Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 240/577
4.8
CVE-2023-3650

The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-

5.4
CVE-2023-3575

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which c

6.1
CVE-2023-3524

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading

6.8
CVE-2023-3492

The WP Shopping Pages WordPress plugin through 1.14 does not have CSRF check in some places, and is missing sanitisation

8.1
CVE-2023-3365

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting ship

8.8
CVE-2023-2843

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parame

5.5
CVE-2023-27373

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attack

5.4
CVE-2023-0604

The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow h

7.5
CVE-2021-24916

The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses vi

5.5
CVE-2023-4194

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filt

7.8
CVE-2023-4147

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID

7.2
CVE-2023-36220

Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary

6.5
CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function.

7.8
CVE-2023-3896

Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

7.1
CVE-2023-38392

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 ve

9.8
CVE-2023-32090

Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials

8.6
CVE-2023-0426

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported

8.6
CVE-2023-0425

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported

5.9
CVE-2023-39903

An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in thi

4.4
CVE-2023-20818

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

6.7
CVE-2023-20817

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

6.7
CVE-2023-20816

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

6.7
CVE-2023-20815

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

6.7
CVE-2023-20814

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

4.4
CVE-2023-20813

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

4.4
CVE-2023-20812

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local infor

6.7
CVE-2023-20811

In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

4.4
CVE-2023-20810

In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local informat

6.7
CVE-2023-20809

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

6.7
CVE-2023-20808

In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.7
CVE-2023-20807

In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20806

In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20805

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.7
CVE-2023-20804

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.5
CVE-2023-20803

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

6.5
CVE-2023-20802

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

6.4
CVE-2023-20801

In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

6.5
CVE-2023-20800

In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege

4.4
CVE-2023-20798

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local

6.7
CVE-2023-20797

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local es

4.4
CVE-2023-20796

In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of ser

6.7
CVE-2023-20795

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

4.4
CVE-2023-20793

In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service

4.4
CVE-2023-20790

In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information di

4.4
CVE-2023-20789

In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information

6.4
CVE-2023-20788

In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

6.4
CVE-2023-20787

In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

6.7
CVE-2023-20786

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.4
CVE-2023-20785

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.7
CVE-2023-20784

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.