CVE-2023 records published after 2023
Page seven of eight: records 6,001 to 7,000 of the 7,334 published after 2023, newest first. The first page carries the figures for After 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-50165 | Pegasystems Pega Platform server-side request forgery | 8.5CNA v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2023-47116 | HumanSignal label-studio Label Studio SSRF on Import Bypassing `SSRF_PROTECTION_ENABLED` Protections | 5.3CNA v3.1 | 0.7% | 2024-01-31 | Fix |
| CVE-2023-44313 | Apache ServiceComb Service-Center: Attacker can perform SSRF through the frontend API | 7.6CNA v3.1 | 3.5% | 2024-01-31 | Fix |
| CVE-2023-44312 | Apache ServiceComb Service-Center exposure of sensitive information to an unauthorized actor | 5.8CNA v3.1 | 0.8% | 2024-01-31 | Fix |
| CVE-2023-31505 | Schlix cms An arbitrary file upload | 7.2v3.1 | 1.2% | 2024-01-31 | |
| CVE-2023-28807 | Bypass of ZIA domain fronting detection module through evasion technique | 5.1CNA v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2023-7043 | Unquoted path privilege vulnerability in ESET products for Windows | 3.3CNA v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2023-6780 | Glibc: Integer overflow in __vsyslog_internal | 5.3NVD v3.1 | 2.7% | 2024-01-31 | Fix |
| CVE-2023-6779 | Glibc: Off-by-one heap-based buffer overflow in __vsyslog_internal | 7.5NVD v3.1 | 3.2% | 2024-01-31 | Fix |
| CVE-2023-6246 | Glibc: Heap-based buffer overflow in __vsyslog_internal | 7.8NVD v3.1 | 4.8% | 2024-01-31 | Exploit codeFix |
| CVE-2023-5992 | OpenSC: Side-channel leaks while stripping encryption pkcs#1 padding | 5.9NVD v3.1 | 1.2% | 2024-01-31 | Fix |
| CVE-2023-5390 | Honeywell ControlEdge UOC absolute path traversal | 5.3CNA v3.1 | 0.6% | 2024-01-31 | Fix |
| CVE-2023-2439 | UserPro WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-31 | Fix |
| CVE-2023-51982 | CrateDB authentication bypass | 9.8v3.1 | 0.7% | 2024-01-30 | Fix |
| CVE-2023-51843 | Flatlogic React Dashboard cross-site scripting | 8.2v3.1 | 0.5% | 2024-01-30 | |
| CVE-2023-51837 | Ylianst MeshCentral Missing SSL Certificate Validation | 9.8v3.1 | 0.5% | 2024-01-30 | |
| CVE-2023-51813 | Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the staff_list parameter in the index.php component. | 6.5v3.1 | 0.4% | 2024-01-30 | |
| CVE-2023-46231 | Session token disclosure to Internal Log files in Splunk Add-on Builder | 7.2v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2023-46230 | Sensitive information disclosure to Internal Log files in Splunk Add-on Builder | 4.9NVD v3.1 | 0.4% | 2024-01-30 | Fix |
| CVE-2023-37571 | Softing Th Scope cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-30 | Fix |
| CVE-2023-37518 | A code injection vulnerability affects HCL BigFix ServiceNow Data Flow | 6.4CNA v3.1 | 0.4% | 2024-01-30 | Fix |
| CVE-2023-36260 | Craft CMS denial of service | 7.5v3.1 | 1.1% | 2024-01-30 | Fix |
| CVE-2023-36259 | Craft CMS Audit plugin cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-30 | Fix |
| CVE-2023-7225 | MapPress WordPress plugin authenticated (Contributor+) stored cross-site scripting via Map settings | 5.4v3.1 | 0.5% | 2024-01-30 | Fix |
| CVE-2023-6943 | Mitsubishi Electric EZSocket unsafe reflection | 9.8CNA v3.1 | 2.1% | 2024-01-30 | Fix |
| CVE-2023-6942 | Mitsubishi Electric EZSocket missing authentication | 7.5CNA v3.1 | 0.9% | 2024-01-30 | Fix |
| CVE-2023-6374 | Mitsubishi Electric MELSEC WS Series WS0-GETH00200 authentication bypass by replay | 5.9CNA v3.1 | 0.8% | 2024-01-30 | |
| CVE-2023-6258 | Pkcs11-provider: Side-channel proofing pkcs#1 paths | 8.1NVD v3.1 | 0.6% | 2024-01-30 | Fix |
| CVE-2023-5389 | Honeywell ControlEdge UOC exposed dangerous method | 9.1CNA v3.1 | 0.8% | 2024-01-30 | |
| CVE-2023-5372 | Zyxel NAS326 firmware command injection | 7.2CNA v3.1 | 28.5% | 2024-01-30 | Fix |
| CVE-2023-51842 | An algorithm-downgrade issue was discovered in Ylianst MeshCentral 1.1.16. | 7.5v3.1 | 0.8% | 2024-01-29 | Fix |
| CVE-2023-51840 | Html-js DoraCMS hard-coded credentials | 9.8v3.1 | 0.6% | 2024-01-29 | |
| CVE-2023-51839 | DeviceFarmer stf uses DES-ECB | 9.1v3.1 | 0.4% | 2024-01-29 | |
| CVE-2023-49038 | Buffalo LS210D ping utility command injection | 7.2v3.1 | 1.8% | 2024-01-29 | |
| CVE-2023-46838 | Linux: Netback processing of zero-length transmit fragment | 7.5v3.1 | 1.2% | 2024-01-29 | Fix |
| CVE-2023-40551 | Shim: Out-of-bounds read when parsing mz binaries | 5.1NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-40550 | Shim: Out-of-bound read in verify_buffer_sbat | 5.5NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-40549 | Shim: Out-of-bounds read in verify_buffer_authenticode malformed pe file | 5.5NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-40548 | Shim: Interger overflow leads to heap buffer overflow in verify_sbat_section on 32-bits systems | 7.4NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-40546 | Shim: Out-of-bounds read printing error messages | 5.5NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-30970 | Gotham table and Forward App path traversal | 6.5CNA v3.1 | 0.5% | 2024-01-29 | Fix |
| CVE-2023-29055 | Apache Kylin: Insufficiently protected credentials in config file | 7.5v3.1 | 1.1% | 2024-01-29 | Fix |
| CVE-2023-22836 | Palantir com.palantir.skywise:guardian missing authorization | 3.5CNA v3.1 | 0.3% | 2024-01-29 | Fix |
| CVE-2023-7204 | WP STAGING WordPress Backup plugin unauthorized sensitive data exposure | 7.5NVD v3.1 | 0.6% | 2024-01-29 | Fix |
| CVE-2023-7200 | EventON WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-7199 | Relevanssi WordPress plugin insecure direct object reference | 5.3NVD v3.1 | 0.6% | 2024-01-29 | Fix |
| CVE-2023-7089 | Easy SVG Allow WordPress plugin Author+ stored XSS via SVG | 5.4NVD v3.1 | 0.4% | 2024-01-29 | |
| CVE-2023-7074 | WP Social Bookmark Menu WordPress plugin settings update via CSRF | 8.8NVD v3.1 | 0.3% | 2024-01-29 | |
| CVE-2023-6946 | Autotitle for WordPress plugin settings update to stored XSS via CSRF | 8.8NVD v3.1 | 0.3% | 2024-01-29 | |
| CVE-2023-6633 | Site Notes WordPress plugin admin Note deletion via CSRF | 4.3NVD v3.1 | 0.2% | 2024-01-29 | |
| CVE-2023-6530 | TJ Shortcodes WordPress plugin Contributor+ stored XSS via shortcodes | 5.4NVD v3.1 | 0.4% | 2024-01-29 | |
| CVE-2023-6503 | WP Plugin Lister WordPress plugin settings update to stored XSS via CSRF | 5.4NVD v3.1 | 0.2% | 2024-01-29 | |
| CVE-2023-6391 | Custom User CSS WordPress plugin settings update via CSRF | 8.8NVD v3.1 | 0.3% | 2024-01-29 | |
| CVE-2023-6390 | WordPress Users plugin settings update via CSRF | 8.8NVD v3.1 | 0.3% | 2024-01-29 | |
| CVE-2023-6389 | WordPress Toolbar plugin open redirect | 6.1NVD v3.1 | 26.8% | 2024-01-29 | Nuclei |
| CVE-2023-6279 | Woostify Sites Library WordPress plugin Subscriber+ arbitrary options update to DoS | 7.1NVD v3.1 | 0.5% | 2024-01-29 | Fix |
| CVE-2023-6278 | Biteship for WooCommerce for WordPress reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-6165 | The Restrict Usernames Emails Characters WordPress plugin before 3.1.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed | 4.8NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-5956 | Wp-Adv-Quiz WordPress plugin Admin+ stored XSS in Quiz Overview | 4.8NVD v3.1 | 0.4% | 2024-01-29 | |
| CVE-2023-5943 | Wp-Adv-Quiz WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-5378 | Stored XSS in SmodBIP and MegaBIP | 5.4NVD v3.1 | 0.5% | 2024-01-29 | Fix |
| CVE-2023-5124 | PageLayer WordPress plugin Author+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-4554 | OpenText AppBuilder XML external entity (XXE) Processing | 4.9CNA v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-4553 | Unauthenticated access to AppBuilder Configuration files | 5.3CNA v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-4552 | OpenText AppBuilder Java Database Connectivity (JDBC) URL Manipulation | 5.5CNA v3.1 | 0.4% | 2024-01-29 | Fix |
| CVE-2023-4551 | OpenText AppBuilder command injection via Task Scheduler | 7.2CNA v3.1 | 1.0% | 2024-01-29 | Fix |
| CVE-2023-4550 | OpenText AppBuilder unauthenticated arbitrary file read | 7.5CNA v3.1 | 0.5% | 2024-01-29 | Fix |
| CVE-2023-1705 | Forcepoint F|One SmartEdge Agent missing authorization | 8.4CNA v3.1 | 0.2% | 2024-01-29 | Fix |
| CVE-2023-6200 | Kernel: Icmpv6 router advertisement packets, aka Linux tcp/ip remote code execution | 7.5NVD v3.1 | 2.2% | 2024-01-28 | Fix |
| CVE-2023-52389 | Pocoproject poco integer overflow | 9.8v3.1 | 0.9% | 2024-01-27 | Fix |
| CVE-2023-52187 | Image Source Control WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-27 | Fix |
| CVE-2023-48202 | Sunlight Cms cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-27 | |
| CVE-2023-48201 | Sunlight Cms cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-27 | |
| CVE-2023-6497 | WordPress Simple Shopping Cart plugin Authenticated(Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-27 | Fix |
| CVE-2023-6482 | Synaptics Fingerprint Driver encryption key derived from static host information | 5.2CNA v3.1 | 0.1% | 2024-01-27 | Fix |
| CVE-2023-48135 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48133 | LINE angel coffee mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48132 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48131 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48130 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48129 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48128 | LINE UNITED BOXING GYM mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48127 | Linecorp line cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-48126 | LINE Luxe Beauty Clinic mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-26 | |
| CVE-2023-38323 | openNDS OS command injection | 9.8v3.1 | 1.1% | 2024-01-26 | Fix |
| CVE-2023-38319 | openNDS OS command injection | 9.8v3.1 | 1.1% | 2024-01-26 | Fix |
| CVE-2023-38318 | openNDS OS command injection | 9.8v3.1 | 1.1% | 2024-01-26 | Fix |
| CVE-2023-38317 | openNDS OS command injection | 9.8v3.1 | 1.1% | 2024-01-26 | Fix |
| CVE-2023-29081 | InstallShield Symlink vulnerability Affecting Suite Project Setups | 5.5CNA v3.1 | 0.1% | 2024-01-26 | Fix |
| CVE-2023-6919 | Path traversal in VGuard IP Camera Network Recorder | 7.5CNA v3.1 | 0.6% | 2024-01-26 | Fix |
| CVE-2023-6291 | Keycloak: Redirect_uri validation bypass | 7.1CNA v3.1 | 1.0% | 2024-01-26 | Fix |
| CVE-2023-6159 | Inefficient regular expression complexity in GitLab | 6.5CNA v3.1 | 1.0% | 2024-01-26 | Fix |
| CVE-2023-5933 | Improper neutralization of script-related HTML tags in a web page (basic XSS) in GitLab | 6.4CNA v3.1 | 0.7% | 2024-01-26 | Fix |
| CVE-2023-5612 | Missing authorization in GitLab | 5.3CNA v3.1 | 4.9% | 2024-01-26 | Exploit codeFix |
| CVE-2023-52356 | LibTIFF: Segment fault in LibTIFF in tiffreadrgbatileext leading to denial of service | 7.5NVD v3.1 | 2.2% | 2024-01-25 | Exploit codeFix |
| CVE-2023-52355 | LibTIFF: Tiffrasterscanlinesize64 produce too-big size and could cause oom | 7.5NVD v3.1 | 1.8% | 2024-01-25 | Fix |
| CVE-2023-52251 | provectus UI code injection | 8.8v3.1 | 86.8% | 2024-01-25 | Reported exploitedNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-52076 | Remote code execution vulnerability in Atril's EPUB ebook parsing | 8.5CNA v3.1 | 1.1% | 2024-01-25 | Reported exploitedExploit codeFix |
| CVE-2023-52046 | Webmin cross-site scripting | 4.8v3.1 | 0.6% | 2024-01-25 | |
| CVE-2023-51833 | TRENDnet Tew-411brpplus command injection | 8.1v3.1 | 4.4% | 2024-01-25 | |
| CVE-2023-50785 | Zoho ManageEngine ADAudit Plus path traversal | 2.7v3.1 | 2.0% | 2024-01-25 | Fix |
| CVE-2023-41474 | Ivanti Avalanche path traversal | 6.5NVD v3.1 | 37.6% | 2024-01-25 | Emerging Threats |
| CVE-2023-40547 | Shim: Rce in HTTP boot support may lead to secure boot bypass | 8.3NVD v3.1 | 5.4% | 2024-01-25 | Fix |
| CVE-2023-33760 | Splicecom Maximiser Soft Pbx improper certificate validation | 5.3v3.1 | 0.3% | 2024-01-25 | |
| CVE-2023-33759 | Splicecom Maximiser Soft Pbx missing brute-force protection | 9.8v3.1 | 0.8% | 2024-01-25 | |
| CVE-2023-33758 | Splicecom Maximiser Soft Pbx cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-25 | |
| CVE-2023-33757 | Splicecom IPCS2 improper certificate validation | 5.9v3.1 | 0.3% | 2024-01-25 | |
| CVE-2023-7227 | Command injection vulnerability in SystemK NVR 504/508/516 | 9.8v3.1 | 1.3% | 2024-01-25 | |
| CVE-2023-6282 | Cross-site scripting vulnerability in IceHrm | 6.1v3.1 | 0.3% | 2024-01-25 | |
| CVE-2023-6267 | Red Hat Quarkus REST resource annotations vulnerability | 8.6CNA v3.1 | 0.7% | 2024-01-25 | Fix |
| CVE-2023-3181 | Insecure permissions in Splashtop Software Updater | 7.8NVD v3.1 | 0.2% | 2024-01-25 | Fix |
| CVE-2023-52221 | Barcode Scanner with Inventory and Order Manager WordPress plugin arbitrary file upload | 9.8v3.1 | 0.6% | 2024-01-24 | Fix |
| CVE-2023-52040 | TOTOLINK X6000R command injection | 9.8v3.1 | 0.9% | 2024-01-24 | |
| CVE-2023-52039 | TOTOLINK X6000R command injection | 9.8v3.1 | 0.8% | 2024-01-24 | |
| CVE-2023-52038 | TOTOLINK X6000R command injection | 9.8v3.1 | 0.8% | 2024-01-24 | |
| CVE-2023-51890 | Ctan Mathtex infinite loop | 7.5v3.1 | 0.9% | 2024-01-24 | |
| CVE-2023-51889 | Ctan Mathtex validate function stack-based buffer overflow | 9.8v3.1 | 1.3% | 2024-01-24 | |
| CVE-2023-51888 | Ctan Mathtex nomath function buffer overflow | 7.5v3.1 | 0.8% | 2024-01-24 | |
| CVE-2023-51887 | Ctan Mathtex command injection | 9.8v3.1 | 2.5% | 2024-01-24 | |
| CVE-2023-51886 | Ctan Mathtex main function buffer overflow | 7.5v3.1 | 0.8% | 2024-01-24 | |
| CVE-2023-51885 | Ctan Mathtex buffer overflow | 9.8v3.1 | 1.3% | 2024-01-24 | |
