CVE-2023 records published after 2023
Page eight of eight: records 7,001 to 7,334 of the 7,334 published after 2023, newest first. The first page carries the figures for After 2023.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2023-35992 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35989 | GTKWave LXT2 zlib block allocation functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35970 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35969 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35964 | GTKWave decompression functionality OS command injection | 7.8v3.1 | 1.5% | 2024-01-08 | Fix |
| CVE-2023-35963 | GTKWave decompression functionality OS command injection | 7.8v3.1 | 1.5% | 2024-01-08 | Fix |
| CVE-2023-35962 | GTKWave decompression functionality OS command injection | 7.8v3.1 | 1.5% | 2024-01-08 | Fix |
| CVE-2023-35961 | GTKWave decompression functionality OS command injection | 7.8v3.1 | 1.5% | 2024-01-08 | Fix |
| CVE-2023-35960 | GTKWave decompression functionality OS command injection | 7.8v3.1 | 1.5% | 2024-01-08 | Fix |
| CVE-2023-35959 | GTKWave decompression functionality OS command injection | 7.8v3.1 | 1.5% | 2024-01-08 | Fix |
| CVE-2023-35958 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35957 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35956 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35955 | GTKWave heap-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35704 | GTKWave FST LEB128 varint functionality stack-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35703 | GTKWave FST LEB128 varint functionality stack-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35702 | GTKWave FST LEB128 varint functionality stack-based buffer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35128 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35057 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-35004 | GTKWave integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-34436 | GTKWave LXT2 num_time_table_entries functionality out-of-bounds write | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-34087 | GTKWave EVCD var len parsing functionality improper array index validation | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-32650 | GTKWave FST_BL_GEOM parsing maxhandle functionality integer overflow | 7.8v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-29052 | Open-Xchange OX App Suite cross-site scripting | 5.4CNA v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-29051 | Open-Xchange OX App Suite improper access control | 8.1CNA v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-29050 | Open-Xchange OX App Suite LDAP injection | 7.6CNA v3.1 | 1.7% | 2024-01-08 | Fix |
| CVE-2023-29049 | Open-Xchange OX App Suite cross-site scripting | 5.4CNA v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-29048 | Open-Xchange OX App Suite OS command injection | 8.8CNA v3.1 | 1.3% | 2024-01-08 | Fix |
| CVE-2023-27739 | Easyxdm cross-site scripting | 6.1v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-7224 | OpenVPN Connect eval injection | 7.8v3.1 | 0.2% | 2024-01-08 | Fix |
| CVE-2023-7218 | Totolink N350RT cstecgi.cgi loginAuth stack-based overflow | 7.2v3.1 | 1.3% | 2024-01-08 | |
| CVE-2023-7215 | Chanzhaoyu chatgpt-web cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-08 | |
| CVE-2023-6921 | SQL injection in PrestaShop Google Integrator | 9.1v3.1 | 0.7% | 2024-01-08 | Fix |
| CVE-2023-6845 | CommentTweets WordPress plugin settings update via CSRF | 8.8NVD v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-6750 | Clone WordPress plugin unauthenticated Backup download | 7.5NVD v3.1 | 1.9% | 2024-01-08 | NucleiFix |
| CVE-2023-6631 | Subnet Solutions Inc. PowerSYSTEM Center unquoted search path or element | 7.8v3.1 | 0.2% | 2024-01-08 | Fix |
| CVE-2023-6627 | WP Go Maps WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-6555 | Email Subscription Popup WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-6552 | Open redirect in TasmoAdmin | 6.1v3.1 | 0.5% | 2024-01-08 | Fix |
| CVE-2023-6532 | WP Blogs' Planetarium WordPress plugin settings update via CSRF | 8.8NVD v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-6529 | WP VR WordPress plugin unauthenticated plugin Downgrade leading to XSS | 6.1NVD v3.1 | 0.2% | 2024-01-08 | Fix |
| CVE-2023-6528 | Slider Revolution WordPress plugin Author+ insecure deserialization leading to RCE | 8.8NVD v3.1 | 1.4% | 2024-01-08 | Fix |
| CVE-2023-6505 | Prime Mover WordPress plugin directory listing to sensitive data exposure | 7.5NVD v3.1 | 39.9% | 2024-01-08 | NucleiFix |
