2023 CVEs (page 148)
Page 148 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44263 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Riyaz Social Metrics plugin <= 2.2 versions. |
CVE-2023-44262 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Renzo Johnson Blocks plugin <= 1.6.41 versions. |
CVE-2023-44245 | High | 7.1 | 2023-10-02 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Leap Contractor Contact Form Website to Workflow Tool plugin <= 4.0.0 versions. |
CVE-2023-44239 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jobin Jose WWM Social Share On Image Hover plugin <= 2.2 versions. |
CVE-2023-44145 | Medium | 6.5 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in jesweb.Dev Anchor Episodes Index (Spotify for Podcasters) plugin <= 2.1.7 versions. |
CVE-2023-44144 | High | 7.1 | 2023-10-02 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Dreamfox Payment gateway per Product for WooCommerce plugin <= 3.2.7 versions. |
CVE-2023-44479 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jim Krill WP Jump Menu plugin <= 3.6.4 versions. |
CVE-2023-44477 | Medium | 6.5 | 2023-10-02 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Boxy Studio Cooked plugin <= 1.7.13 versions. |
CVE-2023-44474 | High | 7.1 | 2023-10-02 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in MD Jakir Hosen Tiger Forms – Drag and Drop Form Builder plugin <= 2.0.0 versions. |
CVE-2023-44244 | High | 7.1 | 2023-10-02 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in FooPlugins FooGallery plugin <= 2.2.44 versions. |
CVE-2023-41859 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ashok Rane Order Delivery Date for WP e-Commerce plugin <= 1.2 versions. |
CVE-2023-41856 | High | 7.1 | 2023-10-02 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ClickToTweet.Com Click To Tweet plugin <= 2.0.14 versions. |
CVE-2023-41855 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Regpacks Regpack plugin <= 0.1 versions. |
CVE-2023-41847 | Medium | 6.5 | 2023-10-02 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WEN Solutions Notice Bar plugin <= 3.1.0 versions. |
CVE-2023-41800 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in UniConsent UniConsent CMP for GDPR CPRA GPP TCF plugin <= 1.4.2 versions. |
CVE-2023-41797 | Medium | 6.5 | 2023-10-02 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Gold Plugins Locations plugin <= 4.0 versions. |
CVE-2023-41737 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPGens Swifty Bar, sticky bar by WPGens plugin <= 1.2.10 versions. |
CVE-2023-41736 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy Email posts to subscribers plugin <= 6.2 versions. |
CVE-2023-41734 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in nigauri Insert Estimated Reading Time plugin <= 1.2 versions. |
CVE-2023-41733 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in YYDevelopment Back To The Top Button plugin <= 2.1.5 versions. |
CVE-2023-41731 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress publish post email notification plugin <= 1.0.2.2 versions. |
CVE-2023-41729 | Medium | 5.9 | 2023-10-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in SendPress Newsletters plugin <= 1.22.3.31 versions. |
CVE-2023-41728 | Medium | 6.5 | 2023-10-02 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rescue Themes Rescue Shortcodes allows Stored XSS.This is… |
CVE-2023-41692 | High | 7.1 | 2023-10-02 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hennessey Digital Attorney theme <= 3 theme. |
CVE-2023-42132 | Medium | 5.5 | 2023-10-02 | FD Application Apr. 2022 Edition (Version 9.01) and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XML fi… |
CVE-2023-32830 | Medium | 6.7 | 2023-10-02 | In TVAPI, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-32829 | Medium | 6.7 | 2023-10-02 | In apusys, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32828 | Medium | 6.7 | 2023-10-02 | In vpu, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-32827 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32826 | Medium | 6.7 | 2023-10-02 | In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege with System e… |
CVE-2023-32824 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible double free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-32823 | Medium | 6.7 | 2023-10-02 | In rpmb , there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32822 | Medium | 6.7 | 2023-10-02 | In ftm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32821 | Medium | 6.7 | 2023-10-02 | In video, there is a possible out of bounds write due to a permissions bypass. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-32820 | High | 7.5 | 2023-10-02 | In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no additional executi… |
CVE-2023-32819 | Medium | 4.4 | 2023-10-02 | In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution pri… |
CVE-2023-20819 | Critical | 9.8 | 2023-10-02 | In CDMA PPP protocol, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no addition… |
CVE-2023-5329 | Medium | 4.3 | 2023-10-02 | A vulnerability classified as problematic was found in Field Logic DataCube4 up to 20231001. This vulnerability affects unknown code of the file /api/ of the c… |
CVE-2023-5328 | Medium | 6.3 | 2023-10-02 | A vulnerability classified as critical has been found in SATO CL4NX-J Plus 1.13.2-u455_r2. This affects an unknown part of the component Cookie Handler. The ma… |
CVE-2023-5327 | Low | 3.5 | 2023-10-01 | A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been rated as problematic. Affected by this issue is some unknown functionality of the fi… |
CVE-2023-5326 | Medium | 6.3 | 2023-10-01 | A vulnerability was found in SATO CL4NX-J Plus 1.13.2-u455_r2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2023-5324 | Medium | 4.3 | 2023-10-01 | A vulnerability has been found in eeroOS up to 6.16.4-11 and classified as critical. This vulnerability affects unknown code of the component Ethernet Interfac… |
CVE-2023-4211 | Medium | 5.5 | 2023-10-01 | A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. |
CVE-2023-5322 | Medium | 4.7 | 2023-10-01 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DAR-7000 up to 20151231. It has been rated as critical. Affected by this issue is some unkn… |
CVE-2023-5323 | Medium | 6.1 | 2023-10-01 | Cross-site Scripting (XSS) - Generic in GitHub repository dolibarr/dolibarr prior to 18.0. |
CVE-2023-43907 | High | 7.8 | 2023-10-01 | OptiPNG v0.7.7 was discovered to contain a global buffer overflow via the 'buffer' variable at gifread.c. |
CVE-2023-5112 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "specials_type… |
CVE-2023-5111 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "featured_type… |
CVE-2023-43735 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "formats_title… |
CVE-2023-43734 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "name" paramet… |
CVE-2023-43733 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "company_addre… |
CVE-2023-43732 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tax_class_tit… |
CVE-2023-43731 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "zone_name" pa… |
CVE-2023-43730 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_nam… |
CVE-2023-43729 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_na… |
CVE-2023-43728 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_deliver… |
CVE-2023-43727 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indicat… |
CVE-2023-43726 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_produc… |
CVE-2023-43725 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_produc… |
CVE-2023-43724 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtju… |
CVE-2023-43723 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status… |
CVE-2023-43722 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status… |
CVE-2023-43721 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS… |
CVE-2023-43720 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDE… |
CVE-2023-43719 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GEND… |
CVE-2023-43718 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABL… |
CVE-2023-43717 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_HIGHL… |
CVE-2023-43716 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MAX_DISPLAY_N… |
CVE-2023-43715 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "ENTRY_FIRST_N… |
CVE-2023-43714 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIP_CART_PAG… |
CVE-2023-43713 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/adm… |
CVE-2023-43712 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "access_levels… |
CVE-2023-44488 | High | 7.5 | 2023-09-30 | VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. |
CVE-2023-5313 | Medium | 5.3 | 2023-09-30 | A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file aj… |
CVE-2023-5305 | Low | 3.5 | 2023-09-30 | A vulnerability was found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file… |
CVE-2023-5304 | Low | 3.5 | 2023-09-30 | A vulnerability has been found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality o… |
CVE-2023-5321 | Medium | 5.5 | 2023-09-30 | Missing Authorization in GitHub repository hamza417/inure prior to build94. |
CVE-2023-5303 | Low | 3.5 | 2023-09-30 | A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking… |
CVE-2023-5302 | Low | 3.5 | 2023-09-30 | A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown proc… |
CVE-2023-5301 | Medium | 4.7 | 2023-09-30 | A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipula… |
CVE-2023-5300 | Medium | 6.3 | 2023-09-30 | A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads t… |
CVE-2023-5207 | High | 8.2 | 2023-09-30 | A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An aut… |
CVE-2023-5298 | Medium | 5.5 | 2023-09-30 | A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit… |
CVE-2023-5295 | Medium | 6.4 | 2023-09-30 | The Comments by Startbit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vivafbcomment' shortcode in versions up to, and including, 1.4… |
CVE-2023-5201 | Critical | 9.9 | 2023-09-30 | The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authentic… |
CVE-2023-43711 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "admin_firstna… |
CVE-2023-43710 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration… |
CVE-2023-43709 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration… |
CVE-2023-43708 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration… |
CVE-2023-43707 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageD… |
CVE-2023-43706 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "email_templat… |
CVE-2023-43705 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "translation_v… |
CVE-2023-43704 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "title" parame… |
CVE-2023-43703 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "product_info[… |
CVE-2023-43702 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tracking_numb… |
CVE-2023-5320 | Medium | 6.1 | 2023-09-30 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |
CVE-2023-5319 | Medium | 5.4 | 2023-09-30 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |
CVE-2023-5318 | High | 7.5 | 2023-09-30 | Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0. |
CVE-2023-5317 | Medium | 5.4 | 2023-09-30 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |
CVE-2023-5316 | Medium | 6.1 | 2023-09-30 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |