.9v3.10.7%2024-04-09Fix
CVE-2023-6777WP Go Maps WordPress plugin information exposure to Potential denial of service6.5v3.10.8%2024-04-09Fix
CVE-2023-6695Beaver Themer WordPress plugin sensitive information exposure6.5v3.10.5%2024-04-09Fix
CVE-2023-6694Beaver Themer WordPress plugin Authenticated(Contributor+) stored cross-site scripting via shortcode5.4v3.10.3%2024-04-09Fix
CVE-2023-6486Spectra WordPress Gutenberg Blocks plugin cross-site scripting5.4v3.10.6%2024-04-09Fix
CVE-2023-6320LG webOS com. command injection7.2NVD v3.13.9%2024-04-09Fix
CVE-2023-6319LG webOS getAudioMetadata method from the com. command injection7.2NVD v3.16.4%2024-04-09Exploit codeFix
CVE-2023-6318LG webOS processAnalyticsReport method from the com. command injection7.2NVD v3.14.7%2024-04-09Fix
CVE-2023-6317LG webOS secondscreen.gateway service vulnerability9.8NVD v3.11.1%2024-04-09Fix
CVE-2023-1083Welotec: Improper access control in TK500v1 router series9.8CNA v3.10.7%2024-04-09Fix
CVE-2023-1082Welotec: Command injection vulnerability in TK500v1 router series8.8CNA v3.11.0%2024-04-09Fix
CVE-2023-52554Huawei HarmonyOS permission control vulnerability in the Bluetooth module6.5CISA ADP v3.10.2%2024-04-08Fix
CVE-2023-52553Huawei HarmonyOS race condition vulnerability in the Wi-Fi module7.4CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52552Huawei HarmonyOS input verification vulnerability in the power module7.5CISA ADP v3.10.4%2024-04-08Fix
CVE-2023-52551Huawei HarmonyOS vulnerability of data verification errors in the kernel module5.3CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52550Huawei HarmonyOS vulnerability of data verification errors in the kernel module7.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52549Huawei HarmonyOS vulnerability of data verification errors in the kernel module7.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52546Huawei HarmonyOS vulnerability of package name verification being bypassed in the Calendar app7.5v3.10.2%2024-04-08Fix
CVE-2023-52545Huawei HarmonyOS vulnerability of undefined permissions in the Calendar app7.5CISA ADP v3.10.4%2024-04-08Fix
CVE-2023-52544Huawei HarmonyOS vulnerability of file path verification being bypassed in the email module4.3CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52543Huawei HarmonyOS permission verification vulnerability in the system module6.2CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52542Huawei HarmonyOS permission verification vulnerability in the system module6.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52541Huawei HarmonyOS authentication vulnerability in the API for app pre-loading7.5CISA ADP v3.10.4%2024-04-08Fix
CVE-2023-52540Huawei HarmonyOS vulnerability of improper authentication in the Iaware module7.5v3.10.4%2024-04-08Fix
CVE-2023-52539Huawei HarmonyOS permission verification vulnerability in the settings module7.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52538Huawei HarmonyOS vulnerability of package name verification being bypassed in the HwIms module9.1CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52537Huawei HarmonyOS vulnerability of package name verification being bypassed in the HwIms module7.5CISA ADP v3.10.4%2024-04-08Fix
CVE-2023-52536UNISOC chipsets faceid service out-of-bounds read4.4v3.10.1%2024-04-08Fix
CVE-2023-52535UNISOC chipsets vsp driver denial of service4.4CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52534UNISOC chipsets ngmm undefined behavior5.9CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52533UNISOC chipsets modem-ps-nas-ngmm undefined behavior5.3CISA ADP v3.10.4%2024-04-08Fix
CVE-2023-52388Huawei HarmonyOS permission control vulnerability in the clock module7.5CISA ADP v3.10.4%2024-04-08Fix
CVE-2023-52386Huawei HarmonyOS out-of-bounds write vulnerability in the RSMC module7.5v3.10.4%2024-04-08Fix
CVE-2023-52385Huawei HarmonyOS out-of-bounds write vulnerability in the RSMC module6.2CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52364Huawei HarmonyOS vulnerability of input parameters being not strictly verified in the RSMC module6.3CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52359Huawei HarmonyOS improper authorization7.5v3.10.4%2024-04-08Fix
CVE-2023-52352UNISOC chipsets Network Adapter service missing authorization5.5v3.10.1%2024-04-08Fix
CVE-2023-52351UNISOC chipsets ril service out-of-bounds write7.8CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52350UNISOC chipsets ril service out-of-bounds write4.4v3.10.1%2024-04-08Fix
CVE-2023-52349UNISOC chipsets ril service out-of-bounds write4.4v3.10.1%2024-04-08Fix
CVE-2023-52348UNISOC chipsets ril service out-of-bounds write4.4CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52347UNISOC chipsets ril service out-of-bounds write5.5CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52346UNISOC chipsets modem driver crash4.4CISA ADP v3.10.1%2024-04-08Fix
CVE-2023-52345UNISOC chipsets modem driver crash6.0v3.10.1%2024-04-08Fix
CVE-2023-52344UNISOC chipsets modem-ps-nas-ngmm undefined behavior5.3CISA ADP v3.10.4%2024-04-08Fix
CVE-2023-52343UNISOC chipsets improper input validation5.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52342UNISOC chipsets modem-ps-nas-ngmm undefined behavior7.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-52341UNISOC chipsets missing authorization7.5CISA ADP v3.10.3%2024-04-08Fix
CVE-2023-7164BackWPup WordPress plugin unauthenticated Backup download7.5CISA ADP v3.12.3%2024-04-08NucleiFix
CVE-2023-52717Huawei HarmonyOS permission verification vulnerability in the lock screen module5.3CISA ADP v3.10.3%2024-04-07Fix
CVE-2023-52716Huawei HarmonyOS improper privilege management7.5CISA ADP v3.10.4%2024-04-07Fix
CVE-2023-52715Huawei HarmonyOS incorrect permission assignment7.5v3.10.4%2024-04-07
CVE-2023-52714Huawei HarmonyOS vulnerability of defects introduced in the design process in the hwnff module7.5CISA ADP v3.10.3%2024-04-07Fix
CVE-2023-52713Huawei HarmonyOS vulnerability of improper permission control in the window management module7.7CISA ADP v3.10.1%2024-04-07Fix
