Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

14,070 of 28,815· Page 221/282
5.4
CVE-2023-0272

The NEX-Forms WordPress plugin before 8.3.3 does not validate and escape some of its shortcode attributes before outputt

4.6
CVE-2022-48429

In JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible

4.6
CVE-2022-48426

In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible

5.9
CVE-2023-22707

Auth. (author+) Cross-Site Scripting (XSS) vulnerability in Wpsoul Greenshift – animation and page builder blocks plugin

6.5
CVE-2023-1137

Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which a low-level user cou

6.5
CVE-2023-27096

Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information vi

4.8
CVE-2023-26958

Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter

6.5
CVE-2022-47924

An high privileged attacker may pass crafted arguments to the validate function of csaf-validator-lib of a locally insta

4.3
CVE-2022-41354

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications

5.4
CVE-2022-30705

Cross-Site Request Forgery (CSRF) vulnerability in Pankaj Jha WordPress Ping Optimizer plugin <= 2.35.1.2.3 versions.

6.5
CVE-2022-32199

db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traver

6.8
CVE-2023-28885

The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to c

5.4
CVE-2023-25018

RIFARTEK IOT Wall transportation function has insufficient filtering for user input. An authenticated remote attacker wi

5.3
CVE-2023-24842

HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vul

6.1
CVE-2023-24839

HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can

6.5
CVE-2023-24834

WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general us

5.4
CVE-2023-22902

Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker wi

6.1
CVE-2023-28884

In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index.

5.3
CVE-2023-28866

In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init

5.3
CVE-2023-1646

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affec

5.5
CVE-2023-1645

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the fu

5.5
CVE-2023-1644

A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is th

5.5
CVE-2023-1643

A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulner

5.5
CVE-2023-1642

A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the func

5.5
CVE-2023-1641

A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affe

5.5
CVE-2023-1640

A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the f

5.5
CVE-2023-1639

A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0

5.5
CVE-2023-1638

A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue i

6.5
CVE-2023-28859

redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopp

6.3
CVE-2023-1634

A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the fil

6.3
CVE-2015-10097

A vulnerability was found in grinnellplans-php up to 3.0. It has been declared as critical. Affected by this vulnerabili

5.5
CVE-2023-1631

A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the fu

5.5
CVE-2023-1630

A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by th

5.5
CVE-2023-1628

A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown fun

5.5
CVE-2023-1627

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some

5.3
CVE-2023-1626

A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affe

5.3
CVE-2023-1629

A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is

6.5
CVE-2023-25667

TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs

5.3
CVE-2023-28150

An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity (XXE) injection

5.5
CVE-2023-1583

A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the

6.5
CVE-2023-28435

Dataease is an open source data visualization and analysis tool. The permissions for the file upload interface is not ch

5.7
CVE-2023-28448

Versionize is a framework for version tolerant serializion/deserialization of Rust data structures, designed for usecase

5.3
CVE-2023-28151

An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) in

6.7
CVE-2023-21079

In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could

6.7
CVE-2023-21078

In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead

6.7
CVE-2023-21077

In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead

6.7
CVE-2023-21076

In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This

6.7
CVE-2023-21075

In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to lo

6.7
CVE-2023-21073

In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead

6.7
CVE-2023-21072

In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.