CVE-2023 list

CVE-2023 records published after 2023

Page six of eight: records 5,001 to 6,000 of the 7,334 published after 2023, newest first. The first page carries the figures for After 2023.

CVE-2023 records published after 2023, newest first: records 5,001 to 6,000 of 7,334
CVE Summary CVSS EPSS Published Signals
CVE-2023-46170IBM DS8900F information disclosure6.5CNA v3.10.5%2024-03-07Fix
CVE-2023-46169IBM DS8900F HMC vulnerability6.5CNA v3.10.5%2024-03-07Fix
CVE-2023-42662JFrog Artifactory Improper SSO Mechanism may lead to Exposure of Access Tokens9.3CNA v3.10.5%2024-03-07Fix
CVE-2023-42661JFrog Artifactory improper input validation leads to arbitrary file write7.2CNA v3.10.9%2024-03-07Fix
CVE-2023-42509JFrog Artifactory sensitive data leakage in Repository configuration process6.6CNA v3.10.4%2024-03-07Fix
CVE-2023-41503code-projects Student Enrollment code injection9.8CISA ADP v3.10.6%2024-03-07
CVE-2023-41015code-projects Online Job Portal SQL injection5.5CISA ADP v3.10.3%2024-03-07
CVE-2023-41014code-projects Online Job Portal SQL injection9.8v3.10.6%2024-03-07
CVE-2023-33676oretnom23 Lost and Found Information System SQL injection8.4CISA ADP v3.10.7%2024-03-07
CVE-2023-52607Linux kernel powerpc page table cache null pointer dereference5.5CISA ADP v3.10.2%2024-03-06Fix
CVE-2023-52606Linux kernel powerpc vector instruction emulation vulnerability7.8CNA v3.10.2%2024-03-06Fix
CVE-2023-52604Linux kernel JFS block allocation vulnerability7.8CNA v3.10.3%2024-03-06Fix
CVE-2023-52603Linux kernel UBSAN improper array index validation7.8CNA v3.10.3%2024-03-06Fix
CVE-2023-52602Linux kernel JFS directory search out-of-bounds read7.8CNA v3.10.2%2024-03-06Fix
CVE-2023-52601Linux kernel JFS block allocation vulnerability7.8CNA v3.10.2%2024-03-06Fix
CVE-2023-52600Linux kernel JFS inode eviction use-after-free7.8CNA v3.10.3%2024-03-06Fix
CVE-2023-52599Linux kernel jfs improper array index validation7.8CNA v3.10.3%2024-03-06Fix
CVE-2023-52598Linux kernel s390 ptrace floating point control vulnerability7.1v3.10.2%2024-03-06Fix
CVE-2023-52597Linux kernel KVM s390 floating point control vulnerability4.0CISA ADP v3.10.2%2024-03-06Fix
CVE-2023-52596Linux kernel sysctl subsystem vulnerability5.5v3.10.2%2024-03-06Fix
CVE-2023-52595Linux kernel rt2x00 Wi-Fi driver deadlock5.5v3.10.2%2024-03-06Fix
CVE-2023-52594Linux kernel ath9k Wi-Fi driver out-of-bounds read7.8v3.10.2%2024-03-06Fix
CVE-2023-52593Linux kernel wfx Wi-Fi driver null pointer dereference5.5v3.10.2%2024-03-06Fix
CVE-2023-52591Linux kernel reiserfs rename handling improper locking7.8CNA v3.10.2%2024-03-06Fix
CVE-2023-52590Linux kernel OCFS2 rename handling improper locking7.8CNA v3.10.2%2024-03-06Fix
CVE-2023-52589Linux kernel rkisp1 media driver race condition4.7v3.10.2%2024-03-06Fix
CVE-2023-52588In the Linux kernel, the following vulnerability has been resolved: f2fs: fix to tag gcing flag on page during block migration It needs to add missing gcing flag on page during block migration, in order to garantee migrated data be persisted during checkpoint, otherwise out-of-order persistency be7.3CNA v3.10.3%2024-03-06Fix
CVE-2023-52587Linux kernel IPoIB multicast list handling vulnerability5.5v3.10.3%2024-03-06Fix
CVE-2023-52586Linux kernel MSM DPU vblank IRQ control race condition7.8CNA v3.10.2%2024-03-06Fix
CVE-2023-52585Linux kernel AMDGPU RAS error query null pointer dereference5.5CISA ADP v3.10.3%2024-03-06Fix
CVE-2023-52584Linux kernel MediaTek SPMI driver use-after-free3.8CISA ADP v3.10.6%2024-03-06Fix
CVE-2023-52583Linux kernel ceph deadlock5.5v3.10.2%2024-03-06Fix
CVE-2023-50740Apache Linkis DataSource: DataSource module Oracle SQL Database Password Logged5.3CISA ADP v3.10.9%2024-03-06Fix
CVE-2023-50716eProsima Fast-DDS invalid DATA_FRAG Submessage causes a bad-free error9.7CNA v3.10.7%2024-03-06Fix
CVE-2023-50167Pegasystems Pega Platform cross-site scripting5.4CNA v3.10.3%2024-03-06Fix
CVE-2023-49977oretnom23 Customer Support System A cross-site scripting5.4CISA ADP v3.10.5%2024-03-06Exploit code
CVE-2023-49976oretnom23 Customer Support System A cross-site scripting5.4CISA ADP v3.10.5%2024-03-06Exploit code
CVE-2023-49974oretnom23 Customer Support System A cross-site scripting6.1CISA ADP v3.10.5%2024-03-06
CVE-2023-49973oretnom23 Customer Support System A cross-site scripting6.1v3.10.5%2024-03-06Exploit code
CVE-2023-49971oretnom23 Customer Support System A cross-site scripting6.1NVD v3.10.4%2024-03-06
CVE-2023-48703SAML authentication bypass vulnerability in RobotsAndPencils/go-saml7.5CNA v3.10.6%2024-03-06
CVE-2023-43318TP-Link Tl-sg2210p privilege escalation8.8v3.11.1%2024-03-06Exploit code
CVE-2023-38946Multilaser RE160 Firmware improper access control8.8v3.10.8%2024-03-06
CVE-2023-38945Multilaser RE160V improper access control9.8v3.11.0%2024-03-06
CVE-2023-38944Multilaser RE160V Firmware improper privilege management9.8v3.115.5%2024-03-06
CVE-2023-33677oretnom23 Lost and Found Information System SQL injection7.5v3.10.4%2024-03-06
CVE-2023-52432Samsung Mobile Devices IpcTxSndSetLoopbackCtrl in libsec-ril improper input validation5.9CNA v3.10.2%2024-03-05Fix
CVE-2023-49970oretnom23 Customer Support System SQL injection9.8CISA ADP v3.10.8%2024-03-05Exploit code
CVE-2023-49969oretnom23 Customer Support System SQL injection4.3CISA ADP v3.10.5%2024-03-05
CVE-2023-49968oretnom23 Customer Support System SQL injection7.3CISA ADP v3.10.5%2024-03-05Exploit code
CVE-2023-49548oretnom23 Customer Support System SQL injection8.8CISA ADP v3.10.8%2024-03-05Exploit code
CVE-2023-49547oretnom23 Customer Support System SQL injection9.8CISA ADP v3.11.1%2024-03-05Exploit code
CVE-2023-49546oretnom23 Customer Support System SQL injection8.8CISA ADP v3.10.8%2024-03-05
CVE-2023-48644Eptura Archibus cross-site scripting6.1CISA ADP v3.10.3%2024-03-05
CVE-2023-45600AiLux imx6 bundle insufficient session expiration9.8NVD v3.10.4%2024-03-05
CVE-2023-45599A CWE-646 “Reliance on File Name or Extension of Externally-Supplied File” vulnerability in the “iec61850” functionality of the web application allows a remote authenticated attacker to upload any arbitrary type of file into the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-8.8NVD v3.10.2%2024-03-05
CVE-2023-45598AiLux imx6 bundle forced browsing5.3NVD v3.10.5%2024-03-05
CVE-2023-45597AiLux imx6 bundle CSV injection9.0NVD v3.10.4%2024-03-05
CVE-2023-45596AiLux imx6 bundle forced browsing5.3NVD v3.10.5%2024-03-05
CVE-2023-45595AiLux imx6 bundle unrestricted file upload8.8NVD v3.10.4%2024-03-05
CVE-2023-45594AiLux imx6 bundle files accessible to external parties6.8NVD v3.10.3%2024-03-05
CVE-2023-45593AiLux imx6 bundle incomplete denylist6.8NVD v3.10.3%2024-03-05
CVE-2023-45592AiLux imx6 bundle execution with unnecessary privileges9.8NVD v3.10.7%2024-03-05
CVE-2023-45591AiLux imx6 bundle heap-based buffer overflow8.8NVD v3.10.7%2024-03-05
CVE-2023-45290Memory exhaustion in multipart form parsing in net/textproto and net/HTTP6.5CISA ADP v3.11.2%2024-03-05Fix
CVE-2023-45289Incorrect forwarding of sensitive headers and cookies on HTTP redirect in net/http4.3CISA ADP v3.11.1%2024-03-05Fix
CVE-2023-42419Improper Management of Cryptographic Keys in the Maintenance Server in QCOW Air-Gapped Distribution3.8CNA v3.10.1%2024-03-05Fix
CVE-2023-26282IBM Watson CP4D Data Stores external control of a file path4.2CNA v3.10.2%2024-03-05Fix
CVE-2023-25681IBM Spectrum Virtualize CIM interface vulnerability5.3CNA v3.10.6%2024-03-05Fix
CVE-2023-7103Authentication bypass in ZKSoftware's UFace 59.8CNA v3.10.6%2024-03-05
CVE-2023-5457AiLux imx6 bundle Django web application debug mode vulnerability9.8NVD v3.10.6%2024-03-05
CVE-2023-5456AiLux imx6 bundle hard-coded credentials9.8NVD v3.10.6%2024-03-05
CVE-2023-49602OpenHarmony arkui has a type confusion2.9CNA v3.10.1%2024-03-04Fix
CVE-2023-46708OpenHarmony wlan has a use-after-free4.3CNA v3.10.2%2024-03-04Fix
CVE-2023-43553Qualcomm Snapdragon use of out-of-range pointer offset in WLAN host9.8CNA v3.10.4%2024-03-04Fix
CVE-2023-43552Qualcomm Snapdragon use-after-free in WLAN Host Communication9.8CNA v3.10.4%2024-03-04Fix
CVE-2023-43550Qualcomm Snapdragon integer overflow or wraparound in Core services7.8CNA v3.10.1%2024-03-04Fix
CVE-2023-43549Qualcomm Snapdragon stack-based buffer overflow in WLAN HAL8.4CNA v3.10.1%2024-03-04Fix
CVE-2023-43548Qualcomm Snapdragon buffer copy without checking size of input in Video7.3CNA v3.10.3%2024-03-04Fix
CVE-2023-43547Qualcomm Snapdragon use-after-free in Automotive Multimedia8.4CNA v3.10.1%2024-03-04Fix
CVE-2023-43546Qualcomm Snapdragon use-after-free in Automotive Multimedia8.4CNA v3.10.1%2024-03-04Fix
CVE-2023-43541Qualcomm Snapdragon null pointer dereference in Windows Graphics8.4CNA v3.10.1%2024-03-04Fix
CVE-2023-43540Qualcomm Snapdragon buffer copy without checking size of input in Bluetooth host8.4CNA v3.10.1%2024-03-04Fix
CVE-2023-43539Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.3%2024-03-04Fix
CVE-2023-41829Motorola Phones improper export of Android application components5.0CNA v3.10.2%2024-03-04Fix
CVE-2023-41827Motorola Phones improper export of Android application components5.1CNA v3.10.2%2024-03-04Fix
CVE-2023-38362IBM CICS TX information disclosure5.3CNA v3.10.5%2024-03-04Fix
CVE-2023-38360IBM CICS TX cross-site scripting6.1CNA v3.10.3%2024-03-04Fix
CVE-2023-33105Qualcomm Snapdragon configuration issue in WLAN host and firmware7.5CNA v3.10.8%2024-03-04Exploit codeFix
CVE-2023-33104Qualcomm Snapdragon improper input validation in Multi-Mode Call Processor7.5CNA v3.10.3%2024-03-04Fix
CVE-2023-33103Qualcomm Snapdragon improper input validation in Multi-Mode Call Processor7.5CNA v3.10.3%2024-03-04Fix
CVE-2023-33096Qualcomm Snapdragon reachable assertion in Multi-Mode Call Processor7.5CNA v3.10.3%2024-03-04Fix
CVE-2023-33095Qualcomm Snapdragon reachable assertion in Multi-Mode Call Processor7.5CNA v3.10.3%2024-03-04Fix
CVE-2023-33090Qualcomm Snapdragon buffer over-read in Audio5.5CNA v3.10.1%2024-03-04Fix
CVE-2023-33086Improper Release of Memory before Removing Last Reference in Data Modem7.5CNA v3.10.3%2024-03-04Fix
CVE-2023-33084Qualcomm Snapdragon Improper Release of Memory before Removing Last Reference in Data Modem7.5CNA v3.10.3%2024-03-04Fix
CVE-2023-33078Qualcomm Snapdragon buffer over-read in DSP services5.1CNA v3.10.1%2024-03-04Fix
CVE-2023-33066Qualcomm Snapdragon use of out-of-range pointer offset in Audio8.4CNA v3.10.1%2024-03-04Fix
CVE-2023-32331IBM Connect:Express for UNIX denial of service7.5CNA v3.10.7%2024-03-04Fix
CVE-2023-28582Qualcomm Snapdragon buffer copy without checking size of input in Data Modem9.8CNA v3.10.4%2024-03-04Fix
CVE-2023-28578Qualcomm Snapdragon improper input validation in services9.3CNA v3.10.1%2024-03-04Fix
CVE-2023-25176OpenHarmony pasteboard has an out-of-bounds read2.9CNA v3.10.1%2024-03-04Fix
CVE-2023-6241Mali GPU Kernel Driver allows improper GPU memory processing operations7.0v3.10.7%2024-03-04Exploit codeFix
CVE-2023-6143Mali GPU Kernel Driver allows improper GPU memory processing operations8.4CISA ADP v3.10.2%2024-03-04Fix
CVE-2023-6068On affected 7130 Series FPGA platforms running MOS and recent versions of the MultiAccess FPGA, application of ACL’s may result in incorrect operation of the configured ACL for a port resulting in some packets that should be denied being permitted and some3.1CNA v3.10.3%2024-03-04
CVE-2023-5451Forcepoint Next Generation Firewall Security Management Center cross-site scripting6.1CNA v3.10.3%2024-03-04Fix
CVE-2023-4479Stored XSS vulnerability in M-Files Web7.3CNA v3.10.4%2024-03-04Fix
CVE-2023-47745IBM MQ Container information disclosure6.2CNA v3.10.1%2024-03-03Fix
CVE-2023-47742IBM QRadar Suite information dislosure5.9CNA v3.10.2%2024-03-03Fix
CVE-2023-43054IBM Engineering Test Management cross-site scripting6.4CNA v3.10.3%2024-03-03Fix
CVE-2023-28512IBM Watson CP4D Data Stores improper input validation5.9CNA v3.10.5%2024-03-03Fix
CVE-2023-27291IBM Watson CP4D Data Stores information disclosure4.5CNA v3.10.3%2024-03-03Fix
CVE-2023-52582Linux kernel netfs folio writeback handling vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52581Linux kernel nf_tables memory leak6.3CISA ADP v3.10.3%2024-03-02Fix
CVE-2023-52580Linux kernel flow dissector PTP handling vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52578Linux kernel bridge frame statistics race condition7.0v3.10.2%2024-03-02Fix
CVE-2023-52577Linux kernel DCCP ICMP error handler vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52576Linux kernel IMA kexec buffer handling use-after-free5.5CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52574Linux kernel team null pointer dereference7.8CNA v3.10.2%2024-03-02Fix