CVE-2023-6877RSS Aggregator by Feedzy WordPress plugin stored cross-site scripting5.4v3.10.4%2024-04-07Fix
CVE-2023-52235SpaceX Starlink Wi-Fi router cross-site request forgery8.8CISA ADP v3.10.5%2024-04-05Exploit code
CVE-2023-49965SpaceX Starlink Wi-Fi router Setup Page cross-site scripting6.8CISA ADP v3.10.3%2024-04-05Exploit code
CVE-2023-48426Google Chromecast Bootloader and Kernel-level code-execution including compromise of user-data10.0CNA v3.10.2%2024-04-05Fix
CVE-2023-31028NVIDIA nvJPEG2000 Library improper input validation2.8CNA v3.10.2%2024-04-05Fix
CVE-2023-25494Lenovo Desktop BIOS out-of-bounds read6.7CNA v3.10.2%2024-04-05
CVE-2023-25493Lenovo BIOS missing authentication6.7CNA v3.10.2%2024-04-05
CVE-2023-6523IDOR in ExtremePacs's Extreme XDS8.8CNA v3.10.6%2024-04-05Fix
CVE-2023-6522Information disclosure in ExtremePacs's Extreme XDS7.2CNA v3.10.3%2024-04-05Fix
CVE-2023-5973Brocade Fabric OS truncated port name4.3CNA v3.10.2%2024-04-05Fix
CVE-2023-5912Lenovo Notebook BIOS out-of-bounds write6.7CNA v3.10.2%2024-04-05
CVE-2023-5692WordPress Core sensitive information exposure via redirect_guess_404_permalink5.3CNA v3.10.8%2024-04-05Fix
CVE-2023-4605Lenovo XClarity Administrator system information disclosure6.5CNA v3.10.5%2024-04-05Fix
CVE-2023-45288net/http, x/net/http2: Close connections when receiving too many headers7.5CISA ADP v3.192.0%2024-04-04Exploit codeFix
CVE-2023-38709Apache HTTP Server: HTTP response splitting7.3CISA ADP v3.13.9%2024-04-04Exploit codeFix
CVE-2023-36645Itb-pim Tradepro ITB-GmbH SQL injection9.8v3.10.9%2024-04-04Exploit code
CVE-2023-36644Itb-pim Tradepro improper access control5.3NVD v3.11.0%2024-04-04
CVE-2023-36643Itb-pim Tradepro improper access control5.3NVD v3.10.7%2024-04-04
CVE-2023-25200MT Safeline X-Ray X3310 webserver HTML injection4.7CISA ADP v3.10.4%2024-04-04
CVE-2023-25199MT Safeline X-Ray X3310 webserver reflected cross-site scripting5.4CISA ADP v3.10.3%2024-04-04
CVE-2023-3454Brocade Fabric OS remote code execution8.6CNA v3.11.2%2024-04-04Fix
CVE-2023-52641Linux kernel NTFS3 attribute frame allocation null pointer dereference5.5v3.10.2%2024-04-03Fix
CVE-2023-52640Linux kernel fs/ntfs3 improper array index validation7.1CNA v3.10.2%2024-04-03Fix
CVE-2023-52639Linux kernel KVM s390 vsie shadow creation race condition4.7v3.10.2%2024-04-03Fix
CVE-2023-52638Linux kernel J1939 CAN socket locking deadlock5.5v3.10.2%2024-04-03Fix
CVE-2023-52637Linux kernel J1939 CAN socket filter use-after-free7.8CNA v3.10.2%2024-04-03Fix
CVE-2023-52296IBM Db2 for Linux, UNIX and Windows denial of service5.3CNA v3.10.6%2024-04-03Fix
CVE-2023-52043D-Link COVR mesh Wi-Fi system WPA-PSK password handling improper authentication8.1CISA ADP v3.10.3%2024-04-03
CVE-2023-45552Veridiumid Veridiumad cross-site scripting6.5CISA ADP v3.10.3%2024-04-03
CVE-2023-44040Veridiumid Veridiumad cross-site scripting6.1CISA ADP v3.10.4%2024-04-03
CVE-2023-44039Veridiumid Veridiumad improper authentication9.1CISA ADP v3.10.5%2024-04-03
CVE-2023-44038Veridiumid Veridiumad LDAP injection6.5CISA ADP v3.10.3%2024-04-03
CVE-2023-38729IBM Db2 information disclosure6.8CNA v3.10.6%2024-04-03Fix
CVE-2023-35812OpenSSH scp client path traversal5.3CNA v3.10.5%2024-04-03Fix
CVE-2023-35764AYS Pro Plugins Survey Maker insufficient verification of data authenticity5.3CISA ADP v3.10.3%2024-04-03Fix
CVE-2023-34423AYS Pro Plugins Survey Maker cross-site scripting6.1CISA ADP v3.10.4%2024-04-03Fix
CVE-2023-25699VideoWhisper Live Streaming Integration WordPress plugin remote code execution (RCE)9.8v3.11.3%2024-04-03Fix
CVE-2023-52636In the Linux kernel, the following vulnerability has been resolved: libceph: just wait for more data to be available on the socket A short read may occur while reading the message footer from the socket. Later, when the socket is ready for another read, the messenger invokes all read_partial_*()8.2CNA v3.10.5%2024-04-02Fix
CVE-2023-52635Linux kernel devfreq monitor synchronization vulnerability5.5v3.10.2%2024-04-02Fix
CVE-2023-52634Linux kernel AMD display OTG workaround logic denial of service5.5v3.10.2%2024-04-02Fix
CVE-2023-52633Linux kernel time-travel crash5.0v3.10.2%2024-04-02Fix
CVE-2023-52632Linux kernel drm/amdkfd improper locking5.5v3.10.2%2024-04-02Fix
CVE-2023-52631Linux kernel NTFS3 attribute list loading null pointer dereference5.5CISA ADP v3.10.2%2024-04-02Fix
CVE-2023-51456DJI Mavic 3 Pro out-of-bounds read6.8CNA v3.10.2%2024-04-02
CVE-2023-51455DJI Mavic 3 Pro improper array index validation6.8CNA v3.10.2%2024-04-02
CVE-2023-51454DJI Mavic 3 Pro out-of-bounds write6.8CNA v3.10.2%2024-04-02
CVE-2023-51453DJI Mavic 3 Pro out-of-bounds write3.0CNA v3.10.2%2024-04-02
CVE-2023-51452DJI Mavic 3 Pro out-of-bounds write3.0CNA v3.10.2%2024-04-02
CVE-2023-50313IBM WebSphere Application Server information disclosure5.3CNA v3.10.2%2024-04-02Fix
CVE-2023-6951DJI Mavic 3 Pro insufficient randomness6.6CNA v3.10.3%2024-04-02
CVE-2023-6950DJI Mini 3 Pro improper syntax validation3.0CNA v3.10.2%2024-04-02
CVE-2023-6949DJI Mini 3 Pro missing authentication5.2CNA v3.10.2%2024-04-02
CVE-2023-6948DJI Mavic 3 Pro buffer overflow4.1CISA ADP v3.10.2%2024-04-02
CVE-2023-51803LinuxServer.io Heimdall icon handling vulnerability9.8CISA ADP v3.10.7%2024-04-01
CVE-2023-51573Voltronic Power ViewPower Pro updateManagerPassword Exposed Dangerous function authentication bypass9.8CNA v3.045.7%2024-04-01
CVE-2023-51572Voltronic Power ViewPower Pro getMacAddressByIp command injection remote code execution9.8CNA v3.038.4%2024-04-01
CVE-2023-51571Voltronic Power ViewPower Pro SocketService missing authentication denial of service7.5CNA v3.00.7%2024-04-01
CVE-2023-51570Voltronic Power ViewPower Pro deserialization of untrusted data remote code execution9.8CNA v3.01.0%2024-04-01
CVE-2023-48906Btstack stack-based buffer overflow4.3CISA ADP v3.10.3%2024-04-01
CVE-2023-43515Qualcomm Snapdragon buffer copy without checking size of input (Classic buffer overflow) in HLOS6.6CNA v3.10.1%2024-04-01Fix
CVE-2023-33115Qualcomm Snapdragon buffer over-read in Trusted Execution Environment7.8CNA v3.10.1%2024-04-01Fix
CVE-2023-33111Qualcomm Snapdragon improper validation of array index in Audio5.5CNA v3.10.1%2024-04-01Fix
CVE-2023-33101Qualcomm Snapdragon incorrect type conversion or cast in Multi-Mode Call Processor7.5CNA v3.10.3%2024-04-01Fix
CVE-2023-33100Qualcomm Snapdragon improper input validation in Multi-Mode Call Processor7.5CNA v3.10.3%2024-04-01Fix
CVE-2023-33099Qualcomm Snapdragon improper input validation in Multi-Mode Call Processor7.5CNA v3.10.3%2024-04-01Fix
CVE-2023-33023Qualcomm Snapdragon buffer copy without checking size of input in SPS-Applications8.4CNA v3.10.1%2024-04-01Fix
CVE-2023-28547Qualcomm Snapdragon buffer copy without checking size of input in SPS Applications8.4CNA v3.10.1%2024-04-01Fix
CVE-2023-6154Local privilege escalation in Bitdefender Total Security (VA-11168)7.8CNA v3.10.2%2024-04-01Fix
CVE-2023-50959IBM Cloud Pak for Business Automation information disclosure5.3CNA v3.10.5%2024-03-31Fix
CVE-2023-50311IBM CICS Transaction Gateway for Multiplatforms information disclosure3.1CNA v3.10.3%2024-03-31Fix
CVE-2023-46808Ivanti ITSM file upload9.9v3.12.0%2024-03-31Fix
CVE-2023-41724Ivanti Sentry command injection8.8NVD v3.112.8%2024-03-31Fix
CVE-2023-52629Linux kernel push-switch use-after-free8.4CISA ADP v3.10.3%2024-03-29Fix
CVE-2023-49234Stilog Visual Planning XML external entity injection6.3CISA ADP v3.10.2%2024-03-29
CVE-2023-49232An authentication bypass vulnerability was found in Stilog Visual Planning 8. It allows an unauthenticated attacker to brute-force the password reset PINs of administrative users.9.8CISA ADP v3.11.5%2024-03-29
CVE-2023-49231Stilog Visual Planning administrative API token issuance authentication bypass9.8CISA ADP v3.142.9%2024-03-29
CVE-2023-6191Egehan Security WebPDKS SQL command improper neutralization9.8v3.10.6%2024-03-29
CVE-2023-6047Reflected XSS in Algoritim E-commerce Software6.1v3.10.3%2024-03-29Fix
CVE-2023-52628Linux kernel nftables extension header parsing out-of-bounds write7.8CNA v3.10.7%2024-03-28Fix
CVE-2023-52234Booster Elite for WooCommerce WordPress plugin Auth. sensitive data exposure6.5v3.10.5%2024-03-28Fix
CVE-2023-52231Booster Plus for WooCommerce WordPress plugin Auth. sensitive data exposure6.5v3.10.5%2024-03-28Fix
CVE-2023-50969Thales Imperva SecureSphere WAF POST request rule enforcement vulnerability9.8CISA ADP v3.10.9%2024-03-28
CVE-2023-50374CMP Coming Soon and Maintenance Plugin by NiteoThemes WordPress plugin server side request forgery5.5CNA v3.10.4%2024-03-28Fix
CVE-2023-45715HCL BigFix Platform is susceptible to a denial of service attack3.5CNA v3.10.4%2024-03-28Fix
CVE-2023-45706HCL BigFix Platform is susceptible to cross-site scripting and/or man in the middle attack2.0CNA v3.10.3%2024-03-28Fix
CVE-2023-45705HCL BigFix Platform is susceptible to server side request forgery (SSRF)3.5CNA v3.10.4%2024-03-28Fix
CVE-2023-42974Apple macOS race condition7.0v3.10.1%2024-03-28Fix
CVE-2023-42962Apple iOS and iPadOS denial of service7.5v3.10.8%2024-03-28Fix
CVE-2023-42956Apple Safari denial of service6.5v3.11.0%2024-03-28Fix
CVE-2023-42950Apple Safari use-after-free8.8v3.11.1%2024-03-28Fix
CVE-2023-42947Apple macOS path traversal8.6v3.10.3%2024-03-28Fix
CVE-2023-42936Apple macOS information disclosure5.5v3.10.2%2024-03-28Fix
CVE-2023-42931Apple macOS improper handling of insufficient permissions7.8v3.11.2%2024-03-28Exploit codeFix
CVE-2023-42930This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. An app may be able to modify protected parts of the file system.5.5v3.10.2%2024-03-28Fix
CVE-2023-42913Apple macOS insecure storage of sensitive information8.8v3.10.5%2024-03-28Fix
CVE-2023-42896Apple macOS missing authorization5.5v3.10.2%2024-03-28Fix
CVE-2023-42893Apple macOS insecure permissions5.5v3.10.3%2024-03-28Fix
CVE-2023-42892Apple macOS use-after-free7.8v3.10.2%2024-03-28Fix
CVE-2023-40390Apple macOS information disclosure5.5v3.10.2%2024-03-28Fix
CVE-2023-39313Avada WordPress theme authenticated server side request forgery (SSRF)7.7v3.10.6%2024-03-28Fix
CVE-2023-39309Avada Builder WordPress plugin Auth. SQL injection8.8v3.10.7%2024-03-28Fix
CVE-2023-36679Spectra WordPress plugin server side request forgery (SSRF)6.5NVD v3.10.4%2024-03-28Fix
CVE-2023-34370Server side request forgery (SSRF) vulnerability in Starter Templates plugins7.1CNA v3.10.3%2024-03-28Fix
CVE-2023-33528halo cross-site scripting6.1v3.10.3%2024-03-28Fix
CVE-2023-25341ladle dev server path traversal6.5CISA ADP v3.10.4%2024-03-28
CVE-2023-23649MainWP Links Manager Extension WordPress plugin unauthenticated PHP object injection8.1CNA v3.10.8%2024-03-28
CVE-2023-6437TP-Link EX20v AX1800 authenticated RCE9.8CNA v3.11.4%2024-03-28
CVE-2023-6371Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.5%2024-03-28Fix
CVE-2023-52228Beds24 Online Booking WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-03-27Fix
CVE-2023-50961IBM QRadar cross-site scripting4.8CNA v3.10.3%2024-03-27Fix
CVE-2023-49815WappPress WordPress plugin unauthenticated arbitrary file upload10.0CNA v3.10.6%2024-03-27Fix
CVE-2023-47438SQL injection vulnerability in Reportico Till6.5CISA ADP v3.10.5%2024-03-27
CVE-2023-46052SANE Backends test backend vulnerability7.1v3.10.4%2024-03-27
CVE-2023-46051TeX Live 944e257 allows a NULL pointer dereference in texk/web2c/pdftexdir/tounicode.c. NOTE: this is disputed because it should be categorized as a usability problem.3.3CISA ADP v3.10.3%2024-03-27Fix
CVE-2023-46049LLVM llvm-lto metadata parser null pointer dereference5.3CISA ADP v3.10.7%2024-03-27
CVE-2023-46048texk/web2c/pdftexdir/writet1.c Tex Live 944e257 has a null pointer dereference6.2CISA ADP v3.10.3%2024-03-27Fix
CVE-2023-46047Sane-project Sane Backends arbitrary code execution7.3CISA ADP v3.10.4%2024-03-27
CVE-2023-46046MiniZinc ti_expr parser null pointer dereference5.5CISA ADP v3.10.3%2024-03-27Fix
