Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

14,070 of 28,815· Page 235/282
6.7
CVE-2023-20639

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20638

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20637

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20636

In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

4.4
CVE-2023-20635

In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local informati

6.7
CVE-2023-20634

In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalati

6.7
CVE-2023-20633

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20632

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20630

In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20628

In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of p

6.7
CVE-2023-20627

In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalati

6.7
CVE-2023-20626

In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o

6.4
CVE-2023-20625

In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with

6.7
CVE-2023-20624

In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of

6.4
CVE-2023-20623

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of priv

6.7
CVE-2023-20621

In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation o

4.1
CVE-2023-20620

In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privil

5.3
CVE-2023-1003

A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown fu

4.3
CVE-2023-27485

thmmniii/fbs-core is an open source feedback system for students. In versions prior to 1.5.3 when querying `subresults`,

4.3
CVE-2023-27481

Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with

6.5
CVE-2023-27478

libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could ret

4.0
CVE-2023-25611

A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0

4.9
CVE-2023-25230

A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary req

4.6
CVE-2023-23776

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 th

4.3
CVE-2022-46257

An information disclosure vulnerability was identified in GitHub Enterprise Server that allowed private repositories to

6.5
CVE-2022-45861

An access of uninitialized pointer vulnerability [CWE-824] in the SSL VPN portal of Fortinet FortiOS version 7.2.0 throu

5.3
CVE-2022-41329

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiProxy version 7.2

6.7
CVE-2022-41328KEV

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet Fort

5.4
CVE-2022-27490

A exposure of sensitive information to an unauthorized actor in Fortinet FortiManager version 6.0.0 through 6.0.4, Forti

5.5
CVE-2022-22297

An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpr

6.3
CVE-2020-36670

The NEX-Forms. plugin for WordPress is vulnerable to unauthorized disclosure and modification of data in versions up to,

4.8
CVE-2023-26953

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator

4.3
CVE-2022-4932

The Total Upkeep plugin for WordPress is vulnerable to information disclosure in versions up to, and including 1.14.13.

4.3
CVE-2022-4931

The BackupWordPress plugin for WordPress is vulnerable to information disclosure in versions up to, and including 3.12.

6.5
CVE-2021-4333

The WP Statistics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 13.

6.5
CVE-2021-4332

The Plus Addons for Elementor plugin for WordPress is vulnerable to arbitrary file reads in versions up to, and includin

6.3
CVE-2015-10087

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in UpThemes Theme DesignFolio Plus 1.2 on WordPress and c

6.1
CVE-2021-44197

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technolo

6.1
CVE-2021-44196

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in UBIT Information Technolo

4.3
CVE-2020-36668

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to sensitive information disclosure in v

5.4
CVE-2020-36667

The JetBackup – WP Backup, Migrate & Restore plugin for WordPress is vulnerable to unauthorized back-up location changes

5.4
CVE-2023-26955

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group modul

5.4
CVE-2023-26954

onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module

5.4
CVE-2023-1245

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4
CVE-2023-1244

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

4.8
CVE-2023-1243

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4
CVE-2023-1242

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4
CVE-2023-1241

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

5.4
CVE-2023-1240

Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6.

4.8
CVE-2023-1239

Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6.

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.