| CVE-2023-51711 | Regify Regipay uncontrolled search path | 7.8v3.1 | 0.2% | 2024-01-24 | |
| CVE-2023-51702 | Apache Airflow CNCF Kubernetes provider triggerer configuration storage information disclosure | 6.5v3.1 | 0.4% | 2024-01-24 | Fix |
| CVE-2023-50944 | Apache Airflow: Bypass permission verification to read code of other dags | 6.5v3.1 | 1.0% | 2024-01-24 | Fix |
| CVE-2023-50943 | Apache Airflow: Potential pickle deserialization vulnerability in XComs | 7.5v3.1 | 1.2% | 2024-01-24 | Fix |
| CVE-2023-44281 | Dell Pair arbitrary file deletion | 6.6CNA v3.1 | 0.2% | 2024-01-24 | Fix |
| CVE-2023-44001 | Line Ailand clinic mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-44000 | Line Otakara lapis totuka mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43999 | Linecorp line cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43998 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43997 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43996 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43995 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43994 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43993 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43992 | Linecorp line information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43991 | Line PRIMA CLINIC mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43990 | Line cherub-hair mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43989 | Line mokumoku chohu mini-app information disclosure | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43988 | Linecorp line cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-24 | |
| CVE-2023-43317 | Coign improper privilege management | 8.8v3.1 | 1.1% | 2024-01-24 | Exploit code |
| CVE-2023-31037 | NVIDIA Bluefield 2 DPU BMC, BlueField 3 DPU BMC code injection | 7.2CNA v3.1 | 0.7% | 2024-01-24 | Fix |
| CVE-2023-24676 | Arbitrary code execution in Processwire | 7.2v3.1 | 1.3% | 2024-01-24 | |
| CVE-2023-6697 | WP Go Maps (formerly WP Google Maps) WordPress plugin reflected cross-site scripting | 6.1v3.1 | 1.0% | 2024-01-24 | NucleiFix |
| CVE-2023-52338 | Trend Micro Deep Security Agent link following | 7.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-52337 | Trend Micro Deep Security Agent improper access control | 7.8v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-52331 | Trend Micro Apex Central post-authenticated server-side request forgery | 7.1v3.1 | 0.6% | 2024-01-23 | Fix |
| CVE-2023-52330 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 2.4% | 2024-01-23 | Fix |
| CVE-2023-52329 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 0.9% | 2024-01-23 | Fix |
| CVE-2023-52328 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 2.5% | 2024-01-23 | Fix |
| CVE-2023-52327 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 2.5% | 2024-01-23 | Fix |
| CVE-2023-52326 | Trend Micro Apex Central cross-site scripting | 6.1v3.1 | 2.5% | 2024-01-23 | Fix |
| CVE-2023-52325 | Trend Micro Apex Central one local file inclusion | 7.5v3.1 | 4.5% | 2024-01-23 | Fix |
| CVE-2023-52324 | Trend Micro Apex Central An arbitrary file upload | 8.8v3.1 | 4.2% | 2024-01-23 | Fix |
| CVE-2023-52094 | Trend Micro Apex One updater link following | 7.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-52093 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-52092 | Trend Micro Apex One security agent link following | 7.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-52091 | Trend Micro Apex One anti-spyware engine link following | 7.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-52090 | Trend Micro Apex One security agent link following | 7.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-51210 | Webkul Bundle Product SQL injection | 9.8v3.1 | 1.1% | 2024-01-23 | |
| CVE-2023-51043 | Linux kernel use-after-free | 7.0v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-51042 | Linux kernel use-after-free | 7.8v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-50275 | HPE OneView improper authentication | 7.5CNA v3.1 | 1.0% | 2024-01-23 | Fix |
| CVE-2023-50274 | HPE OneView command injection | 7.8CNA v3.1 | 0.7% | 2024-01-23 | Fix |
| CVE-2023-49783 | silverstripe-admin no permission checks for editing/deleting records with CSV import form | 4.3CNA v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-49657 | Apache Superset: Stored XSS in Dashboard Title and Chart Title | 9.6CNA v3.1 | 0.8% | 2024-01-23 | Fix |
| CVE-2023-48714 | Silverstripe Framework GridFieldAddExistingAutocompleter information disclosure | 4.3CNA v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2023-47202 | Trend Micro Apex One files accessible to external parties | 7.8v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2023-47201 | Trend Micro Apex One improper privilege management | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47200 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47199 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47198 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47197 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47196 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47195 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47194 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47193 | Trend Micro Apex One origin validation error | 7.8v3.1 | 0.1% | 2024-01-23 | Fix |
| CVE-2023-47192 | Trend Micro Apex One link following | 7.8v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-47115 | HumanSignal label-studio Label Studio XSS vulnerability on Avatar upload | 7.1CNA v3.1 | 1.4% | 2024-01-23 | NucleiFix |
| CVE-2023-46892 | Meross MSH30Q authentication bypass by replay | 8.8v3.1 | 0.3% | 2024-01-23 | |
| CVE-2023-46889 | Meross MSH30Q cleartext transmission of sensitive information | 5.7v3.1 | 0.2% | 2024-01-23 | |
| CVE-2023-46343 | Linux kernel null pointer dereference | 5.5v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-45889 | Classlink Oneclick Universal cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-23 | |
| CVE-2023-44401 | Silverstripe GraqhQL's view permissions are bypassed for paginated lists of ORM data | 5.3CNA v3.1 | 0.4% | 2024-01-23 | Fix |
| CVE-2023-42937 | Apple macOS sensitive information in log files | 5.5v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-42935 | Apple macOS improper authentication | 5.5v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-42888 | Apple macOS information disclosure | 5.5v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2023-42887 | Apple macOS arbitrary file read | 6.3v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-42881 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-42144 | Shelly Trv cleartext transmission of sensitive information | 5.5v3.1 | 0.1% | 2024-01-23 | |
| CVE-2023-42143 | Shelly Trv missing integrity check | 5.4v3.1 | 0.2% | 2024-01-23 | |
| CVE-2023-41178 | Trend Micro Mobile Security for Enterprise reflected cross-site scripting | 6.1v3.1 | 1.8% | 2024-01-23 | Fix |
| CVE-2023-41177 | Trend Micro Mobile Security for Enterprise reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2023-41176 | Trend Micro Mobile Security for Enterprise reflected cross-site scripting | 6.1v3.1 | 1.8% | 2024-01-23 | Fix |
| CVE-2023-40528 | Apple macOS improper access control | 5.5v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-39197 | Kernel: Dccp: Conntrack out-of-bounds read in nf_conntrack_dccp_packet | 7.5NVD v3.1 | 1.0% | 2024-01-23 | Fix |
| CVE-2023-38627 | Trend Micro Apex Central post-authenticated server-side request forgery | 5.4v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-38626 | Trend Micro Apex Central post-authenticated server-side request forgery | 5.4v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-38625 | Trend Micro Apex Central post-authenticated server-side request forgery | 5.4v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-38624 | Trend Micro Apex Central post-authenticated server-side request forgery | 5.4v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-36177 | Badaix Snapcast code injection | 9.8v3.1 | 27.3% | 2024-01-23 | Fix |
| CVE-2023-35837 | Solax Pocket Wifi 3 default credentials | 9.8v3.1 | 1.0% | 2024-01-23 | |
| CVE-2023-35836 | Solax Pocket Wifi 3 incorrect authorization | 6.5v3.1 | 0.3% | 2024-01-23 | |
| CVE-2023-35835 | Solax Pocket WiFi 3 WiFi access point missing authentication | 9.8v3.1 | 0.5% | 2024-01-23 | |
| CVE-2023-31654 | Redis raft hiredisAllocFns vulnerability | 9.8v3.1 | 0.6% | 2024-01-23 | |
| CVE-2023-7238 | Improper neutralization of input during web page generation in Orthanc Osimis DICOM Web Viewer | 6.1NVD v3.1 | 0.3% | 2024-01-23 | Fix |
| CVE-2023-7237 | Lantronix XPort weak encoding for password | 7.5v3.1 | 0.3% | 2024-01-23 | |
| CVE-2023-6926 | Improper neutralization of special elements used in an OS command in Crestron AM-300 | 7.8v3.1 | 0.5% | 2024-01-23 | Fix |
| CVE-2023-6573 | HPE OneView insufficiently protected credentials | 5.5CNA v3.1 | 0.2% | 2024-01-23 | Fix |
| CVE-2023-52354 | Chasquid HTTP Request/Response Smuggling vulnerability | 7.5v3.1 | 0.5% | 2024-01-22 | Fix |
| CVE-2023-50308 | IBM Db2 denial of service | 6.5CNA v3.1 | 0.8% | 2024-01-22 | Fix |
| CVE-2023-48118 | Quest-analytics Iqcrm Quest Analytics LLC SQL injection | 9.8v3.1 | 1.2% | 2024-01-22 | |
| CVE-2023-47747 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.7% | 2024-01-22 | Fix |
| CVE-2023-47746 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.7% | 2024-01-22 | Fix |
| CVE-2023-47352 | Technicolor TC8715D WPA2 default password generation vulnerability | 8.8v3.1 | 0.4% | 2024-01-22 | |
| CVE-2023-47158 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.7% | 2024-01-22 | Fix |
| CVE-2023-47152 | IBM Db2 information disclosure | 5.9CNA v3.1 | 0.6% | 2024-01-22 | Fix |
| CVE-2023-47141 | IBM Db2 denial of service | 5.3CNA v3.1 | 0.7% | 2024-01-22 | Fix |
| CVE-2023-45193 | IBM Db2 denial of service | 5.9CNA v3.1 | 0.8% | 2024-01-22 | Fix |
| CVE-2023-44395 | Autolab has path traversal vulnerability in Assessment functionality | 4.9CNA v3.1 | 0.6% | 2024-01-22 | Fix |
| CVE-2023-27859 | IBM Db2 code execution | 6.5CNA v3.1 | 1.0% | 2024-01-22 | Fix |
| CVE-2023-24135 | Jensenofscandinavia Eagle 1200ac command injection | 7.8v3.1 | 2.1% | 2024-01-22 | |
| CVE-2023-7194 | Meris WordPress theme reflected XSS | 6.1NVD v3.1 | 0.3% | 2024-01-22 | |
| CVE-2023-7170 | EventON-RSVP WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2023-7082 | WP All Import WordPress plugin Admin+ arbitrary file upload to RCE | 7.2NVD v3.1 | 1.2% | 2024-01-22 | Fix |
| CVE-2023-6626 | Product Enquiry for WooCommerce WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2023-6625 | Product Enquiry for WooCommerce for WordPress arbitrary Enquiry deletion via CSRF | 4.3NVD v3.1 | 0.2% | 2024-01-22 | Fix |
| CVE-2023-6456 | WP Review Slider WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-01-22 | Fix |
| CVE-2023-6447 | EventPrime WordPress plugin unauthenticated Event access | 5.3NVD v3.1 | 0.6% | 2024-01-22 | Fix |
| CVE-2023-6384 | WP User Profile Avatar WordPress plugin Author+ Avatar Deletion/Update via IDOR | 4.3NVD v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2023-6290 | SEOPress stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2024-01-22 | Fix |
| CVE-2023-52353 | Arm mbed TLS session fixation | 7.5v3.1 | 0.5% | 2024-01-21 | Fix |
| CVE-2023-6531 | Kernel: Gc's deletion of an skb races with unix_stream_read_generic leading to UAF | 7.0NVD v3.1 | 0.2% | 2024-01-21 | Fix |
| CVE-2023-51928 | Yonyou YonBIP arbitrary file upload | 9.8v3.1 | 0.8% | 2024-01-20 | |
| CVE-2023-51927 | Yonyou YonBIP SQL injection | 9.8v3.1 | 0.6% | 2024-01-20 | |
| CVE-2023-51926 | Yonyou YonBIP arbitrary file read | 7.5v3.1 | 0.5% | 2024-01-20 | |
| CVE-2023-51925 | Yonyou YonBIP arbitrary file upload | 9.8v3.1 | 0.8% | 2024-01-20 | |
| CVE-2023-51924 | Yonyou YonBIP arbitrary file upload | 9.8v3.1 | 0.8% | 2024-01-20 | |
| CVE-2023-51906 | Yonyou YonBIP arbitrary code execution | 9.8v3.1 | 1.0% | 2024-01-20 | |
| CVE-2023-51892 | Weaver e-cology arbitrary code execution | 9.8v3.1 | 1.0% | 2024-01-20 | |
| CVE-2023-47024 | Ncratleos Terminal Handler cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-20 | |
| CVE-2023-46447 | Popsdiabetes Rebel cleartext transmission of sensitive information | 4.3v3.1 | 0.4% | 2024-01-20 | Exploit code |
| CVE-2023-7063 | WPForms Pro WordPress plugin stored cross-site scripting | 6.1NVD v3.1 | 0.5% | 2024-01-20 | Fix |
| CVE-2023-51948 | Actidata Actinas Sl 2u-8 Rdx /fm directory listing | 7.5v3.1 | 0.7% | 2024-01-19 | |
| CVE-2023-51947 | Actidata Actinas Sl 2u-8 Rdx missing authentication | 9.1v3.1 | 0.7% | 2024-01-19 | |
| CVE-2023-51946 | Actidata Actinas Sl 2u-8 Rdx nasSvr.php reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-19 | |
| CVE-2023-50963 | IBM Storage Defender HTTP host header injection | 6.5CNA v3.1 | 0.3% | 2024-01-19 | Fix |
| CVE-2023-50694 | DOM96 Httpbeast improper input validation | 9.8v3.1 | 1.0% | 2024-01-19 | |
| CVE-2023-50693 | An issue in Jester v.0.6.0 and before allows a remote attacker to send a malicious crafted request. | 9.8v3.1 | 1.0% | 2024-01-19 | |
| CVE-2023-50447 | Arbitrary code execution in Pillow | 8.1v3.1 | 1.7% | 2024-01-19 | Fix |
| CVE-2023-50030 | Joommasters Jmssetting SQL injection | 9.8v3.1 | 0.7% | 2024-01-19 | |
| CVE-2023-50028 | Prestashopmodules Sliding Cart Block SQL injection | 9.8v3.1 | 0.7% | 2024-01-19 | |
| CVE-2023-49329 | Anomali Match OS command injection | 7.2v3.1 | 1.3% | 2024-01-19 | Fix |
| CVE-2023-47718 | IBM Maximo Asset Management cross-site request forgery | 4.3CNA v3.1 | 0.3% | 2024-01-19 | Fix |
| CVE-2023-47035 | Reptilian Coin tradingOpen parameter vulnerability | 7.5v3.1 | 0.5% | 2024-01-19 | |
| CVE-2023-47034 | Uniswapfrontrunbot improper access control | 7.5v3.1 | 0.4% | 2024-01-19 | |
| CVE-2023-47033 | MultiSigWallet executeTransaction function vulnerability | 7.5v3.1 | 0.5% | 2024-01-19 | |
| CVE-2023-46351 | MyPresta Manufacturers (brands) Images Block SQL injection | 9.8v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2023-43985 | Sunnytoo Stblogsearch SQL injection | 9.8v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2023-42766 | Intel NUC 8 Compute Element BIOS firmware some improper input validation | 7.5CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-42429 | Intel NUC BIOS firmware privilege escalation | 7.5CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-40683 | IBM OpenPages with Watson privilege escalation | 8.8CNA v3.1 | 0.7% | 2024-01-19 | Fix |
| CVE-2023-38738 | IBM OpenPages with Watson information disclosure | 6.8CNA v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2023-38587 | Intel NUC BIOS firmware some improper input validation | 7.5CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-38541 | Intel HID Event Filter drivers some insecure inherited permissions | 6.7CNA v3.1 | 0.1% | 2024-01-19 | Fix |
| CVE-2023-35020 | IBM Sterling Control Center directory traversal | 5.4CNA v3.1 | 0.5% | 2024-01-19 | Fix |
| CVE-2023-33295 | Cohesity Dataplatform improper certificate validation | 6.5v3.1 | 0.3% | 2024-01-19 | |
| CVE-2023-32544 | Intel HotKey Services some improper access control | 7.3CNA v3.1 | 0.1% | 2024-01-19 | Fix |
| CVE-2023-32337 | IBM Maximo Spatial Asset Management server-side request forgery | 5.4CNA v3.1 | 0.3% | 2024-01-19 | Fix |
| CVE-2023-32272 | Intel NUC Pro Software Suite Configuration Tool software installers some uncontrolled search path | 7.9CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-29495 | Intel NUC BIOS firmware improper input validation | 7.5CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-29244 | Intel Integrated Sensor Hub (ISH) driver some incorrect default permissions | 6.7CNA v3.1 | 0.1% | 2024-01-19 | Fix |
| CVE-2023-28743 | Intel NUC BIOS firmware improper input validation | 7.5CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-28738 | Intel NUC BIOS firmware improper input validation | 7.5CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-28722 | Intel NUC BIOS firmware privilege escalation | 6.7CNA v3.1 | 0.1% | 2024-01-19 | Fix |
| CVE-2023-27168 | Xpand-it Write-back Manager arbitrary file upload | 9.8v3.1 | 1.3% | 2024-01-19 | |
| CVE-2023-6450 | Lenovo App Store Application insecure permissions | 5.5CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-6044 | Lenovo Vantage authentication bypass by spoofing | 6.3CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-6043 | Lenovo Vantage improper certificate validation | 7.8CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-5716 | ASUS Armoury Crate arbitrary file write | 9.8v3.1 | 0.6% | 2024-01-19 | Fix |
| CVE-2023-5081 | Lenovo Tablet system information disclosure | 3.3CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-5080 | Lenovo Tablet incorrect privilege assignment | 6.8CNA v3.1 | 0.2% | 2024-01-19 | Fix |
| CVE-2023-51464 | Adobe Experience Manager cross-site scripting (stored XSS) | 5.4CNA v3.1 | 0.4% | 2024-01-18 | Fix |
| CVE-2023-51463 | Adobe Experience Manager cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.4% | 2024-01-18 | Fix |
| CVE-2023-51258 | Tortall Yasm memory leak | 5.5v3.1 | 0.3% | 2024-01-18 | Fix |
| CVE-2023-51217 | Tenhot Tws-200 Firmware OS command injection | 8.8v3.1 | 1.2% | 2024-01-18 | |
| CVE-2023-50614 | Cdebyte E880-ir01 cleartext transmission of sensitive information | 7.5v3.1 | 0.4% | 2024-01-18 | |
| CVE-2023-49943 | Zoho Manageengine Servicedesk Plus Msp cross-site scripting | 5.4v3.1 | 1.8% | 2024-01-18 | Fix |
| CVE-2023-48359 | UNISOC chipsets autotest driver out-of-bounds write | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48358 | UNISOC chipsets drm driver out-of-bounds write | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48357 | UNISOC chipsets vsp driver out-of-bounds write | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48356 | UNISOC chipsets jpg driver out-of-bounds write | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48355 | UNISOC chipsets jpg driver out-of-bounds write | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48354 | UNISOC chipsets telephone service improper input validation | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48353 | UNISOC chipsets vsp driver use-after-free | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48352 | UNISOC chipsets phasecheckserver out-of-bounds write | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48351 | UNISOC chipsets video decoder out-of-bounds write | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48350 | UNISOC chipsets video decoder out-of-bounds write | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48349 | UNISOC chipsets video decoder out-of-bounds write | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48348 | UNISOC chipsets video decoder out-of-bounds write | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48347 | UNISOC chipsets video decoder out-of-bounds read | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48346 | UNISOC chipsets video decoder improper input validation | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48345 | UNISOC chipsets video decoder out-of-bounds read | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48344 | UNISOC chipsets video decoder out-of-bounds read | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48343 | UNISOC chipsets video decoder out-of-bounds write | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48342 | UNISOC chipsets media service out-of-bounds write | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48341 | UNISOC chipsets video decoder out-of-bounds read | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48340 | UNISOC chipsets video decoder out-of-bounds write | 5.5v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-48339 | UNISOC chipsets jpg driver missing authorization | 4.4v3.1 | 0.1% | 2024-01-18 | Fix |
| CVE-2023-43824 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 1.0% | 2024-01-18 | |
| CVE-2023-43823 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 1.0% | 2024-01-18 | |
| CVE-2023-43822 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 0.8% | 2024-01-18 | |
| CVE-2023-43821 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 1.0% | 2024-01-18 | |
| CVE-2023-43820 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 1.0% | 2024-01-18 | |
| CVE-2023-43819 | Delta Electronics DOPSoft stack-based buffer overflow | 7.8v3.1 | 1.0% | 2024-01-18 | |
| CVE-2023-43818 | Delta Electronics DOPSoft buffer overflow | 7.8v3.1 | 1.0% | 2024-01-18 | |
| CVE-2023-43817 | Delta Electronics DOPSoft buffer overflow | 7.8v3.1 | 0.5% | 2024-01-18 | |
| CVE-2023-43816 | Delta Electronics DOPSoft buffer overflow | 7.8v3.1 | 0.4% | 2024-01-18 | |
| CVE-2023-43815 | Delta Electronics DOPSoft buffer overflow | 7.8v3.1 | 0.5% | 2024-01-18 | |
| CVE-2023-40052 | Progress Application Server (PAS) for OpenEdge denial of service | 7.5CNA v3.1 | 0.6% | 2024-01-18 | Fix |
| CVE-2023-40051 | Progress Application Server (PAS) for OpenEdge file upload via directory traversal | 9.1CNA v3.1 | 0.6% | 2024-01-18 | Fix |
| CVE-2023-34348 | Improper check or handling of exceptional conditions in AVEVA PI Server | 7.5v3.1 | 0.6% | 2024-01-18 | Fix |
| CVE-2023-31274 | Missing release of resource after effective lifetime vulnerability in AVEVA PI Server | 5.3v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2023-28901 | Skoda Auto Skoda Connect trip data disclosure from Backend | 5.3v3.1 | 0.5% | 2024-01-18 | |
| CVE-2023-28900 | Škoda Auto Škoda Connect Nickname Disclosure on the Backend Automotive Server | 5.3v3.1 | 0.4% | 2024-01-18 | |
| CVE-2023-7153 | Reflected XSS in Macroturk's Macro-Bel | 6.1CNA v3.1 | 0.3% | 2024-01-18 | Fix |
| CVE-2023-6970 | WP Recipe Maker WordPress plugin reflected cross-site scripting via Referer | 6.1v3.1 | 0.7% | 2024-01-18 | NucleiFix |
| CVE-2023-6958 | WP Recipe Maker WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-18 | Fix |
| CVE-2023-6816 | Red Hat Enterprise Linux 6 Extended Lifecycle Support out-of-bounds write | 9.8NVD v3.1 | 2.1% | 2024-01-18 | Fix |
| CVE-2023-6340 | SonicWall Capture Client stack-based buffer overflow | 5.5v3.1 | 0.2% | 2024-01-18 | Fix |
| CVE-2023-6184 | Cloud Software Group Citrix Session Recording improper control of dynamic code | 5.0CNA v3.1 | 46.6% | 2024-01-18 | Emerging ThreatsFix |
| CVE-2023-5806 | SQLi in Mergen Soft Quality Management System | 9.8CNA v3.1 | 0.5% | 2024-01-18 | Fix |
| CVE-2023-5131 | Delta Electronics ISPSoft DVP file parser out-of-bounds write | 8.8v3.1 | 0.8% | 2024-01-18 | |
| CVE-2023-5130 | Delta Electronics WPLSoft buffer overflow | 8.8v3.1 | 0.6% | 2024-01-18 | |
| CVE-2023-52285 | LRX0014 Examsys SQL injection | 7.5v3.1 | 0.6% | 2024-01-17 | |
| CVE-2023-52069 | kodcloud kodbox cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-17 | |
| CVE-2023-51743 | Buffer overflow vulnerability in Skyworth Router | 7.5v3.1 | 0.6% | 2024-01-17 | Fix |
| CVE-2023-51742 | Buffer overflow vulnerability in Skyworth Router | 7.5v3.1 | 0.6% | 2024-01-17 | Fix |
| CVE-2023-51741 | Cleartext Submission of Password vulnerability in Skyworth Router | 7.5v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51740 | Cleartext Submission of Password vulnerability in Skyworth Router | 7.5v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51739 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51738 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51737 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51736 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51735 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51734 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51733 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51732 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51731 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51730 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51729 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51728 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51727 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51726 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51725 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51724 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51723 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51722 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51721 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51720 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-51719 | Stored cross-site scripting vulnerability in Skyworth Router | 5.4v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-50950 | IBM QRadar information disclosure | 3.7CNA v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-49515 | TP-Link Tapo C200 insecure storage of sensitive information | 4.6v3.1 | 0.4% | 2024-01-17 | |
| CVE-2023-48858 | Abo.cms login page php code in Armex cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-17 | Fix |
| CVE-2023-46952 | Abo.cms cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-17 | |
| CVE-2023-44077 | Studionetworksolutions Sharebrowser improper signature verification | 9.8v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-36235 | Webkul QloApps insecure direct object reference | 6.5v3.1 | 0.7% | 2024-01-17 | |
| CVE-2023-34379 | Cart2Cart: Magento to WooCommerce Migration WordPress plugin broken access control | 4.3v3.1 | 0.4% | 2024-01-17 | |
| CVE-2023-25295 | Gruen Evewa3 cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-17 | |
| CVE-2023-23896 | URL Shortener by MyThemeShop WordPress plugin broken access control | 8.8v3.1 | 0.5% | 2024-01-17 | |
| CVE-2023-23882 | Ultimate Addons for Beaver Builder Lite WordPress plugin broken access control | 4.3v3.1 | 0.3% | 2024-01-17 | Fix |
| CVE-2023-20271 | Cisco Prime Infrastructure SQL injection | 6.5CNA v3.1 | 0.5% | 2024-01-17 | Fix |
| CVE-2023-20260 | Cisco Prime Infrastructure improper access control | 6.0CNA v3.1 | 0.2% | 2024-01-17 | Fix |
| CVE-2023-20258 | Cisco Prime Infrastructure arbitrary command execution | 6.5CNA v3.1 | 0.7% | 2024-01-17 | Fix |
| CVE-2023-20257 | Cisco Prime Infrastructure cross-site scripting | 4.8CNA v3.1 | 0.4% | 2024-01-17 | Fix |
| CVE-2023-7031 | Avaya Experience Portal Manager insecure direct object reference | 5.7CNA v3.1 | 0.3% | 2024-01-17 | Fix |
| CVE-2023-6549 | Citrix NetScaler ADC and NetScaler Gateway buffer overflow | 8.2CNA v3.1 | 57.6% | 2024-01-17 | KEVNucleiEmerging ThreatsFix |
| CVE-2023-6548 | Citrix NetScaler ADC and NetScaler Gateway code injection | 5.5CNA v3.1 | 3.2% | 2024-01-17 | KEVFix |
| CVE-2023-5914 | Cloud Software Group Citrix StoreFront cross-site scripting | 5.4CNA v3.1 | 75.5% | 2024-01-17 | NucleiEmerging ThreatsFix |
| CVE-2023-5041 | Track The Click WordPress plugin Author+ time-based blind SQL injection | 8.8NVD v3.1 | 1.1% | 2024-01-17 | Fix |
| CVE-2023-5006 | WP Discord Invite WordPress plugin arbitrary settings update via CSRF | 6.5NVD v3.1 | 0.3% | 2024-01-17 | Fix |
| CVE-2023-52116 | Huawei HarmonyOS permission management vulnerability in the multi-screen interaction module | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52115 | Huawei HarmonyOS use-after-free | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52114 | Huawei HarmonyOS data confidentiality vulnerability in the ScreenReader module | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52113 | Huawei HarmonyOS launchAnyWhere vulnerability in the ActivityManagerService module | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52112 | Huawei HarmonyOS unauthorized file access vulnerability in the wallpaper service module | 5.3v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52111 | Huawei HarmonyOS authorization vulnerability in the BootLoader module | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52110 | Huawei HarmonyOS out-of-bounds write | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52109 | Huawei HarmonyOS vulnerability of trust relationships being inaccurate in distributed scenarios | 7.5v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2023-52108 | Huawei HarmonyOS denial of service | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52107 | Huawei HarmonyOS vulnerability of permissions being not strictly verified in the WMS module | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52106 | Huawei HarmonyOS unauthorized data modification | 4.4CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52105 | Huawei HarmonyOS improper privilege management | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52104 | Huawei HarmonyOS vulnerability of parameters being not verified in the WMS module | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52103 | Huawei HarmonyOS buffer overflow vulnerability in the FLP module | 9.8v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-52102 | Huawei HarmonyOS vulnerability of parameters being not verified in the WMS module | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52101 | Huawei HarmonyOS component exposure vulnerability in the Wi-Fi module | 9.1v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52100 | Huawei HarmonyOS denial of service | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52099 | Huawei HarmonyOS vulnerability of foreground service restrictions being bypassed in the NMS module | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-52098 | Huawei HarmonyOS denial of service (DoS) vulnerability in the DMS module | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-52068 | kodcloud kodbox cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-16 | |
| CVE-2023-52042 | TOTOLINK X6000R command injection | 9.8v3.1 | 0.9% | 2024-01-16 | |
| CVE-2023-52041 | TOTOLINK X6000R arbitrary code execution | 9.8v3.1 | 0.9% | 2024-01-16 | |
| CVE-2023-51810 | Stackideas Easydiscuss SQL injection | 7.5NVD v3.1 | 1.1% | 2024-01-16 | |
| CVE-2023-51807 | OFCMS cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-16 | |
| CVE-2023-51282 | Code injection in mingSoft MCMS | 7.5v3.1 | 1.1% | 2024-01-16 | |
| CVE-2023-51257 | jasper arbitrary code execution | 7.8v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-51059 | Mokosmart MKGW1 Gateway privilege escalation | 8.8v3.1 | 0.9% | 2024-01-16 | |
| CVE-2023-49351 | Edimax BR-6478AC /bin/webs binary stack-based buffer overflow | 9.8v3.1 | 0.6% | 2024-01-16 | |
| CVE-2023-49107 | Generation of error message containing sensitive information vulnerability in Hitachi Device Manager | 5.3CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-49106 | Missing Password Field Masking vulnerability in Hitachi Device Manager | 4.6CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-48926 | PrestaShop Advanced Loyalty Program missing authorization | 5.3v3.1 | 0.3% | 2024-01-16 | |
| CVE-2023-48104 | Alinto SOGo cross-site scripting | 6.1v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2023-47460 | Knovos Discovery SQL injection | 8.8v3.1 | 1.2% | 2024-01-16 | Exploit code |
| CVE-2023-47459 | Knovos Discovery information disclosure | 6.5v3.1 | 0.8% | 2024-01-16 | Exploit code |
| CVE-2023-45237 | TianoCore edk2 Use of a Weak PseudoRandom Number Generator in EDK II Network Package | 5.3CNA v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2023-45236 | TianoCore edk2 Predictable TCP ISNs in EDK II Network Package | 5.8CNA v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2023-45235 | TianoCore edk2 buffer overflow in EDK II Network Package | 8.3CNA v3.1 | 1.2% | 2024-01-16 | Fix |
| CVE-2023-45234 | TianoCore edk2 buffer overflow in EDK II Network Package | 8.3CNA v3.1 | 1.2% | 2024-01-16 | Fix |
| CVE-2023-45233 | TianoCore edk2 infinite loop in EDK II Network Package | 7.5CNA v3.1 | 2.1% | 2024-01-16 | Fix |
| CVE-2023-45232 | TianoCore edk2 infinite loop in EDK II Network Package | 7.5CNA v3.1 | 2.1% | 2024-01-16 | Fix |
| CVE-2023-45231 | TianoCore edk2 out-of-bounds read in EDK II Network Package | 6.5CNA v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2023-45230 | TianoCore edk2 buffer overflow in EDK II Network Package | 8.3CNA v3.1 | 1.2% | 2024-01-16 | Fix |
| CVE-2023-45229 | TianoCore edk2 out-of-bounds read in EDK II Network Package | 6.5CNA v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2023-44117 | Huawei HarmonyOS vulnerability of trust relationships being inaccurate in distributed scenarios | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-44112 | Huawei HarmonyOS out-of-bounds access vulnerability in the device authentication module | 7.5v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-43449 | HummerRisk code injection | 8.8v3.1 | 0.8% | 2024-01-16 | |
| CVE-2023-41619 | emlog cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-16 | |
| CVE-2023-39691 | An issue discovered in kodbox through 1.43 allows attackers to arbitrarily add Administrator accounts via crafted GET request. | 9.8v3.1 | 0.6% | 2024-01-16 | |
| CVE-2023-37523 | HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags | 5.6CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-37522 | HCL BigFix OSD Bare Metal Server WebUI is affected by missing or insecure tags | 5.6CNA v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-37521 | HCL BigFix OSD Bare Metal Server WebUI is affected by sensitive information disclosure | 2.3CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-36236 | Cross-site scripting in Bagisto | 4.8v3.1 | 0.6% | 2024-01-16 | Fix |
| CVE-2023-34063 | VMware Aria Automation, VMware Cloud Foundation missing authorization | 9.9CNA v3.1 | 0.9% | 2024-01-16 | Fix |
| CVE-2023-22527 | Atlassian Confluence Data Center and Server template injection | 10.0CNA v3.0 | 100.0% | 2024-01-16 | KEVNucleiMetasploitEmerging ThreatsExploit codeFix |
| CVE-2023-22526 | Atlassian Confluence Data Center code injection | 7.2CNA v3.0 | 1.6% | 2024-01-16 | Fix |
| CVE-2023-22514 | Atlassian Sourcetree code injection | 7.8CNA v3.0 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-22512 | Atlassian Confluence Data Center denial of service | 7.5CNA v3.0 | 14.7% | 2024-01-16 | Fix |
| CVE-2023-21901 | Oracle Financial Services Analytical Applications Infrastructure unauthorized data modification | 7.4CNA v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-7234 | Integration Objects OPC UA Server Toolkit improper output neutralization for logs | 5.3v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-7154 | Hubbub Lite WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-7151 | Product Enquiry for WooCommerce WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-7125 | Community by PeepSo WordPress plugin user post creation via CSRF | 4.3NVD v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2023-7084 | Voting Record WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-01-16 | |
| CVE-2023-7083 | Voting Record WordPress plugin settings update to stored XSS via CSRF | 5.4NVD v3.1 | 0.2% | 2024-01-16 | |
| CVE-2023-6824 | WP Customer Area WordPress plugin Subscriber+ account Address leak | 6.5NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-6741 | WP Customer Area WordPress plugin Subscriber+ account Address update | 4.3NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-6732 | Ultimate Maps by Supsystic WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-6592 | ninjateam FastDup export directory listing information disclosure | 5.3NVD v3.1 | 0.9% | 2024-01-16 | NucleiFix |
| CVE-2023-6457 | File and Directory Permission vulnerability in Hitachi Tuning Manager | 6.6CNA v3.1 | 0.1% | 2024-01-16 | Fix |
| CVE-2023-6395 | Mock: Privilege escalation for users that can access mock configuration | 9.8NVD v3.1 | 1.6% | 2024-01-16 | Fix |
| CVE-2023-6373 | ArtPlacer Widget WordPress plugin Editor+ SQLi | 8.8NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-6336 | HYPR Workforce Access link following | 7.2CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2023-6335 | HYPR Workforce Access link following | 6.4CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2023-6334 | HYPR Workforce Access buffer overflow | 5.3CNA v3.1 | 0.1% | 2024-01-16 | Fix |
| CVE-2023-6292 | Ecwid Ecommerce Shopping Cart for WordPress arbitrary plugin settings Change via CSRF | 4.3NVD v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2023-6046 | EventON WordPress plugin Admin+ stored HTML injection | 4.8NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-6005 | MyEventON EventON stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2024-01-16 | Fix |
| CVE-2023-5922 | Royal Elementor Addons and Templates WordPress plugin unauthenticated arbitrary post read | 7.5NVD v3.1 | 0.7% | 2024-01-16 | Fix |
| CVE-2023-5558 | LearnPress WordPress plugin reflected cross-site scripting | 6.1NVD v3.1 | 0.9% | 2024-01-16 | NucleiFix |
| CVE-2023-5097 | HYPR Workforce Access improper input validation | 7.0CNA v3.1 | 0.2% | 2024-01-16 | Fix |
| CVE-2023-4969 | Khronos Group OpenCL GPU kernel implementations susceptible to memory leak | 6.5v3.1 | 1.2% | 2024-01-16 | Fix |
| CVE-2023-4797 | Tribulant Newsletters command injection | 7.2NVD v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2023-4757 | miniOrange Staff / Employee Business Directory for Active Directory cross-site scripting | 5.4NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-4703 | All in One B2B for WooCommerce WordPress plugin unauthenticated privilege escalation | 7.5NVD v3.1 | 0.7% | 2024-01-16 | |
| CVE-2023-4566 | Huawei HarmonyOS vulnerability of trust relationships being inaccurate in distributed scenarios | 7.5v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-4536 | My Account Page Editor WordPress plugin Subscriber+ arbitrary file upload | 8.8NVD v3.1 | 1.0% | 2024-01-16 | Fix |
| CVE-2023-3771 | T1 WordPress theme open redirect | 6.1NVD v3.1 | 0.5% | 2024-01-16 | |
| CVE-2023-3647 | IURNY by INDIGITALL WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-3372 | Lana Shortcodes WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-3211 | WordPress Database Administrator plugin unauthenticated SQL injection | 9.8NVD v3.1 | 1.0% | 2024-01-16 | |
| CVE-2023-3178 | POST SMTP Mailer WordPress plugin arbitrary Log deletion via CSRF | 4.3NVD v3.1 | 0.3% | 2024-01-16 | Fix |
| CVE-2023-2655 | Contact Form by WD WordPress plugin Admin+ SQLi | 7.2NVD v3.1 | 0.9% | 2024-01-16 | |
| CVE-2023-2252 | Directorist WordPress plugin Admin+ LFI | 2.7NVD v3.1 | 1.3% | 2024-01-16 | NucleiFix |
| CVE-2023-1405 | Formidable Forms WordPress plugin unauthenticated PHP object injection | 7.5NVD v3.1 | 0.7% | 2024-01-16 | Exploit codeFix |
| CVE-2023-0824 | UserPlus WordPress plugin stored XSS via CSRF | 6.5NVD v3.1 | 0.3% | 2024-01-16 | |
| CVE-2023-0769 | hiWeb Migration Simple reflected cross-site scripting | 6.1NVD v3.1 | 0.5% | 2024-01-16 | |
| CVE-2023-0479 | Print Invoice and Delivery Notes for WooCommerce WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-0389 | Calculated Fields Form WordPress plugin Admin+ stored cross-site scripting via Dropdown fields | 4.8NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-0376 | Qubely WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.7% | 2024-01-16 | Fix |
| CVE-2023-0224 | GiveWP WordPress plugin unauthenticated SQLi | 9.8NVD v3.1 | 3.7% | 2024-01-16 | Fix |
| CVE-2023-0094 | UpQode Google Maps WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2024-01-16 | |
| CVE-2023-0079 | Customer Reviews for WooCommerce WordPress plugin Contributor+ stored XSS | 5.4NVD v3.1 | 0.5% | 2024-01-16 | Fix |
| CVE-2023-50729 | An unrestricted file upload vulnerability in traccar leads to RCE | 8.5CNA v3.1 | 0.6% | 2024-01-15 | Fix |
| CVE-2023-50290 | Apache Solr: Host environment variables are published via the Metrics API | 6.5NVD v3.1 | 68.4% | 2024-01-15 | NucleiFix |
| CVE-2023-48383 | NetVision Information airPASS path traversal | 7.5CNA v3.1 | 1.0% | 2024-01-15 | Fix |
| CVE-2023-46749 | Apache Shiro vulnerable to path traversal | 6.5v3.1 | 1.2% | 2024-01-15 | Exploit codeFix |
| CVE-2023-46226 | Apache IoTDB: Remote code execution (RCE) risk via the UDF | 9.8v3.1 | 1.9% | 2024-01-15 | Fix |
| CVE-2023-42137 | PAX Technology POS terminals link following | 7.8v3.1 | 0.5% | 2024-01-15 | Fix |
| CVE-2023-42136 | PAX Technology POS terminals command injection | 7.8v3.1 | 0.5% | 2024-01-15 | Fix |
| CVE-2023-42135 | PAX Technology A920 Pro injection | 6.8v3.1 | 0.6% | 2024-01-15 | Fix |
| CVE-2023-42134 | PAX Technology POS terminals hidden functionality | 6.8v3.1 | 0.6% | 2024-01-15 | Fix |
| CVE-2023-7206 | Horner Automation Cscape stack-based buffer overflow | 7.8v3.1 | 0.2% | 2024-01-15 | Fix |
| CVE-2023-6991 | JSM file_get_contents Shortcode WordPress plugin Contributor+ SSRF | 8.8NVD v3.1 | 0.7% | 2024-01-15 | Fix |
| CVE-2023-6941 | Keap Official Opt-in Forms WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-15 | Fix |
| CVE-2023-6915 | Kernel: Null pointer dereference vulnerability in ida_free in lib/idr.c | 5.5NVD v3.1 | 0.3% | 2024-01-15 | Fix |
| CVE-2023-6843 | easy.jobs WordPress plugin Subscriber+ arbitrary settings update | 4.3NVD v3.1 | 0.4% | 2024-01-15 | Fix |
| CVE-2023-6623 | Essential Blocks WordPress plugin unauthenticated local file inclusion | 9.8NVD v3.1 | 50.7% | 2024-01-15 | NucleiFix |
| CVE-2023-6620 | Post SMTP WordPress plugin Admin+ SQL injection | 7.2NVD v3.1 | 14.1% | 2024-01-15 | Fix |
| CVE-2023-6163 | WP Crowdfunding WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-15 | Fix |
| CVE-2023-6066 | WP Custom Widget Area WordPress plugin Subscriber+ Menus Creation/Deletion/Update | 4.3NVD v3.1 | 0.4% | 2024-01-15 | |
| CVE-2023-6050 | Estatik Real Estate WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2024-01-15 | Fix |
| CVE-2023-6049 | Estatik Real Estate WordPress plugin unauthenticated PHP object injection | 9.8NVD v3.1 | 0.9% | 2024-01-15 | Fix |
| CVE-2023-6048 | Estatik Real Estate WordPress plugin Subscriber+ arbitrary option update | 6.5NVD v3.1 | 0.6% | 2024-01-15 | Fix |
| CVE-2023-6029 | EazyDocs for WordPress unauthenticated arbitrary posts deletion and Document management | 7.5NVD v3.1 | 0.2% | 2024-01-15 | Fix |
| CVE-2023-5905 | DeMomentSomTres WordPress Export Posts With Images plugin Subscriber+ unauthorized data export | 8.1NVD v3.1 | 0.6% | 2024-01-15 | |
| CVE-2023-5253 | Nozomi Networks Guardian missing authentication | 6.3CNA v4.0 | 0.5% | 2024-01-15 | Fix |
| CVE-2023-4925 | Easy Forms for Mailchimp WordPress plugin Admin+ stored cross-site scripting | 4.8NVD v3.1 | 0.4% | 2024-01-15 | |
| CVE-2023-4818 | PAX Technology A920 injection | 7.6v3.1 | 0.7% | 2024-01-15 | Fix |
| CVE-2023-4001 | GRUB2: Bypass the grub password protection feature | 6.8NVD v3.1 | 0.5% | 2024-01-15 | Fix |
| CVE-2023-52289 | Path traversal in Flaskcode | 7.5v3.1 | 0.7% | 2024-01-13 | |
| CVE-2023-52288 | Path traversal in Flaskcode | 7.5v3.1 | 0.8% | 2024-01-13 | |
| CVE-2023-51805 | TDuckCloud tduck-platform SQL injection | 6.5NVD v3.1 | 0.6% | 2024-01-13 | |
| CVE-2023-51804 | rymcu forest server-side request forgery | 7.5v3.1 | 0.7% | 2024-01-13 | |
| CVE-2023-51071 | Qstar Archive Storage Manager improper access control | 6.5v3.1 | 0.5% | 2024-01-13 | |
| CVE-2023-51070 | Qstar Archive Storage Manager improper access control | 7.5v3.1 | 0.6% | 2024-01-13 | |
| CVE-2023-51068 | Qstar Archive Storage Manager authenticated reflected cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-13 | |
| CVE-2023-51067 | Qstar Archive Storage Manager unauthenticated reflected cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-13 | |
| CVE-2023-51066 | Qstar Archive Storage Manager authenticated remote code execution | 8.8v3.1 | 1.5% | 2024-01-13 | |
| CVE-2023-51065 | Qstar Archive Storage Manager improper access control | 7.5v3.1 | 0.7% | 2024-01-13 | |
| CVE-2023-51064 | Qstar Archive Storage Manager cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-13 | |
| CVE-2023-51063 | Qstar Archive Storage Manager cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-13 | |
| CVE-2023-51062 | Qstar Archive Storage Manager missing authentication | 5.3v3.1 | 0.5% | 2024-01-13 | |
| CVE-2023-50072 | OpenKM A stored cross-site scripting | 5.4v3.1 | 0.6% | 2024-01-13 | Exploit code |
| CVE-2023-46943 | EverShop at risk to unauthorized access via weak HMAC secret | 9.1v3.1 | 0.5% | 2024-01-13 | Fix |
| CVE-2023-46942 | EverShop vulnerable to improper authorization in GraphQL endpoints | 7.5v3.1 | 0.7% | 2024-01-13 | Fix |
| CVE-2023-33472 | Scada-LTS code injection | 8.8v3.1 | 1.3% | 2024-01-13 | |
| CVE-2023-52339 | Matroska libebml integer overflow | 6.5v3.1 | 1.1% | 2024-01-12 | Fix |
| CVE-2023-52026 | TOTOLINK EX1800T OS command injection | 9.8v3.1 | 1.6% | 2024-01-12 | |
| CVE-2023-51978 | PHPGurukul Art Gallery Management System SQL injection | 6.5NVD v3.1 | 0.5% | 2024-01-12 | |
| CVE-2023-51949 | Verydows cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-12 | |
| CVE-2023-51806 | UJCMS unrestricted file upload | 5.4NVD v3.1 | 0.6% | 2024-01-12 | |
| CVE-2023-51790 | Piwigo cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-12 | |
| CVE-2023-51698 | Atril's CBT comic book parsing vulnerable to remote code execution | 9.6CNA v3.1 | 2.4% | 2024-01-12 | Fix |
| CVE-2023-50920 | GL.iNet Gl-a1300 session fixation | 5.5v3.1 | 0.2% | 2024-01-12 | KCV |
| CVE-2023-50919 | GL.iNet Gl-a1300 improper authentication | 9.8v3.1 | 47.8% | 2024-01-12 | MetasploitEmerging ThreatsExploit codeKCV |
| CVE-2023-49801 | Lif-Platforms Lif-Auth-Server lif Auth Server vulnerable to uncontrolled data in path expression | 4.2CNA v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2023-49647 | Zoom Desktop Client for Windows improper access control | 8.8CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2023-49569 | Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients | 9.8NVD v3.1 | 1.5% | 2024-01-12 | Fix |
| CVE-2023-49568 | Maliciously crafted Git server replies can cause DoS on go-git clients | 7.5NVD v3.1 | 0.7% | 2024-01-12 | Fix |
| CVE-2023-49262 | Hongdian H8951-4G-ESP buffer overflow vulnerability in Cookie authentication field | 9.8v3.1 | 0.7% | 2024-01-12 | Fix |
| CVE-2023-49261 | Hongdian H8951-4G-ESP sensitive authentication-related value accessible publicly | 7.5v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2023-49260 | Hongdian H8951-4G-ESP stored cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-49259 | Hongdian H8951-4G-ESP bruteforcing authentication cookie for a given user | 7.5v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-49258 | Hongdian H8951-4G-ESP reflected cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-49257 | Hongdian H8951-4G-ESP command execution using the certificate upload utility | 8.8v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-49256 | Hongdian H8951-4G-ESP configuration backup file vulnerability | 7.5v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2023-49255 | Hongdian H8951-4G-ESP router console accessible without authentication | 9.8v3.1 | 0.7% | 2024-01-12 | Fix |
| CVE-2023-49254 | Hongdian H8951-4G-ESP command injection in the network test tools | 8.8v3.1 | 0.7% | 2024-01-12 | Fix |
| CVE-2023-49253 | Hongdian H8951-4G-ESP predefined root password | 9.8v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2023-49099 | Discourse secure uploads accessible to guests even when login is required | 3.1CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-49098 | Reaction data for user notifications exposed in Discourse-reactions | 3.5CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-48909 | Aarboard JAVE2 arbitrary code execution | 8.8v3.1 | 0.9% | 2024-01-12 | |
| CVE-2023-48297 | Discourse vulnerable to unlimited mentioned users in message serializer | 8.6CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2023-48166 | Unify Openscape Voice SOAP Server integrated in Atos Unify path traversal | 7.5v3.1 | 1.0% | 2024-01-12 | Fix |
| CVE-2023-46805 | Ivanti Connect Secure and Policy Secure authentication bypass | 8.2NVD v3.1 | 100.0% | 2024-01-12 | KEVNucleiMetasploitEmerging ThreatsExploit codeKCVFix |
| CVE-2023-42463 | wazuh wazuh-logcollector integer underflow local privilege escalation | 7.4CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2023-40362 | CentralSquare Click2gov Building Permit missing authorization | 4.3v3.1 | 0.7% | 2024-01-12 | Exploit codeFix |
| CVE-2023-40250 | Hancom HCell buffer overflow | 8.8v3.1 | 0.6% | 2024-01-12 | |
| CVE-2023-37117 | LIVE555 use-after-free | 9.8v3.1 | 0.9% | 2024-01-12 | Fix |
| CVE-2023-36842 | Junos OS: Jdhcpd will hang on receiving a specific DHCP packet | 6.5CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-34061 | Cloud Foundry Routing Release gorouter route pruning | 7.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2023-31211 | Checkmk disabled automation users could still authenticate | 8.8CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2023-31036 | NVIDIA Triton Inference Server model load API path traversal | 7.5CNA v3.1 | 0.9% | 2024-01-12 | Fix |
| CVE-2023-31035 | NVIDIA DGX A100 SMI handler improper input validation | 7.5CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2023-31034 | NVIDIA DGX A100 SBIOS integer overflow | 6.6CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2023-31033 | NVIDIA DGX A100 BMC missing authentication | 6.8CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-31032 | NVIDIA DGX A100 SBIOS denial of service | 7.5CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2023-31031 | NVIDIA DGX A100 heap-based buffer overflow | 4.2CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2023-31030 | NVIDIA DGX A100 BMC host KVM daemon stack-based buffer overflow | 9.3CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2023-31029 | NVIDIA DGX A100 stack-based buffer overflow | 9.3CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2023-31025 | NVIDIA DGX A100 BMC LDAP authentication LDAP injection | 6.5CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2023-31024 | NVIDIA DGX A100 BMC host KVM daemon stack-based buffer overflow | 9.0CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2023-30016 | oretnom23 Judging Management System SQL injection | 9.8v3.1 | 1.0% | 2024-01-12 | |
| CVE-2023-30015 | oretnom23 Judging Management System SQL injection | 9.8v3.1 | 1.0% | 2024-01-12 | |
| CVE-2023-30014 | oretnom23 Judging Management System SQL injection | 9.8v3.1 | 1.0% | 2024-01-12 | |
| CVE-2023-28899 | Škoda Superb III denial of service via ECU reset service | 5.5v3.1 | 0.1% | 2024-01-12 | |
| CVE-2023-28898 | Head Unit denial of service via Apple CarPlay service | 5.3v3.1 | 0.2% | 2024-01-12 | |
| CVE-2023-28897 | JOYNEXT MIB3 Infotainment Unit hard-coded password for UDS services | 9.8v3.1 | 0.3% | 2024-01-12 | |
| CVE-2023-7028 | GitLab Community and Enterprise Editions improper access control | 10.0CNA v3.1 | 94.6% | 2024-01-12 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2023-6955 | Missing authorization in GitLab | 6.6CNA v3.1 | 0.6% | 2024-01-12 | Fix |
| CVE-2023-6740 | Checkmk privilege escalation in jar_signature | 8.8CNA v3.1 | 0.2% | 2024-01-12 | Fix |
| CVE-2023-6735 | Checkmk privilege escalation in mk_tsm | 8.8CNA v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-6683 | Qemu: Vnc: Null pointer dereference in qemu_clipboard_request | 6.5NVD v3.1 | 1.3% | 2024-01-12 | Fix |
| CVE-2023-6040 | Linux kernel netfilter nf_tables out-of-bounds read | 7.8NVD v3.1 | 0.3% | 2024-01-12 | Fix |
| CVE-2023-5356 | Incorrect authorization in GitLab | 7.3CNA v3.1 | 0.8% | 2024-01-12 | Fix |
| CVE-2023-4812 | Incorrect authorization in GitLab | 7.6CNA v3.1 | 0.5% | 2024-01-12 | Fix |
| CVE-2023-2030 | Improper verification of cryptographic signature in GitLab | 3.5CNA v3.1 | 0.4% | 2024-01-12 | Fix |
| CVE-2023-0437 | MongoDB client C Driver may infinitely loop when validating certain BSON input data | 5.3CNA v3.1 | 1.1% | 2024-01-12 | Fix |
| CVE-2023-52274 | YzmCMS cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-11 | |
| CVE-2023-52032 | TOTOLINK EX1200T remote command execution | 9.8v3.1 | 1.6% | 2024-01-11 | |
| CVE-2023-52031 | TOTOLINK A3700R remote command execution | 9.8v3.1 | 1.5% | 2024-01-11 | |
| CVE-2023-52030 | TOTOLINK A3700R execution with unnecessary privileges | 9.8v3.1 | 1.5% | 2024-01-11 | |
| CVE-2023-52029 | TOTOLINK A3700R OS command injection | 9.8v3.1 | 1.7% | 2024-01-11 | |
| CVE-2023-52028 | TOTOLINK A3700R OS command injection | 9.8v3.1 | 1.7% | 2024-01-11 | |
| CVE-2023-52027 | TOTOLINK A3700R command injection | 9.8v3.1 | 1.7% | 2024-01-11 | |
| CVE-2023-51987 | D-Link DIR-822 missing authentication | 9.8v3.1 | 0.9% | 2024-01-11 | |
| CVE-2023-51984 | D-Link DIR-822 OS command injection | 9.8v3.1 | 2.0% | 2024-01-11 | |
| CVE-2023-51782 | Linux kernel use-after-free | 7.0v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-51781 | Linux kernel use-after-free | 7.0v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-51780 | Linux kernel use-after-free | 7.0v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-51751 | Scalefusion improper access control | 6.8NVD v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-51750 | Scalefusion incorrect user management | 4.6v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-51749 | ScaleFusion 10.5.2 does not properly limit users to the Edge application because a search can be made from a tooltip. NOTE: the vendor's position is "Not vulnerable if the default Windows device profile configuration is used which utilizes modern management with website allow-listing rules." | 8.8v3.1 | 0.3% | 2024-01-11 | |
| CVE-2023-51748 | Scalefusion protection mechanism failure | 8.8v3.1 | 0.3% | 2024-01-11 | |
| CVE-2023-51350 | UJCMS authentication bypass by spoofing | 9.8v3.1 | 1.3% | 2024-01-11 | |
| CVE-2023-51073 | Buffalo LS210D arbitrary code execution | 8.1NVD v3.1 | 1.3% | 2024-01-11 | |
| CVE-2023-50671 | Aertherwide Exiftags out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-11 | |
| CVE-2023-50159 | Scalefusion improper access control | 8.8v3.1 | 0.3% | 2024-01-11 | |
| CVE-2023-50129 | Flient Smart Lock Advanced NFC tags of the missing encryption | 6.5v3.1 | 0.1% | 2024-01-11 | |
| CVE-2023-50128 | Hozard Alarm System authentication bypass by replay | 5.3v3.1 | 0.2% | 2024-01-11 | |
| CVE-2023-50127 | Hozard Alarm System improper authentication | 5.9v3.1 | 0.4% | 2024-01-11 | |
| CVE-2023-50126 | Hozard Alarm System RFID tags of the Hozard missing encryption | 6.5v3.1 | 0.1% | 2024-01-11 | |
| CVE-2023-50125 | Hozard Alarm System insufficiently protected credentials | 5.9v3.1 | 0.4% | 2024-01-11 | |
| CVE-2023-50124 | Flient Smart Lock Advanced hard-coded credentials | 6.8v3.1 | 0.4% | 2024-01-11 | |
| CVE-2023-50123 | Hozard Alarm System missing brute-force protection | 8.1v3.1 | 0.6% | 2024-01-11 | |
| CVE-2023-46474 | SIGB PMB unrestricted file upload | 7.2NVD v3.1 | 21.2% | 2024-01-11 | |
| CVE-2023-45175 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-45173 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-45171 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-45169 | IBM AIX denial of service | 6.2CNA v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-38267 | IBM Security Access Manager Appliance information disclosure | 6.2CNA v3.1 | 0.1% | 2024-01-11 | Fix |
| CVE-2023-37644 | swftools out-of-bounds write | 5.5v3.1 | 0.3% | 2024-01-11 | |
| CVE-2023-31003 | IBM Security Access Manager Container privilege escalation | 8.4CNA v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-31001 | IBM Security Access Manager Container information disclosure | 5.1CNA v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-20573 | AMD 3rd Gen AMD EPYC™ Processors Debug Exception Delivery in Secure Nested Paging | 3.2v3.1 | 0.3% | 2024-01-11 | Exploit codeFix |
| CVE-2023-7226 | meetyoucrop big-whale Admin module all.api improper ownership management | 6.5v3.1 | 0.4% | 2024-01-11 | |
| CVE-2023-7071 | Essential Blocks WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-7070 | Email Encoder Protect Email Addresses and Phone Numbers WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-7048 | My Sticky Bar WordPress plugin cross-site request forgery to sensitive information exposure | 4.3v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-7019 | LightStart WordPress plugin unauthorized access | 4.3v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6994 | List category posts WordPress plugin stored cross-site scripting | 5.4NVD v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6990 | Weaver Xtreme WordPress theme authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6988 | Colibri Page Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6979 | Customer Reviews for WooCommerce WordPress plugin authenticated (Author+) arbitrary file upload | 8.8v3.1 | 1.1% | 2024-01-11 | Fix |
| CVE-2023-6938 | Oxygen Builder WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6934 | wpchefgadget Limit Login Attempts Reloaded shortcode stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6924 | Photo Gallery by 10Web WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6883 | Easy Social Feed WordPress plugin missing authorization to settings modification | 4.3v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6882 | Simple Membership WordPress plugin reflected cross-site scripting vulnerability via environment_mode | 6.1v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6878 | Slick Social Share Buttons WordPress plugin authenticated (Subscriber+) arbitrary option update | 6.5NVD v3.1 | 0.5% | 2024-01-11 | |
| CVE-2023-6875 | POST SMTP Mailer WordPress plugin unauthorized access | 9.8v3.1 | 90.3% | 2024-01-11 | NucleiMetasploitExploit codeFix |
| CVE-2023-6855 | Paid Memberships Pro WordPress plugin missing authorization via API | 5.3v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6828 | ARForms WordPress plugin unauthenticated stored cross-site scripting via arf_http_referrer_url | 6.1NVD v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6782 | AMP for WP Accelerated Mobile Pages WordPress plugin cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6781 | Orbit Fox Companion WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6776 | 3D Flipbook WordPress plugin authenticated (Contributor+) cross-site scripting via Ready function | 5.4v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6751 | Hostinger WordPress plugin missing authorization to Maintenance Mode activation | 6.5NVD v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6742 | Envira Gallery Lite WordPress plugin missing authorization Gallery modification | 4.3v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6737 | Enable Media Replace WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6699 | WP Compress Image Optimizer [All-In-One] WordPress plugin unauthenticated directory traversal | 7.5NVD v3.1 | 0.9% | 2024-01-11 | Fix |
| CVE-2023-6684 | Ibtana WordPress Website Builder plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6645 | Post Grid Combo 36+ Gutenberg Blocks WordPress plugin cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6638 | GTG Product Feed for Shopping WordPress plugin unauthorized access | 5.3v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6637 | CAOS WordPress plugin unauthorized access | 5.3v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6636 | Greenshift animation and page builder blocks WordPress plugin arbitrary file upload | 7.2v3.1 | 1.3% | 2024-01-11 | Fix |
| CVE-2023-6634 | LearnPress WordPress plugin command injection | 9.8v3.1 | 8.5% | 2024-01-11 | NucleiExploit codeFix |
| CVE-2023-6632 | Happy Addons for Elementor WordPress plugin reflected cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6630 | Contact Form 7 Dynamic Text Extension WordPress plugin insecure direct object reference | 4.3v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6624 | Import and export users and customers WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6598 | SpeedyCache WordPress plugin missing authorization to plugin options update | 4.3v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6583 | Import and export users and customers WordPress plugin directory traversal | 7.2v3.1 | 0.8% | 2024-01-11 | Fix |
| CVE-2023-6582 | ElementsKit Lite WordPress plugin unauthenticated sensitive information exposure | 5.3v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6567 | LearnPress WordPress plugin unauthenticated SQL injection via order_by | 7.5NVD v3.1 | 51.4% | 2024-01-11 | Reported exploitedNucleiExploit codeFix |
| CVE-2023-6561 | Featured Image from URL (FIFU) WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6558 | Export and Import Users and Customers WordPress plugin arbitrary file upload | 7.2v3.1 | 1.4% | 2024-01-11 | Fix |
| CVE-2023-6556 | FOX WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-6554 | Missing authorisation in TCExam | 6.5v3.1 | 0.6% | 2024-01-11 | Fix |
| CVE-2023-6520 | WP 2FA Two-factor authentication for WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-6506 | WP 2FA WordPress plugin insecure direct object reference to arbitrary email Sending | 4.3v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6504 | Profile Builder WordPress plugin insecure direct object reference to sensitive information exposure | 4.3v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6496 | Manage Notification E-mails WordPress plugin missing authorization | 5.3v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6446 | Calculated Fields Form WordPress plugin authenticated (Admin+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6369 | Export WP Page to Static HTML/CSS WordPress plugin missing authorization via Multiple AJAX actions | 5.4v3.1 | 0.5% | 2024-01-11 | Fix |
| CVE-2023-6316 | MW WP Form WordPress plugin unauthenticated arbitrary file upload | 9.8v3.1 | 1.4% | 2024-01-11 | Fix |
| CVE-2023-6266 | Backup Migration WordPress plugin unauthorized access | 7.5v3.1 | 2.1% | 2024-01-11 | NucleiFix |
| CVE-2023-6244 | EventON WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6242 | EventON WordPress plugin cross-site request forgery | 4.3v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6223 | LearnPress WordPress plugin insecure direct object reference to information disclosure | 4.3v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-6220 | Piotnet Forms WordPress plugin unauthenticated arbitrary file upload | 9.8v3.1 | 1.4% | 2024-01-11 | Fix |
| CVE-2023-5691 | Chatbot for WordPress WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-5504 | BackWPup WordPress plugin authenticated (Administrator+) directory traversal | 8.7v3.1 | 0.9% | 2024-01-11 | Fix |
| CVE-2023-5448 | WP Register Profile With Shortcode WordPress plugin cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-5118 | Stored cross-site scripting vulnerability in Kofax Capture software | 5.4v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-4962 | Video PopUp WordPress plugin authenticated (Contributor+) stored cross-site scripting via shortcode | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-4960 | WCFM Marketplace WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-11 | Fix |
| CVE-2023-4372 | LiteSpeed Cache WordPress plugin stored cross-site scripting | 5.4v3.1 | 19.3% | 2024-01-11 | Fix |
| CVE-2023-4248 | GiveWP WordPress plugin cross-site request forgery to Stripe Integration deletion | 4.3v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-4247 | GiveWP WordPress plugin cross-site request forgery to plugin deactivation | 5.4v3.1 | 0.3% | 2024-01-11 | Fix |
| CVE-2023-4246 | GiveWP WordPress plugin cross-site request forgery to plugin installation | 4.3v3.1 | 0.2% | 2024-01-11 | Fix |
| CVE-2023-52064 | WuzhiCMS SQL injection | 9.8v3.1 | 0.6% | 2024-01-10 | |
| CVE-2023-51972 | Tenda AX1803 command injection | 9.8v3.1 | 1.9% | 2024-01-10 | |
| CVE-2023-51971 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51970 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51969 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51968 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51967 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51966 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51965 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51964 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51963 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.9% | 2024-01-10 | |
| CVE-2023-51962 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51961 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51960 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51959 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51958 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51957 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51956 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51955 | Tenda AX1803 stack-based buffer overflow | 9.8v3.1 | 0.5% | 2024-01-10 | |
| CVE-2023-51954 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51953 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51952 | Tenda AX1803 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-51252 | PublicCMS cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-10 | |
| CVE-2023-51127 | Flir AX8 path traversal | 7.5v3.1 | 1.3% | 2024-01-10 | |
| CVE-2023-51126 | Flir AX8 /usr/www/res.php command injection | 9.8v3.1 | 31.1% | 2024-01-10 | Emerging Threats |
| CVE-2023-51123 | D-Link DIR-815 OS command injection | 9.8v3.1 | 24.4% | 2024-01-10 | |
| CVE-2023-50916 | KYOCERA Device Manager path traversal | 7.2v3.1 | 4.6% | 2024-01-10 | Fix |
| CVE-2023-50172 | WWBN AVideo recovery notification bypass vulnerability | 5.3CNA v3.1 | 0.8% | 2024-01-10 | |
| CVE-2023-50120 | GPAC AV1 video parser infinite loop | 5.5v3.1 | 0.2% | 2024-01-10 | |
| CVE-2023-49864 | WWBN AVideo An information disclosure | 6.5v3.1 | 1.1% | 2024-01-10 | |
| CVE-2023-49863 | WWBN AVideo An information disclosure | 6.5v3.1 | 1.1% | 2024-01-10 | |
| CVE-2023-49862 | WWBN AVideo An information disclosure | 6.5v3.1 | 1.1% | 2024-01-10 | |
| CVE-2023-49810 | WWBN AVideo improper restriction of excessive authentication attempts | 6.5NVD v3.1 | 0.7% | 2024-01-10 | |
| CVE-2023-49738 | WWBN AVideo image404Raw.php functionality information disclosure | 7.5v3.1 | 1.3% | 2024-01-10 | |
| CVE-2023-49715 | WWBN AVideo import.json.php temporary copy functionality file upload | 8.8v3.1 | 1.4% | 2024-01-10 | |
| CVE-2023-49619 | Apache Answer race condition | 3.1v3.1 | 0.9% | 2024-01-10 | Fix |
| CVE-2023-49599 | WWBN AVideo insufficient entropy vulnerbaility | 9.8CNA v3.1 | 1.0% | 2024-01-10 | |
| CVE-2023-49589 | WWBN AVideo insufficient entropy | 8.8v3.1 | 0.9% | 2024-01-10 | |
| CVE-2023-49471 | Bar Assistant karlomikus server-side request forgery | 8.8v3.1 | 1.1% | 2024-01-10 | Exploit code |
| CVE-2023-49427 | Tenda AX12 buffer overflow | 7.5v3.1 | 0.6% | 2024-01-10 | |
| CVE-2023-49394 | EasyCorp ZenTao open redirect | 6.1v3.1 | 0.4% | 2024-01-10 | |
| CVE-2023-49295 | Quic-go's path validation mechanism can cause denial of service | 6.4CNA v3.1 | 1.2% | 2024-01-10 | Fix |
| CVE-2023-48864 | SEMCMS SQL injection | 7.5v3.1 | 0.6% | 2024-01-10 | |
| CVE-2023-48783 | Fortinet FortiPortal insecure direct object reference | 4.9CNA v3.1 | 22.2% | 2024-01-10 | Emerging ThreatsFix |
| CVE-2023-48730 | WWBN AVideo navbarMenuAndLogo.php user name functionality cross-site scripting | 5.4NVD v3.1 | 0.6% | 2024-01-10 | |
| CVE-2023-48728 | WWBN AVideo functiongetOpenGraph videoName functionality cross-site scripting | 6.1NVD v3.1 | 2.3% | 2024-01-10 | Nuclei |