CVE-2023-52573Linux kernel RDS socket connection handler null pointer dereference5.5v3.10.2%2024-03-02Fix
CVE-2023-52572Linux kernel CIFS client demultiplex thread use-after-free7.8CNA v3.10.2%2024-03-02Fix
CVE-2023-52571Linux kernel rk817 power supply driver memory leak7.1CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52570Linux kernel vfio/mdev null pointer dereference5.5v3.10.2%2024-03-02Fix
CVE-2023-52569Linux kernel Btrfs delayed directory index handling reachable assertion5.5v3.10.2%2024-03-02Fix
CVE-2023-52568Linux kernel SGX enclave page fault handler null pointer dereference4.7v3.10.2%2024-03-02Fix
CVE-2023-52567Linux kernel 8250 serial driver null pointer dereference5.5v3.10.2%2024-03-02Fix
CVE-2023-52566Linux kernel nilfs2 use-after-free5.5CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52565Linux kernel uvcvideo driver out-of-bounds read7.1CNA v3.10.2%2024-03-02Fix
CVE-2023-52564Linux kernel n_gsm tty driver null pointer dereference5.5v3.10.2%2024-03-02Fix
CVE-2023-52563Linux kernel Meson DRM hpd_notify callback memory leak5.5v3.10.2%2024-03-02Fix
CVE-2023-52562Linux kernel slab cache management vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52561Linux kernel SDM845 DB845c framebuffer memory reservation denial of service5.5CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52560Linux kernel mm/damon/vaddr-test memory leak5.5v3.10.3%2024-03-02Fix
CVE-2023-52559In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Avoid memory allocation in iommu_suspend() The iommu_suspend() syscore suspend callback is invoked with IRQ disabled. Allocating memory with the GFP_KERNEL flag may re-enable IRQs during the suspend callback, which can5.5v3.10.2%2024-03-02Fix
CVE-2023-52532In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type (probably from a newer hardware), still free the SKB, update the queue tail, etc., otherwise the accounting will be wrong. Also, TX errors can be triggered by5.5v3.10.2%2024-03-02Fix
CVE-2023-52531Linux kernel iwlwifi mvm driver out-of-bounds write7.8v3.10.2%2024-03-02Fix
CVE-2023-52530Linux kernel mac80211 GTK rekey handling use-after-free8.8CNA v3.10.3%2024-03-02Fix
CVE-2023-52529Linux kernel Sony HID driver memory leak6.0CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52528Linux kernel smsc75xx USB Ethernet driver vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52527Linux kernel IPv4 and IPv6 packet append handling vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52526Linux kernel EROFS LZMA deduplication memory leak5.5v3.10.2%2024-03-02Fix
CVE-2023-52525Linux kernel mwifiex Wi-Fi driver out-of-bounds read7.1v3.10.2%2024-03-02Fix
CVE-2023-52524Linux kernel NFC LLCP device list vulnerability7.8v3.10.2%2024-03-02Fix
CVE-2023-52523Linux kernel BPF sockmap egress redirect null pointer dereference7.8CNA v3.10.2%2024-03-02Fix
CVE-2023-52522In the Linux kernel, the following vulnerability has been resolved: net: fix possible store tearing in neigh_periodic_work() While looking at a related syzbot report involving neigh_periodic_work(), I found that I forgot to add an annotation when deleting an RCU protected item from a list. Reader8.8CNA v3.10.3%2024-03-02Fix
CVE-2023-52520Linux kernel think-lmi driver vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52519Linux kernel intel-ish-hid IPC driver vulnerability7.1v3.10.2%2024-03-02Fix
CVE-2023-52518Linux kernel Bluetooth HCI codec handling memory leak5.5CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52517Linux kernel sun6i SPI DMA receive path race condition7.8CNA v3.10.2%2024-03-02Fix
CVE-2023-52516Linux kernel DMA debug subsystem vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52515Linux kernel SRP initiator driver use-after-free9.8CNA v3.10.6%2024-03-02Fix
CVE-2023-52513Linux kernel RDMA/siw null pointer dereference7.5CNA v3.10.7%2024-03-02Fix
CVE-2023-52512Linux kernel wpcm450 pin controller driver out-of-bounds write5.5CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52511Linux kernel sun6i SPI DMA receive path vulnerability5.3CISA ADP v3.10.8%2024-03-02Fix
CVE-2023-52510Linux kernel ca8210 use-after-free7.8v3.10.2%2024-03-02Fix
CVE-2023-52509Linux kernel ravb Ethernet driver use-after-free7.8CNA v3.10.2%2024-03-02Fix
CVE-2023-52508Linux kernel NVMe-FC transport null pointer dereference5.5CISA ADP v3.10.2%2024-03-02Fix
CVE-2023-52507Linux kernel NFC NCI protocol handling out-of-bounds read7.1v3.10.2%2024-03-02Fix
CVE-2023-52506Linux kernel LoongArch memory initialization null pointer dereference5.5v3.10.2%2024-03-02Fix
CVE-2023-52505Linux kernel Lynx 28G PHY driver vulnerability4.7v3.10.2%2024-03-02Fix
CVE-2023-52504Linux kernel x86 alternatives patching out-of-bounds read7.1v3.10.3%2024-03-02Fix
CVE-2023-52503Linux kernel amdtee use-after-free7.8CNA v3.10.3%2024-03-02Fix
CVE-2023-52502Linux kernel NFC LLCP socket lookup use-after-free8.8CNA v3.10.2%2024-03-02Fix
CVE-2023-52501Linux kernel ftrace ring buffer out-of-bounds read7.1v3.10.2%2024-03-02Fix
CVE-2023-52500Linux kernel pm80xx SCSI driver vulnerability5.5v3.10.2%2024-03-02Fix
CVE-2023-52499Linux kernel PowerPC 47x syscall return denial of service5.5v3.10.2%2024-03-02Fix
CVE-2023-6326Master Slider - Responsive Touch Slider WordPress plugin cross-site request forgery4.3v3.10.3%2024-03-02Fix
CVE-2023-52558OpenBSD and m_split network buffer kernel crash7.5CISA ADP v3.10.7%2024-03-01Fix
CVE-2023-52557OpenBSD invalid l2tp message npppd crash7.5CISA ADP v3.10.6%2024-03-01Fix
CVE-2023-52556OpenBSD pf state race condition kernel crash6.2CISA ADP v3.10.1%2024-03-01Fix
CVE-2023-52555mongo-express cross-site request forgery6.1CISA ADP v3.10.2%2024-03-01
CVE-2023-50378Apache Ambari: Various XSS problems6.1CISA ADP v3.11.2%2024-03-01Fix
CVE-2023-50324IBM Cognos Command Center information disclosure5.3CNA v3.10.4%2024-03-01Fix
CVE-2023-50312IBM WebSphere Application Server Liberty information disclosure5.3CNA v3.10.6%2024-03-01Fix
CVE-2023-50305IBM Engineering Requirements Management information disclosure5.1CNA v3.10.2%2024-03-01Fix
CVE-2023-49545oretnom23 Customer Support System A directory listing7.5CISA ADP v3.10.8%2024-03-01
CVE-2023-49544oretnom23 Customer Support System A local file inclusion4.9CISA ADP v3.10.7%2024-03-01Exploit code
CVE-2023-49543Bookstore Management System improper access control9.8CISA ADP v3.11.0%2024-03-01Exploit code
CVE-2023-49540oretnom23 Bookstore Management System cross-site scripting6.1CISA ADP v3.10.6%2024-03-01
CVE-2023-49539oretnom23 Bookstore Management System cross-site scripting6.1CISA ADP v3.10.6%2024-03-01
CVE-2023-48674Dell CPG BIOS improper null termination6.8CNA v3.10.5%2024-03-01Fix
CVE-2023-47716IBM FileNet Content Manager privilege escalation6.3CNA v3.10.4%2024-03-01Fix
CVE-2023-46951contribsys sidekiq XSS sidekiq-unique-jobs UI server6.1CISA ADP v3.10.5%2024-03-01Fix
CVE-2023-46950contribsys sidekiq XSS sidekiq-unique-jobs UI server6.1CISA ADP v3.10.6%2024-03-01Fix
CVE-2023-39254Dell DUP Framework uncontrolled search path6.7CNA v3.10.2%2024-03-01Fix
CVE-2023-38366IBM FileNet Content Manager directory traversal5.3CNA v3.10.8%2024-03-01Fix
CVE-2023-28949IBM Engineering Requirements Management cross-site request forgery6.5CNA v3.10.2%2024-03-01Fix
CVE-2023-28525IBM Engineering Requirements Management cross-site scripting4.8CNA v3.10.3%2024-03-01Fix
CVE-2023-7244Industrial Control Systems Network Protocol Parsers ethercat Zeek plugin out-of-bounds write9.8v3.10.8%2024-03-01Fix
CVE-2023-7243Industrial Control Systems Network Protocol Parsers ethercat Zeek plugin out-of-bounds write9.8v3.10.8%2024-03-01Fix
CVE-2023-7242Industrial Control Systems Network Protocol Parsers (ICSNPP) ethercat Zeek plugin out-of-bounds read8.2v3.10.5%2024-03-01Fix
CVE-2023-52497Linux kernel EROFS LZ4 decompression out-of-bounds write7.1CNA v3.10.3%2024-02-29Fix
CVE-2023-52494Linux kernel MHI host bus driver out-of-bounds write7.8v3.10.3%2024-02-29Fix
CVE-2023-52491Linux kernel mtk-jpeg use-after-free7.8CNA v3.10.3%2024-02-29Fix
CVE-2023-52486Linux kernel DRM page flip framebuffer handling vulnerability7.8CNA v3.10.2%2024-02-29Fix
CVE-2023-52485Linux kernel AMD display DMCUB deadlock5.5v3.10.2%2024-02-29Fix
CVE-2023-52484Linux kernel iommu/arm-smmu-v3 improper locking5.5v3.10.2%2024-02-29Fix
CVE-2023-52483Linux kernel MCTP routing use-after-free7.8CNA v3.10.2%2024-02-29Fix
CVE-2023-52482Linux kernel x86 SRSO mitigation out-of-bounds write7.8v3.10.3%2024-02-29Fix
CVE-2023-52481Linux kernel arm64 Cortex-A520 errata handling information disclosure4.7CISA ADP v3.10.6%2024-02-29Fix
CVE-2023-52480Linux kernel ksmbd session lookup race condition9.8CNA v3.10.5%2024-02-29Fix
CVE-2023-52479Linux kernel ksmbd oplock break handling use-after-free8.8CNA v3.10.6%2024-02-29Fix
CVE-2023-52478Linux kernel Logitech HID++ driver race condition8.8CNA v3.10.3%2024-02-29Fix
CVE-2023-52477Linux kernel USB hub BOS descriptor handling null pointer dereference5.5v3.10.2%2024-02-29Fix
CVE-2023-52476Linux kernel x86 LBR perf subsystem vulnerability5.5v3.10.2%2024-02-29Fix
CVE-2023-52475Linux kernel Powermate input driver use-after-free7.8v3.10.2%2024-02-29Fix
CVE-2023-51835TRENDnet TEW-822DRE command injection6.8CISA ADP v3.17.3%2024-02-29Emerging Threats
CVE-2023-51802oretnom23 Simple Student Attendance System cross-site scripting6.1v3.10.6%2024-02-29Exploit code
CVE-2023-51801oretnom23 Simple Student Attendance System SQL injection9.8v3.11.2%2024-02-29Exploit code
CVE-2023-51800School Fees Management System Project School Fees Management System1.0 cross-site scripting5.4v3.10.6%2024-02-29Exploit code
CVE-2023-51779Linux kernel Bluetooth socket ioctl handling use-after-free7.0CISA ADP v3.10.3%2024-02-29Fix
CVE-2023-51775JOSE4J denial of service via specifically crafted JWE6.5CISA ADP v3.10.9%2024-02-29Fix
CVE-2023-51774Json-jwt allows bypass of identity checks via a sign/encryption confusion attack8.4CISA ADP v3.10.2%2024-02-29Fix
CVE-2023-51773bacnet-stack buffer over-read9.1CISA ADP v3.11.1%2024-02-29
CVE-2023-51696Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-29Fix
CVE-2023-51531Thrive Automator WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-29Fix
CVE-2023-51530GS Logo Slider WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-29Fix
CVE-2023-51529HT Mega WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-29Fix
CVE-2023-51528GPT3 AI Content Writer WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-29Fix
CVE-2023-50905WP Activity Log WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.3%2024-02-29Fix
CVE-2023-50658JOSE2GO vulnerable to denial of service via large p2c value7.5v3.10.8%2024-02-29Fix
CVE-2023-50437Couchbase Server incorrect privilege assignment8.6CISA ADP v3.10.7%2024-02-29Fix
CVE-2023-50436Couchbase Server insufficiently protected credentials5.3CISA ADP v3.10.2%2024-02-29Fix
CVE-2023-49932Couchbase Server improper preservation of permissions5.4CISA ADP v3.10.5%2024-02-29Fix
CVE-2023-49931Couchbase Server improper access control9.8CISA ADP v3.10.9%2024-02-29Fix
CVE-2023-49930Couchbase Server improper access control9.8v3.10.9%2024-02-29Fix
CVE-2023-49337Concrete CMS stored XSS4.8v3.10.6%2024-02-29Fix
CVE-2023-48653Concrete CMS cross-site request forgery (CSRF)4.3v3.10.3%2024-02-29Fix
CVE-2023-48651Concrete CMS cross-site request forgery (CSRF)4.3v3.10.3%2024-02-29Fix
CVE-2023-48650Concrete CMS stored XSS in Layout Preset Name4.8v3.10.5%2024-02-29Fix
CVE-2023-47874Perfmatters WordPress plugin broken access control8.8v3.10.4%2024-02-29Fix
CVE-2023-47634Decidim has race condition in Endorsements3.1CNA v3.10.4%2024-02-29Fix
CVE-2023-45874Couchbase Server denial of service4.3v3.10.8%2024-02-29Fix
CVE-2023-44347Adobe InDesign CC 2023 memory corruption vulnerability IX5.5CNA v3.10.3%2024-02-29Fix
CVE-2023-44346Adobe InDesign CC 2023 memory corruption vulnerability VIII5.5CNA v3.10.3%2024-02-29Fix
CVE-2023-44345Adobe InDesign CC 2023 memory corruption vulnerability VII5.5CNA v3.10.3%2024-02-29Fix
CVE-2023-44344Adobe InDesign CC 2023 memory corruption vulnerability V5.5CNA v3.10.3%2024-02-29Fix
CVE-2023-44343Adobe InDesign CC 2023 memory corruption vulnerability III5.5CNA v3.10.3%2024-02-29Fix
CVE-2023-44342Adobe InDesign CC 2023 memory corruption vulnerability II5.5CNA v3.10.3%2024-02-29Fix
CVE-2023-44341Adobe InDesign CC 2023 memory corruption vulnerability I5.5CNA v3.10.3%2024-02-29Fix
CVE-2023-43769Couchbase Server Analytics RMI service vulnerability6.3CISA ADP v3.10.4%2024-02-29Fix
CVE-2023-41165Stormshield Network Security cross-site scripting4.8v3.10.4%2024-02-29Fix
CVE-2023-38372IBM Watson IoT Platform information disclosure5.9CNA v3.10.8%2024-02-29Fix
CVE-2023-38367IBM Cloud Pak for Automation authentication bypass6.5CNA v3.10.4%2024-02-29Fix
CVE-2023-37531A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform3.3CNA v3.10.4%2024-02-29Fix
CVE-2023-37530A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform3.0CNA v3.10.3%2024-02-29Fix
CVE-2023-37529A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform3.0CNA v3.10.3%2024-02-29Fix
CVE-2023-37495HCL Domino is susceptible to a weak cryptography5.9CNA v3.10.5%2024-02-29Fix
CVE-2023-34198Stormshield Network Security filtering slot improper access control7.3v3.10.5%2024-02-29Fix
CVE-2023-27545IBM Watson CloudPak for Data Data Stores information disclosure4.0CNA v3.10.2%2024-02-29Fix
CVE-2023-27151OpenCRX cross-site scripting6.1CISA ADP v3.10.5%2024-02-29
CVE-2023-25926IBM Security Guardium Key Lifecycle Manager XML external entity injection5.5CNA v3.11.4%2024-02-29Fix
CVE-2023-25921IBM Security Guardium Key Lifecycle Manager file upload8.5CNA v3.11.1%2024-02-29Fix
CVE-2023-7207GNU cpio path traversal4.9CNA v3.10.9%2024-02-29Fix
CVE-2023-7110code-projects Library Management System login.php SQL injection9.8v3.11.0%2024-02-29
CVE-2023-7109code-projects Library Management System login.php SQL injection9.8v3.11.0%2024-02-29
CVE-2023-7108code-projects E-Commerce Website user_signup.php cross-site scripting6.1v3.10.8%2024-02-29
CVE-2023-7107code-projects E-Commerce Website user_signup.php SQL injection9.8v3.10.9%2024-02-29
CVE-2023-7106code-projects E-Commerce Website SQL injection8.8v3.10.8%2024-02-29
CVE-2023-7105code-projects E-Commerce Website index_search.php SQL injection9.8v3.10.9%2024-02-29
CVE-2023-6923Matomo WordPress plugin reflected cross-site scripting via idsite6.1v3.10.5%2024-02-29Fix
CVE-2023-6881Fs: Fuse: Buffer overflow vulnerability in the Zephyr FS7.3CNA v3.10.4%2024-02-29
CVE-2023-6806Starbox WordPress plugin authenticated (Subscriber+) stored cross-site scripting via Job settings5.4v3.10.4%2024-02-29Fix
CVE-2023-6565InfiniteWP Client WordPress plugin unauthenticated sensitive information exposure5.9CNA v3.10.6%2024-02-29Fix
CVE-2023-6247OpenVPN 3 Core Library null pointer dereference6.5CISA ADP v3.10.8%2024-02-29Fix
CVE-2023-6132AVEVA Edge products uncontrolled search path element7.8v3.10.2%2024-02-29Fix
CVE-2023-6090Mollie Payments for WooCommerce WordPress plugin arbitrary file upload7.2NVD v3.10.6%2024-02-29Fix
CVE-2023-1841Honeywell MPA2 Web Application XSS8.1CNA v3.10.4%2024-02-29Fix
CVE-2023-52226Advanced Flamingo WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-28
CVE-2023-52223MailerLite WooCommerce integration WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-28Fix
CVE-2023-52048RuoYi cross-site scripting4.7CISA ADP v3.10.3%2024-02-28
CVE-2023-52047DedeCMS cross-site request forgery8.8CISA ADP v3.10.2%2024-02-28
CVE-2023-51692Customer Reviews for WooCommerce WordPress plugin broken access control4.3v3.10.3%2024-02-28Fix
CVE-2023-51683Easy PayPal Buy Now Button WordPress plugin cross-site request forgery (CSRF)8.8v3.10.2%2024-02-28Fix
CVE-2023-51681Duplicator WordPress plugin cross-site request forgery (CSRF)6.5CNA v3.10.3%2024-02-28Fix
CVE-2023-51533Ecwid Shopping Cart WordPress plugin cross-site request forgery (CSRF)6.1v3.10.2%2024-02-28Fix
CVE-2023-50737An input validation vulnerability in the SE menu allows an attacker to execute arbitrary code9.1CNA v3.11.0%2024-02-28Fix
CVE-2023-50736A vulnerability has been identified in the PostScript interpreter in various Lexmark devices9.0CNA v3.10.8%2024-02-28Fix
CVE-2023-50735A vulnerability has been identified in the PostScript interpreter in various Lexmark devices9.0CNA v3.10.8%2024-02-28Fix
CVE-2023-50734A vulnerability has been identified in the PostScript interpreter in various Lexmark devices9.0CNA v3.10.8%2024-02-28Fix
CVE-2023-50303IBM InfoSphere Information Server cross-site scripting6.1CNA v3.10.4%2024-02-28Fix
CVE-2023-49338Couchbase Server incorrect default permissions7.5CISA ADP v3.10.6%2024-02-28Fix
CVE-2023-45873Couchbase Server resource exhaustion6.5CISA ADP v3.10.7%2024-02-28Fix
CVE-2023-45859Missing permission checks on Hazelcast client protocol7.6CISA ADP v3.10.5%2024-02-28Fix
CVE-2023-25925IBM Security Guardium Key Lifecycle Manager command injection8.5CNA v3.11.4%2024-02-28Fix
CVE-2023-25922IBM Security Guardium Key Lifecycle Manager file upload4.3CNA v3.10.6%2024-02-28Fix
CVE-2023-6922Under Construction / Maintenance Mode from Acurax WordPress plugin sensitive information exposure6.5v3.10.5%2024-02-28
CVE-2023-6917Sgi Performance Co-pilot pcp: Unsafe use of directories allows pcp to root privilege escalation6.0CNA v3.10.2%2024-02-28Fix
CVE-2023-5617Hitachi Vantara Pentaho Data Integration and Analytics server error message vulnerability5.3v3.10.4%2024-02-28Fix
CVE-2023-51747Apache James SMTP DATA command handling improper input validation7.1CISA ADP v3.11.0%2024-02-27Fix
CVE-2023-51518Apache James server: Privilege escalation via JMX pre-authentication deserialisation9.8CISA ADP v3.11.2%2024-02-27Exploit codeFix
CVE-2023-50380Apache Ambari: Authenticated users could perform XXE to read arbitrary files on the server6.5v3.10.9%2024-02-27Fix
CVE-2023-50379Apache Ambari: Authenticated users could perform command injection to perform RCE8.8CISA ADP v3.11.1%2024-02-27Fix
CVE-2023-48682Acronis Cyber Protect 16 unit name stored cross-site scripting6.1CNA v3.00.3%2024-02-27Fix
CVE-2023-48681Acronis Cyber Protect 16 storage nodes search field cross-site scripting1.9CNA v3.00.3%2024-02-27Fix
CVE-2023-48680Acronis Cyber Protect 16 personal information exposure3.3CNA v3.00.2%2024-02-27Fix
CVE-2023-48679Acronis Cyber Protect 16 cross-site scripting3.1CNA v3.00.3%2024-02-27Fix
CVE-2023-48678Acronis Cyber Protect 16 incorrect default permissions5.5CNA v3.00.2%2024-02-27Fix
CVE-2023-41506code-projects Student Enrollment arbitrary file upload9.8CISA ADP v3.10.9%2024-02-27
CVE-2023-7203Smart Forms WordPress plugin Subscriber+ arbitrary Entry deletion6.1CISA ADP v3.10.2%2024-02-27Fix
CVE-2023-7202Fatal Error Notify WordPress plugin Subscriber+ Test error email Sending6.1CISA ADP v3.10.2%2024-02-27Fix
CVE-2023-7198WPDashboardNotes WordPress plugin Unauthorised deletion of Private Notes4.3CISA ADP v3.10.4%2024-02-27Fix
CVE-2023-7167Persian Fonts WordPress plugin Admin+ stored XSS6.1CISA ADP v3.10.4%2024-02-27
CVE-2023-7165JetBackup WordPress plugin directory listing Exposing Backups7.5CISA ADP v3.11.9%2024-02-27NucleiFix
CVE-2023-7115PageLayer WordPress plugin Admin+ stored XSS4.8NVD v3.10.4%2024-02-27Fix
CVE-2023-7033Mitsubishi Electric MELSEC iQ-R series CPU module Ethernet function vulnerability5.3CNA v3.10.8%2024-02-27
CVE-2023-7016Privilege escalation in SafeNet Authentication Client7.8CNA v3.10.3%2024-02-27Exploit codeFix
CVE-2023-6585JobSearch WP Job Board WordPress plugin arbitrary file upload to RCE7.5CISA ADP v3.10.6%2024-02-27Fix
CVE-2023-6584JobSearch WP Job Board WordPress plugin authentication bypass7.5CISA ADP v3.10.5%2024-02-27Fix
CVE-2023-5993Privilege escalation in SafeNet Authentication Client Installer7.8CNA v3.10.2%2024-02-27Fix
CVE-2023-52474In the Linux kernel, the following vulnerability has been resolved: IB/hfi1: Fix bugs with non-PAGE_SIZE-end multi-iovec user SDMA requests hfi1 user SDMA request processing has two bugs that can cause data corruption for user SDMA requests that have multiple payload iovecs where an iovec other th7.8CNA v3.10.3%2024-02-26Fix
CVE-2023-52473Linux kernel thermal zone registration null pointer dereference5.5v3.10.3%2024-02-26Fix
CVE-2023-52472Linux kernel RSA crypto driver null pointer dereference5.5v3.10.3%2024-02-26Fix
CVE-2023-52471Linux kernel ice null pointer dereference5.5v3.10.2%2024-02-26Fix
CVE-2023-52470Linux kernel Radeon display driver null pointer dereference5.5v3.10.3%2024-02-26Fix
CVE-2023-52468Linux kernel class use-after-free7.8v3.10.3%2024-02-26Fix
CVE-2023-52467Linux kernel syscon MFD driver null pointer dereference5.5v3.10.3%2024-02-26Fix
CVE-2023-52465Linux kernel SMB2 power supply charger driver null pointer dereference5.5v3.10.3%2024-02-26Fix
CVE-2023-49960Indu-sol Profinet-inspektor Nt path traversal7.5CISA ADP v3.10.7%2024-02-26
CVE-2023-49959Indu-sol Profinet-inspektor Nt command injection9.8CISA ADP v3.11.4%2024-02-26
CVE-2023-49114Qognify VMS Client Viewer local privilege escalation via DLL hijacking6.7CISA ADP v3.10.4%2024-02-26
CVE-2023-43051IBM Cognos Analytics cross-site scripting5.4CNA v3.10.6%2024-02-26Fix
CVE-2023-38359IBM Cognos Analytics cross-site scripting6.1CNA v3.10.7%2024-02-26Fix
CVE-2023-36237Bagisto cross-site request forgery8.8CISA ADP v3.10.4%2024-02-26Fix
CVE-2023-32344IBM Cognos Analytics cross-site request forgery4.3CNA v3.10.4%2024-02-26Fix
CVE-2023-30996IBM Cognos Analytics cross-origin resource sharing5.3CNA v3.10.4%2024-02-26Fix
CVE-2023-5775BackWPup WordPress plugin plaintext storage of Backup Destination password2.7v3.10.4%2024-02-26Fix
CVE-2023-52469Linux kernel drivers/amd/pm use-after-free7.8CNA v3.10.3%2024-02-25Fix
CVE-2023-52464Linux kernel ThunderX EDAC driver vulnerability7.8NVD v3.10.3%2024-02-23Fix
CVE-2023-52463Linux kernel efivarfs null pointer dereference5.5v3.10.2%2024-02-23Fix
CVE-2023-52462Linux kernel BPF verifier vulnerability5.5v3.10.2%2024-02-23Fix
CVE-2023-52461Linux kernel GPU scheduler vulnerability7.8CNA v3.10.5%2024-02-23Fix
CVE-2023-52460Linux kernel AMD display driver null pointer dereference5.5v3.10.2%2024-02-23Fix
CVE-2023-52459Linux kernel async null pointer dereference5.5v3.10.2%2024-02-23Fix
CVE-2023-52458Linux kernel block partition handling null pointer dereference5.5NVD v3.10.2%2024-02-23Fix
CVE-2023-52457Linux kernel 8250 omap serial driver use-after-free7.8v3.10.2%2024-02-23Fix
CVE-2023-52456Linux kernel IMX UART RS485 transmit state machine deadlock5.5v3.10.2%2024-02-23Fix
CVE-2023-52455Linux kernel IOMMU IOVA reservation vulnerability7.8v3.10.2%2024-02-23Fix
CVE-2023-52454Linux kernel nvmet-tcp kernel panic7.5CNA v3.10.7%2024-02-23Fix
CVE-2023-52453Linux kernel hisi_acc VFIO PCI migration vulnerability7.1CNA v3.10.2%2024-02-23Fix
CVE-2023-51394EmberZNet SDK null pointer dereference5.3CNA v3.10.5%2024-02-23Fix
CVE-2023-51393Potential DoS due to BusFault and Assert in Ember ZNet legacy packet buffer5.3CNA v3.10.5%2024-02-23
CVE-2023-51392EmberZNet SDK AES-CCM implementation vulnerability6.2CNA v3.10.2%2024-02-23Fix
CVE-2023-37540HCL Sametime Connect chat client vulnerability3.9CNA v3.10.2%2024-02-23Fix
CVE-2023-24416All In One Favicon WordPress plugin arbitrary file deletion6.5v3.10.8%2024-02-23Fix
CVE-2023-4826Socialdriver WordPress plugin prototype pollution to XSS6.1CISA ADP v3.10.4%2024-02-23Fix
CVE-2023-52452Linux kernel BPF verifier stack access checks improper initialization7.8v3.10.2%2024-02-22Fix
CVE-2023-52451Linux kernel pseries memory hotplug vulnerability7.8v3.10.2%2024-02-22Fix
CVE-2023-52450Linux kernel Intel uncore UPI topology driver null pointer dereference5.5v3.10.3%2024-02-22Fix
CVE-2023-52449Linux kernel gluebi MTD driver null pointer dereference5.5v3.10.2%2024-02-22Fix
CVE-2023-52448Linux kernel GFS2 resource group dump null pointer dereference5.5v3.10.2%2024-02-22Fix
CVE-2023-52447Linux kernel BPF inner map handling use-after-free7.8CNA v3.10.2%2024-02-22Fix
CVE-2023-52446Linux kernel BPF map reference counting use-after-free7.8v3.10.2%2024-02-22Fix
CVE-2023-52445Linux kernel pvrusb2 USB video driver use-after-free7.8v3.10.2%2024-02-22Fix
CVE-2023-52444Linux kernel f2fs directory rename vulnerability7.8CNA v3.10.2%2024-02-22Fix
CVE-2023-52443Linux kernel AppArmor profile parser null pointer dereference5.5v3.10.2%2024-02-22Fix
CVE-2023-52161Intel Inet Wireless Daemon improper authentication7.5v3.11.1%2024-02-22Fix
CVE-2023-52160w1.fi wpa_supplicant improper authentication6.5v3.11.2%2024-02-22Exploit codeFix
CVE-2023-51653HertzBeat JMX JNDI RCE9.8CNA v3.12.1%2024-02-22Fix
CVE-2023-51450baserCMS OS command injection vulnerability in Installer5.6CNA v3.11.5%2024-02-22Fix
CVE-2023-51389HertzBeat SnakeYAML Deser RCE9.8CNA v3.11.3%2024-02-22Fix
CVE-2023-51388HertzBeat AviatorScript Inject RCE9.8CNA v3.11.3%2024-02-22Fix
CVE-2023-44379baserCMS cross-site scripting vulnerability in Site search feature6.1CNA v3.10.5%2024-02-22Fix
CVE-2023-29181Fortinet FortiOS A format string8.3CNA v3.10.7%2024-02-22Fix
CVE-2023-29180Fortinet FortiOS A null pointer dereference7.3CNA v3.12.6%2024-02-22Fix
CVE-2023-29179Fortinet FortiProxy A null pointer dereference6.4CNA v3.12.5%2024-02-22Fix
