2023 CVEs (page 75)
Page 75 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-51372 | Medium | 5.9 | 2023-12-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HashBar – WordPress Notification Bar allows Sto… |
CVE-2023-51371 | Medium | 5.9 | 2023-12-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bit Assist Chat Widget: WhatsApp Chat, Facebook Messenger… |
CVE-2023-51361 | Medium | 5.9 | 2023-12-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ginger Plugins Sticky Chat Widget: Click to chat, SMS, Em… |
CVE-2023-50901 | High | 7.1 | 2023-12-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasThemes HT Mega – Absolute Addons For Elementor allows… |
CVE-2023-50896 | Medium | 5.9 | 2023-12-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in weForms weForms – Easy Drag & Drop Contact Form Builder F… |
CVE-2023-7104 | Medium | 5.5 | 2023-12-29 | A vulnerability was found in SQLite SQLite3 up to 3.43.0 and classified as critical. This issue affects the function sessionReadRecord of the file ext/session/… |
CVE-2023-51420 | Critical | 9.1 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Soft8Soft LLC Verge3D Publishing and E-Commerce.This issue affects Verge3D Publishin… |
CVE-2023-4468 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly… |
CVE-2023-4467 | Medium | 6.2 | 2023-12-29 | A vulnerability was found in Poly Trio 8800 7.2.6.0019 and classified as critical. Affected by this issue is some unknown functionality of the component Test A… |
CVE-2023-4466 | Low | 2.7 | 2023-12-29 | A vulnerability has been found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60 and classified as problematic. Affected by this vulnerability is an unknown fun… |
CVE-2023-4465 | Low | 2.7 | 2023-12-29 | A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600… |
CVE-2023-4464 | High | 7.2 | 2023-12-29 | A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 60… |
CVE-2023-4463 | Medium | 5.3 | 2023-12-29 | A vulnerability classified as problematic was found in Poly CCX 400, CCX 600, Trio 8800 and Trio C60. This vulnerability affects unknown code of the component… |
CVE-2023-4462 | Low | 3.7 | 2023-12-29 | A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 70… |
CVE-2023-49830 | Critical | 9.9 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Brainstorm Force Astra Pro.This issue affects Astra Pro: from n/a through 4.3.1. |
CVE-2023-32517 | Medium | 4.7 | 2023-12-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue… |
CVE-2023-32101 | Medium | 4.7 | 2023-12-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Pexle Chris Library Viewer.This issue affects Library Viewer: from n/a through 2.0.6. |
CVE-2023-31237 | Medium | 4.7 | 2023-12-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Dylan James Zephyr Project Manager.This issue affects Zephyr Project Manager: from n/a thr… |
CVE-2023-31229 | Medium | 4.7 | 2023-12-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in WP Directory Kit.This issue affects WP Directory Kit: from n/a through 1.1.9. |
CVE-2023-31095 | Medium | 4.7 | 2023-12-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for HubSpot and Contact Form 7, WPForms, Elementor, Ninja Forms.This… |
CVE-2023-28786 | Low | 3.7 | 2023-12-29 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in SolidWP Solid Security – Password, Two Factor Authentication, and Brute Force Protection.T… |
CVE-2023-7166 | Low | 3.5 | 2023-12-29 | A vulnerability classified as problematic has been found in Novel-Plus up to 4.2.0. This affects an unknown part of the file /user/updateUserInfo of the compon… |
CVE-2023-47840 | Critical | 9.9 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Qode Interactive Qode Essential Addons.This issue affects Qode Essential Addons: fro… |
CVE-2023-46623 | Critical | 9.9 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2. |
CVE-2023-45751 | Critical | 9.1 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in POSIMYTH Nexter Extension.This issue affects Nexter Extension: from n/a through 2.0… |
CVE-2023-40606 | Critical | 9.1 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards fo… |
CVE-2023-32095 | Critical | 9.9 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a throu… |
CVE-2023-25054 | Critical | 10.0 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in David F. Carr RSVPMaker.This issue affects RSVPMaker: from n/a through 10.6.6. |
CVE-2023-22677 | High | 8.5 | 2023-12-29 | Improper Control of Generation of Code ('Code Injection') vulnerability in BinaryStash WP Booklet.This issue affects WP Booklet: from n/a through 2.1.8. |
CVE-2023-22676 | Low | 3.1 | 2023-12-29 | Missing Authorization vulnerability in Anders Thorborg.This issue affects Anders Thorborg: from n/a through 1.4.12. |
CVE-2023-7161 | High | 7.3 | 2023-12-29 | A vulnerability classified as critical has been found in Netentsec NS-ASG Application Security Gateway 6.3.1. This affects an unknown part of the file index.ph… |
CVE-2023-7160 | Low | 2.4 | 2023-12-29 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality… |
CVE-2023-7159 | Medium | 4.7 | 2023-12-29 | A vulnerability was found in gopeak MasterLab up to 3.3.10. It has been declared as critical. Affected by this vulnerability is the function add/update of the… |
CVE-2023-7158 | High | 7.3 | 2023-12-29 | A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The m… |
CVE-2023-23634 | Critical | 9.8 | 2023-12-29 | SQL Injection vulnerability in Documize version 5.4.2, allows remote attackers to execute arbitrary code via the user parameter of the /api/dashboard/activity… |
CVE-2023-7157 | Medium | 6.3 | 2023-12-29 | A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0 and classified as critical. This issue affects some unknown pr… |
CVE-2023-7156 | High | 7.3 | 2023-12-29 | A vulnerability has been found in Campcodes Online College Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file i… |
CVE-2023-31302 | Medium | 6.1 | 2023-12-29 | Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to execute arbitrary code vi… |
CVE-2023-31300 | High | 7.5 | 2023-12-29 | An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information via t… |
CVE-2023-31295 | High | 7.5 | 2023-12-29 | CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information v… |
CVE-2023-7155 | Medium | 6.3 | 2023-12-29 | A vulnerability, which was classified as critical, was found in SourceCodester Free and Open Source Inventory Management System 1.0. This affects an unknown pa… |
CVE-2023-7152 | Medium | 5.5 | 2023-12-29 | A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd… |
CVE-2023-31299 | Medium | 6.1 | 2023-12-29 | Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary… |
CVE-2023-7150 | Medium | 4.7 | 2023-12-29 | A vulnerability classified as critical was found in Campcodes Chic Beauty Salon 20230703. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2023-7149 | Low | 3.5 | 2023-12-29 | A vulnerability was found in code-projects QR Code Generator 1.0. It has been classified as problematic. This affects an unknown part of the file /download.php… |
CVE-2023-6939 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service. |
CVE-2023-52174 | Critical | 9.8 | 2023-12-29 | XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6. |
CVE-2023-52173 | Critical | 9.8 | 2023-12-29 | XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0. |
CVE-2023-51435 | High | 7.1 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51434 | Critical | 9.3 | 2023-12-29 | Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution. |
CVE-2023-51433 | Low | 2.9 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51432 | Low | 3.2 | 2023-12-29 | Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak. |
CVE-2023-51431 | High | 7.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-51430 | Medium | 4.4 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51429 | Medium | 6.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51428 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-51427 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-51426 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-31296 | Medium | 5.3 | 2023-12-29 | CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive information via the… |
CVE-2023-23443 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-23442 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-23441 | Medium | 6.0 | 2023-12-29 | Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak. |
CVE-2023-7148 | Medium | 5.0 | 2023-12-29 | A vulnerability has been found in ShifuML shifu 0.12.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file src/m… |
CVE-2023-7147 | Medium | 6.3 | 2023-12-29 | A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl… |
CVE-2023-31294 | High | 7.5 | 2023-12-29 | CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information v… |
CVE-2023-31293 | Medium | 4.3 | 2023-12-29 | An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass pr… |
CVE-2023-23440 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2023-23439 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2023-23438 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions |
CVE-2023-23437 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak |
CVE-2023-23430 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23429 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23428 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23427 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23426 | Medium | 6.6 | 2023-12-29 | Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure. |
CVE-2023-23424 | Medium | 6.5 | 2023-12-29 | Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution |
CVE-2023-7146 | Medium | 6.3 | 2023-12-29 | A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file… |
CVE-2023-7145 | Medium | 6.3 | 2023-12-29 | A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Frame… |
CVE-2023-31301 | Medium | 6.1 | 2023-12-29 | Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute ar… |
CVE-2023-31298 | Medium | 4.8 | 2023-12-29 | Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary… |
CVE-2023-31292 | Medium | 5.5 | 2023-12-29 | An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass aut… |
CVE-2023-23436 | High | 7.3 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23435 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23434 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2023-23433 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23432 | High | 7.3 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23431 | High | 7.3 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-7144 | Medium | 6.3 | 2023-12-29 | A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feat… |
CVE-2023-7143 | Low | 2.4 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of… |
CVE-2023-7142 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functio… |
CVE-2023-7141 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin… |
CVE-2023-52085 | Low | 3.3 | 2023-12-29 | Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that woul… |
CVE-2023-50104 | Critical | 9.8 | 2023-12-29 | ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute ar… |
CVE-2023-7140 | Medium | 4.3 | 2023-12-28 | A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processing of the file /adm… |
CVE-2023-7139 | Medium | 4.3 | 2023-12-28 | A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /a… |
CVE-2023-52152 | High | 7.5 | 2023-12-28 | mupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash because it lacks a certain host length recalculation. |
CVE-2023-52084 | Low | 2.0 | 2023-12-28 | Winter is a free, open-source content management system. Prior to 1.2.4, Users with access to backend forms that include a ColorPicker FormWidget can provide a… |
CVE-2023-52083 | Low | 2.0 | 2023-12-28 | Winter is a free, open-source content management system. Prior to 1.2.4, users with the `media.manage_media` permission can upload files to the Media Manager… |
CVE-2023-50448 | Medium | 6.5 | 2023-12-28 | In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user)… |
CVE-2023-7138 | Medium | 6.3 | 2023-12-28 | A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of the file /admin of the… |