| CVE-2023-6383 | Debug Log Manager WordPress plugin sensitive Logs exposure | 7.5NVD v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-6161 | WP Crowdfunding WordPress plugin reflected XSS | 6.1NVD v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-6141 | Essential Real Estate WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.4% | 2024-01-08 | Fix |
| CVE-2023-6140 | Essential Real Estate for WordPress Subscriber+ arbitrary file upload | 8.8NVD v3.1 | 1.1% | 2024-01-08 | Fix |
| CVE-2023-6139 | Essential Real Estate WordPress plugin Subscriber+ denial of service via arbitrary option update | 6.5NVD v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-6042 | Getwid WordPress plugin unauthenticated arbitrary email Sending to admin | 7.5NVD v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-5957 | Ni Purchase Order(PO) For WooCommerce WordPress plugin Admin+ file upload to remote code execution | 7.2NVD v3.1 | 0.9% | 2024-01-08 | Fix |
| CVE-2023-5911 | WP Custom Cursors WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.3% | 2024-01-08 | |
| CVE-2023-5235 | Ovic Responsive WPBakery WordPress plugin Subscriber+ option update | 8.8NVD v3.1 | 0.6% | 2024-01-08 | Fix |
| CVE-2023-5091 | Mali GPU Kernel Driver allows improper GPU processing operations | 5.5NVD v3.1 | 0.2% | 2024-01-08 | Fix |
| CVE-2023-1032 | The Linux Kernel Organization linux double free | 5.5NVD v3.1 | 0.3% | 2024-01-08 | Fix |
| CVE-2023-47145 | IBM Db2 for Windows privilege escalation | 8.4CNA v3.1 | 0.2% | 2024-01-07 | Fix |
| CVE-2023-7214 | Totolink N350RT HTTP POST request main stack-based overflow | 8.8v3.1 | 0.9% | 2024-01-07 | |
| CVE-2023-7213 | Totolink N350RT HTTP POST request main stack-based overflow | 8.8v3.1 | 0.9% | 2024-01-07 | |
| CVE-2023-7212 | DeDeCMS Backend file_class.php unrestricted upload | 9.8v3.1 | 0.6% | 2024-01-07 | |
| CVE-2023-7211 | Uniway Router Administrative Web interface reliance on ip address for authentication | 8.1v3.1 | 0.9% | 2024-01-07 | |
| CVE-2023-7210 | OneNav API improper authentication | 9.8v3.1 | 1.0% | 2024-01-07 | |
| CVE-2023-7209 | Uniway Router Device Reset device_reset.cgi denial of service | 7.5v3.1 | 1.3% | 2024-01-07 | |
| CVE-2023-7208 | Totolink X2000R_V2 boa formTmultiAP buffer overflow | 9.8v3.1 | 1.7% | 2024-01-07 | |
| CVE-2023-51441 | Apache Axis (EOL) may allow SSRF when untrusted input is passed to the service admin HTTP API | 7.2v3.1 | 1.2% | 2024-01-06 | Fix |
| CVE-2023-50612 | fit2cloud CloudExplorer-Lite insecure permissions | 7.8v3.1 | 0.3% | 2024-01-06 | |
| CVE-2023-50609 | Ava Teaching Video Application Service Platform cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-06 | |
| CVE-2023-50121 | Autelrobotics Evo Nano Drone denial of service | 5.7v3.1 | 0.4% | 2024-01-06 | |
| CVE-2023-46953 | Abo.cms SQL injection | 9.8v3.1 | 0.8% | 2024-01-06 | |
| CVE-2023-39853 | Dzzoffice SQL injection | 6.5v3.1 | 0.7% | 2024-01-06 | |
| CVE-2023-6801 | RSS Aggregator by Feedzy WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.3% | 2024-01-06 | Fix |
| CVE-2023-6798 | Themeisle RSS Aggregator by Feedzy settings update missing authorization | 5.4v3.1 | 0.3% | 2024-01-06 | Fix |
| CVE-2023-52323 | PyCryptodome and Pycryptodomex side-channel leakage for OAEP decryption | 5.9v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-52184 | WP Job Portal WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52178 | WP Affiliate Disclosure WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-52151 | Uncanny Automator WordPress plugin sensitive data exposure | 5.3v3.1 | 0.4% | 2024-01-05 | Fix |
| CVE-2023-52150 | Dynamic Content for Elementor WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-52149 | Floating Button WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52148 | Affiliates Manager WordPress plugin sensitive data exposure | 5.3v3.1 | 0.4% | 2024-01-05 | Fix |
| CVE-2023-52146 | 404 Solution WordPress plugin sensitive data exposure | 5.3v3.1 | 0.4% | 2024-01-05 | Fix |
| CVE-2023-52145 | Republish Old Posts WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52143 | WP Stripe Checkout WordPress plugin sensitive data exposure | 7.5v3.1 | 0.5% | 2024-01-05 | Fix |
| CVE-2023-52136 | Custom Twitter Feeds (Tweets Widget) WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52130 | Affiliates Manager WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52129 | teachPress WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52128 | White Label WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52127 | WPC Product Bundles for WooCommerce WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52126 | Send Users Email WordPress plugin sensitive data exposure | 5.3v3.1 | 0.4% | 2024-01-05 | Fix |
| CVE-2023-52125 | iFrame WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-52124 | WP Tabs WordPress plugin cross-site scripting (XSS) | 5.4v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-52123 | Strong Testimonials WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52122 | Simple Job Board WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52121 | NitroPack WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52120 | NEX-Forms Ultimate Form Builder WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52119 | Icegram WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-51678 | Doofinder for WooCommerce WordPress plugin broken access control | 6.5v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-51673 | Stylish Price List WordPress plugin broken access control | 9.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-51668 | Inline Image Upload for BBPress WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-51539 | Apollo13 Framework Extensions WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-51538 | Awesome Support WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-51535 | Spam protection, AntiSpam, FireWall by CleanTalk WordPress plugin cross-site request forgery (CSRF) | 8.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-51502 | WooCommerce Stripe Payment Gateway WordPress plugin insecure direct object references (IDOR) | 9.8v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-51277 | nbviewer-app (aka Jupyter Notebook Viewer) before 0.1.6 has the get-task-allow entitlement for release builds. | 9.8v3.1 | 1.1% | 2024-01-05 | |
| CVE-2023-50991 | Tenda I29 buffer overflow | 7.5v3.1 | 8.8% | 2024-01-05 | Emerging Threats |
| CVE-2023-50027 | Buy-addons Bazoom Magnifier SQL injection | 9.8v3.1 | 0.7% | 2024-01-05 | |
| CVE-2023-47560 | QNAP QuMagie command injection | 7.4CNA v3.1 | 1.1% | 2024-01-05 | Fix |
| CVE-2023-47559 | QNAP QuMagie cross-site scripting | 5.5CNA v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-47219 | QNAP QuMagie SQL injection | 3.5CNA v3.1 | 0.5% | 2024-01-05 | Fix |
| CVE-2023-46837 | Xen arm32: The cache may not be properly cleaned/invalidated (take two) | 3.3v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-46836 | Xen x86: BTC/SRSO fixes not fully effective | 4.7v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-46835 | Xen x86/AMD: Mismatch in IOMMU quarantine page table levels | 5.5v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-45044 | QNAP QTS and QuTS hero buffer overflow | 3.8CNA v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-45043 | QNAP QTS and QuTS hero buffer overflow | 3.8CNA v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-45042 | QNAP QTS and QuTS hero buffer overflow | 3.8CNA v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-45041 | QNAP QTS and QuTS hero buffer overflow | 3.8CNA v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-45040 | QNAP QTS and QuTS hero buffer overflow | 3.8CNA v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-45039 | QNAP QTS and QuTS hero buffer overflow | 3.8CNA v3.1 | 0.6% | 2024-01-05 | Fix |
| CVE-2023-41782 | DLL hijacking vulnerability in ZTE ZXCLOUD iRAI | 3.9CNA v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-41289 | QNAP QcalAgent OS command injection | 6.3CNA v3.1 | 1.1% | 2024-01-05 | Fix |
| CVE-2023-41288 | QNAP Video Station OS command injection | 8.8CNA v3.1 | 1.1% | 2024-01-05 | Fix |
| CVE-2023-41287 | QNAP Video Station SQL injection | 4.3CNA v3.1 | 0.5% | 2024-01-05 | Fix |
| CVE-2023-39296 | QNAP QTS and QuTS hero prototype pollution | 7.5CNA v3.1 | 1.6% | 2024-01-05 | Fix |
| CVE-2023-39294 | QNAP QTS and QuTS hero OS command injection | 6.6CNA v3.1 | 1.1% | 2024-01-05 | Fix |
| CVE-2023-34328 | Xen x86/AMD: Debug Mask handling | 5.5v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-34327 | Xen x86/AMD: Debug Mask handling | 5.5v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-34326 | Xen x86/AMD: Missing IOMMU TLB flushing | 7.8v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-34325 | Xen multiple vulnerabilities in libfsimage disk handling | 7.8v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-34324 | Possible deadlock in Linux kernel event handling | 4.9v3.1 | 0.9% | 2024-01-05 | Fix |
| CVE-2023-34323 | Xen xenstored: A transaction conflict can crash C Xenstored | 5.5v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-34322 | Xen top-level shadow reference dropped too early for 64-bit PV guests | 7.8v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-34321 | Xen arm32: The cache may not be properly cleaned/invalidated | 3.3v3.1 | 0.3% | 2024-01-05 | Fix |
| CVE-2023-6493 | Depicter Slider WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-01-05 | Fix |
| CVE-2023-52322 | SPIP cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-04 | Fix |
| CVE-2023-51812 | Tenda AX3 command injection | 9.8v3.1 | 1.1% | 2024-01-04 | |
| CVE-2023-51154 | jizhiCMS arbitrary file read | 9.8v3.1 | 0.6% | 2024-01-04 | |
| CVE-2023-50867 | Travel Website multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50866 | Travel Website multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50865 | Travel Website multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50864 | Travel Website multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50863 | Travel Website multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50862 | Travel Website multiple Unauthenticated SQL Injections (SQLi) | 9.8v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50760 | Online Notice Board System insecure file upload | 8.8CNA v3.1 | 1.2% | 2024-01-04 | |
| CVE-2023-50753 | Online Notice Board System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50752 | Online Notice Board System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50743 | Online Notice Board System multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-50630 | Teamwork Management System xiweicheng TMS v.2.28.0 cross-site scripting | 6.1v3.1 | 0.5% | 2024-01-04 | |
| CVE-2023-50082 | PbootCMS information disclosure | 7.5v3.1 | 0.6% | 2024-01-04 | |
| CVE-2023-49666 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-49665 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-49658 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-49639 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-49633 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-49625 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-49624 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-49622 | Billing Software multiple Unauthenticated SQL Injections (SQLi) | 9.8CNA v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-41784 | Permissions and access control vulnerability in ZTE Red Magic 8 Pro | 6.6CNA v3.1 | 0.2% | 2024-01-04 | Fix |
| CVE-2023-29962 | S-CMS path traversal | 6.5v3.1 | 0.7% | 2024-01-04 | |
| CVE-2023-7044 | Essential Addons for Elementor WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-04 | Fix |
| CVE-2023-6992 | Memory corruption issues is Cloudflare zlib implementation | 4.0CNA v3.1 | 0.2% | 2024-01-04 | Fix |
| CVE-2023-6944 | Red Hat RHDH-1.1-RHEL-9 rhdh: Catalog-import function leaks credentials to frontend | 5.7NVD v3.1 | 0.6% | 2024-01-04 | Fix |
| CVE-2023-6738 | PageLayer WordPress plugin Authenticated(Contributor+) stored cross-site scripting via meta fields | 5.4v3.1 | 0.4% | 2024-01-04 | Fix |
| CVE-2023-6733 | WP-Members Membership WordPress plugin missing authorization to sensitive information exposure | 6.5v3.1 | 0.4% | 2024-01-04 | Fix |
| CVE-2023-6551 | Stored XSS in class.upload.php | 5.4v3.1 | 0.4% | 2024-01-04 | |
| CVE-2023-6498 | Complianz GDPR/CCPA Cookie Consent WordPress plugin stored cross-site scripting | 4.8v3.1 | 0.3% | 2024-01-04 | Fix |
| CVE-2023-6270 | Kernel: Aoe: Improper reference count leads to use-after-free | 7.0NVD v3.1 | 0.4% | 2024-01-04 | Fix |
| CVE-2023-3726 | OCSInventory-ocsreports stored cross-site scripting | 6.9v3.1 | 0.5% | 2024-01-04 | |
| CVE-2023-52314 | PaddlePaddle command injection in convert_shape_compare | 9.6CNA v3.1 | 1.2% | 2024-01-03 | Fix |
| CVE-2023-52313 | PaddlePaddle FPE in paddle.argmin and paddle.argmax | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52312 | PaddlePaddle null pointer dereference in paddle.crop | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52311 | PaddlePaddle command injection in _wget_download | 9.6CNA v3.1 | 1.2% | 2024-01-03 | Fix |
| CVE-2023-52310 | PaddlePaddle command injection in get_online_pass_interval | 9.6CNA v3.1 | 1.2% | 2024-01-03 | Fix |
| CVE-2023-52309 | PaddlePaddle heap buffer overflow in paddle.repeat_interleave | 8.2CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52308 | PaddlePaddle FPE in paddle.amin | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52307 | PaddlePaddle stack overflow in paddle.linalg.lu_unpack | 8.2CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52306 | PaddlePaddle FPE in paddle.lerp | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52305 | PaddlePaddle FPE in paddle.topk | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52304 | PaddlePaddle stack overflow in paddle.searchsorted | 8.2CNA v3.1 | 0.6% | 2024-01-03 | Fix |
| CVE-2023-52303 | PaddlePaddle segfault in paddle.put_along_axis | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-52302 | PaddlePaddle segfault in paddle.nextafter | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-51785 | Apache InLong: Arbitrary file read vulnerability in Apache InLong Manager | 7.5v3.1 | 1.0% | 2024-01-03 | Fix |
| CVE-2023-51784 | Apache InLong: Remote code execution vulnerability in Apache InLong Manager | 9.8v3.1 | 1.6% | 2024-01-03 | Fix |
| CVE-2023-50922 | GL.iNet Gl-a1300 unrestricted file upload | 7.2v3.1 | 0.9% | 2024-01-03 | |
| CVE-2023-50921 | GL.iNet Gl-a1300 improper privilege management | 9.8v3.1 | 0.5% | 2024-01-03 | |
| CVE-2023-50351 | Insecure key rotation affects MyXalytics | 8.2CNA v3.1 | 0.2% | 2024-01-03 | Fix |
| CVE-2023-50350 | A broken cryptographic algorithm impacts MyXalytics | 8.2CNA v3.1 | 0.2% | 2024-01-03 | Fix |
| CVE-2023-50348 | Improper error handling affects DRYiCE MyXalytics | 3.1CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-50346 | An information disclosure affects DRYiCE MyXalytics | 3.1CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-50345 | Open redirect affects DRYiCE MyXalytics | 3.7CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-50344 | Unauthenticated File Downloads affect DRYiCE MyXalytics | 5.4CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-50343 | Improper access control (Controller APIs) affects DRYiCE MyXalytics | 8.3CNA v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-50342 | Insecure direct object reference (IDOR) affects DRYiCE MyXalytics | 7.1CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-50341 | Improper access control affects DRYiCE MyXalytics | 7.6CNA v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-50256 | Froxlor username/surname AND company field Bypass | 7.5CNA v3.1 | 0.7% | 2024-01-03 | Fix |
| CVE-2023-50253 | labring laf information disclosure | 9.7CNA v3.1 | 0.7% | 2024-01-03 | |
| CVE-2023-50093 | Apiida API Gateway Manager host header injection | 6.1v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-50092 | Apiida API Gateway Manager cross-site scripting | 6.1v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-50090 | Ureport2 saveReportFile method arbitrary file write | 9.8v3.1 | 0.8% | 2024-01-03 | |
| CVE-2023-49558 | Yasm denial of service | 5.5v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-49557 | Yasm denial of service | 5.5v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-49556 | Yasm buffer overflow | 5.5v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-49555 | Yasm denial of service | 5.5v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-49554 | YASM nasm preprocessor do_directive function use-after-free | 5.5v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-49442 | Jeecg deserialization of untrusted data | 9.8v3.1 | 38.5% | 2024-01-03 | |
| CVE-2023-47473 | Fuwushe Ifair path traversal | 7.5v3.1 | 1.0% | 2024-01-03 | |
| CVE-2023-46929 | GPAC MP4Box denial of service | 7.5v3.1 | 0.8% | 2024-01-03 | |
| CVE-2023-46742 | CubeFS leaks users key in logs | 4.8CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-46741 | CubeFS leaks magic secret key when starting Blobstore access service | 4.8CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-46740 | cubefs insecure random string generator used for sensitive data | 6.5CNA v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-46739 | cubefs timing attack can leak user passwords | 6.5CNA v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-46738 | Authenticated users can crash the CubeFS servers with maliciously crafted requests | 6.5CNA v3.1 | 0.6% | 2024-01-03 | Fix |
| CVE-2023-46308 | Plotly.js prototype pollution | 9.8v3.1 | 0.9% | 2024-01-03 | Fix |
| CVE-2023-45724 | Unauthenticated file upload affects DRYiCE MyXalytics | 8.2CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-45723 | Path traversal which allows file upload capability affects DRYiCE MyXalytics | 7.6CNA v3.1 | 1.0% | 2024-01-03 | Fix |
| CVE-2023-45722 | Path traversal arbitrary file read affects DRYiCE MyXalytics | 8.8CNA v3.1 | 0.7% | 2024-01-03 | Fix |
| CVE-2023-45559 | Line channel access token information disclosure | 8.2v3.1 | 0.5% | 2024-01-03 | |
| CVE-2023-42358 | O-RAN-SC Ric-plt-e2mgr missing authorization | 7.7v3.1 | 0.6% | 2024-01-03 | |
| CVE-2023-41783 | Command injection vulnerability of ZTE's ZXCLOUD iRAI | 4.3CNA v3.1 | 0.6% | 2024-01-03 | Fix |
| CVE-2023-41780 | Unsafe DLL Loading vulnerability in ZTE ZXCLOUD iRAI | 6.4CNA v3.1 | 0.2% | 2024-01-03 | |
| CVE-2023-41779 | Illegal Memory Access vulnerability of ZTE's ZXCLOUD iRAI | 4.4CNA v3.1 | 0.2% | 2024-01-03 | Fix |
| CVE-2023-41776 | Local privilege escalation vulnerability of ZTE's ZXCLOUD iRAI | 6.7CNA v3.1 | 0.2% | 2024-01-03 | Fix |
| CVE-2023-39655 | CouchAuth host header injection vulnerability leaks the password reset token | 9.6v3.1 | 0.5% | 2024-01-03 | |
| CVE-2023-38678 | PaddlePaddle segfault in paddle.mode | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-38677 | PaddlePaddle FPE in paddle.linalg.eig | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-38676 | PaddlePaddle segfault in paddle.dot | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-38675 | PaddlePaddle FPE in paddle.linalg.matrix_rank | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-38674 | PaddlePaddle FPE in paddle.nanmedian | 4.7CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-37608 | Automaticsystems SOC FL9600 Firstlane hard-coded credentials | 7.5v3.1 | 0.9% | 2024-01-03 | |
| CVE-2023-37607 | Automaticsystems SOC FL9600 Firstlane path traversal | 7.5v3.1 | 1.4% | 2024-01-03 | |
| CVE-2023-30617 | openkruise kruise leverage the kruise-daemon pod to list all secrets in the entire cluster | 6.5CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-7068 | WooCommerce PDF Invoices WordPress plugin unauthorized access | 6.5v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-7027 | POST SMTP Mailer WordPress plugin stored cross-site scripting | 5.4NVD v3.1 | 0.9% | 2024-01-03 | Fix |
| CVE-2023-6986 | EmbedPress WordPress plugin stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-6984 | PowerPack Addons for Elementor WordPress plugin cross-site request forgery | 4.3v3.1 | 0.2% | 2024-01-03 | Fix |
| CVE-2023-6981 | WP SMS WordPress plugin authenticated (Admin+) SQL injection to reflected cross-site scripting | 4.9v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-6980 | WP SMS WordPress plugin cross-site request forgery to Subscriber deletion | 4.3v3.1 | 0.2% | 2024-01-03 | Fix |
| CVE-2023-6747 | FooGallery Premium WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-6629 | POST SMTP Mailer WordPress plugin reflected cross-site scripting via msg | 6.1v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-6621 | Post SMTP for WordPress reflected cross-site scripting | 6.1NVD v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-6600 | OMGF WordPress plugin unauthorized access | 5.4NVD v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-6540 | Lenovo Browser Mobile code injection | 6.5CNA v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-6524 | MapPress Maps for WordPress plugin authenticated (Contributor+) stored cross-site scripting | 5.4v3.1 | 0.5% | 2024-01-03 | Fix |
| CVE-2023-6338 | Lenovo Universal Device Client (UDC) uncontrolled search path | 7.8CNA v3.1 | 0.2% | 2024-01-03 | Fix |
| CVE-2023-6004 | Libssh: Proxycommand/proxyjump features allow injection of malicious code through hostname | 4.8NVD v3.1 | 0.4% | 2024-01-03 | Fix |
| CVE-2023-5881 | Unauthenticated access permitted to web interface page Garage Door Control Module Setup | 8.2NVD v3.1 | 0.6% | 2024-01-03 | |
| CVE-2023-5880 | Aladdin Connect garage door opener configuration setup webserver vulnerability | 8.8NVD v3.1 | 0.6% | 2024-01-03 | |
| CVE-2023-5879 | Aladdin Connect Android Application Insecure Storage | 6.8NVD v3.1 | 0.4% | 2024-01-03 | |
| CVE-2023-5138 | silabs.com GSDK Glitch detection not active by default in Silicon Labs Secure Vault High devices | 6.8CNA v3.1 | 0.3% | 2024-01-03 | Fix |
| CVE-2023-51652 | spassarop antisamy-dotnet OWASP.AntiSamy mXSS when preserving comments | 6.1CNA v3.1 | 0.4% | 2024-01-02 | Fix |
| CVE-2023-50711 | rust-vmm vmm-sys-util FamStructWrapper deserialization out-of-bounds write | 5.7CNA v3.1 | 0.7% | 2024-01-02 | Fix |
| CVE-2023-50333 | Mattermost lack of restriction to manage group names for freshly demoted guests | 3.7CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-50020 | Open5GS AMF denial of service | 7.5v3.1 | 0.7% | 2024-01-02 | |
| CVE-2023-50019 | Open5GS improper exception handling | 5.9v3.1 | 0.6% | 2024-01-02 | |
| CVE-2023-49794 | The logic of get apk path in KernelSU module can be bypassed | 6.7CNA v3.1 | 0.3% | 2024-01-02 | |
| CVE-2023-49553 | Cesanta mJS denial of service | 7.5v3.1 | 0.9% | 2024-01-02 | |
| CVE-2023-49552 | Cesanta mJS out-of-bounds write | 7.5v3.1 | 0.8% | 2024-01-02 | |
| CVE-2023-49551 | Cesanta mJS denial of service | 7.5v3.1 | 0.8% | 2024-01-02 | |
| CVE-2023-49550 | Cesanta mJS denial of service | 7.5v3.1 | 0.8% | 2024-01-02 | |
| CVE-2023-49549 | Cesanta mJS denial of service | 7.5v3.1 | 0.8% | 2024-01-02 | |
| CVE-2023-49142 | OpenHarmony multimedia audio has a UAF | 4.0CNA v3.1 | 0.2% | 2024-01-02 | |
| CVE-2023-49135 | OpenHarmony multimedia player has a UAF | 4.0CNA v3.1 | 0.2% | 2024-01-02 | |
| CVE-2023-48732 | Mattermost keywords that trigger mentions are leaked to other users | 4.3CNA v3.1 | 0.5% | 2024-01-02 | Fix |
| CVE-2023-48419 | An attacker in the wifi vicinity of a target Google Home can spy on the victim, resulting in EoP | 10.0CNA v3.1 | 0.2% | 2024-01-02 | Fix |
| CVE-2023-48418 | Google Pixel Watch user Build misconfiguration resulting in local escalation of privilege | 10.0CNA v3.1 | 0.2% | 2024-01-02 | Fix |
| CVE-2023-48360 | OpenHarmony multimedia player has a UAF | 4.0CNA v3.1 | 0.2% | 2024-01-02 | |
| CVE-2023-47858 | Mattermost details of archived public channels are leaked to members of another team | 4.3CNA v3.1 | 0.4% | 2024-01-02 | Fix |
| CVE-2023-47857 | OpenHarmony multimedia camera has a UAF | 4.0CNA v3.1 | 0.2% | 2024-01-02 | |
| CVE-2023-47458 | Bladex SpringBlade missing authorization | 9.8v3.1 | 0.6% | 2024-01-02 | |
| CVE-2023-47216 | OpenHarmony Liteos-A has a missing release of resource vulnerability | 2.9CNA v3.1 | 0.1% | 2024-01-02 | |
| CVE-2023-47039 | Perl: Perl for windows binary hijacking vulnerability | 7.8NVD v3.1 | 0.4% | 2024-01-02 | Fix |
| CVE-2023-45893 | Floorsightsoftware Customer Portal insecure direct object reference | 7.5v3.1 | 0.6% | 2024-01-02 | |
| CVE-2023-45892 | Floorsightsoftware Insight insecure direct object reference | 7.5v3.1 | 0.6% | 2024-01-02 | |
| CVE-2023-45561 | Line channel access token information disclosure | 5.3v3.1 | 0.4% | 2024-01-02 | |
| CVE-2023-43514 | Qualcomm Snapdragon use-after-free in DSP services | 8.4CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-43512 | Buffer over-read in Qualcomm ESL | 7.5CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-43511 | Qualcomm Snapdragon loop with unreachable exit condition (infinite loop) in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-33120 | Qualcomm Snapdragon use-after-free in Audio | 7.8CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33118 | Qualcomm Snapdragon use-after-free in Automotive Audio | 7.8CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33117 | Qualcomm Snapdragon use-after-free in Audio | 7.8CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33116 | Qualcomm Snapdragon buffer over-read without Checking Size of Input in WLAN host | 7.5CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-33114 | Qualcomm Snapdragon use-after-free in Neural Processing Unit | 8.4CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33113 | Qualcomm Snapdragon buffer copy without checking size of input (`Classic buffer overflow`) in Kernel | 8.4CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33112 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-33110 | Qualcomm Snapdragon use of out-of-range pointer offset in Audio | 7.8CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33109 | Qualcomm Snapdragon null pointer dereference in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-33108 | Qualcomm Snapdragon use-after-free in Graphics | 8.4CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33094 | Qualcomm Snapdragon use-after-free in Linux Graphics | 8.4CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33085 | Qualcomm Snapdragon buffer copy without checking size of input in Wearables | 7.8CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33062 | Qualcomm Snapdragon buffer over-read in WLAN firmware | 7.5CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-33040 | Buffer over-read in Data Modem | 7.5CNA v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-33038 | Qualcomm Snapdragon integer overflow or wraparound in Radio Interface Layer | 6.7CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33037 | Qualcomm Snapdragon key unwrapping cryptographic weakness | 7.1CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33036 | Qualcomm Snapdragon null pointer dereference in Hypervisor | 7.1CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33033 | Qualcomm Snapdragon use of out-of-range pointer offset in Audio | 8.4CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33032 | Qualcomm Snapdragon integer overflow or wraparound in TZ Secure OS | 9.3CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33030 | Qualcomm Snapdragon buffer copy without checking size of input in HLOS | 9.3CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-33025 | Qualcomm Snapdragon buffer copy without checking size of input in Data Modem | 9.8CNA v3.1 | 0.4% | 2024-01-02 | Fix |
| CVE-2023-33014 | Qualcomm Snapdragon improper input validation in services | 7.6CNA v3.1 | 0.2% | 2024-01-02 | Fix |
| CVE-2023-32891 | MediaTek chipsets improper input validation in bluetooth service | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32890 | MediaTek chipsets null pointer dereference in Modem EMM | 7.5v3.1 | 0.8% | 2024-01-02 | Fix |
| CVE-2023-32889 | MediaTek chipsets out-of-bounds write in Modem IMS Call UA | 7.5v3.1 | 0.4% | 2024-01-02 | Fix |
| CVE-2023-32888 | MediaTek chipsets out-of-bounds write in Modem IMS Call UA | 7.5v3.1 | 0.9% | 2024-01-02 | Fix |
| CVE-2023-32887 | MediaTek chipsets stack-based buffer overflow in Modem IMS Stack | 7.5v3.1 | 0.9% | 2024-01-02 | Fix |
| CVE-2023-32886 | MediaTek chipsets out-of-bounds write in Modem IMS SMS UA | 7.5v3.1 | 0.8% | 2024-01-02 | Fix |
| CVE-2023-32885 | MediaTek chipsets display drm memory corruption | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32884 | MediaTek chipsets information disclosure in netdagent | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32883 | MediaTek chipsets out-of-bounds write in Engineer Mode | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32882 | MediaTek chipsets out-of-bounds write in battery | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32881 | MediaTek chipsets integer overflow or wraparound in battery | 4.4v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32880 | MediaTek chipsets out-of-bounds read in battery | 4.4v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32879 | MediaTek chipsets out-of-bounds write in battery | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32878 | MediaTek chipsets out-of-bounds read in battery | 4.4v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32877 | MediaTek chipsets out-of-bounds write in battery | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32876 | MediaTek chipsets out-of-bounds read in keyInstall | 4.4v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32875 | MediaTek chipsets out-of-bounds read in keyInstall | 4.4v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32874 | MediaTek chipsets out-of-bounds write in Modem IMS Stack | 9.8v3.1 | 1.0% | 2024-01-02 | Fix |
| CVE-2023-32872 | MediaTek chipsets out-of-bounds write in keyInstall | 6.7v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-32831 | MediaTek chipsets use of insufficiently random values in wlan driver | 5.5v3.1 | 0.2% | 2024-01-02 | Fix |
| CVE-2023-28583 | Qualcomm Snapdragon double free in Data Network Stack and Connectivity | 6.7CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-26159 | follow-redirects follow Redirects improperly handles URLs in the url.parse function | 6.1NVD v3.1 | 0.8% | 2024-01-02 | Fix |
| CVE-2023-26157 | libredwg out-of-bounds read | 7.5v3.1 | 0.5% | 2024-01-02 | Fix |
| CVE-2023-7192 | Kernel: Refcount leak in ctnetlink_create_conntrack | 4.4NVD v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-6693 | Qemu: Virtio-net: Stack buffer overflow in virtio_net_flush_tx | 5.3NVD v3.1 | 0.3% | 2024-01-02 | Fix |
| CVE-2023-6436 | SQLi in Ekol Bilisim Website Template | 9.8v3.1 | 0.5% | 2024-01-02 | |
| CVE-2023-6339 | Google Nest WiFi Pro root code-execution and user-data compromise | 10.0CNA v3.1 | 0.2% | 2024-01-02 | |
| CVE-2023-4280 | Gecko SDK TrustZone implementation vulnerability | 9.3CNA v3.1 | 0.4% | 2024-01-02 | |
| CVE-2023-4164 | Google There is a possible information disclosure due to a missing permission check in Pixel Watch | 8.4CNA v3.1 | 0.1% | 2024-01-02 | Fix |
| CVE-2023-50096 | St X-cube-safea1 buffer overflow | 7.5v3.1 | 0.6% | 2024-01-01 | |
| CVE-2023-50094 | yogeshojha rengine OS command injection | 8.8v3.1 | 13.5% | 2024-01-01 | NucleiExploit codeFix |
| CVE-2023-6485 | Html5 Video Player WordPress plugin Subscriber+ stored XSS | 5.4NVD v3.1 | 0.5% | 2024-01-01 | Fix |
| CVE-2023-6421 | Download Manager WordPress plugin unauthenticated Protected file download password leak | 7.5NVD v3.1 | 2.4% | 2024-01-01 | NucleiExploit codeFix |
| CVE-2023-6271 | Backup Migration Staging WordPress plugin sensitive data exposure | 7.5NVD v3.1 | 0.7% | 2024-01-01 | Fix |
| CVE-2023-6113 | WP Staging backup process information disclosure | 7.5NVD v3.1 | 0.8% | 2024-01-01 | Fix |
| CVE-2023-6064 | PayHere Payment Gateway WordPress plugin unauthenticated Log data disclosure | 7.5NVD v3.1 | 0.7% | 2024-01-01 | Fix |
| CVE-2023-6037 | WP TripAdvisor Review Slider WordPress plugin Admin+ stored XSS | 4.8NVD v3.1 | 0.4% | 2024-01-01 | Fix |
| CVE-2023-6000 | Popup Builder WordPress plugin unauthenticated stored XSS | 6.1NVD v3.1 | 2.0% | 2024-01-01 | NucleiExploit codeFix |
| CVE-2023-5877 | affiliate-toolkit WordPress plugin unauthenticated SSRF | 9.8NVD v3.1 | 0.9% | 2024-01-01 | Fix |