CVE-2023-6477Incorrect privilege assignment in GitLab6.7CNA v3.10.5%2024-02-22Fix
CVE-2023-4895Missing authorization in GitLab4.3CNA v3.10.4%2024-02-22Fix
CVE-2023-3966openvswitch openvswsitch: Ovs-vswitch fails to recover after malformed geneve metadata packet7.5NVD v3.11.0%2024-02-22Fix
CVE-2023-52442Linux kernel ksmbd compound request handling vulnerability9.1CNA v3.129.6%2024-02-21Fix
CVE-2023-52441Linux kernel ksmbd SMB2 response header vulnerability9.1CNA v3.10.7%2024-02-21Fix
CVE-2023-52440Linux kernel ksmbd NTLMSSP authentication vulnerability9.8CNA v3.121.9%2024-02-21Exploit codeFix
CVE-2023-52155SIGB PMB /admin/sauvegarde/run.php SQL injection7.2CISA ADP v3.10.7%2024-02-21
CVE-2023-52154SIGB PMB file upload7.2CISA ADP v3.10.7%2024-02-21
CVE-2023-52153SIGB PMB SQL injection9.8CISA ADP v3.10.8%2024-02-21
CVE-2023-51828SIGB PMB /admin/convert/export.class.php SQL injection9.8CISA ADP v3.10.9%2024-02-21
CVE-2023-50975T&D Advanced Dashboard incorrect default permissions8.4CISA ADP v3.10.2%2024-02-21
CVE-2023-50955IBM InfoSphere Information Server information disclosure2.4CNA v3.10.6%2024-02-21Fix
CVE-2023-50923QUIC latency spin bit vulnerability4.3CISA ADP v3.10.3%2024-02-21
CVE-2023-49100Trusted Firmware-A SDEI service out-of-bounds read4.4CISA ADP v3.10.2%2024-02-21Fix
CVE-2023-47795Liferay Portal Document and Media widget and Liferay DXP vulnerable to stored cross-site scripting9.0CNA v3.10.6%2024-02-21Fix
CVE-2023-46241Potential account take over due to unverified emails from Microsoft Identity Platform9.1CNA v3.10.8%2024-02-21Fix
CVE-2023-42953Apple tvOS incorrect default permissions5.5v3.10.2%2024-02-21Fix
CVE-2023-42952Apple macOS improper privilege management4.4v3.10.2%2024-02-21Fix
CVE-2023-42951Apple iOS and iPadOS browsing history cache vulnerability4.3v3.10.3%2024-02-21Fix
CVE-2023-42946Apple tvOS information disclosure5.5NVD v3.10.4%2024-02-21Fix
CVE-2023-42945Apple macOS incorrect default permissions5.5NVD v3.10.3%2024-02-21Fix
CVE-2023-42942Apple tvOS link following7.8v3.10.4%2024-02-21Fix
CVE-2023-42939Apple iOS and iPadOS improper workflow enforcement3.3v3.10.2%2024-02-21Fix
CVE-2023-42928Apple iOS and iPadOS incorrect default permissions7.8v3.10.2%2024-02-21Fix
CVE-2023-42889Apple macOS authentication bypass by spoofing5.5v3.10.3%2024-02-21Fix
CVE-2023-42878Apple macOS insecure storage of sensitive information5.5v3.10.2%2024-02-21Fix
CVE-2023-42877The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.1, macOS Monterey 12.7.1, macOS Ventura 13.6.1. An app may be able to modify protected parts of the file system.5.5NVD v3.10.2%2024-02-21Fix
CVE-2023-42873Apple tvOS out-of-bounds write7.8v3.10.2%2024-02-21Fix
CVE-2023-42860Apple macOS incorrect authorization5.5NVD v3.10.5%2024-02-21Exploit codeFix
CVE-2023-42859Apple macOS improper access control5.5NVD v3.10.2%2024-02-21Fix
CVE-2023-42858Apple macOS information disclosure5.5v3.10.2%2024-02-21Fix
CVE-2023-42855This issue was addressed with improved state management. This issue is fixed in iOS 17.1 and iPadOS 17.1. An attacker with physical access may be able to silently persist an Apple ID on an erased device.4.6v3.10.2%2024-02-21Fix
CVE-2023-42853Apple macOS logic flaw5.5v3.10.2%2024-02-21Fix
CVE-2023-42848Apple tvOS heap-based buffer overflow7.8v3.10.2%2024-02-21Fix
CVE-2023-42843Apple Safari authentication bypass by spoofing4.3NVD v3.10.9%2024-02-21Fix
CVE-2023-42840Apple macOS insecure storage of sensitive information5.5v3.10.2%2024-02-21Fix
CVE-2023-42839Apple tvOS insecure storage of sensitive information5.5v3.10.2%2024-02-21Fix
CVE-2023-42838Apple macOS arbitrary code execution8.6v3.10.2%2024-02-21Fix
CVE-2023-42836Apple macOS logic flaw5.3v3.10.5%2024-02-21Fix
CVE-2023-42835Apple macOS logic flaw7.5v3.10.4%2024-02-21Fix
CVE-2023-42834Apple macOS information disclosure5.5v3.10.2%2024-02-21Fix
CVE-2023-42823Apple tvOS insecure storage of sensitive information5.5v3.10.4%2024-02-21Fix
CVE-2023-42498Liferay Portal Language Override edit screen reflected cross-site scripting9.6CNA v3.10.6%2024-02-21Fix
CVE-2023-42496Liferay Portal and Liferay DXP vulnerable to reflected cross-site scripting9.6CNA v3.10.6%2024-02-21Fix
CVE-2023-40191Liferay Portal and Liferay DXP vulnerable to reflected cross-site scripting9.0CNA v3.10.6%2024-02-21Fix
CVE-2023-38844SIGB PMB SQL injection7.5CISA ADP v3.10.9%2024-02-21
CVE-2023-37177SIGB PMB SQL injection9.8CISA ADP v3.11.1%2024-02-21
CVE-2023-33843IBM InfoSphere Information Server cross-site scripting5.4CNA v3.10.4%2024-02-21Fix
CVE-2023-24334Tenda AC23 stack-based buffer overflow8.0CISA ADP v3.10.5%2024-02-21
CVE-2023-24333Tenda AC21 stack-based buffer overflow8.8CISA ADP v3.10.5%2024-02-21
CVE-2023-24332Tenda AC6 stack-based buffer overflow8.1CISA ADP v3.10.6%2024-02-21
CVE-2023-24331D-Link DIR-816 command injection9.8CISA ADP v3.12.1%2024-02-21
CVE-2023-24330D-Link DIR-882 command injection8.8CISA ADP v3.11.3%2024-02-21
CVE-2023-7235OpenVPN incorrect default permissions8.4CISA ADP v3.10.2%2024-02-21
CVE-2023-6640Silicon Labs PC Controller denial of service6.5CNA v3.10.3%2024-02-21Fix
CVE-2023-6533Silicon Labs PC Controller denial of service6.5CNA v3.10.3%2024-02-21Fix
CVE-2023-3509Incorrect authorization in GitLab3.7CNA v3.10.3%2024-02-21Fix
CVE-2023-52439Linux kernel UIO driver open handler use-after-free7.8CNA v3.10.3%2024-02-20Fix
CVE-2023-52438Linux kernel Binder driver use-after-free7.8CNA v3.10.3%2024-02-20Fix
CVE-2023-52436Linux kernel f2fs extended attribute list vulnerability7.8CNA v3.10.3%2024-02-20Fix
CVE-2023-52435Linux kernel net crash5.5v3.10.2%2024-02-20Fix
CVE-2023-52434Linux kernel SMB2 client create context parser vulnerability8.1CNA v3.11.0%2024-02-20Fix
CVE-2023-52433Linux kernel nftables rbtree set garbage collection vulnerability7.8CNA v3.10.3%2024-02-20Fix
CVE-2023-51770Apache DolphinScheduler: Arbitrary file read7.5v3.11.2%2024-02-20Exploit codeFix
CVE-2023-51447Decidim vulnerable to cross-site scripting (XSS) in the dynamic file uploads6.3CNA v3.10.5%2024-02-20Fix
CVE-2023-50306IBM Common Licensing information disclosure4.0CNA v3.10.2%2024-02-20Fix
CVE-2023-50270Apache DolphinScheduler: Session do not expire after password change6.5CISA ADP v3.11.3%2024-02-20Fix
CVE-2023-49250Apache DolphinScheduler: Insecure TLS TrustManager used in HttpUtil7.3CISA ADP v3.10.7%2024-02-20Fix
CVE-2023-49109Remote code execution in Apache DolphinScheduler9.8CISA ADP v3.12.3%2024-02-20Fix
CVE-2023-49034ProjeQtor cross-site scripting6.1CISA ADP v3.10.5%2024-02-20
CVE-2023-48220Decidim's devise_invitable gem vulnerable to circumvention of invitation token expiry period5.7CNA v3.10.8%2024-02-20Fix
CVE-2023-47635Decidim vulnerable to possible CSRF attack at questionnaire templates preview4.5CNA v3.10.3%2024-02-20Fix
CVE-2023-47422Tenda AX12 /usr/sbin/httpd improper access control8.8CISA ADP v3.10.5%2024-02-20
CVE-2023-46967Enhancesoft osTicket sanitize function cross-site scripting6.1CISA ADP v3.10.4%2024-02-20
CVE-2023-45318Weston Embedded uC-HTTP HTTP Server functionality heap-based buffer overflow9.8v3.11.7%2024-02-20
CVE-2023-44308Liferay vulnerable to open redirect via Adaptive Media Administration page6.1CNA v3.10.4%2024-02-20Fix
CVE-2023-42791Fortinet FortiManager relative path traversal8.6CNA v3.13.4%2024-02-20Exploit codeFix
CVE-2023-39541Weston Embedded uC-TCP-IP ICMP and ICMPv6 parsing functionality denial of service5.9CNA v3.10.8%2024-02-20
CVE-2023-39540Weston Embedded uC-TCP-IP ICMP and ICMPv6 parsing functionality denial of service5.9v3.10.8%2024-02-20
CVE-2023-38562Weston Embedded uC-TCP-IP IP header loopback parsing functionality double free9.1v3.11.1%2024-02-20
CVE-2023-7245OpenVPN Connect eval injection7.8CISA ADP v3.10.3%2024-02-20Fix
CVE-2023-6936wolfSSL heap-buffer over-read with WOLFSSL_CALLBACKS5.3CNA v3.10.6%2024-02-20Fix
CVE-2023-6764Zyxel ATP series firmware function of the IPSec VPN feature format string8.1CNA v3.10.9%2024-02-20Fix
CVE-2023-6399Zyxel ATP series firmware format string5.7CNA v3.10.6%2024-02-20Fix
CVE-2023-6398Zyxel ATP series firmware file upload binary command injection7.2CNA v3.11.3%2024-02-20Fix
CVE-2023-6397Zyxel ATP series firmware null pointer dereference6.5CNA v3.10.3%2024-02-20Fix
CVE-2023-5190Liferay Portal Countries Management’s edit region page open redirect6.1CNA v3.10.4%2024-02-20Fix
CVE-2023-50257eProsima Fast-DDS Disconnect vulnerability in RTPS Packets Used by SROS29.7CNA v3.10.5%2024-02-19Exploit codeFix
CVE-2023-6260Web UI OS command injection in Brivo ACS100, ACS3008.8v3.10.9%2024-02-19Fix
CVE-2023-6259Local Access to Sensitive Data in Brivo ACS100 and ACS3004.6NVD v3.10.2%2024-02-19Fix
CVE-2023-52387Huawei HarmonyOS resource reuse vulnerability in the GPU module7.5v3.10.3%2024-02-18Fix
CVE-2023-52381Huawei HarmonyOS script injection vulnerability in the email module9.8CISA ADP v3.10.4%2024-02-18Fix
CVE-2023-52380Huawei HarmonyOS vulnerability of improper access control in the email module4.3CISA ADP v3.10.3%2024-02-18Fix
CVE-2023-52379Huawei HarmonyOS permission control vulnerability in the calendarProvider module7.5CISA ADP v3.10.3%2024-02-18Fix
CVE-2023-52378Huawei HarmonyOS vulnerability of incorrect service logic in the WindowManagerServices module9.8v3.10.5%2024-02-18Fix
CVE-2023-52377Huawei HarmonyOS vulnerability of input data not being verified in the cellular data module7.4CISA ADP v3.10.4%2024-02-18Fix
CVE-2023-52376Huawei HarmonyOS information management vulnerability in the Gallery module7.5CISA ADP v3.10.3%2024-02-18Fix
CVE-2023-52375Huawei HarmonyOS permission control vulnerability in the WindowManagerServices module7.5v3.10.2%2024-02-18Fix
CVE-2023-52374Huawei HarmonyOS permission control vulnerability in the package management module7.5CISA ADP v3.10.3%2024-02-18Fix
CVE-2023-52373Huawei HarmonyOS vulnerability of permission verification in the content sharing pop-up module7.5v3.10.3%2024-02-18Fix
CVE-2023-52372Huawei HarmonyOS vulnerability of input parameter verification in the motor module7.5CISA ADP v3.10.4%2024-02-18Fix
CVE-2023-52371Huawei HarmonyOS vulnerability of null references in the motor module3.5CISA ADP v3.10.2%2024-02-18Fix
CVE-2023-52370Huawei HarmonyOS stack overflow vulnerability in the network acceleration module9.8CISA ADP v3.10.5%2024-02-18Fix
CVE-2023-52369Huawei HarmonyOS stack overflow vulnerability in the NFC module9.1v3.10.4%2024-02-18Fix
CVE-2023-52368Huawei HarmonyOS input verification vulnerability in the account module5.3CISA ADP v3.10.3%2024-02-18Fix
CVE-2023-52367Huawei HarmonyOS vulnerability of improper access control in the media library module7.7CISA ADP v3.10.1%2024-02-18Fix
CVE-2023-52366Huawei HarmonyOS out-of-bounds read vulnerability in the smart activity recognition module7.5CISA ADP v3.10.4%2024-02-18Fix
CVE-2023-52365Huawei HarmonyOS out-of-bounds read vulnerability in the smart activity recognition module5.3NVD v3.10.3%2024-02-18Fix
CVE-2023-52363Huawei HarmonyOS Control Panel module vulnerability5.3v3.10.2%2024-02-18Fix
CVE-2023-52362Huawei HarmonyOS permission management vulnerability in the lock screen module7.5CISA ADP v3.10.4%2024-02-18Fix
CVE-2023-52361Huawei HarmonyOS incorrect authorization7.5v3.10.3%2024-02-18Fix
CVE-2023-52360Huawei HarmonyOS baseband vulnerability7.5CISA ADP v3.10.3%2024-02-18Fix
CVE-2023-52358Huawei HarmonyOS vulnerability of configuration defects in some APIs of the audio module6.2CISA ADP v3.10.1%2024-02-18Fix
CVE-2023-52357Huawei HarmonyOS vulnerability of serialization/deserialization mismatch in the vibration framework7.5v3.10.3%2024-02-18Fix
CVE-2023-52097Huawei HarmonyOS vulnerability of foreground service restrictions being bypassed in the NMS module7.5CISA ADP v3.10.3%2024-02-18Fix
CVE-2023-6749Unchecked user input length in the Zephyr Settings Shell8.0CNA v3.10.4%2024-02-18
CVE-2023-6249zephyrproject-rtos Zephyr ipm: Signed to unsigned conversion problem in esp32_ipm_send8.0CNA v3.10.4%2024-02-18
CVE-2023-5779zephyrproject-rtos Zephyr can: Out-of-bounds in remove_rx_filter function4.4CNA v3.10.4%2024-02-18
CVE-2023-50951IBM QRadar Suite information disclosure4.0CNA v3.10.4%2024-02-17Fix
CVE-2023-31728Teltonika Networks RUT240 IPv6 WAN interface vulnerability7.0CISA ADP v3.10.2%2024-02-17
CVE-2023-21833Oracle ZFS Storage Appliance Kit Object Store component information disclosure4.3CNA v3.10.4%2024-02-17Fix
CVE-2023-51931Alanclarke Urlite regular expression denial of service7.5v3.10.6%2024-02-16
CVE-2023-49508Yetiforce Customer Relationship Management YetiForceCRM directory traversal6.5v3.11.0%2024-02-16Fix