CVE-2023-45935Qt 6 through 6.6 was discovered to contain a NULL pointer dereference via the function QXcbConnection::initializeAllAtoms(). NOTE: this is disputed because it is not expected that an X application should continue to run when there is arbitrary anomalous behavior from the X server.4.2CISA ADP v3.10.2%2024-03-27Fix
CVE-2023-45931mesa3d Mesa null pointer dereference7.5CISA ADP v3.11.0%2024-03-27
CVE-2023-45929Jedsoft S-lang buffer overflow9.1CISA ADP v3.10.7%2024-03-27
CVE-2023-45927Jedsoft S-lang improper exception handling9.1CISA ADP v3.10.8%2024-03-27
CVE-2023-45925GNU Midnight Commander 4.8.29-146-g299d9a2fb was discovered to contain a NULL pointer dereference via the function x_error_handler() at tty/x11conn.c. NOTE: this is disputed because it should be categorized as a usability problem (an X operation silently fails).–0.3%2024-03-27
CVE-2023-45924libglxproto.c in OpenGL libglvnd bb06db5a was discovered to contain a segmentation violation via the function glXGetDrawableScreen(). NOTE: this is disputed because there are no common situations in which users require uninterrupted operation with an attacker-controller server.9.8CISA ADP v3.10.9%2024-03-27Fix
CVE-2023-45922mesa3d Mesa improper check for exceptional conditions4.3CISA ADP v3.10.5%2024-03-27Fix
CVE-2023-45920Xfig null pointer dereference4.2CISA ADP v3.10.2%2024-03-27Fix
CVE-2023-45919mesa3d Mesa buffer over-read5.3CISA ADP v3.10.4%2024-03-27Fix
CVE-2023-45913mesa3d Mesa null pointer dereference6.2CISA ADP v3.10.3%2024-03-27Fix
CVE-2023-44999WooCommerce Stripe Gateway WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-27Fix
CVE-2023-43768Couchbase Server resource exhaustion7.5CISA ADP v3.10.7%2024-03-27Fix
CVE-2023-40290Supermicro X11sae-f cross-site scripting8.3CISA ADP v3.10.7%2024-03-27Fix
CVE-2023-40289Supermicro X11sae-f improper privilege management7.2CISA ADP v3.118.3%2024-03-27Exploit codeFix
CVE-2023-40288Supermicro X11sae-f cross-site scripting8.3CISA ADP v3.10.6%2024-03-27Fix
CVE-2023-40287Supermicro X11sae-f cross-site scripting8.3CISA ADP v3.10.6%2024-03-27Fix
CVE-2023-40286Supermicro X11sae-f cross-site scripting8.3CISA ADP v3.10.6%2024-03-27Fix
CVE-2023-40285Supermicro X11sae-f cross-site scripting6.5CISA ADP v3.10.6%2024-03-27Fix
CVE-2023-40284Supermicro X11sae-f cross-site scripting8.3CISA ADP v3.10.8%2024-03-27Fix
CVE-2023-39804GNU tar PAX extension attribute parser denial of service6.2CISA ADP v3.10.3%2024-03-27Fix
CVE-2023-39311Avada Builder WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2024-03-27Fix
CVE-2023-39306Avada Builder WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.4%2024-03-27Fix
CVE-2023-34020Uncanny Toolkit for LearnDash WordPress plugin open redirection6.1v3.11.0%2024-03-27NucleiFix
CVE-2023-31854std::bad_alloc is mishandled in Precomp 0.4.8. NOTE: this is disputed because it should be categorized as a usability problem.–0.2%2024-03-27
CVE-2023-31634Teslamate improper authentication9.8CISA ADP v3.10.9%2024-03-27Exploit codeFix
CVE-2023-29134Cargo extension for MediaWiki smartSplit function improper input validation8.6CISA ADP v3.10.6%2024-03-27
CVE-2023-25364OPSWAT MetaDefender Core cross-site scripting6.1CISA ADP v3.10.3%2024-03-27
CVE-2023-6400Incorrect user authorization vulnerability on OpenText ZENworks Configuration Management product7.4CNA v3.10.2%2024-03-27
CVE-2023-6173SQLi in TeoSOFT Software TeoBASE9.8CNA v3.10.6%2024-03-27
CVE-2023-6153Authentication bypass in TeoSOFT Software TeoBASE9.8CNA v3.10.7%2024-03-27
CVE-2023-0582Path traversal in ForgeRock Access Managment9.8v3.10.8%2024-03-27Fix
CVE-2023-52627Linux kernel AD7091R ADC driver null pointer dereference5.5CISA ADP v3.10.2%2024-03-26Fix
CVE-2023-52626Linux kernel mlx5e port timestamping out-of-bounds read7.1v3.10.2%2024-03-26Fix
CVE-2023-52625Linux kernel AMD display DMCUB idle interface denial of service5.5v3.10.2%2024-03-26Fix
CVE-2023-52624Linux kernel AMD display DMCUB GPINT interface denial of service7.8v3.10.4%2024-03-26Fix
CVE-2023-52623Linux kernel SunRPC transport multipath vulnerability7.8CNA v3.10.3%2024-03-26Fix
CVE-2023-52622Linux kernel ext4 online resizing resource exhaustion5.5NVD v3.10.2%2024-03-26Fix
CVE-2023-52621Linux kernel BPF map helpers reachable assertion7.8v3.10.2%2024-03-26Fix
CVE-2023-52214Void Contact Form 7 Widget For Elementor Page Builder WordPress plugin broken access control8.8v3.10.4%2024-03-26Fix
CVE-2023-51416EnvíaloSimple WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.2%2024-03-26Fix
CVE-2023-51148TRENDnet TEW-821DAP stack-based buffer overflow8.0CISA ADP v3.10.5%2024-03-26
CVE-2023-51147TRENDnet TEW-821DAP TRENDnet Trendnet AC1200 buffer overflow8.0CISA ADP v3.10.5%2024-03-26
CVE-2023-51146TRENDnet TEW-821DAP TRENDnet AC1200 buffer overflow8.0CISA ADP v3.10.5%2024-03-26
CVE-2023-50895Janitza GridVis server database project load functionality vulnerability7.2CISA ADP v3.10.7%2024-03-26
CVE-2023-50894Janitza Gridvis hard-coded credentials8.8CISA ADP v3.10.4%2024-03-26
CVE-2023-50702Sikka SSCWindowsService 5 2023-09-14 executes a program as LocalSystem but allows full control by low-privileged users (and low-privileged users have write access to %PROGRAMDATA%\SSCService). Consequently, low-privileged users can execute arbitrary code as LocalSystem.8.8CISA ADP v3.10.6%2024-03-26
CVE-2023-49839Reflected cross-site scripting vulnerability in multiple WordPress components by KlbTheme7.1CNA v3.10.5%2024-03-26
CVE-2023-49838Cross-site request forgery (CSRF) vulnerability in multiple themes by KlbTheme4.3CNA v3.10.3%2024-03-26
CVE-2023-48777Elementor Website Builder WordPress plugin Elementor.Com unrestricted file upload8.8NVD v3.14.1%2024-03-26NucleiExploit codeFix
CVE-2023-48275Widgets for Google Reviews WordPress plugin arbitrary file upload8.0CNA v3.10.5%2024-03-26Fix
CVE-2023-47873WP Child Theme Generator WordPress plugin arbitrary file upload7.2NVD v3.12.3%2024-03-26NucleiFix
CVE-2023-47846WP Githuber MD WordPress plugin arbitrary file upload7.2NVD v3.10.6%2024-03-26Fix
CVE-2023-47842CataBlog WordPress plugin arbitrary file upload9.1CNA v3.10.6%2024-03-26
CVE-2023-47150IBM Common Cryptographic Architecture denial of service7.5CNA v3.10.6%2024-03-26Fix
CVE-2023-45771Contact Form With Captcha WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2024-03-26
CVE-2023-44989CF7 Google Sheets Connector WordPress plugin sensitive data exposure via Debug Log7.5CNA v3.10.5%2024-03-26Fix
CVE-2023-41973Lack of input santization on Zscaler Client Connector enables arbitrary code execution7.3CNA v3.10.3%2024-03-26Fix
CVE-2023-41972Zscaler Client Connector revert password check incorrect type validation7.3CNA v3.10.2%2024-03-26Fix
CVE-2023-41969Zscaler Client Connector ZSATrayManager arbitrary file deletion7.3CNA v3.10.3%2024-03-26Fix
CVE-2023-39307Avada WordPress theme authenticated arbitrary file upload8.8v3.10.7%2024-03-26Fix
CVE-2023-38388Jupiter X Core WordPress plugin Unauth. arbitrary file upload9.8v3.11.7%2024-03-26Fix
CVE-2023-33855IBM Common Cryptographic Architecture information disclosure3.7CNA v3.10.5%2024-03-26Fix
CVE-2023-33322Front End Users WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2024-03-26Fix
CVE-2023-32237Auth. stored cross-site scripting (XSS) vulnerability in TheGem theme by CodexThemes5.4CNA v3.10.4%2024-03-26Fix
CVE-2023-29386Manager for Icomoon WordPress plugin arbitrary file upload9.1CNA v3.10.8%2024-03-26Exploit codeFix
CVE-2023-28787Quiz And Survey Master WordPress plugin unauthenticated SQL injection9.3CNA v3.12.0%2024-03-26NucleiFix
CVE-2023-28687Glaze Blog Lite WordPress theme cross-site scripting7.1CNA v3.10.5%2024-03-26Fix
CVE-2023-27630Community by PeepSo WordPress plugin server information disclosure5.3CNA v3.10.5%2024-03-26Fix
CVE-2023-27459User Registration WordPress plugin authenticated PHP object injection8.8v3.10.6%2024-03-26Fix
CVE-2023-27440Toolset Types WordPress plugin authenticated arbitrary file upload7.2CNA v3.10.8%2024-03-26Fix
CVE-2023-25965Upload Resume WordPress plugin sensitive data exposure5.9CNA v3.10.5%2024-03-26
CVE-2023-23991Booking Calendar WordPress plugin SQL injection7.6CNA v3.10.5%2024-03-26Fix
CVE-2023-23656MainWP File Uploader Extension WordPress plugin unauthenticated arbitrary file upload10.0CNA v3.10.8%2024-03-26Fix
CVE-2023-7251User Submitted Posts WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.3%2024-03-26Fix
CVE-2023-7232Backup and Restore WordPress plugin unauthenticated sensitive data exposure5.3CISA ADP v3.10.6%2024-03-26Fix
CVE-2023-6175Buffer copy without checking size of input (Classic buffer overflow) in Wireshark7.8CNA v3.13.5%2024-03-26Fix
CVE-2023-6091Theme Editor WordPress plugin arbitrary file upload7.2CNA v3.10.6%2024-03-26Fix
CVE-2023-48296OroPlatform storefront navigation history API information disclosure4.3CNA v3.10.4%2024-03-25Fix
CVE-2023-47430Readymedia buffer overflow7.5v3.10.6%2024-03-25
CVE-2023-45824OroPlatform's pinned entity creation form shows pages of other users4.3CNA v3.10.4%2024-03-25Fix
CVE-2023-37886RealHomes WordPress theme broken access control8.8v3.10.5%2024-03-25Fix
CVE-2023-37885RealHomes WordPress theme broken access control8.8v3.10.5%2024-03-25Fix
CVE-2023-33923Broken access control leading to arbitrary Plugin Activation in multiple HashThemes themes4.3CNA v3.10.5%2024-03-25Fix
CVE-2023-30480Educenter WordPress theme broken access control4.3CNA v3.10.4%2024-03-25Fix
CVE-2023-27608Points and Rewards for WooCommerce WordPress plugin broken access control9.8v3.10.5%2024-03-25Fix
CVE-2023-25039Google Maps CP WordPress plugin missing authorization Leading to Feedback Submission8.8v3.10.5%2024-03-25Fix
CVE-2023-22699MainWP Wordfence Extension WordPress plugin Subscriber+ arbitrary plugin activation vulnerability5.4CNA v3.10.3%2024-03-25Fix
CVE-2023-41099Atos Eviden Cardos API improper privilege management7.8CISA ADP v3.10.1%2024-03-22Fix
CVE-2023-23349Kaspersky Password Manager cleartext storage of sensitive information in memory2.2CNA v3.10.1%2024-03-22Fix
CVE-2023-5685XNIO denial of service7.5CNA v3.13.5%2024-03-22Fix
CVE-2023-4063Certain HP OfficeJet Pro Printers denial of service5.3CISA ADP v3.10.6%2024-03-22Fix
CVE-2023-52620Linux kernel nf_tables anonymous sets vulnerability7.8CNA v3.10.3%2024-03-21Fix
CVE-2023-49985oretnom23 School Fees Management System component /management/class cross-site scripting6.5CISA ADP v3.10.5%2024-03-21
CVE-2023-49984oretnom23 School Fees Management System component /management/settings cross-site scripting6.1CISA ADP v3.10.5%2024-03-21Exploit code
CVE-2023-49983oretnom23 School Fees Management System component /management/class cross-site scripting6.8CISA ADP v3.10.6%2024-03-21
CVE-2023-49982oretnom23 School Fees Management System component /admin/management/users missing authorization8.8CISA ADP v3.10.8%2024-03-21Exploit code
CVE-2023-49981oretnom23 School Fees Management System directory listing7.5v3.10.7%2024-03-21Exploit code
CVE-2023-49980Mayuri K Best Student Result Management System directory listing7.5NVD v3.10.7%2024-03-21
CVE-2023-49979Mayuri K Best Student Management System Customer Support System v1 directory listing7.5v3.10.7%2024-03-21Exploit code
CVE-2023-49978oretnom23 Customer Support System improper access control8.8v3.10.8%2024-03-21Exploit code
CVE-2023-49837David Artiss Code Embed resource exhaustion6.5CISA ADP v3.10.4%2024-03-21Fix
CVE-2023-48903Tramyardg Autoexpress stored cross-site scripting6.1CISA ADP v3.10.6%2024-03-21
CVE-2023-48902Tramyardg Autoexpress improper privilege management9.8CISA ADP v3.11.3%2024-03-21
CVE-2023-48901Tramyardg Autoexpress SQL injection9.8CISA ADP v3.11.0%2024-03-21
CVE-2023-47715IBM Storage Protect Plus Server improper access control4.3CNA v3.10.3%2024-03-21Fix
CVE-2023-42954Claris FileMaker Server privilege escalation4.9v3.10.4%2024-03-21Fix
CVE-2023-38825Vanderbilt REDCap SQL injection6.5NVD v3.11.0%2024-03-21
CVE-2023-35899IBM Cloud Pak for Automation CSV injection7.0CNA v3.10.8%2024-03-21Fix
CVE-2023-6500Shariff Wrapper WordPress plugin stored cross-site scripting5.4v3.10.4%2024-03-21Fix
CVE-2023-52229Word Replacer Pro WordPress plugin broken access control6.5CNA v3.10.5%2024-03-20
CVE-2023-51445GeoServer stored cross-site scripting (XSS) vulnerability in REST Resources API4.8CNA v3.10.5%2024-03-20Fix
CVE-2023-51444GeoServer arbitrary file upload vulnerability in REST Coverage Store API7.2CNA v3.11.9%2024-03-20Exploit codeFix
CVE-2023-50967latchset jose denial of service7.5CISA ADP v3.11.4%2024-03-20Fix
CVE-2023-46841Xen x86: Shadow stack vs exceptions from emulation stubs6.5CISA ADP v3.10.3%2024-03-20Fix
CVE-2023-46840Xen VT-d: Failure to quarantine devices in !HVM builds4.1CISA ADP v3.10.3%2024-03-20Fix
CVE-2023-46839Xen pci: Phantom functions assigned to incorrect contexts5.3CISA ADP v3.10.8%2024-03-20Fix
CVE-2023-45177IBM MQ denial of service5.3CNA v3.10.6%2024-03-20Fix
CVE-2023-41877GeoServer log file path traversal7.2CNA v3.10.8%2024-03-20Fix
CVE-2023-41038FirebirdSQL firebird server crash when using specific form of SET BIND statement7.5CNA v3.10.7%2024-03-20Fix
CVE-2023-35888IBM Security Verify Governance information disclosure5.9CNA v3.10.3%2024-03-20Fix
CVE-2023-7246System Dashboard WordPress plugin XSS via header injection5.4CISA ADP v3.10.8%2024-03-20NucleiFix
CVE-2023-50966Erlang-jose vulnerable to denial of service via large p2c value5.3CISA ADP v3.10.9%2024-03-19Fix
CVE-2023-50811Seling Visual Access Manager HTTP request smuggling6.5v3.10.5%2024-03-19
CVE-2023-44092Pandora FMS OS command injection7.6CNA v3.10.8%2024-03-19Fix
CVE-2023-44091Pandora FMS Unauth Time-based SQL injection7.5CNA v3.10.5%2024-03-19Fix
CVE-2023-44090Pandora FMS UnautH SQL injection6.8CNA v3.10.3%2024-03-19Fix
CVE-2023-42920Claris FileMaker Pro uncontrolled search path7.8v3.10.2%2024-03-19Fix
CVE-2023-41793Pandora FMS path traversal and Untrusted upload file6.7CNA v3.10.4%2024-03-19Fix
CVE-2023-40280OpenClinic GA path traversal7.5CISA ADP v3.10.8%2024-03-19
CVE-2023-40279OpenClinic GA path traversal7.5CISA ADP v3.13.4%2024-03-19Exploit code
CVE-2023-40278OpenClinic GA information disclosure7.5CISA ADP v3.13.0%2024-03-19Exploit code
CVE-2023-40277OpenClinic GA cross-site scripting6.1CISA ADP v3.10.5%2024-03-19
CVE-2023-40276OpenClinic GA information disclosure9.1CISA ADP v3.10.7%2024-03-19
CVE-2023-40275OpenClinic GA information disclosure9.1CISA ADP v3.10.9%2024-03-19
CVE-2023-32260Misinterpretation of Input vulnerability in OpenText™ Service Management Automation X (SMAX), OpenText™ Asset Management X (AMX), and OpenText™ Hybrid Cloud Management X (HCMX) products. The vulnerability could allow Input data manipulation.This issue affects Service Management Automation X (SMAX) v6.5CNA v3.10.4%2024-03-19
CVE-2023-32259OpenText Service Management Automation X (SMAX) insufficient access control granularity6.5CNA v3.10.3%2024-03-19
CVE-2023-6597CPython tempfile.TemporaryDirectory cleanup vulnerability7.8CNA v3.10.3%2024-03-19Fix
CVE-2023-5388Mozilla Firefox observable discrepancy6.5CISA ADP v3.10.8%2024-03-19Fix
CVE-2023-52619Linux kernel pstore RAM backend denial of service5.5v3.10.2%2024-03-18Fix
CVE-2023-52618Linux kernel RNBD server driver vulnerability5.3CISA ADP v3.10.7%2024-03-18Fix
CVE-2023-52617Linux kernel PCI switchtec driver vulnerability4.4CISA ADP v3.10.2%2024-03-18Fix
CVE-2023-52616Linux kernel MPI elliptic curve initialization vulnerability7.8CNA v3.10.2%2024-03-18Fix
CVE-2023-52615Linux kernel hwrng core vulnerability5.5v3.10.2%2024-03-18Fix
CVE-2023-52614Linux kernel devfreq transition statistics buffer overflow7.8CNA v3.10.3%2024-03-18Fix
CVE-2023-52613Linux kernel loongson2 thermal driver null pointer dereference5.5CISA ADP v3.10.2%2024-03-18Fix
CVE-2023-52612Linux kernel scomp crypto driver buffer overflow7.8CNA v3.10.3%2024-03-18Fix
CVE-2023-52611Linux kernel rtw88 SDIO Wi-Fi driver vulnerability5.5v3.10.2%2024-03-18Fix
CVE-2023-52610Linux kernel act_ct packet defragmentation memory leak7.5CNA v3.10.6%2024-03-18Fix
CVE-2023-52609Linux kernel binder driver race condition4.7v3.10.2%2024-03-18Fix
CVE-2023-52159Bizdelnick Gross A stack-based buffer overflow7.5v3.11.1%2024-03-18Fix
CVE-2023-41334astropy vulnerable to RCE in TranformGraph.to_dot_graph function8.4CNA v3.11.1%2024-03-18Fix
CVE-2023-40747A.K.I Software pmman.exe (Standard edition) path traversal7.5CISA ADP v3.11.3%2024-03-18
CVE-2023-40160A.K.I Software pmmls.exe Mailing List Search CGI path traversal3.7CISA ADP v3.11.0%2024-03-18
CVE-2023-39933A.K.I Software pmc.exe unrestricted file upload4.3CISA ADP v3.10.4%2024-03-18
CVE-2023-39223A.K.I Software pmc.exe CGIs included stored cross-site scripting5.4CISA ADP v3.10.3%2024-03-18
CVE-2023-7250Iperf3: Possible denial of service5.3CNA v3.10.9%2024-03-18Fix
CVE-2023-7236Backup Bolt WordPress plugin sensitive data exposure4.7CISA ADP v3.10.6%2024-03-18Fix
CVE-2023-7085Scalable Vector Graphics (SVG) WordPress plugin Author+ stored XSS via SVG5.4CISA ADP v3.10.4%2024-03-18
CVE-2023-6821Error Log Viewer WordPress plugin directory listing to sensitive data exposure6.5NVD v3.10.6%2024-03-18Fix
CVE-2023-51521Quiz And Survey Master WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.2%2024-03-16Fix
CVE-2023-51512Product Table by WBW WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-16Fix
CVE-2023-51510Export Media URLs WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-16Fix
CVE-2023-51491Depicter Slider WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-16Fix
CVE-2023-51489Crowdsignal Polls and Ratings WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-16Fix
CVE-2023-51487ARI Stream Quiz WordPress Quizzes Builder plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-16Fix
CVE-2023-51486WooCommerce PDF Invoice Builder WordPress plugin RedNao cross-site request forgery8.8v3.10.2%2024-03-16Fix
CVE-2023-51474TerraClassifieds WordPress plugin cross-site request forgery (CSRF) to account takeover8.8CNA v3.10.3%2024-03-16Fix
CVE-2023-51407Split Test For Elementor WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-16Fix
CVE-2023-36483MAS (a Carrier brand) MASmobile Classic authorization bypass6.5CNA v3.10.5%2024-03-16
CVE-2023-6525ElementsKit Elementor addons WordPress plugin Authenticated(Editor+) stored cross-site scripting4.8v3.10.4%2024-03-16Fix
CVE-2023-51699OS command injection for Fluid Users with JuicefsRuntime4.0CNA v3.10.6%2024-03-15Fix
CVE-2023-51525WP Simple Booking Calendar WordPress plugin cross-site request forgery (CSRF)5.3CISA ADP v3.10.2%2024-03-15Fix
CVE-2023-51522Paid Membership Subscriptions WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-15Fix
CVE-2023-51369Customize My Account for WooCommerce WordPress plugin cross-site request forgery (CSRF)8.8v3.10.3%2024-03-15Fix
CVE-2023-50898Image Optimizer, Resizer and CDN Sirv WordPress plugin broken access control8.8v3.10.4%2024-03-15Fix
CVE-2023-50886Legal Pages WordPress plugin CSRF + broken access control8.0v3.10.2%2024-03-15Fix
CVE-2023-50861HUSKY WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-03-15Fix
CVE-2023-47699IBM Secure Proxy cross-site scripting6.1CNA v3.10.3%2024-03-15Fix
CVE-2023-47162IBM Secure Proxy cross-site scripting6.1CNA v3.10.3%2024-03-15Fix
CVE-2023-47147IBM Secure Proxy external control of a file path5.9CNA v3.10.4%2024-03-15Fix
CVE-2023-46182IBM Secure Proxy cross-site scripting5.4CNA v3.10.4%2024-03-15Fix
CVE-2023-46181IBM Secure Proxy information disclosure4.0CNA v3.10.2%2024-03-15Fix
CVE-2023-46179IBM Secure Proxy information disclosure4.3CNA v3.10.3%2024-03-15Fix
CVE-2023-7248OpenText Vertica Management Console might be prone to bypass via crafted requests5.0CNA v3.10.3%2024-03-15Fix
CVE-2023-7060Missing Security Control in Zephyr OS IP Packet Handling8.6CNA v3.10.5%2024-03-15
CVE-2023-7017Sciener Kontrol Lux firmware update mechanism vulnerability9.8CISA ADP v3.10.3%2024-03-15
CVE-2023-7009Sciener Kontrol Lux Bluetooth Low Energy message processing vulnerability8.2CISA ADP v3.10.2%2024-03-15
CVE-2023-7007Sciener Gateway G2 server connection validation vulnerability8.2CISA ADP v3.10.4%2024-03-15
CVE-2023-7006Sciener Kontrol Lux unlockKey challenge process vulnerability9.1CISA ADP v3.10.5%2024-03-15
CVE-2023-7004Sciener TTLock App device verification improper verification of communication source6.5CISA ADP v3.10.2%2024-03-15
CVE-2023-7003Sciener Kontrol Lux pairing AES key nonce reuse6.8CISA ADP v3.10.3%2024-03-15
CVE-2023-6960Sciener TTLock App virtual key deletion vulnerability7.5CISA ADP v3.10.3%2024-03-15
CVE-2023-6725Red Hat OpenStack Platform tripleo-ansible: Bind keys are world readable5.5CNA v3.10.2%2024-03-15Fix
CVE-2023-50677NETGEAR DGND4000 improper privilege management8.8CISA ADP v3.10.3%2024-03-14
CVE-2023-50168Pegasystems Pega Platform XML external entity injection7.7CNA v3.10.4%2024-03-14Fix
CVE-2023-43490Intel(R) Xeon(R) D Processors with Intel(R) SGX incorrect calculation5.3CNA v3.10.2%2024-03-14Fix
CVE-2023-42938Apple iTunes logic flaw7.8v3.10.2%2024-03-14Fix
CVE-2023-42286EyouCMS template configuration file inclusion9.8CISA ADP v3.11.0%2024-03-14
CVE-2023-39368Intel(R) Processors protection mechanism failure6.5CNA v3.10.8%2024-03-14Fix
CVE-2023-38575Intel(R) Processors information disclosure5.5CNA v3.10.3%2024-03-14Fix
CVE-2023-35191Intel(R) SPS firmware resource exhaustion6.8CNA v3.10.5%2024-03-14Fix
CVE-2023-32666Intel 4th Generation Xeon Processors on-chip debug and test interface improper access control7.2CNA v3.10.2%2024-03-14Fix
CVE-2023-32633Intel(R) CSME installer software improper input validation6.7CNA v3.10.2%2024-03-14Fix
CVE-2023-32282Intel(R) Processors BIOS firmware for some race condition7.2CNA v3.10.1%2024-03-14
CVE-2023-28746Intel(R) Atom(R) Processors information disclosure6.5CNA v3.10.5%2024-03-14Fix
CVE-2023-28389Intel(R) CSME installer software some incorrect default permissions6.7CNA v3.10.1%2024-03-14Fix
CVE-2023-27502Intel(R) Local Manageability Service software sensitive information in log files3.3CNA v3.10.2%2024-03-14
CVE-2023-22655Intel Xeon Processors SGX and TDX privilege escalation6.1CNA v3.10.2%2024-03-14Fix
CVE-2023-52608Linux kernel arm_scmi mailbox driver race condition4.7v3.10.2%2024-03-13Fix
CVE-2023-50726Users with `create` but not `override` privileges can perform local sync in argo-cd6.4CNA v3.10.5%2024-03-13Fix
CVE-2023-43043IBM Maximo Application Suite information disclosure5.1CNA v3.10.2%2024-03-13Fix
CVE-2023-41505code-projects Student Enrollment Add Student's Profile Picture function arbitrary file upload9.8CISA ADP v3.10.8%2024-03-13
CVE-2023-41504code-projects Student Enrollment SQL injection8.8CISA ADP v3.10.7%2024-03-13
CVE-2023-38723IBM Maximo Asset Management cross-site scripting6.4CNA v3.10.3%2024-03-13Fix
CVE-2023-38536OpenText Exceed Turbo X HTML injection6.4CNA v3.10.4%2024-03-13
CVE-2023-38535OpenText Exceed Turbo X hard-coded cryptographic key4.7CNA v3.10.3%2024-03-13
CVE-2023-38534OpenText Exceed Turbo X improper authentication8.6CNA v3.10.5%2024-03-13
CVE-2023-36238Bagisto vulnerable to insecure direct object reference (IDOR)6.5CISA ADP v3.10.5%2024-03-13Fix
CVE-2023-32335IBM Maximo Application Suite information disclosure3.7CNA v3.10.5%2024-03-13Fix
CVE-2023-28517IBM Sterling Partner Engagement Manager cross-site scripting5.4CNA v3.10.3%2024-03-13Fix
CVE-2023-7015File Manager Pro WordPress plugin reflected cross-site scripting6.1CNA v3.10.5%2024-03-13Fix
CVE-2023-6969User Shortcodes Plus WordPress plugin insecure direct object reference4.3v3.10.5%2024-03-13
CVE-2023-6957Fluent Forms WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.4%2024-03-13Fix
CVE-2023-6954Download Manager WordPress plugin stored cross-site scripting5.4v3.10.5%2024-03-13Fix
CVE-2023-6880Visual Composer Premium WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.4%2024-03-13Fix
CVE-2023-6825File Manager and File Manager Pro (multiple Versions) directory traversal9.9v3.16.0%2024-03-13NucleiFix
CVE-2023-6809Custom fields shortcode WordPress plugin stored cross-site scripting5.4v3.10.4%2024-03-13
CVE-2023-6785Download Manager WordPress plugin missing authorization5.3CNA v3.10.5%2024-03-13Fix
CVE-2023-5663News Announcement Scroll WordPress plugin authenticated (Contributor+) SQL injection via shortcode8.8CNA v3.10.8%2024-03-13Fix
CVE-2023-4839WP Go Maps WordPress plugin authenticated (Administrator+) stored cross-site scripting4.8v3.10.3%2024-03-13Fix
CVE-2023-49785NextChat vulnerable to server-side request forgery and cross-site scripting9.1CNA v3.183.2%2024-03-12Nuclei
CVE-2023-49453RackTables reflected cross-site scripting6.1CISA ADP v3.10.6%2024-03-12
CVE-2023-48788Fortinet FortiClient EMS SQL injection9.3CNA v3.198.4%2024-03-12KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-47534Fortinet FortiClientEMS csv file vulnerability improper neutralization8.7CNA v3.11.1%2024-03-12Fix
CVE-2023-46717Fortinet FortiOS improper authentication6.7CNA v3.10.6%2024-03-12Fix
CVE-2023-45793Siemens Siveillance Control incorrect authorization5.5CNA v3.10.1%2024-03-12Fix
CVE-2023-43292Rems My Food Recipe cross-site scripting6.1CISA ADP v3.10.4%2024-03-12
CVE-2023-43279Broadcom tcpreplay mask_cidr6 component at cidr.c null pointer dereference6.5CISA ADP v3.10.7%2024-03-12Fix
CVE-2023-42790Fortinet FortiProxy A stack-based buffer overflow7.7CNA v3.11.1%2024-03-12Fix
CVE-2023-42789Fortinet FortiProxy A out-of-bounds write9.3CNA v3.13.3%2024-03-12Fix
CVE-2023-42308code-projects Exam Form Submission Manage Fastrack Subjects cross-site scripting6.1CISA ADP v3.10.3%2024-03-12
CVE-2023-42307code-projects Exam Form Submission cross-site scripting6.1v3.10.4%2024-03-12
CVE-2023-41842Fortinet FortiPortal format string6.3CNA v3.10.2%2024-03-12Fix
CVE-2023-41313Apache Doris: Timing Attack weakness9.8CISA ADP v3.11.0%2024-03-12Fix
CVE-2023-36554Fortinet FortiManager improper access control7.7CNA v3.10.8%2024-03-12Fix
CVE-2023-30968Palantir com.palantir.acme.gaia:gaia unrestricted file upload6.8CNA v3.10.5%2024-03-12
CVE-2023-7072Post Grid Combo 36+ Gutenberg Blocks WordPress plugin information exposure7.5CNA v3.10.6%2024-03-12Fix
CVE-2023-6814Information exposure vulnerability in Cosminexus Component Container5.6CNA v3.10.2%2024-03-12Fix
CVE-2023-5410HP PC BIOS observable discrepancy8.2CISA ADP v3.10.2%2024-03-12
CVE-2023-4731LadiApp init_endpoint function cross-site request forgery4.3v3.10.3%2024-03-12Fix
CVE-2023-4729LadiApp WordPress plugin cross-site request forgery4.3v3.10.2%2024-03-12
CVE-2023-4728LadiApp WordPress plugin unauthorized access5.4v3.10.3%2024-03-12
CVE-2023-4629LadiApp WordPress plugin cross-site request forgery via save_config4.3v3.10.2%2024-03-12
CVE-2023-4628LadiApp WordPress plugin cross-site request forgery via ladiflow_save_hook4.3CNA v3.10.2%2024-03-12
CVE-2023-4627LadiApp WordPress plugin missing authorization via save_config4.3CNA v3.10.3%2024-03-12
CVE-2023-4626LadiApp WordPress plugin unauthorized access4.3CNA v3.10.3%2024-03-12Fix
CVE-2023-52498Linux kernel sleep improper locking5.5v3.10.2%2024-03-11Fix
CVE-2023-52495Linux kernel pmic_glink_altmode out-of-bounds write7.8v3.10.3%2024-03-11Fix
CVE-2023-52493Linux kernel MHI host bus driver improper locking5.5v3.10.2%2024-03-11Fix
CVE-2023-52492Linux kernel DMA engine channel unregistration null pointer dereference4.4CISA ADP v3.10.3%2024-03-11Fix
CVE-2023-52490Linux kernel page migration null pointer dereference5.5v3.10.3%2024-03-11Fix
CVE-2023-52489Linux kernel sparse memory section usage race condition4.7v3.10.3%2024-03-11Fix
CVE-2023-52488Linux kernel SC16IS7XX serial FIFO vulnerability5.5v3.10.3%2024-03-11Fix
CVE-2023-52487Linux kernel mlx5e TC peer flow lists null pointer dereference5.5v3.10.3%2024-03-11Fix
CVE-2023-7247Login as User or Customer WordPress plugin admin account takeover4.9CISA ADP v3.10.6%2024-03-11
CVE-2023-6444Seriously Simple Podcasting WordPress plugin unauthenticated Administrator email disclosure5.3CISA ADP v3.12.5%2024-03-11NucleiExploit codeFix
CVE-2023-50015An issue was discovered in Grandstream GXP14XX 1.0.8.9 and GXP16XX 1.0.7.13, allows remote attackers to escalate privileges via incorrect access control using an end-user session-identity token.8.8CISA ADP v3.10.4%2024-03-09
CVE-2023-49341Newland Nquire 1000 Interactive Kiosk backup.htm vulnerability7.5CISA ADP v3.10.4%2024-03-09
CVE-2023-49340Newland Nquire 1000 Interactive Kiosk web management portal authentication bypass9.8CISA ADP v3.10.9%2024-03-09
CVE-2023-46427gpac null pointer dereference9.8CISA ADP v3.11.1%2024-03-09
CVE-2023-46426gpac heap-based buffer overflow8.8CISA ADP v3.10.9%2024-03-09
CVE-2023-47221QNAP Photo Station path traversal5.5CNA v3.10.5%2024-03-08Fix
CVE-2023-34980QNAP QTS and QuTS hero OS command injection5.9CNA v3.10.9%2024-03-08Fix
CVE-2023-32969QNAP Systems QuTScloud Network and Virtual Switch4.9CNA v3.10.3%2024-03-08Fix
CVE-2023-32264OpenText Documentum D2 missing WebSocket origin validation5.8CNA v3.10.2%2024-03-08
CVE-2023-28826Apple macOS information disclosure5.5v3.10.3%2024-03-08Fix
CVE-2023-51786Lustre improper access control9.1CISA ADP v3.10.5%2024-03-07
CVE-2023-51395Z-Wave S0 Decryption vulnerability in End Devices8.8CNA v3.10.3%2024-03-07
CVE-2023-51281oretnom23 Customer Support System cross-site scripting5.4CISA ADP v3.10.5%2024-03-07Exploit code
CVE-2023-49989Pratham-jaiswal Hotel Booking Management System SQL injection9.8CISA ADP v3.10.8%2024-03-07Exploit code
CVE-2023-49988Pratham-jaiswal Hotel Booking Management System SQL injection7.5CISA ADP v3.10.7%2024-03-07Exploit code
CVE-2023-49987oretnom23 School Fees Management System component /management/term cross-site scripting5.4CISA ADP v3.10.4%2024-03-07
CVE-2023-49986oretnom23 School Fees Management System component /admin/parent cross-site scripting4.7CISA ADP v3.10.5%2024-03-07
CVE-2023-48725NETGEAR RAX30 JSON Parsing getblockschedule functionality stack-based buffer overflow8.8v3.119.5%2024-03-07Fix
CVE-2023-47415Cypress Ctm-200 OS command injection7.5CISA ADP v3.113.8%2024-03-07
CVE-2023-46172IBM DS8900F HMC authentication bypass5.6CNA v3.10.5%2024-03-07Fix
CVE-2023-46171IBM DS8900F information disclosure4.3CNA v3.10.4%2024-03-07Fix