| CVE-2023-48266 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) stack-based buffer overflow | 8.1CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-48265 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) stack-based buffer overflow | 8.1CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-48264 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) stack-based buffer overflow | 8.1CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-48263 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) heap-based buffer overflow | 8.1CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-48262 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) stack-based buffer overflow | 8.1CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-48261 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) SQL injection | 5.3CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48260 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) SQL injection | 5.3CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48259 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) SQL injection | 5.3CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48258 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) cross-site request forgery | 5.5CNA v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-48257 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) weak credentials | 7.8CNA v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2023-48256 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) HTTP response splitting | 5.3CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2023-48255 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) cross-site scripting | 6.3CNA v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2023-48254 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) cross-site scripting | 5.3CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2023-48253 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) SQL injection | 8.8CNA v3.1 | 0.9% | 2024-01-10 | Fix |
| CVE-2023-48252 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) improper authorization | 8.8CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48251 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) hard-coded credentials | 8.1CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48250 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) hard-coded credentials | 8.1CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48249 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) path traversal | 6.5CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-48248 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) cross-site scripting | 5.5CNA v3.1 | 0.4% | 2024-01-10 | Fix |
| CVE-2023-48247 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) missing authorization | 5.3CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48246 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) path traversal | 6.5CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-48245 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) missing authorization | 6.5CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-48244 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) cross-site scripting | 5.3CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2023-48243 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) path traversal | 8.1CNA v3.1 | 1.1% | 2024-01-10 | Fix |
| CVE-2023-48242 | Rexroth Nexo cordless nutrunner NXA015S-36V (0608842001) path traversal | 6.5CNA v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-47997 | FreeImage infinite loop | 6.5v3.1 | 0.9% | 2024-01-10 | Fix |
| CVE-2023-47862 | WWBN AVideo getLanguageFromBrowser functionality local file inclusion | 9.8v3.1 | 1.1% | 2024-01-10 | |
| CVE-2023-47861 | WWBN AVideo channelBody.php user name functionality cross-site scripting | 5.4NVD v3.1 | 0.8% | 2024-01-10 | |
| CVE-2023-47171 | WWBN AVideo An information disclosure | 6.5v3.1 | 1.1% | 2024-01-10 | |
| CVE-2023-46712 | Fortinet FortiPortal improper access control | 6.3CNA v3.1 | 0.7% | 2024-01-10 | Fix |
| CVE-2023-45139 | fonttools XML external entity injection (XXE) | 7.5CNA v3.1 | 1.2% | 2024-01-10 | Fix |
| CVE-2023-44250 | Fortinet FortiOS improper privilege management | 8.3CNA v3.1 | 0.9% | 2024-01-10 | Fix |
| CVE-2023-42941 | Apple iOS and iPadOS denial of service | 4.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42934 | Apple macOS information disclosure | 4.2v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42933 | Apple macOS privilege escalation | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42929 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42876 | Apple macOS denial of service | 7.1v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42872 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42871 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42870 | Apple macOS use-after-free | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42869 | Apple macOS out-of-bounds write | 7.5v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2023-42866 | Apple Safari arbitrary code execution | 8.8v3.1 | 0.8% | 2024-01-10 | Fix |
| CVE-2023-42865 | Apple macOS out-of-bounds read | 6.5v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2023-42862 | Apple macOS out-of-bounds read | 6.5v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2023-42833 | Apple Safari code injection | 8.8v3.1 | 0.9% | 2024-01-10 | Fix |
| CVE-2023-42832 | Apple macOS race condition | 7.0v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42831 | This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8, macOS Ventura 13.5. An app may be able to fingerprint the user. | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42830 | Apple macOS personal information exposure | 3.3v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42829 | Apple macOS information disclosure | 5.5NVD v3.1 | 0.4% | 2024-01-10 | Fix |
| CVE-2023-42828 | Apple macOS privilege escalation | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-42826 | Apple macOS arbitrary code execution | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-41994 | Apple macOS incorrect authorization | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-41987 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-41974 | Apple iOS and iPadOS use-after-free | 7.8v3.1 | 1.4% | 2024-01-10 | KEVKCVFix |
| CVE-2023-41781 | XSS vulnerability in ZTE MF258 Products | 5.7CNA v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2023-41603 | D-Link R15 improper access control | 5.3v3.1 | 0.5% | 2024-01-10 | Fix |
| CVE-2023-41075 | Apple macOS type confusion | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-41069 | Apple iOS and iPadOS authentication bypass by spoofing | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-41060 | Apple macOS type confusion | 8.8v3.1 | 1.1% | 2024-01-10 | Fix |
| CVE-2023-41056 | Redis vulnerable to integer overflow in certain payloads | 8.1CNA v3.1 | 2.6% | 2024-01-10 | Fix |
| CVE-2023-40529 | Apple iOS and iPadOS VoiceOver information disclosure | 2.4v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40439 | Apple macOS path traversal | 3.3v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40438 | Apple macOS insecure temporary file | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40437 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40433 | Apple macOS logic flaw | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40430 | Apple macOS improper authorization | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40414 | Apple tvOS use-after-free | 9.8v3.1 | 1.0% | 2024-01-10 | Fix |
| CVE-2023-40411 | Apple macOS information disclosure | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40394 | Apple iOS and iPadOS information disclosure | 3.3v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-40393 | Apple macOS missing authentication | 7.5v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-40385 | Apple Safari information disclosure | 6.5v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-40383 | Apple macOS path traversal | 3.3v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-38612 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, iOS 17 and iPadOS 17, macOS Sonoma 14, macOS Ventura 13.6. An app may be able to access protected user data. | 3.3v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-38610 | Apple macOS out-of-bounds write | 7.1v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-38607 | Apple macOS Printer settings vulnerability | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-37934 | Fortinet FortiPAM resource exhaustion | 4.2CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-37932 | Fortinet FortiVoice path traversal | 6.2CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-32436 | Apple macOS denial of service | 7.1v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-32424 | Apple watchOS code execution | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-32401 | Apple macOS buffer overflow | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-32383 | Apple macOS code injection | 7.8v3.1 | 0.3% | 2024-01-10 | Fix |
| CVE-2023-32378 | Apple macOS use-after-free | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-32366 | Apple macOS out-of-bounds write | 7.8v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-31488 | Cisco Ironport Email Security Appliance out-of-bounds write | 9.8NVD v3.1 | 0.7% | 2024-01-10 | Fix |
| CVE-2023-31446 | Cassia Networks XC1000 command injection | 9.8NVD v3.1 | 61.1% | 2024-01-10 | Nuclei |
| CVE-2023-29447 | Insufficiently protected credentials in PTC's Kepware KEPServerEX | 5.3NVD v3.1 | 0.4% | 2024-01-10 | |
| CVE-2023-29446 | Improper input validation in PTC's Kepware KEPServerEX | 4.7NVD v3.1 | 0.2% | 2024-01-10 | |
| CVE-2023-29445 | Uncontrolled search path element in PTC's Kepware KEPServerEX | 7.8NVD v3.1 | 0.2% | 2024-01-10 | |
| CVE-2023-29444 | Uncontrolled search path element in PTC's Kepware KEPServerEX | 7.3NVD v3.1 | 0.2% | 2024-01-10 | |
| CVE-2023-28197 | Apple macOS improper access control | 3.3v3.1 | 0.4% | 2024-01-10 | Exploit codeFix |
| CVE-2023-28185 | Apple macOS integer overflow | 5.5v3.1 | 0.2% | 2024-01-10 | Fix |
| CVE-2023-6158 | EventON WordPress plugin unauthorized access | 6.5v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-5455 | Freeipa ipa: Invalid CSRF protection | 6.5CNA v3.1 | 0.6% | 2024-01-10 | Fix |
| CVE-2023-51746 | Siemens JT2Go stack-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-51745 | Siemens JT2Go stack-based buffer overflow | 7.8CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-51744 | Siemens JT2Go null pointer dereference | 3.3CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-51717 | Dataiku DATA Science Studio improper authentication | 9.8v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2023-51439 | Siemens JT2Go out-of-bounds read | 7.8CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-51438 | Siemens SIMATIC IPC1047E improper input validation | 10.0CNA v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2023-50974 | appwrite Command Line Interface apprite CLI makes use of hard-coded credentials | 5.5v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-50932 | Savignano S-notify cross-site request forgery | 5.4NVD v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-50931 | Savignano S-notify cross-site request forgery | 5.4NVD v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-50930 | Savignano S-notify cross-site request forgery | 7.1v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-50643 | Evernote arbitrary code execution | 9.8v3.1 | 1.7% | 2024-01-09 | Exploit code |
| CVE-2023-50585 | Tenda A18 out-of-bounds write | 9.8v3.1 | 0.7% | 2024-01-09 | |
| CVE-2023-50162 | Phome EmpireCMS SQL injection | 7.2v3.1 | 1.0% | 2024-01-09 | |
| CVE-2023-50136 | JFinalCMS cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-09 | |
| CVE-2023-49722 | Bosch BCC101, BCC102 and BCC50 firmware network port 8899 vulnerability | 8.3CNA v3.1 | 0.4% | 2024-01-09 | Fix |
| CVE-2023-49621 | Siemens SIMATIC CN 4100 default credentials | 9.8CNA v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2023-49252 | Siemens SIMATIC CN 4100 denial of service | 7.5CNA v3.1 | 0.6% | 2024-01-09 | Fix |
| CVE-2023-49251 | Siemens SIMATIC CN 4100 insecure direct object reference | 8.8CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2023-49238 | gradle Enterprise weak password requirements | 9.8v3.1 | 0.8% | 2024-01-09 | Fix |
| CVE-2023-49237 | TRENDnet Tv-ip1314pi command injection | 9.8v3.1 | 18.6% | 2024-01-09 | |
| CVE-2023-49236 | TRENDnet Tv-ip1314pi stack-based buffer overflow | 9.8v3.1 | 1.2% | 2024-01-09 | |
| CVE-2023-49235 | TRENDnet Tv-ip1314pi OS command injection | 9.8v3.1 | 0.8% | 2024-01-09 | |
| CVE-2023-49132 | Siemens Solid Edge SE2023 uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49131 | Siemens Solid Edge SE2023 uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49130 | Siemens Solid Edge SE2023 uninitialized pointer access | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49129 | Siemens Solid Edge SE2023 stack-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49128 | Siemens Solid Edge SE2023 out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49127 | Siemens Solid Edge SE2023 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49126 | Siemens Solid Edge SE2023 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49124 | Siemens Solid Edge SE2023 out-of-bounds read | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49123 | Siemens Solid Edge SE2023 heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49122 | Siemens Solid Edge SE2023 heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-49121 | Siemens Solid Edge SE2023 heap-based buffer overflow | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-47996 | FreeImage Exif.cpp::jpeg_read_exif_dir integer overflow | 6.5v3.1 | 0.6% | 2024-01-09 | |
| CVE-2023-47995 | FreeImage BitmapAccess.cpp:: excessive memory allocation | 6.5v3.1 | 0.7% | 2024-01-09 | Fix |
| CVE-2023-47994 | FreeImage LoadPixelDataRLE4 function in PluginBMP.cpp integer overflow | 8.8v3.1 | 0.7% | 2024-01-09 | |
| CVE-2023-47993 | FreeImage Exif.cpp::ReadInt32 out-of-bounds read | 6.5v3.1 | 0.6% | 2024-01-09 | |
| CVE-2023-47992 | FreeImage An integer overflow | 8.8v3.1 | 0.7% | 2024-01-09 | |
| CVE-2023-46906 | juzaweb CMS juzawebCMS incorrect access control vulnerability | 4.9v3.1 | 0.7% | 2024-01-09 | |
| CVE-2023-44120 | Siemens Spectrum Power 7 incorrect permission assignment | 7.8CNA v3.1 | 0.1% | 2024-01-09 | Fix |
