2023 CVEs (page 114)
Page 114 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6098 | Medium | 6.3 | 2023-11-13 | An XSS vulnerability has been discovered in ICS Business Manager affecting version 7.06.0028.7066. A remote attacker could send a specially crafted string expl… |
CVE-2023-6097 | Critical | 9.4 | 2023-11-13 | A SQL injection vulnerability has been found in ICS Business Manager, affecting version 7.06.0028.7089. This vulnerability could allow a remote user to send a… |
CVE-2023-46092 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.Com Webmaster Tools allows Stored XSS.This issue affects Webmaster Tools: from n/a through 2.0. |
CVE-2023-40335 | High | 7.1 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Jeremy O'Connell Cleverwise Daily Quotes allows Stored XSS.This issue affects Cleverwise Daily Quotes: from… |
CVE-2023-47801 | Medium | 4.7 | 2023-11-13 | An issue was discovered in Click Studios Passwordstate before 9811. Existing users (Security Administrators) could use the System Wide API Key to read or delet… |
CVE-2023-5747 | High | 7.2 | 2023-11-13 | Bashis, a Security Researcher at IPVM has found a flaw that allows for a remote code execution during the installation of Wave on the camera device. The Wave s… |
CVE-2023-5741 | Medium | 6.4 | 2023-11-13 | The POWR plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'powr-powr-pack' shortcode in all versions up to, and including, 2… |
CVE-2023-5037 | High | 7.2 | 2023-11-13 | badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into requ… |
CVE-2023-4775 | Medium | 6.4 | 2023-11-13 | The Advanced iFrame plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'advanced_iframe' shortcode in versions up to, and including, 202… |
CVE-2023-46201 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Jeff Sherk Auto Login New User After Registration allows Stored XSS.This issue affects Auto Login New User A… |
CVE-2023-47652 | High | 7.1 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links allows Stored XSS.This issue affects Auto Affiliate Links: from n/a thro… |
CVE-2023-47516 | High | 7.1 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Stark Digital Category Post List Widget allows Stored XSS.This issue affects Category Post List Widget: from… |
CVE-2023-46634 | High | 7.1 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in phoeniixx Custom My Account for Woocommerce allows Cross-Site Scripting (XSS).This issue affects Custom My A… |
CVE-2023-47163 | High | 7.5 | 2023-11-13 | Remarshal prior to v0.17.1 expands YAML alias nodes unlimitedly, hence Remarshal is vulnerable to Billion Laughs Attack. Processing untrusted YAML files may ca… |
CVE-2023-46207 | Medium | 4.1 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing.This issue affects Motors – Car Dealer, Classifie… |
CVE-2023-41239 | Medium | 6.4 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in Blubrry PowerPress Podcasting plugin by Blubrry.This issue affects PowerPress Podcasting plugin by Blubrry… |
CVE-2023-38515 | Medium | 5.5 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in Andy Moyle Church Admin.This issue affects Church Admin: from n/a through 3.7.56. |
CVE-2023-37978 | Medium | 4.4 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in Dimitar Ivanov HTTP Headers.This issue affects HTTP Headers: from n/a through 1.18.11. |
CVE-2023-35041 | High | 8.8 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability leading to Local File Inclusion (LF) in Webpushr Web Push Notifications Web Push Notifications – Webpushr plugi… |
CVE-2023-34013 | Medium | 4.4 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in Poll Maker Team Poll Maker – Best WordPress Poll Plugin.This issue affects Poll Maker – Best WordPress Poll… |
CVE-2023-31219 | Medium | 4.1 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in WPChill Download Monitor.This issue affects Download Monitor: from n/a through 4.8.1. |
CVE-2023-23800 | High | 7.1 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in Vova Anokhin WP Shortcodes Plugin — Shortcodes Ultimate.This issue affects WP Shortcodes Plugin — Shortcode… |
CVE-2023-23684 | Medium | 4.4 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in WPGraphQL.This issue affects WPGraphQL: from n/a through 1.14.5. |
CVE-2023-47669 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin… |
CVE-2023-38364 | Medium | 6.1 | 2023-11-13 | IBM CICS TX Advanced 10.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering… |
CVE-2023-38363 | Medium | 4.3 | 2023-11-13 | IBM CICS TX Advanced 10.1 does not set the secure attribute on authorization tokens or session cookies. Attackers may be able to get the cookie values by send… |
CVE-2023-34384 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Kebo Kebo Twitter Feed plugin <= 1.5.12 versions. |
CVE-2023-34378 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in scriptburn.Com WP Hide Post plugin <= 2.0.10 versions. |
CVE-2023-33207 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Krzysztof Wielogórski Stop Referrer Spam plugin <= 1.3.0 versions. |
CVE-2023-32588 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in BRANDbrilliance Post State Tags plugin <= 2.0.6 versions. |
CVE-2023-32583 | Medium | 6.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Prashant Walke WP All Backup plugin <= 2.4.3 versions. |
CVE-2023-47230 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Cimatti Consulting WordPress Contact Forms by Cimatti plugin <= 1.6.0 versions. |
CVE-2023-46638 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Webcodin WCP OpenWeather plugin <= 2.5.0 versions. |
CVE-2023-46636 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in David Stöckl Custom Header Images plugin <= 1.2.1 versions. |
CVE-2023-46629 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in themelocation Remove Add to Cart WooCommerce plugin <= 1.4.4. |
CVE-2023-46625 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in DAEXT Autolinks Manager plugin <= 1.10.04 versions. |
CVE-2023-46620 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Fluenx DeepL API translation plugin <= 2.3.9.1 versions. |
CVE-2023-46619 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in WebDorado WDSocialWidgets plugin <= 1.0.15 versions. |
CVE-2023-46618 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Bala Krishna, Sergey Yakovlev Category SEO Meta Tags plugin <= 2.5 versions. |
CVE-2023-26543 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Aleksandr Guidrevitch WP Meteor Website Speed Optimization Addon plugin <= 3.1.4 versions. |
CVE-2023-26531 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in 闪电博 多合一搜索自动推送管理插件-支持Baidu/Google/Bing/IndexNow/Yandex/头条 allows Cross Site Request Forgery.This issue affect… |
CVE-2023-27445 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Meril Inc. Blog Floating Button plugin <= 1.4.12 versions. |
CVE-2023-27441 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in gl_SPICE New Adman plugin <= 1.6.8 versions. |
CVE-2023-27438 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Evgen Yurchenko WP Translitera plugin <= p1.2.5 versions. |
CVE-2023-27436 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in Louis Reingold Elegant Custom Fonts plugin <= 1.0 versions. |
CVE-2023-27434 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Classic Editor and Classic Widgets plugin <= 1.2.5 versions. |
CVE-2023-26524 | Medium | 4.3 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in ExpressTech Quiz And Survey Master – Best Quiz, Exam and Survey Plugin for WordPress plugin <= 8.0.10 versio… |
CVE-2023-26518 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in AccessPress Themes WP TFeed plugin <= 1.6.9 versions. |
CVE-2023-26516 | High | 8.8 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in WPIndeed Debug Assistant plugin <= 1.4 versions. |
CVE-2023-26514 | Medium | 5.4 | 2023-11-13 | Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin <= 1.3.3 versions. |
CVE-2023-28420 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Leo Caseiro Custom Options Plus plugin <= 1.8.1 versions. |
CVE-2023-28419 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Stranger Studios Force First and Last Name as Display Name plugin <= 1.2 versions. |
CVE-2023-28173 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Amit Agarwal Google XML Sitemap for Images plugin <= 2.1.3 versions. |
CVE-2023-28172 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in flippercode WordPress Plugin for Google Maps – WP MAPS (formerly WP Google Map Plugin) plugin <= 4.4.2 versi… |
CVE-2023-28167 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Vsourz Digital CF7 Invisible reCAPTCHA plugin <= 1.3.3 versions. |
CVE-2023-28134 | High | 7.8 | 2023-11-12 | Local attacker can escalate privileges on affected installations of Check Point Harmony Endpoint/ZoneAlarm Extreme Security. An attacker must first obtain the… |
CVE-2023-27632 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in mmrs151 Daily Prayer Time plugin <= 2023.03.08 versions. |
CVE-2023-27623 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Jens Törnell WP Page Numbers plugin <= 0.5 versions. |
CVE-2023-27611 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in audrasjb Reusable Blocks Extended plugin <= 0.9 versions. |
CVE-2023-27431 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in ThemeHunk Big Store theme <= 1.9.3 versions. |
CVE-2023-27418 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Side Menu Lite – add sticky fixed buttons plugin <= 4.0 versions. |
CVE-2023-27417 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Timo Reith Affiliate Super Assistent plugin <= 1.5.1 versions. |
CVE-2023-29425 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in plainware.Com ShiftController Employee Shift Scheduling plugin <= 4.9.23 versions. |
CVE-2023-29238 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Whydonate Whydonate – FREE Donate button – Crowdfunding – Fundraising plugin <= 3.12.15 versions. |
CVE-2023-28987 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions. |
CVE-2023-28930 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Robin Phillips Mobile Banner plugin <= 1.5 versions. |
CVE-2023-28696 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Harish Chouhan, Themeist I Recommend This allows Cross Site Request Forgery.This issue affects I Recommend T… |
CVE-2023-28694 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Wbcom Designs Wbcom Designs – BuddyPress Activity Social Share plugin <= 3.5.0 versions. |
CVE-2023-28618 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Enhanced Plugin Admin plugin <= 1.16 versions. |
CVE-2023-28498 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in MotoPress Hotel Booking Lite plugin <= 4.6.0 versions. |
CVE-2023-28497 | Medium | 5.4 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery LITE plugin <= 1.7.6 versions. |
CVE-2023-28495 | Medium | 4.3 | 2023-11-12 | Cross-Site Request Forgery (CSRF) vulnerability in MyThemeShop WP Shortcode by MyThemeShop plugin <= 1.4.16 versions. |
CVE-2023-47037 | Medium | 4.3 | 2023-11-12 | We failed to apply CVE-2023-40611 in 2.7.1 and this vulnerability was marked as fixed then. Apache Airflow, versions before 2.7.3, is affected by a vulnerabi… |
CVE-2023-42781 | Medium | 6.5 | 2023-11-12 | Apache Airflow, versions before 2.7.3, has a vulnerability that allows an authorized user who has access to read specific DAGs only, to read information about… |
CVE-2023-6084 | Medium | 6.3 | 2023-11-12 | A vulnerability was found in Tongda OA 2017 up to 11.9 and classified as critical. Affected by this issue is some unknown functionality of the file general/veh… |
CVE-2023-47390 | High | 7.5 | 2023-11-11 | Headscale through 0.22.3 writes bearer tokens to info-level logs. |
CVE-2023-43057 | Medium | 4.6 | 2023-11-11 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the… |
CVE-2023-5959 | Medium | 4.3 | 2023-11-11 | A vulnerability, which was classified as problematic, was found in Byzoro Smart S85F Management Platform V31R02B10-01. Affected is an unknown function of the f… |
CVE-2023-46850 | Critical | 9.8 | 2023-11-11 | Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending network buffers to a r… |
CVE-2023-46849 | High | 7.5 | 2023-11-11 | Using the --fragment option in certain configuration setups OpenVPN version 2.6.0 to 2.6.6 allows an attacker to trigger a divide by zero behaviour which could… |
CVE-2023-4804 | Critical | 10.0 | 2023-11-10 | An unauthorized user could access debug features in Quantum HD Unity products that were accidentally exposed. |
CVE-2023-47122 | Medium | 4.2 | 2023-11-10 | Gitsign is software for keyless Git signing using Sigstore. In versions of gitsign starting with 0.6.0 and prior to 0.8.0, Rekor public keys were fetched via t… |
CVE-2023-36027 | High | 7.1 | 2023-11-10 | Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability |
CVE-2023-47129 | High | 8.3 | 2023-11-10 | Statmic is a core Laravel content management system Composer package. Prior to versions 3.4.13 and 4.33.0, on front-end forms with an asset upload field, PHP f… |
CVE-2023-47108 | High | 7.5 | 2023-11-10 | OpenTelemetry-Go Contrib is a collection of third-party packages for OpenTelemetry-Go. Starting in version 0.37.0 and prior to version 0.46.0, the grpc Unary S… |
CVE-2023-47128 | Critical | 9.1 | 2023-11-10 | Piccolo is an object-relational mapping and query builder which supports asyncio. Prior to version 1.1.1, the handling of named transaction `savepoints` in all… |
CVE-2023-46735 | Medium | 6.1 | 2023-11-10 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in version 6.0.0 and prior to version 6.3.8, the err… |
CVE-2023-46734 | Medium | 6.1 | 2023-11-10 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 2.0.0, 5.0.0, and 6.0.0 and prior to ver… |
CVE-2023-46733 | Medium | 6.5 | 2023-11-10 | Symfony is a PHP framework for web and console applications and a set of reusable PHP components. Starting in versions 5.4.21 and 6.2.7 and prior to versions 5… |
CVE-2023-4949 | High | 8.1 | 2023-11-10 | An attacker with local access to a system (either through a disk or external drive) can present a modified XFS partition to grub-legacy in such a way to exploi… |
CVE-2023-47611 | High | 7.8 | 2023-11-10 | A CWE-269: Improper Privilege Management vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS6… |
CVE-2023-6076 | Medium | 5.3 | 2023-11-10 | A vulnerability classified as problematic was found in PHPGurukul Restaurant Table Booking System 1.0. Affected by this vulnerability is an unknown functionali… |
CVE-2023-47614 | Low | 3.3 | 2023-11-10 | A CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion P… |
CVE-2023-47121 | Low | 3.4 | 2023-11-10 | Discourse is an open source platform for community discussion. Prior to version 3.1.3 of the `stable` branch and version 3.2.0.beta3 of the `beta` and `tests-p… |
CVE-2023-47120 | High | 7.5 | 2023-11-10 | Discourse is an open source platform for community discussion. In versions 3.1.0 through 3.1.2 of the `stable` branch and versions 3.1.0,beta6 through 3.2.0.be… |
CVE-2023-41285 | High | 7.4 | 2023-11-10 | A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via… |
CVE-2023-41284 | High | 7.4 | 2023-11-10 | A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via… |
CVE-2023-39295 | High | 8.8 | 2023-11-10 | An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands… |
CVE-2023-6075 | Low | 3.5 | 2023-11-10 | A vulnerability classified as problematic has been found in PHPGurukul Restaurant Table Booking System 1.0. Affected is an unknown function of the file index.p… |
CVE-2023-6074 | Medium | 6.3 | 2023-11-10 | A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. It has been rated as critical. This issue affects some unknown processing of the f… |