CVE-2023-45860Hazelcast Platform permission checking in CSV File Source connector6.5v3.10.5%2024-02-16Fix
CVE-2023-40122Google Android SaveUi.java information disclosure3.3NVD v3.10.3%2024-02-16Fix
CVE-2023-40093Google Android multiple files information disclosure5.5v3.10.1%2024-02-16Fix
CVE-2023-40085Google Android ShimConverter.cpp out-of-bounds read5.5v3.10.1%2024-02-16Fix
CVE-2023-21165Google Android devicemem_server.c arbitrary code execution7.8v3.10.1%2024-02-16Fix
CVE-2023-6451Publicly Known Cryptographic Machine Key in Procura Portal application7.5v3.10.5%2024-02-16Fix
CVE-2023-51787Wind River Vxworks memory leak7.5v3.10.5%2024-02-15Fix
CVE-2023-47537Fortinet FortiOS An improper certificate validation4.4CNA v3.10.2%2024-02-15Fix
CVE-2023-46596Improper input validation in FireFlow’s VisualFlow workflow editor5.1CNA v3.10.3%2024-02-15Fix
CVE-2023-45581Fortinet FortiClientEMS improper privilege management7.9CNA v3.10.8%2024-02-15Fix
CVE-2023-44253Fortinet FortiManager information disclosure4.7CNA v3.10.7%2024-02-15Fix
CVE-2023-40124Google Android multiple locations information disclosure5.5v3.10.1%2024-02-15Fix
CVE-2023-40115Google Android StatsService.cpp memory corruption7.8NVD v3.10.2%2024-02-15Fix
CVE-2023-40114Google Android MtpFfsHandle.cpp out-of-bounds write7.8v3.10.1%2024-02-15Fix
CVE-2023-40113Google Android multiple locations information disclosure5.5v3.10.1%2024-02-15Fix
CVE-2023-40112Google Android ipp.c out-of-bounds read5.5v3.10.1%2024-02-15Fix
CVE-2023-40111Google Android MediaSessionRecord.java privilege escalation7.8v3.10.1%2024-02-15Fix
CVE-2023-40110Google Android MtpPacket.cpp out-of-bounds write7.8v3.10.1%2024-02-15Fix
CVE-2023-40109Google Android UsbConfiguration.java privilege escalation7.8v3.10.2%2024-02-15Exploit codeFix
CVE-2023-40107Google Android ARTPWriter.cpp use-after-free7.8v3.10.1%2024-02-15Fix
CVE-2023-40106Google Android NotificationManagerService.java privilege escalation7.8v3.10.1%2024-02-15Fix
CVE-2023-40105Google Android ActivityManagerService.java information disclosure5.5v3.10.1%2024-02-15Fix
CVE-2023-40104Google Android ca-certificates information disclosure7.5v3.10.3%2024-02-15Fix
CVE-2023-40100Google Android Dns64Configuration.cpp memory corruption7.8v3.10.1%2024-02-15Fix
CVE-2023-40057SolarWinds Access Rights Manager (ARM) deserialization of untrusted data remote code execution9.0CNA v3.14.9%2024-02-15Fix
CVE-2023-39245Dell Enterprise Storage Integrator for SAP LAMA cleartext transmission of sensitive information9.8CNA v3.10.6%2024-02-15Fix
CVE-2023-39244Dell ESI (Enterprise Storage Integrator) for SAP LAMA information disclosure7.3CNA v3.10.6%2024-02-15Fix
CVE-2023-32484Dell Enterprise SONiC OS improper input validation9.8CNA v3.10.6%2024-02-15Fix
CVE-2023-32462Dell SmartFabric OS10 OS command injection9.8CNA v3.12.1%2024-02-15Fix
CVE-2023-28078Dell SmartFabric OS10 improper channel restriction9.1CNA v3.10.9%2024-02-15Fix
CVE-2023-26206Fortinet FortiNAC cross-site scripting6.8CNA v3.10.5%2024-02-15Fix
CVE-2023-7081SQLi in PosTahsil's Online Payment System9.8CNA v3.10.5%2024-02-15Fix
CVE-2023-6937wolfSSL improper (D)TLS key boundary enforcement5.3CNA v3.10.5%2024-02-15Fix
CVE-2023-6255Hard-coded Credentals in SoliClub Mobile App7.5CNA v3.10.5%2024-02-15Fix
CVE-2023-6123Improper neutralization vulnerability affects OpenText ALM Octane7.5CNA v3.10.5%2024-02-15Fix
CVE-2023-5155SQLi in Utarit's Smart Deposit System9.8CNA v3.10.5%2024-02-15Fix
CVE-2023-4993Sensetive data exposure in Utarit's Soliclub7.5CNA v3.10.5%2024-02-15Fix
CVE-2023-4539Hard-coded password in Comarch ERP XL7.5v3.10.5%2024-02-15Fix
CVE-2023-4538Comarch ERP XL database credential storage insufficiently protected credentials6.5v3.10.4%2024-02-15Fix
CVE-2023-4537Comarch ERP XL database connection vulnerability7.4CNA v3.10.6%2024-02-15Fix
CVE-2023-50927Insufficient boundary checks for DIO and DAO messages in RPL-Lite in Contiki-NG8.6CNA v3.10.5%2024-02-14Fix
CVE-2023-50926Unvalidated DIO prefix info length in RPL-Lite in Contiki-NG7.5CNA v3.10.5%2024-02-14Fix
CVE-2023-50868ISC BIND denial of service7.5v3.173.7%2024-02-14Exploit codeFix
CVE-2023-50387ISC BIND denial of service7.5v3.1100.0%2024-02-14Emerging ThreatsExploit codeFix
CVE-2023-49721TianoCore edk2 insecure default configuration6.7CNA v3.10.2%2024-02-14
CVE-2023-48987Cusg Content Management System CU Solutions Group blind SQL injection7.5v3.11.0%2024-02-14
CVE-2023-48986Cusg Content Management System CU Solutions Group cross-site scripting6.1v3.10.6%2024-02-14
CVE-2023-48985Cusg Content Management System CU Solutions Group cross-site scripting6.1v3.10.6%2024-02-14
CVE-2023-48733TianoCore edk2 insecure default configuration6.7CNA v3.10.3%2024-02-14Fix
CVE-2023-48229Out-of-bounds write in the radio driver for Contiki-NG nRF platforms7.0CNA v3.10.4%2024-02-14Fix
CVE-2023-46186IBM Jazz for Service Management information disclosure5.3CNA v3.10.6%2024-02-14Fix
CVE-2023-44294Dell Secure Connect Gateway-Application SQL injection5.4CNA v3.10.4%2024-02-14Fix
CVE-2023-44293Dell Secure Connect Gateway-Application SQL injection5.4CNA v3.10.4%2024-02-14Fix
CVE-2023-44283Dell SupportAssist for Home PCs privilege escalation7.8CNA v3.10.2%2024-02-14Fix
CVE-2023-42776Intel(R) SGX DCAP software some improper input validation3.8CNA v3.10.2%2024-02-14Fix
CVE-2023-41252Intel(R) QAT software drivers some out-of-bounds read6.5CNA v3.10.2%2024-02-14Fix
CVE-2023-41231ACAT software maintained by Intel(R) some incorrect default permissions6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-41091Intel(R) MPI Library Software uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-41090Intel(R) MAS software some race condition1.8CNA v3.10.1%2024-02-14Fix
CVE-2023-40161Intel Unite(R) Client software some improper access control6.6CNA v3.10.2%2024-02-14Fix
CVE-2023-40156Intel(R) SSU software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-40154Intel(R) SUR for Gameplay Software incorrect default permissions6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-39941Intel(R) SUR software some improper access control7.1CNA v3.10.3%2024-02-14Fix
CVE-2023-39932Intel(R) SUR for Gameplay Software uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-39432Intel(R) Ethernet tools and driver install software some improper access control6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-39425Intel(R) DSA software some improper access control8.8CNA v3.10.2%2024-02-14Fix
CVE-2023-39249Dell SupportAssist Client Consumer improper handling of insufficient permissions6.3CNA v3.10.3%2024-02-14Fix
CVE-2023-38566Intel(R) ISPC software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-38561Intel(R) XTU software some improper access control5.5CNA v3.10.2%2024-02-14Fix
CVE-2023-38135Intel(R) PM software some improper authorization6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-36493Intel(R) SDK for OpenCL(TM) Applications software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-36490Intel(R) MAS software some improper initialization5.0CNA v3.10.2%2024-02-14Fix
CVE-2023-35769Intel(R) CIP software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-35121Intel(R) oneAPI DPC++/C++ Compiler software improper access control7.8CNA v3.10.2%2024-02-14Fix
CVE-2023-35062Intel(R) DSA software some improper access control6.3CNA v3.10.2%2024-02-14Fix
CVE-2023-35061Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software improper initialization2.3CNA v4.00.4%2024-02-14Fix
CVE-2023-35060Intel(R) Battery Life Diagnostic Tool software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-35003Intel(R) VROC software privilege escalation6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-34983Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software improper input validation4.3CNA v3.10.5%2024-02-14Fix
CVE-2023-34351Intel(R) PCM software some buffer underflow7.5CNA v3.10.7%2024-02-14Fix
CVE-2023-34315Intel(R) VROC software some incorrect default permissions6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-33875Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software improper access control7.1CNA v3.10.2%2024-02-14Fix
CVE-2023-33870Intel(R) Ethernet tools and driver install software some insecure inherited permissions6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-32651Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software improper type validation4.3CNA v3.10.4%2024-02-14Fix
CVE-2023-32647Intel(R) XTU software some improper access control6.8CNA v3.10.2%2024-02-14Fix
CVE-2023-32646Intel(R) VROC software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-32644Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software protection mechanism failure4.3CNA v3.10.4%2024-02-14Fix
CVE-2023-32642Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software denial of service4.3CNA v3.10.4%2024-02-14Fix
CVE-2023-32618Intel(R) oneAPI Toolkit and component software installers some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-32280Intel(R) Server Product OpenBMC firmware some insufficiently protected credentials5.3CNA v3.10.5%2024-02-14Fix
CVE-2023-31271Intel(R) VROC software some improper access control6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-31189Intel(R) Server Product OpenBMC firmware some improper authentication5.2CNA v3.10.2%2024-02-14Fix
CVE-2023-30767TensorFlow privilege escalation5.5CNA v3.10.2%2024-02-14Fix
CVE-2023-29162Intel(R) C++ Compiler Classic incorrect default permissions6.0CNA v3.10.2%2024-02-14Fix
CVE-2023-29153Intel(R) SPS firmware resource exhaustion4.9CNA v3.10.7%2024-02-14Fix
CVE-2023-28745Intel(R) QSFP+ Configuration Utility software uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-28739Intel(R) Chipset Driver Software some incorrect default permissions6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-28720Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software improper initialization6.1CNA v3.10.4%2024-02-14Fix
CVE-2023-28715Intel(R) oneAPI Toolkit and component software installers some improper access control5.0CNA v3.10.2%2024-02-14Fix
CVE-2023-28407Intel(R) XTU software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-28396Intel(R) Thunderbol(TM) Controllers firmware for some improper access control6.1CNA v3.10.2%2024-02-14Fix
CVE-2023-28374Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software improper input validation6.1CNA v3.10.4%2024-02-14Fix
CVE-2023-27975Schneider Electric EcoStruxure Control Expert insufficiently protected credentials7.1CNA v3.10.1%2024-02-14Fix
CVE-2023-27517Intel(R) Optane(TM) PMem software some improper access control6.6CNA v3.10.2%2024-02-14Fix
CVE-2023-27308Intel(R) Thunderbolt(TM) DCH drivers privilege escalation4.6CNA v3.10.2%2024-02-14Fix
CVE-2023-27307Intel(R) Thunderbolt(TM) DCH drivers information disclosure3.8CNA v3.10.2%2024-02-14Fix
CVE-2023-27303Intel(R) Thunderbolt(TM) DCH drivers some improper access control3.8CNA v3.10.2%2024-02-14Fix
CVE-2023-27301Intel(R) Thunderbolt(TM) DCH drivers some improper access control4.2CNA v3.10.2%2024-02-14Fix
CVE-2023-27300Intel(R) Thunderbolt(TM) DCH drivers information disclosure3.8CNA v3.10.2%2024-02-14Fix
CVE-2023-26596Intel(R) Thunderbolt(TM) DCH drivers some improper access control2.5CNA v3.10.2%2024-02-14Fix
CVE-2023-26592Intel(R) Thunderbolt(TM) DCH drivers some deserialization of untrusted data3.8CNA v3.10.3%2024-02-14Fix
CVE-2023-26591Intel(R) Thunderbolt(TM) DCH drivers some unchecked return value2.0CNA v3.10.2%2024-02-14Fix
CVE-2023-26586Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software uncaught exception4.3CNA v3.10.4%2024-02-14Fix
CVE-2023-26585Intel(R) Thunderbolt(TM) DCH drivers some improper access control5.0CNA v3.10.2%2024-02-14Fix
CVE-2023-25951Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software improper input validation6.0CNA v3.10.2%2024-02-14Fix
CVE-2023-25945Intel(R) OFU software some protection mechanism failure6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-25779Intel(R) Thunderbolt(TM) DCH drivers some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-25777Intel(R) Thunderbolt(TM) DCH drivers some improper access control7.9CNA v3.10.2%2024-02-14Fix
CVE-2023-25769Intel(R) Thunderbolt(TM) DCH drivers some resource exhaustion5.5CNA v3.10.2%2024-02-14Fix
CVE-2023-25535Dell SupportAssist Client Consumer improper privilege management7.2CNA v3.10.2%2024-02-14Fix
CVE-2023-25174Intel(R) Chipset Driver Software some improper access control6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-25073Intel(R) DSA software some improper access control5.5CNA v3.10.2%2024-02-14Fix
CVE-2023-24591Intel(R) Binary Configuration Tool software some uncontrolled search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-24589Intel(R) Thunderbolt(TM) DCH drivers privilege escalation6.1CNA v3.10.2%2024-02-14Fix
CVE-2023-24542Intel(R) Thunderbolt(TM) DCH drivers some unquoted search path6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-24481Intel(R) Thunderbolt(TM) DCH drivers some improper access control6.3CNA v3.10.2%2024-02-14Fix
CVE-2023-24463Intel(R) Thunderbolt(TM) DCH drivers some improper input validation4.3CNA v3.10.3%2024-02-14Fix
CVE-2023-22848Intel(R) Thunderbolt(TM) DCH drivers some improper access control5.5CNA v3.10.2%2024-02-14Fix
CVE-2023-22390Intel(R) Thunderbolt(TM) DCH drivers information disclosure6.5CNA v3.10.2%2024-02-14Fix
CVE-2023-22342Intel(R) Thunderbolt(TM) DCH drivers some improper input validation7.7CNA v3.10.2%2024-02-14Fix
CVE-2023-22311Intel(R) Optane(TM) PMem 100 Series Management Software some improper access control6.7CNA v3.10.2%2024-02-14Fix
CVE-2023-22293Intel(R) Thunderbolt(TM) DCH drivers improper access control8.2CNA v3.10.2%2024-02-14Fix
CVE-2023-6441SQLi in UNI-PA's University Information System9.8CNA v3.10.7%2024-02-14Fix
CVE-2023-6409Schneider Electric EcoStruxure Control Expert hard-coded credentials7.7CNA v3.10.2%2024-02-14Fix
CVE-2023-6408Schneider Electric Modicon M340 CPU improper message integrity enforcement8.1CNA v3.10.3%2024-02-14Fix
CVE-2023-6138Certain HP Workstation PCs privilege escalation7.9v3.10.2%2024-02-14Fix
CVE-2023-5123Improper Path Sanitization in JSON Datasource plugin8.0CNA v3.10.8%2024-02-14Fix
CVE-2023-5122grafana-csv-datasource SSRF in CSV Datasource plugin5.0CNA v3.10.5%2024-02-14Fix
CVE-2023-52431Plack::Middleware::XSRFBlock cross-site request forgery8.8v3.10.2%2024-02-13Fix
CVE-2023-52060GestSup A cross-site request forgery4.3v3.10.3%2024-02-13KCVFix
CVE-2023-52059GestSup A cross-site scripting5.4v3.10.4%2024-02-13KCVFix
CVE-2023-51440Siemens SIMATIC CP 343-1 improper verification of communication source7.5CNA v3.10.6%2024-02-13
CVE-2023-50808Zimbra Collaboration cross-site scripting6.1NVD v3.10.4%2024-02-13Fix
CVE-2023-50358QNAP QTS, QuTS hero and QuTScloud OS command injection5.8CNA v3.113.5%2024-02-13Fix
CVE-2023-50236Siemens Polarion ALM incorrect default permissions7.8CNA v3.10.1%2024-02-13Fix
CVE-2023-49339Ellucian Banner insecure direct object reference6.5NVD v3.10.6%2024-02-13
CVE-2023-49125Siemens Parasolid out-of-bounds read7.8CNA v3.10.2%2024-02-13Fix
CVE-2023-48432Zimbra Collaboration cross-site scripting6.1v3.10.5%2024-02-13Fix
CVE-2023-48364Siemens OpenPCS 7 null pointer dereference7.1CNA v4.00.3%2024-02-13Fix
CVE-2023-48363Siemens OpenPCS 7 null pointer dereference7.1CNA v4.00.3%2024-02-13Fix
CVE-2023-47218QNAP QTS, QuTS hero and QuTScloud command injection5.8CNA v3.189.9%2024-02-13NucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2023-45207Zimbra Collaboration cross-site scripting6.1v3.10.5%2024-02-13Fix
CVE-2023-45206Zimbra Collaboration cross-site scripting6.1v3.10.4%2024-02-13Fix
CVE-2023-42374Mystenlabs Sui code injection9.8v3.11.3%2024-02-13
CVE-2023-38960Raidenftpd Raiden Professional Server insecure permissions7.3v3.10.3%2024-02-13
CVE-2023-31347AMD 3rd Gen AMD EPYC™ Processors incorrect calculation4.9v3.10.5%2024-02-13
CVE-2023-31346AMD 3rd Gen AMD EPYC™ Processors improper access control6.0v3.10.3%2024-02-13Exploit codeFix
CVE-2023-26562Zimbra Collaboration missing authorization6.5v3.10.6%2024-02-13Fix
CVE-2023-20587AMD 3rd Gen AMD EPYC™ Processors System Management Mode improper access control7.1CISA ADP v3.10.2%2024-02-13Fix
CVE-2023-20579AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics improper access control6.0v3.10.2%2024-02-13Fix
CVE-2023-20570AMD Alveo™ Card configuration state machine insufficient verification of data authenticity3.3v3.10.1%2024-02-13Fix
CVE-2023-6815Mitsubishi Electric MELSEC iQ-R Series Safety CPU R08SFCPU incorrect privilege assignment6.5CNA v3.10.7%2024-02-13
CVE-2023-6516ISC BIND 9 specific recursive query patterns may lead to an out-of-memory condition7.5CNA v3.11.1%2024-02-13Fix
CVE-2023-6152Grafana Email Validation Bypass and Preventing Sign Up from Email's Owner5.4CNA v3.11.4%2024-02-13Fix
CVE-2023-6072Trellix Central Management (CM) cross-site scripting4.6CNA v3.10.3%2024-02-13
CVE-2023-5680ISC BIND 9 cleaning an ECS-enabled cache may cause excessive CPU load5.3CNA v3.10.6%2024-02-13Fix
CVE-2023-5679ISC BIND DNS64 and serve-stale handling reachable assertion7.5CNA v3.11.2%2024-02-13Fix
CVE-2023-5517ISC BIND nxdomain-redirect query handling reachable assertion7.5CNA v3.11.2%2024-02-13Fix
CVE-2023-4408ISC BIND 9 parsing large DNS messages may cause excessive CPU load7.5CNA v3.11.3%2024-02-13Fix
CVE-2023-52430Caddy-security plugin for Caddy vulnerable to reflected cross-site scripting6.1v3.10.4%2024-02-12
CVE-2023-52429Linux kernel improper check for exceptional conditions5.5v3.10.2%2024-02-12Fix
CVE-2023-51403Restaurant Reservations WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-12Fix
CVE-2023-51370WP Chat App WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-12Fix
CVE-2023-50875Sensei LMS WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-12Fix
CVE-2023-47526Chartify WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-12Fix
CVE-2023-46615KD Coming Soon WordPress plugin PHP object injection9.8v3.10.8%2024-02-12Exploit code
CVE-2023-41708Open-Xchange OX App Suite cross-site scripting5.4CNA v3.10.5%2024-02-12Fix
CVE-2023-41707Open-Xchange OX App Suite resource exhaustion6.5CNA v3.10.8%2024-02-12Fix
CVE-2023-41706Open-Xchange OX App Suite resource exhaustion6.5CNA v3.10.8%2024-02-12Fix
CVE-2023-41705Open-Xchange OX App Suite resource exhaustion6.5CNA v3.10.8%2024-02-12Fix
CVE-2023-41704Open-Xchange OX App Suite cross-site scripting7.1CNA v3.10.5%2024-02-12Fix
CVE-2023-41703Open-Xchange OX App Suite cross-site scripting6.1CNA v3.10.5%2024-02-12Fix
CVE-2023-28018HCL Connections s vulnerable to possible denial of service for certain users5.5CNA v3.10.3%2024-02-12Fix
CVE-2023-7233GigPress WordPress plugin Admin+ stored cross-site scripting4.8NVD v3.10.5%2024-02-12
CVE-2023-6681Jwcrypto: Denail of service via specifically crafted jwe5.3CNA v3.10.9%2024-02-12Fix
CVE-2023-6591Popup Box Pro WordPress plugin Admin+ stored XSS4.8NVD v3.10.5%2024-02-12Fix
CVE-2023-6501Splashscreen WordPress plugin settings update via CSRF4.3NVD v3.10.2%2024-02-12
CVE-2023-6499lasTunes WordPress plugin settings update via CSRF5.4NVD v3.10.2%2024-02-12
CVE-2023-6294Sygnoos Popup Builder server-side request forgery7.2NVD v3.10.8%2024-02-12Fix
CVE-2023-6082Chart.js for WordPress stored cross-site scripting5.4NVD v3.10.4%2024-02-12
CVE-2023-6081Chart.js for WordPress stored cross-site scripting5.4NVD v3.10.4%2024-02-12
CVE-2023-6036Web3 Crypto wallet Login and NFT token gating WordPress plugin authentication bypass9.8NVD v3.11.8%2024-02-12Exploit codeFix
CVE-2023-52428Denial of service in Connect2id Nimbus JOSE+JWT7.5v3.10.8%2024-02-11Fix
CVE-2023-52427Objectcomputing OpenDDS resource exhaustion7.5v3.10.6%2024-02-11
CVE-2023-51493Custom Post Carousels with Owl WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-10Fix
CVE-2023-51492If-So Dynamic Content Personalization WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-10Fix
CVE-2023-51488Crowdsignal Dashboard Polls, Surveys and more WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2024-02-10Fix
CVE-2023-51485Pay with Vipps for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-10Fix
CVE-2023-51480Active Products Tables for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-10Fix
CVE-2023-51415GiveWP WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-10Fix
CVE-2023-51404My Agile Privacy WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-10Fix
CVE-2023-50957IBM Storage Defender Resiliency service privilege escalation8.0CNA v3.10.4%2024-02-10Fix
CVE-2023-45698HCL Sametime is impacted by clickjacking4.8CNA v3.10.3%2024-02-10Fix
CVE-2023-45696HCL Sametime is impacted by an autocomplete enabled vulnerability4.0CNA v3.10.4%2024-02-10Fix
CVE-2023-28077Dell BSAFE SSL-J debug logging information disclosure4.4CNA v3.10.2%2024-02-10Fix
CVE-2023-51761Emerson Rosemount GC370XA, GC700XA, GC1500XA improper authentication8.1v3.10.7%2024-02-09
CVE-2023-50386Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets8.8v3.183.8%2024-02-09MetasploitExploit codeFix
CVE-2023-50349HCL Sametime is impacted by a cross-site request forgery (CSRF)5.9CNA v3.10.2%2024-02-09Fix
CVE-2023-50298Apache Solr: Solr can expose ZooKeeper credentials via Streaming Expressions7.5v3.11.6%2024-02-09Fix
CVE-2023-50292Apache Solr Schema Designer blindly trusts all configsets7.5v3.13.0%2024-02-09Fix
CVE-2023-50291Apache Solr: System Property redaction logic inconsistency can lead to leaked passwords7.5v3.13.3%2024-02-09Fix
CVE-2023-50026Prestamonster Multi Accessories Pro SQL injection9.8v3.10.6%2024-02-09Fix
CVE-2023-49716Emerson Rosemount GC370XA, GC700XA, GC1500XA command injection9.8v3.10.6%2024-02-09
CVE-2023-46687Emerson Rosemount GC370XA, GC700XA, GC1500XA command injection9.8v3.10.9%2024-02-09
CVE-2023-46350Innovadeluxe Manufacturer Or Supplier Alphabetical Search SQL injection9.8v3.10.6%2024-02-09Fix
CVE-2023-45718HCL Sametime is impacted by a failure to invalidate sessions3.9CNA v3.10.4%2024-02-09Fix
CVE-2023-45716HCL Sametime is impacted by a sensitive information disclosure1.7CNA v3.10.1%2024-02-09Fix
CVE-2023-45191IBM Engineering Lifecycle Optimization information disclosure7.5CNA v3.10.7%2024-02-09Fix
CVE-2023-45190IBM Engineering Lifecycle Optimization HTTP header injection5.1CNA v3.10.3%2024-02-09Fix
CVE-2023-45187IBM Engineering Lifecycle Optimization Publishing session fixation6.3CNA v3.10.4%2024-02-09Fix
CVE-2023-43609Emerson Rosemount GC370XA, GC700XA, GC1500XA improper authorization9.1v3.10.5%2024-02-09
CVE-2023-42016IBM Sterling B2B Integrator information disclosure4.3CNA v3.10.3%2024-02-09Fix
CVE-2023-39683Zalify Easy Email EasyEmail v.4.12.2 and cross-site scripting6.1v3.10.5%2024-02-09
CVE-2023-32341IBM Sterling B2B Integrator denial of service6.5CNA v3.10.6%2024-02-09Fix
CVE-2023-31506Cross-site scripting (XSS) vulnerability in Grav5.4v3.11.0%2024-02-09Fix
CVE-2023-6935wolfSSL Marvin Attack vulnerability in SP Math All RSA5.9CNA v3.10.5%2024-02-09Fix
CVE-2023-6724IDOR in Simgesel Software's Hearing Tracking System (Barosel)8.8CNA v3.10.7%2024-02-09Fix
CVE-2023-6677SQLi in Oduyo Online Collection software9.8CNA v3.10.5%2024-02-09Fix
CVE-2023-51630Paessler PRTG Network Monitor cross-site scripting authentication bypass6.1NVD v3.11.7%2024-02-08
CVE-2023-50061Store-opart Op'art Easy Redirect SQL injection9.8v3.10.6%2024-02-08Fix
CVE-2023-49101Axigen Mobile Webmail cross-site scripting6.1v3.10.2%2024-02-08Fix
CVE-2023-48974Axigen Mail Server cross-site scripting9.6v3.13.0%2024-02-08Exploit codeFix
CVE-2023-47798Liferay Portal's account lockout does not invalidate existing user sessions5.4CNA v3.10.3%2024-02-08Fix
CVE-2023-47132N-able N-central improper privilege management9.8v3.10.6%2024-02-08Fix
CVE-2023-47131N-able PassPortal sensitive information in log files7.5v3.10.5%2024-02-08Fix
CVE-2023-47020Ncratleos Terminal Handler cross-site request forgery8.8v3.10.3%2024-02-08
CVE-2023-42282NPM IP package incorrectly identifies some private IP addresses as public9.8v3.11.6%2024-02-08Fix
CVE-2023-40266Mitel Unify Openscape Xpressions Webassistant path traversal9.8v3.10.7%2024-02-08Fix
CVE-2023-40265Mitel Unify Openscape Xpressions Webassistant unrestricted file upload8.8v3.10.9%2024-02-08Fix
CVE-2023-40264Unify Openscape Voice Trace Manager path traversal4.3v3.10.5%2024-02-08Fix
CVE-2023-40263Unify Openscape Voice Trace Manager command injection8.8v3.11.2%2024-02-08Fix
CVE-2023-40262Unify Openscape Voice Trace Manager cross-site scripting6.1v3.10.3%2024-02-08Fix
CVE-2023-27001Egerie privilege escalation8.8v3.10.9%2024-02-08
CVE-2023-25365October CMS cross-site scripting7.8v3.10.4%2024-02-08Fix
CVE-2023-7169Snow Inventory Agent impersonate vendor signed Powershell scripts6.0CNA v3.10.2%2024-02-08Fix
CVE-2023-6564Incorrect authorization in GitLab6.5CNA v3.10.4%2024-02-08Fix
CVE-2023-6519Seeing admin password hash value in Mia Technology's MİA-MED7.5CNA v3.10.5%2024-02-08Fix
CVE-2023-6518Password disclosure in Mia Technology's MİA-MED7.5CNA v3.10.5%2024-02-08Fix
CVE-2023-6517Seeing the SMS Verification Code in Mia Technology's MİA-MED7.5CNA v3.10.5%2024-02-08Fix
CVE-2023-6515IDOR in Mia Technology's MİA-MED8.8CNA v3.10.6%2024-02-08Fix
CVE-2023-5665Payment Forms for Paystack WordPress plugin stored cross-site scripting5.4v3.10.5%2024-02-08Fix
CVE-2023-51437Apache Pulsar: Timing attack in SASL token signature verification7.4CNA v3.10.8%2024-02-07Fix
CVE-2023-47700IBM Storage Virtualize improper certificate validation5.9CNA v3.10.5%2024-02-07Fix
CVE-2023-46914Booking Calendar SQL injection9.8v3.10.8%2024-02-07Fix
CVE-2023-43017IBM Security Verify Access man in the middle8.2CNA v3.10.6%2024-02-07Fix
CVE-2023-40355Axigen Mobile Webmail cross-site scripting5.4NVD v3.11.1%2024-02-07NucleiFix
CVE-2023-39196Apache Ozone improper authentication5.3CNA v3.10.8%2024-02-07Fix
CVE-2023-38995Schuhfried hard-coded credentials9.8v3.10.8%2024-02-07
CVE-2023-38369IBM Security Access Manager Container information disclosure6.2CNA v3.10.5%2024-02-07Fix
CVE-2023-32330IBM Security Verify Access man in the middle7.5CNA v3.10.9%2024-02-07Fix
CVE-2023-32328IBM Security Verify Access information disclosure7.5CNA v3.10.6%2024-02-07Fix
CVE-2023-31002IBM Security Access Manager Container information disclosure5.1CNA v3.10.1%2024-02-07Fix
CVE-2023-6840Missing authorization in GitLab6.7CNA v3.10.6%2024-02-07Fix
CVE-2023-6736Inefficient regular expression complexity in GitLab6.5CNA v3.10.6%2024-02-07Fix
CVE-2023-6536Kernel: Null pointer dereference in __nvmet_req_complete7.5NVD v3.11.5%2024-02-07Fix
CVE-2023-6535Kernel: Null pointer dereference in nvmet_tcp_execute_request7.5NVD v3.11.5%2024-02-07Fix
CVE-2023-6388SuiteCRM suite CRM SSRF5.0CNA v3.10.5%2024-02-07Fix
CVE-2023-6356Kernel: Null pointer dereference in nvmet_tcp_build_iovec7.5NVD v3.11.5%2024-02-07Fix
CVE-2023-52239Magicsoftware Magic Xpi Integration Platform XML external entity injection6.5v3.10.4%2024-02-06Fix
CVE-2023-50395SolarWinds Platform SQL injection remote code execution8.0CNA v3.11.6%2024-02-06Fix
CVE-2023-47889Binhdrm26 Super Reboot implicit intent for sensitive communication7.8v3.10.3%2024-02-06Exploit code
CVE-2023-47618TP-Link ER7206 Omada Gigabit VPN Router web filtering functionality command execution7.2CNA v3.11.9%2024-02-06
CVE-2023-47617TP-Link ER7206 Omada Gigabit VPN Router OS command injection7.2CNA v3.13.4%2024-02-06
CVE-2023-47354An issue in the PowerOffWidgetReceiver function of Super Reboot (Root) Recovery v1.0.3 allows attackers to arbitrarily reset or power off the device via a crafted intent7.8v3.10.3%2024-02-06
CVE-2023-47353Imoulife Imou GO download without integrity check8.8v3.10.3%2024-02-06
CVE-2023-47209TP-Link ER7206 Omada Gigabit VPN Router ipsec policy functionality command injection7.2CNA v3.13.4%2024-02-06
CVE-2023-47167TP-Link ER7206 Omada Gigabit VPN Router GRE policy functionality command injection7.2CNA v3.13.4%2024-02-06
CVE-2023-47022NCR Terminal Handler insecure direct object reference6.5v3.10.3%2024-02-06
CVE-2023-46683TP-Link ER7206 Omada Gigabit VPN Router OS command injection7.2CNA v3.13.4%2024-02-06
CVE-2023-46360hardy-barth CPH2 Echarge execution with unnecessary privileges8.8v3.12.8%2024-02-06
CVE-2023-46359hardy-barth CPH2 Echarge OS command injection9.8v3.187.5%2024-02-06Reported exploitedNuclei
CVE-2023-46183IBM PowerVM Hypervisor information disclosure5.3CNA v3.10.2%2024-02-06Fix
CVE-2023-45735Westermo Lynx code injection8.0v3.10.5%2024-02-06
CVE-2023-45227Westermo Lynx cross-site scripting5.4v3.10.3%2024-02-06
CVE-2023-45222Westermo Lynx cross-site scripting5.4v3.10.3%2024-02-06
CVE-2023-45213Westermo Lynx permissive cross-domain policy with Untrusted Domains6.5v3.10.4%2024-02-06
CVE-2023-43536Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.3%2024-02-06Fix
CVE-2023-43535Qualcomm Snapdragon improper validation of array index in Display8.4CNA v3.10.1%2024-02-06Fix
CVE-2023-43534Qualcomm Snapdragon use of out-of-range pointer offset in WLAN host8.6CNA v3.10.3%2024-02-06Fix
CVE-2023-43533Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.3%2024-02-06Fix
CVE-2023-43532Qualcomm Snapdragon untrusted pointer dereference in Display8.4CNA v3.10.1%2024-02-06Fix
CVE-2023-43523Qualcomm Snapdragon reachable assertion in WLAN firmware7.5CNA v3.10.3%2024-02-06Fix
CVE-2023-43522Qualcomm Snapdragon null pointer dereference in WLAN firmware7.5CNA v3.10.3%2024-02-06Fix
CVE-2023-43520Qualcomm Snapdragon stack-based buffer overflow in WLAN host8.6CNA v3.10.3%2024-02-06Fix
CVE-2023-43519Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in Video7.3CNA v3.10.3%2024-02-06Fix
CVE-2023-43518Qualcomm Snapdragon untrusted pointer dereference in Video7.3CNA v3.10.3%2024-02-06Fix
CVE-2023-43517Qualcomm Snapdragon improper access control in Automotive Multimedia8.4CNA v3.10.1%2024-02-06Fix
CVE-2023-43516Qualcomm Snapdragon use of out-of-range pointer offset in Video7.8CNA v3.10.1%2024-02-06Fix
CVE-2023-43513Qualcomm Snapdragon use of out-of-range pointer offset in PCIe7.8CNA v3.10.1%2024-02-06Fix
CVE-2023-43482TP-Link ER7206 Omada Gigabit VPN Router guest resource functionality command execution7.2CNA v3.13.3%2024-02-06Exploit code
CVE-2023-42765Westermo Lynx cross-site scripting5.4v3.10.3%2024-02-06
CVE-2023-42664TP-Link ER7206 Omada Gigabit VPN Router OS command injection7.2CNA v3.13.4%2024-02-06
CVE-2023-40545PingFederate OAuth client_secret_jwt authentication bypass8.8CNA v3.10.9%2024-02-06Fix
CVE-2023-40544Westermo Lynx cleartext transmission of sensitive information5.7v3.10.2%2024-02-06
CVE-2023-40143Westermo Lynx forward domain parameter cross-site scripting5.4v3.10.3%2024-02-06
CVE-2023-38579Westermo Lynx 206-F2G cross-site request forgery8.8v3.10.2%2024-02-06
CVE-2023-36498TP-Link ER7206 Omada Gigabit VPN Router PPTP client functionality command injection7.2CNA v3.13.4%2024-02-06
CVE-2023-35188SolarWinds Platform SQL injection remote code execution8.0CNA v3.11.5%2024-02-06Fix
CVE-2023-33077Qualcomm Snapdragon buffer copy without checking size of input in HLOS6.7CNA v3.10.1%2024-02-06Fix
CVE-2023-33076Qualcomm Snapdragon Core memory corruption5.9CNA v3.10.1%2024-02-06Fix
CVE-2023-33072Qualcomm Snapdragon buffer copy without checking size of input in Core9.3CNA v3.10.1%2024-02-06Fix
CVE-2023-33069Qualcomm Snapdragon buffer copy without checking size of input in Audio6.7CNA v3.10.1%2024-02-06Fix
CVE-2023-33068Qualcomm Snapdragon buffer copy without checking size of input in Audio6.7CNA v3.10.1%2024-02-06Fix
CVE-2023-33067Qualcomm Snapdragon use of out-of-range pointer offset in Audio6.7CNA v3.10.1%2024-02-06Fix
CVE-2023-33065Qualcomm Snapdragon buffer over-read in Audio6.1CNA v3.10.1%2024-02-06Fix
CVE-2023-33064Qualcomm Snapdragon buffer over-read in Audio5.5CNA v3.10.1%2024-02-06Fix
CVE-2023-33060Qualcomm Snapdragon buffer over-read in Core7.1CNA v3.10.1%2024-02-06Fix
CVE-2023-33058Qualcomm Snapdragon buffer copy without checking size of input in Modem8.2CNA v3.10.4%2024-02-06Fix
CVE-2023-33057Qualcomm Snapdragon improper input validation in Multi-Mode Call Processor7.5CNA v3.10.3%2024-02-06Fix
CVE-2023-33049Qualcomm Snapdragon Transient denial of service7.5CNA v3.10.3%2024-02-06Fix
CVE-2023-33046Qualcomm Snapdragon time-of-check time-of-use race condition in Trusted Execution Environment7.8CNA v3.10.1%2024-02-06Fix
CVE-2023-32479Dell Encryption privilege escalation6.7CNA v3.10.1%2024-02-06Fix
CVE-2023-32474Dell Display Manager file deletion6.6CNA v3.10.2%2024-02-06Fix
CVE-2023-32454Dell DUP Framework arbitrary file write6.3CNA v3.10.2%2024-02-06Fix
CVE-2023-32451Dell Display Manager least privilege violation7.3CNA v3.10.2%2024-02-06Fix
CVE-2023-28063Dell CPG BIOS denial of service6.7CNA v3.10.2%2024-02-06Fix
CVE-2023-28049Dell Command Monitor (DCM) unsafe privilege definition4.7CNA v3.10.1%2024-02-06Fix
CVE-2023-25543Dell Power Manager (DPM) improper handling of insufficient permissions7.8CNA v3.10.2%2024-02-06Fix
CVE-2023-6234Canon Satera LBP670C Series buffer overflow9.8CNA v3.11.4%2024-02-06Fix
CVE-2023-6233Canon Satera LBP670C Series buffer overflow9.8CNA v3.11.4%2024-02-06Fix
CVE-2023-6232Canon Satera LBP670C Series buffer overflow9.8CNA v3.11.5%2024-02-06Fix
CVE-2023-6231Canon Satera LBP670C Series buffer overflow9.8CNA v3.11.4%2024-02-06Fix
CVE-2023-6230Canon Satera LBP670C Series buffer overflow9.8CNA v3.11.5%2024-02-06Fix
CVE-2023-6229Canon Satera LBP670C Series buffer overflow9.8CNA v3.11.4%2024-02-06Fix
CVE-2023-4503Red Hat EAP eap-galleon: Custom provisioning creates unsecured http-invoker6.8CNA v3.10.7%2024-02-06Fix
CVE-2023-52138Path traversal via crafted cpio archives in Engrampa archivers8.2CNA v3.11.7%2024-02-05Fix
CVE-2023-51951Stock Management System SQL injection9.8v3.11.4%2024-02-05
CVE-2023-51504Dan's Embedder for Google Calendar WordPress plugin cross-site scripting (XSS)5.4v3.10.7%2024-02-05Exploit codeFix
CVE-2023-50782Python Cryptography package vulnerable to Bleichenbacher timing oracle attack7.5NVD v3.11.1%2024-02-05Fix
CVE-2023-50781m2crypto Bleichenbacher timing attack incomplete fix for7.5NVD v3.11.1%2024-02-05Fix
CVE-2023-47355Eyuepcanyilmaz Root Quick Reboot improper input validation7.5NVD v3.10.8%2024-02-05
CVE-2023-34042Spring Security's spring-security.xsd file is world writable4.1CNA v3.10.2%2024-02-05Fix
CVE-2023-27318Denial of service vulnerability in StorageGRID (formerly StorageGRID Webscale)6.5CNA v3.10.7%2024-02-05Fix
CVE-2023-22819Western Digital My Cloud and SanDisk ibi resource exhaustion4.9CNA v3.10.8%2024-02-05Fix
CVE-2023-22817Western Digital My Cloud and SanDisk ibi server-side request forgery5.5CNA v3.10.2%2024-02-05Fix
CVE-2023-7216Cpio: Extraction allows symlinks which enables remote command execution5.3NVD v3.10.9%2024-02-05
CVE-2023-7077Sharp Display Solutions P403 path traversal9.8v3.10.7%2024-02-05Fix
CVE-2023-7029WordPress Button Plugin MaxButtons stored cross-site scripting5.4v3.10.4%2024-02-05Fix
CVE-2023-7014Author Box, Guest Author and Co-Authors for Your Posts WordPress plugin information disclosure7.5v3.10.7%2024-02-05Fix
CVE-2023-6996Display custom fields in the frontend Post and User Profile Fields WordPress plugin code injection8.8v3.11.1%2024-02-05Fix
CVE-2023-6989Shield Security WordPress plugin local file inclusion9.8v3.156.6%2024-02-05NucleiFix
CVE-2023-698510Web AI Assistant WordPress plugin unauthorized access8.8v3.11.4%2024-02-05Exploit codeFix
CVE-2023-6983Display custom fields in the frontend WordPress plugin insecure direct object reference4.3v3.10.5%2024-02-05Fix
CVE-2023-6982Display custom fields in the frontend WordPress plugin stored cross-site scripting5.4v3.10.4%2024-02-05Fix
CVE-2023-6963Getwid Gutenberg Blocks WordPress plugin Captcha bypass5.3v3.10.5%2024-02-05Fix
CVE-2023-6959Getwid Gutenberg Blocks WordPress plugin missing authorization to Recaptcha API Key modification4.3v3.10.4%2024-02-05Fix
CVE-2023-6953PDF Generator For Fluent Forms WordPress plugin cross-site scripting5.4v3.10.4%2024-02-05Fix
CVE-2023-6933Better Search Replace WordPress plugin unauthenticated PHP object injection9.8NVD v3.168.0%2024-02-05NucleiFix
CVE-2023-6925Unlimited Addons for WPBakery Page Builder WordPress plugin arbitrary file upload7.2v3.11.5%2024-02-05
CVE-2023-6884Plugin for Google Reviews WordPress plugin stored cross-site scripting5.4v3.10.6%2024-02-05Fix
CVE-2023-6874silabs.com GSDK Zigbee Unauthenticated DoS via NWK Sequence number manipulation7.5CNA v3.10.4%2024-02-05Fix
CVE-2023-6846File Manager Pro WordPress plugin authenticated (Subscriber+) arbitrary file upload8.8v3.115.9%2024-02-05Fix
CVE-2023-6808Booking for Appointments and Events Calendar Amelia WordPress plugin stored cross-site scripting5.4v3.10.5%2024-02-05Fix
CVE-2023-6807GeneratePress Premium WordPress plugin stored cross-site scripting5.4v3.10.5%2024-02-05Fix
CVE-2023-6701Advanced Custom Fields WordPress plugin stored cross-site scripting5.4v3.10.5%2024-02-05Fix
CVE-2023-6700Cookie Information Free GDPR Consent Solution WordPress plugin arbitrary options update8.8v3.11.5%2024-02-05Exploit codeFix
CVE-2023-6635EditorsKit WordPress plugin authenticated (Administrator+) arbitrary file upload7.2v3.11.6%2024-02-05Fix
CVE-2023-6557The Events Calendar WordPress plugin unauthenticated sensitive information exposure5.3v3.10.6%2024-02-05Fix
CVE-2023-6526Meta Box WordPress Custom Fields Framework plugin stored cross-site scripting5.4v3.10.4%2024-02-05Fix
CVE-2023-6028B&R Industrial Automation Automation Runtime SDM Web interface vulnerable to XSS6.1CNA v3.10.4%2024-02-05Fix
CVE-2023-5800Axis Communications AXIS OS insufficient input validation in VAPIX API create_overlay.cgi5.4CNA v3.10.7%2024-02-05Fix
CVE-2023-5677Axis Communications AXIS OS OS command injection6.3CNA v3.10.6%2024-02-05Fix
CVE-2023-5643Mali GPU Kernel Driver allows improper GPU memory processing operations7.8v3.10.2%2024-02-05Fix
CVE-2023-5249Mali GPU Kernel Driver allows improper GPU memory processing operations7.0v3.10.2%2024-02-05Fix
CVE-2023-4637WPvivid WordPress plugin missing authorization5.3v3.10.6%2024-02-05Fix
CVE-2023-52426libexpat XML entity expansion5.5NVD v3.10.4%2024-02-04Fix
CVE-2023-52425libexpat denial of service7.5NVD v3.12.1%2024-02-04Fix
CVE-2023-50947IBM Business Automation Workflow cross-site scripting5.4CNA v3.10.4%2024-02-04Fix
CVE-2023-33851IBM PowerVM Hypervisor information disclosure5.3CNA v3.10.4%2024-02-04Fix
CVE-2023-6240Kernel: Marvin vulnerability side-channel leakage in the rsa decryption operation6.5NVD v3.11.0%2024-02-04Fix
CVE-2023-49950Logpoint SIEM cross-site scripting5.4NVD v3.10.5%2024-02-03Fix
CVE-2023-44031Reprisesoftware Reprise License Manager improper access control7.5v3.10.7%2024-02-03
CVE-2023-43183Reprise Software License Manager improper access control8.8v3.11.2%2024-02-03
CVE-2023-43016IBM Security Access Manager Container unauthorized access7.3CNA v3.10.7%2024-02-03Fix
CVE-2023-37528A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform6.5CNA v3.10.3%2024-02-03Fix
CVE-2023-32329IBM Security Access Manager Container improper file validation6.2CNA v3.10.2%2024-02-03Fix
CVE-2023-32327IBM Security Access Manager Container XML external entity injection7.1CNA v3.11.0%2024-02-03Fix
CVE-2023-31006IBM Security Access Manager Container denial of service6.5CNA v3.10.9%2024-02-03Fix
CVE-2023-31005IBM Security Access Manager Container privilege escalation6.2CNA v3.10.2%2024-02-03Fix
CVE-2023-31004IBM Security Access Manager Container gain access8.3CNA v3.11.0%2024-02-03Fix
CVE-2023-30999IBM Security Access Manager denial of service7.5CNA v3.11.0%2024-02-03Fix
CVE-2023-51838Ylianst MeshCentral suffers from use of a broken or risky cryptographic algorithm7.5v3.10.5%2024-02-02
CVE-2023-51820Blurams Lumi Security Camera A31C code injection6.8v3.10.5%2024-02-02
CVE-2023-51072Nagios XI NOC component stored cross-site scripting5.4v3.11.3%2024-02-02Fix
CVE-2023-50962IBM PowerSC information disclosure5.9CNA v3.10.3%2024-02-02Fix
CVE-2023-50941IBM PowerSC session fixation6.3CNA v3.10.3%2024-02-02Fix
CVE-2023-50940IBM PowerSC cross-resource origin sharing5.3CNA v3.10.5%2024-02-02Fix
CVE-2023-50939IBM PowerSC information disclosure5.9CNA v3.10.3%2024-02-02Fix
CVE-2023-50938IBM PowerSC clickjacking6.5CNA v3.10.4%2024-02-02Fix
CVE-2023-50937IBM PowerSC information disclosure5.9CNA v3.10.3%2024-02-02Fix
CVE-2023-50936IBM PowerSC session fixation6.3CNA v3.10.4%2024-02-02Fix
CVE-2023-50935IBM PowerSC forced browsing6.5CNA v3.10.4%2024-02-02Fix
CVE-2023-50934IBM PowerSC improper authentication5.3CNA v3.10.4%2024-02-02Fix
CVE-2023-50933IBM PowerSC HTML injection6.1CNA v3.10.4%2024-02-02Fix
CVE-2023-50488Blurams Lumi Security Camera A31C code injection9.8v3.11.2%2024-02-02
CVE-2023-50359QNAP QTS and QuTS hero denial of service3.4CNA v3.10.2%2024-02-02Fix
CVE-2023-50328IBM PowerSC information disclosure3.7CNA v3.10.5%2024-02-02Fix
CVE-2023-50327IBM PowerSC 1.3, 2.0, and 2.1 uses insecure HTTP methods which could allow a remote attacker to perform unauthorized file request modification. IBM X-Force ID: 275109.5.3CNA v3.10.5%2024-02-02Fix
CVE-2023-50326IBM PowerSC information disclosure7.5CNA v3.10.7%2024-02-02Fix
CVE-2023-49118OpenHarmony dsoftbus has an out-of-bounds read2.9CNA v3.10.1%2024-02-02
CVE-2023-48793Zoho ManageEngine ADAudit Plus SQL injection9.8v3.17.0%2024-02-02Fix
CVE-2023-48792Zoho ManageEngine ADAudit Plus SQL injection9.8v3.17.0%2024-02-02Fix
CVE-2023-48645Eptura Archibus SQL injection7.8v3.10.2%2024-02-02
CVE-2023-47568QNAP QTS, QuTS hero and QuTScloud SQL injection8.8CNA v3.10.5%2024-02-02Fix
CVE-2023-47567QNAP QTS, QuTS hero and QuTScloud OS command injection4.7CNA v3.11.1%2024-02-02Fix
CVE-2023-47566QNAP QTS, QuTS hero and QuTScloud OS command injection6.7CNA v3.11.2%2024-02-02Fix
CVE-2023-47564QNAP Qsync Central incorrect permission assignment8.0CNA v3.11.0%2024-02-02Exploit codeFix
CVE-2023-47562QNAP Photo Station command injection7.4CNA v3.11.1%2024-02-02Fix
CVE-2023-47561QNAP Photo Station cross-site scripting5.5CNA v3.10.3%2024-02-02Fix
CVE-2023-47148IBM Storage Protect Plus Server information disclosure5.3CNA v3.10.6%2024-02-02Fix
CVE-2023-47144IBM Tivoli Application Dependency Discovery Manager cross-site scripting6.1CNA v3.10.3%2024-02-02Fix
CVE-2023-47143IBM Tivoli Application Dependency Discovery Manager host header injection10.0CNA v3.10.8%2024-02-02Fix
CVE-2023-47142IBM Tivoli Application Dependency Discovery Manager privilege escalation7.5CNA v3.10.3%2024-02-02Fix
CVE-2023-46344Solar-log 2000 Pm+ cross-site scripting5.4v3.10.4%2024-02-02Exploit codeFix
CVE-2023-46159IBM Storage Ceph denial of service2.6CNA v3.10.7%2024-02-02Fix
CVE-2023-46045Graphviz out-of-bounds read7.8v3.10.8%2024-02-02Fix
CVE-2023-45734OpenHarmony dsoftbus has an out-of-bounds write4.2CNA v3.10.3%2024-02-02
CVE-2023-45037QNAP QTS, QuTS hero and QuTScloud buffer overflow3.8CNA v3.10.6%2024-02-02Fix
CVE-2023-45036QNAP QTS, QuTS hero and QuTScloud buffer overflow3.8CNA v3.10.6%2024-02-02Fix
CVE-2023-45035QNAP QTS, QuTS hero and QuTScloud buffer overflow3.8CNA v3.10.6%2024-02-02Fix
CVE-2023-45028QNAP QTS, QuTS hero and QuTScloud resource exhaustion5.5CNA v3.10.4%2024-02-02Fix
CVE-2023-45027QNAP QTS, QuTS hero and QuTScloud path traversal5.5CNA v3.10.5%2024-02-02Fix
CVE-2023-45026QNAP QTS, QuTS hero and QuTScloud path traversal5.5CNA v3.10.5%2024-02-02Fix
CVE-2023-45025QNAP QTS, QuTS hero and QuTScloud OS command injection9.0CNA v3.11.1%2024-02-02Fix
CVE-2023-43756OpenHarmony dsoftbus has an out-of-bounds read2.9CNA v3.10.1%2024-02-02
CVE-2023-41292QNAP QTS, QuTS hero and QuTScloud buffer overflow3.8CNA v3.10.6%2024-02-02Fix
CVE-2023-41283QNAP QTS, QuTS hero and QuTScloud OS command injection5.5CNA v3.11.0%2024-02-02Fix
CVE-2023-41282QNAP QTS, QuTS hero and QuTScloud OS command injection5.5CNA v3.11.0%2024-02-02Fix
CVE-2023-41281QNAP QTS, QuTS hero and QuTScloud OS command injection5.5CNA v3.11.0%2024-02-02Fix
CVE-2023-41280QNAP QTS, QuTS hero and QuTScloud stack-based buffer overflow5.5CNA v3.10.6%2024-02-02Fix
CVE-2023-41279QNAP QTS, QuTS hero and QuTScloud stack-based buffer overflow5.5CNA v3.10.6%2024-02-02Fix
CVE-2023-41278QNAP QTS, QuTS hero and QuTScloud stack-based buffer overflow5.5CNA v3.10.5%2024-02-02Fix
CVE-2023-41277QNAP QTS, QuTS hero and QuTScloud stack-based buffer overflow5.5CNA v3.10.5%2024-02-02Fix
CVE-2023-41276QNAP QTS, QuTS hero and QuTScloud heap-based buffer overflow5.5CNA v3.10.5%2024-02-02Fix
CVE-2023-41275QNAP QTS, QuTS hero and QuTScloud heap-based buffer overflow5.5CNA v3.10.5%2024-02-02Fix
CVE-2023-41274QNAP QTS, QuTS hero and QuTScloud null pointer dereference5.5CNA v3.10.4%2024-02-02Fix
CVE-2023-41273QNAP QTS, QuTS hero and QuTScloud heap-based buffer overflow5.5CNA v3.10.6%2024-02-02Fix
CVE-2023-39611Softwarefx Chart Fx path traversal7.5v3.10.6%2024-02-02
CVE-2023-39303QNAP QTS improper authentication5.3CNA v3.10.5%2024-02-02Fix
CVE-2023-39302QNAP QTS OS command injection6.6CNA v3.11.1%2024-02-02Fix
CVE-2023-39297QNAP QTS OS command injection8.8CNA v3.11.4%2024-02-02Fix
CVE-2023-38273IBM Cloud Pak System information disclosure7.5CNA v3.10.7%2024-02-02Fix
CVE-2023-38263IBM SOAR QRadar Plugin App improper access controls6.5CNA v3.10.5%2024-02-02Fix
CVE-2023-38020IBM SOAR QRadar Plugin App log injection4.3CNA v3.10.4%2024-02-02Fix
CVE-2023-38019IBM SOAR QRadar Plugin App directory traversal8.1CNA v3.11.0%2024-02-02Fix
CVE-2023-37527A cross-site scripting (XSS) vulnerability affects HCL BigFix Platform5.4CNA v3.10.4%2024-02-02Fix
CVE-2023-32967QNAP QTS and QuTScloud incorrect authorization5.0CNA v3.10.3%2024-02-02Fix
CVE-2023-32333IBM Maximo Asset Management improper access control6.5CNA v3.10.5%2024-02-02Fix
CVE-2023-6676Cross-site request forgery in National Keep's CyberMath8.8CNA v3.10.3%2024-02-02Fix
CVE-2023-6675Malicious file upload in National Keep's CyberMath9.8CNA v3.10.6%2024-02-02Fix
CVE-2023-6673Reflected XSS in National Keep's CyberMath6.1v3.10.3%2024-02-02Fix
CVE-2023-6672Stored XSS in National Keep's CyberMath5.4CNA v3.10.3%2024-02-02Fix
CVE-2023-6387silabs.com GSDK incorrect buffer parsing in Bluetooth LE sample code may lead to buffer overflow7.5CNA v3.10.6%2024-02-02Exploit codeFix
CVE-2023-52195Posts to Page WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01
CVE-2023-52194oEmbed Gist WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01
CVE-2023-52193Page Builder: Live Composer WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-52192Keap Official Opt-in Forms WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01
CVE-2023-52191Infogram WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01
CVE-2023-52189Ideal Interactive Map WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01
CVE-2023-52188Footer Putter WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01
CVE-2023-52175Auto Amazon Links WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-52118WP User Profile Avatar WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51939Relic information disclosure8.8v3.10.9%2024-02-01
CVE-2023-51695Everest Forms WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-01Fix
CVE-2023-51694Embed Privacy WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51693Themify Icons WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51691wpDiscuz WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-01Fix
CVE-2023-51690Advanced iFrame WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51689Easy Video Player WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51685WP Review Slider WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-01Fix
CVE-2023-51684Easy Digital Downloads WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51677Schema and Structured Data for WP and AMP WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51674Advanced Access Manager WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51669Product Code for WooCommerce WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51666Related Post WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51548SlickNav Mobile Menu WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-01Fix
CVE-2023-51540Custom 404 Pro WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2024-02-01Fix
CVE-2023-51536CRM Perks Forms WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-01Fix
CVE-2023-51534Brave Popup Builder WordPress plugin cross-site scripting (XSS)4.8v3.10.3%2024-02-01Fix
CVE-2023-51532Icegram WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51520Booking Calendar WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51514CBX Bookmark and Favorite WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51509RegistrationMagic WordPress plugin cross-site scripting (XSS)6.1NVD v3.10.4%2024-02-01Fix
CVE-2023-51506WPCS WordPress plugin cross-site scripting (XSS)5.4v3.10.3%2024-02-01Fix
CVE-2023-51446GLPI LDAP injection during authentication5.9CNA v3.10.9%2024-02-01Fix
CVE-2023-49617MachineSense FeverWarn missing authentication for critical function9.1v3.10.8%2024-02-01
CVE-2023-49610MachineSense FeverWarn improper input validation8.1v3.10.4%2024-02-01
CVE-2023-49115MachineSense FeverWarn missing authentication for critical function7.5v3.10.6%2024-02-01
CVE-2023-47867MachineSense FeverWarn improper access control8.8v3.10.4%2024-02-01
CVE-2023-47257ConnectWise ScreenConnect code injection8.1v3.11.0%2024-02-01Fix
CVE-2023-47256ConnectWise ScreenConnect improper authentication5.5v3.10.4%2024-02-01Fix
CVE-2023-46706MachineSense FeverWarn use of hard-coded credentials9.8v3.10.7%2024-02-01
CVE-2023-36496Ping Identity PingDirectory Delegated Admin Virtual Attribute Provider privilege escalation7.7CNA v3.10.5%2024-02-01Fix
CVE-2023-7069Advanced iFrame WordPress plugin authenticated (Contributor+) stored cross-site scripting5.4v3.10.3%2024-02-01Fix
CVE-2023-6221MachineSense FeverWarn missing authentication for critical function6.5NVD v3.10.6%2024-02-01
CVE-2023-6078Dassault Systèmes BIOVIA Materials Studio products An OS command injection8.8CNA v3.11.6%2024-02-01
CVE-2023-5841OpenEXR heap overflow in Scanline Deep Data Parsing9.1v3.11.3%2024-02-01Fix
CVE-2023-4472Cryptographically weak PRNG in Opinio9.8NVD v3.10.7%2024-02-01Fix
CVE-2023-50357Cross-site scripting vulnerability in AREAL SAS Webserv1 ASP Web Site5.4v3.10.4%2024-01-31Fix
CVE-2023-50356Improper certificate validation in AREAL Topkapi Vision (Server)6.5v3.10.3%2024-01-31Fix
CVE-2023-50166Pegasystems Pega Platform cross-site scripting6.1CNA v3.10.3%2024-01-31Fix