| CVE-2023-42797 | Siemens CP-8031 MASTER MODULE uninitialized resource use | 6.6CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2023-39336 | Ivanti Endpoint Manager SQL injection | 8.8NVD v3.1 | 10.0% | 2024-01-09 | Fix |
| CVE-2023-38827 | Follettlearning Solutions Destiny Follet School cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-09 | |
| CVE-2023-37297 | AMI MegaRAC_SPx heap memory overflow | 8.3CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-37296 | AMI MegaRAC_SPx stack-based buffer overflow | 8.3CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-37295 | AMI MegaRAC_SPx heap-based buffer overflow | 8.3CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-37294 | AMI MegaRAC_SPx heap-based buffer overflow | 8.3CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-37293 | AMI MegaRAC_SPx stack-based buffer overflow | 9.6CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-36629 | St54-android-packages-apps-nfc out-of-bounds read | 5.5v3.1 | 0.4% | 2024-01-09 | Fix |
| CVE-2023-34333 | AMI MegaRAC_SPx untrusted pointer dereference | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-34332 | AMI MegaRAC_SPx untrusted pointer dereference in BMC | 7.8CNA v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-27098 | TP-Link Tapo cleartext storage of sensitive information | 7.5v3.1 | 0.4% | 2024-01-09 | |
| CVE-2023-27000 | Netscout Ngeniusone cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-09 | |
| CVE-2023-26999 | Netscout Ngeniusone XML external entity injection | 9.8v3.1 | 1.1% | 2024-01-09 | |
| CVE-2023-26998 | Netscout Ngeniusone cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-09 | |
| CVE-2023-7223 | Totolink T6 cstecgi.cgi access control | 6.5v3.1 | 0.6% | 2024-01-09 | |
| CVE-2023-7222 | Totolink X2000R HTTP POST request boa formTmultiAP buffer overflow | 9.8v3.1 | 1.3% | 2024-01-09 | |
| CVE-2023-7221 | Totolink T6 HTTP POST request main buffer overflow | 9.8v3.1 | 1.5% | 2024-01-09 | |
| CVE-2023-7220 | Totolink NR1800X cstecgi.cgi loginAuth stack-based overflow | 9.8v3.1 | 1.5% | 2024-01-09 | |
| CVE-2023-7219 | Totolink N350RT cstecgi.cgi loginAuth stack-based overflow | 9.8v3.1 | 1.3% | 2024-01-09 | |
| CVE-2023-7032 | Schneider Electric Easergy Studio deserialization of untrusted data | 7.8CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2023-6842 | Formidable Forms WordPress plugin authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-6830 | Formidable Forms WordPress plugin HTML injection | 6.1v3.1 | 0.4% | 2024-01-09 | Fix |
| CVE-2023-6788 | Metform Elementor Contact Form Builder WordPress plugin cross-site request forgery | 5.4v3.1 | 0.2% | 2024-01-09 | Fix |
| CVE-2023-6594 | WordPress Button Plugin MaxButtons authenticated (Administrator+) stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-6476 | Red Hat OpenShift Container Platform CRI-O's pods can break out of resource confinement on cgroupv2 | 6.5CNA v3.1 | 0.9% | 2024-01-09 | Fix |
| CVE-2023-6149 | Possible XXE vulnerability in Jenkins Plugin for Qualys Web Application Security | 5.7CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2023-6148 | Possible XSS vulnerability in Jenkins Plugin for Qualys Policy Compliance | 5.7CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2023-6147 | Possible XXE vulnerability in Jenkins Plugin for Qualys Policy Compliance | 5.7CNA v3.1 | 0.5% | 2024-01-09 | Fix |
| CVE-2023-6129 | OpenSSL POLY1305 MAC implementation corrupts vector registers on PowerPC | 6.5NVD v3.1 | 2.3% | 2024-01-09 | Fix |
| CVE-2023-5770 | Proofpoint Enterprise Protection HTML injection in email body through email subject | 5.3CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-5376 | Korenix JetNet Series TFTP Without Authentication | 9.1NVD v3.1 | 1.4% | 2024-01-09 | KCVFix |
| CVE-2023-5347 | Korenix JetNet Series Unauthenticated Firmware Upgrade | 9.1NVD v3.1 | 1.3% | 2024-01-09 | KCVFix |
| CVE-2023-3043 | AMI MegaRAC_SPx stack-based buffer overflow BMC | 9.6CNA v3.1 | 0.3% | 2024-01-09 | Fix |
| CVE-2023-52271 | Antifraud wsftprm.sys kernel driver vulnerability | 6.5v3.1 | 0.3% | 2024-01-08 | Exploit code |
| CVE-2023-52225 | Taggbox WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-52222 | WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-01-08 | Fix |
| CVE-2023-52219 | Gecka Terms Thumbnails WordPress plugin PHP object injection | 8.8NVD v3.1 | 0.6% | 2024-01-08 | |
| CVE-2023-52218 | WooCommerce Tranzila Gateway WordPress plugin PHP object injection | 9.8v3.1 | 0.6% | 2024-01-08 | |
| CVE-2023-52216 | JS and CSS Script Optimizer WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-08 | |
| CVE-2023-52215 | Barcode Scanner with Inventory and Order Manager WordPress plugin SQL injection | 9.8v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-52213 | Rate Star Review WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-08 | Fix |
| CVE-2023-52208 | Constant Contact Forms WordPress plugin sensitive data exposure | 7.5v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-52207 | HTML5 MP3 Player with Playlist Free WordPress plugin PHP object injection | 8.8NVD v3.1 | 0.6% | 2024-01-08 | |
| CVE-2023-52206 | Page Builder: Live Composer WordPress plugin PHP object injection | 7.2v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-52205 | HTML5 SoundCloud Player WordPress plugin PHP object injection | 7.2NVD v3.1 | 0.6% | 2024-01-08 | |
| CVE-2023-52204 | Randomize WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-01-08 | |
| CVE-2023-52203 | CformsII WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-01-08 | Fix |
| CVE-2023-52202 | HTML5 MP3 Player with Folder Feedburner WordPress plugin PHP object injection | 7.2NVD v3.1 | 0.6% | 2024-01-08 | |
| CVE-2023-52201 | pTypeConverter WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-01-08 | |
| CVE-2023-52200 | ARMember WordPress plugin cross-site request forgery (CSRF) leading to PHP object injection | 9.8v3.1 | 0.3% | 2024-01-08 | Fix |
| CVE-2023-52198 | Private Google Calendars WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-08 | Fix |
| CVE-2023-52197 | Ads Invalid Click Protection WordPress plugin cross-site scripting (XSS) | 4.8v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-52196 | CPT Bootstrap Carousel WordPress plugin cross-site scripting (XSS) | 6.1NVD v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-52190 | Coupon Referral Program WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-52142 | Events Shortcodes and Templates For The Events Calendar WordPress plugin SQL injection | 8.8v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-52074 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-52073 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-52072 | FlyCMS cross-site request forgery | 8.8v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-51701 | @fastify-reply-from JSON Content-Type parsing confusion | 5.3CNA v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-51508 | Database Cleaner WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-51490 | Defender Security WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-51408 | WP Optin Wheel WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-51406 | FastDup WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-51246 | GetSimpleCMS A cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-50982 | Stud.ip unrestricted file upload | 9.0v3.1 | 1.3% | 2024-01-08 | |
| CVE-2023-50948 | IBM Storage Fusion HCI information disclosure | 6.5CNA v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-49961 | Wallix Bastion information disclosure | 7.5v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-47890 | pyload download to arbitrary folder can lead to RCE | 8.8v3.1 | 1.1% | 2024-01-08 | Fix |
| CVE-2023-47211 | ManageEngine OpManager uploadMib functionality path traversal | 8.6NVD v3.1 | 47.0% | 2024-01-08 | NucleiFix |
| CVE-2023-47140 | IBM CICS Transaction Gateway improper access controls | 4.0CNA v3.1 | 0.2% | 2024-01-08 | Fix |
| CVE-2023-41710 | Open-Xchange OX App Suite cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39444 | GTKWave LXT2 parsing functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39443 | GTKWave LXT2 parsing functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39414 | GTKWave integer underflow | 7.3v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39413 | GTKWave integer underflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39317 | GTKWave LXT2 num_dict_entries functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39316 | GTKWave LXT2 num_dict_entries functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39275 | GTKWave LXT2 facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39274 | GTKWave LXT2 facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39273 | GTKWave LXT2 facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39272 | GTKWave LXT2 facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39271 | GTKWave LXT2 facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39270 | GTKWave LXT2 facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39235 | GTKWave out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-39234 | GTKWave out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38657 | GTKWave LXT2 zlib block decompression functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38653 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38652 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38651 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38650 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38649 | GTKWave out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38648 | GTKWave out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38623 | GTKWave VZT facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38622 | GTKWave VZT facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38621 | GTKWave VZT facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38620 | GTKWave VZT facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38619 | GTKWave VZT facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38618 | GTKWave VZT facgeometry parsing functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-38583 | GTKWave LXT2 lxt2_rd_expand_integer_to_bits function stack-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37923 | GTKWave arbitrary code execution | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37922 | GTKWave arbitrary code execution | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37921 | GTKWave arbitrary code execution | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37578 | GTKWave VCD get_vartoken realloc functionality use-after-free | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37577 | GTKWave VCD get_vartoken realloc functionality use-after-free | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37576 | GTKWave VCD get_vartoken realloc functionality use-after-free | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37575 | GTKWave VCD get_vartoken realloc functionality use-after-free | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37574 | GTKWave VCD get_vartoken realloc functionality use-after-free | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37573 | GTKWave VCD get_vartoken realloc functionality use-after-free | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37447 | GTKWave VCD var definition section functionality out-of-bounds read | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37446 | GTKWave VCD var definition section functionality out-of-bounds read | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37445 | GTKWave VCD var definition section functionality out-of-bounds read | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37444 | GTKWave VCD var definition section functionality out-of-bounds read | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37443 | GTKWave VCD var definition section functionality out-of-bounds read | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37442 | GTKWave VCD var definition section functionality out-of-bounds read | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37420 | GTKWave VCD parse_valuechange portdump functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37419 | GTKWave VCD parse_valuechange portdump functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37418 | GTKWave VCD parse_valuechange portdump functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37417 | GTKWave VCD parse_valuechange portdump functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37416 | GTKWave VCD parse_valuechange portdump functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-37282 | GTKWave VZT LZMA_Read dmem extraction functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-36916 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-36915 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-36864 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-36861 | GTKWave VZT LZMA_read_varint functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-36747 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-36746 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35997 | GTKWave fstReaderIterBlocks2 tdelta functionality improper array index validation | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35996 | GTKWave fstReaderIterBlocks2 tdelta functionality improper array index validation | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35995 | GTKWave fstReaderIterBlocks2 tdelta functionality improper array index validation | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35994 | GTKWave fstReaderIterBlocks2 tdelta functionality improper array index validation | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |