Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 379/577
5.9
CVE-2023-23793

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eightweb Interactive Read More Without Refresh plugin

6.5
CVE-2023-23664

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ConvertBox ConvertBox Auto Embed WordPress plugi

6.5
CVE-2022-41640

Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <= 2.1.5 ver

5.9
CVE-2023-23863

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Black and White Digital Ltd TreePress – Easy Family Tr

3.5
CVE-2023-2590

Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.

7.8
CVE-2023-30237

CyberGhostVPN Windows Client before v8.3.10.10015 was discovered to contain a DLL injection vulnerability via the compon

6.5
CVE-2022-4537

The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and

7.5
CVE-2021-44283

A buffer overflow in the component /Enclave.cpp of Electronics and Telecommunications Research Institute ShieldStore com

7.5
CVE-2023-32113

SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a vi

2.8
CVE-2023-32112

Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, S

7.5
CVE-2023-32111

In SAP PowerDesigner (Proxy) - version 16.7, an attacker can send a crafted request from a remote host to the proxy mach

5.4
CVE-2023-31407

SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, r

6.1
CVE-2023-31406

Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an

5.0
CVE-2023-31404

Under certain conditions, SAP BusinessObjects Business Intelligence Platform (Central Management Service) - versions 420

8.2
CVE-2023-30744

In SAP AS NetWeaver JAVA - versions SERVERCORE 7.50, J2EE-FRMW 7.50, CORE-TOOLS 7.50, an unauthenticated attacker can at

7.1
CVE-2023-30743

Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757,

6.1
CVE-2023-30742

SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF

6.1
CVE-2023-30741

Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an

6.3
CVE-2023-30740

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access sensi

3.1
CVE-2023-29092

An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and E

4.4
CVE-2022-48389

In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local

7.8
CVE-2022-48388

In powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with

4.4
CVE-2022-48387

the apipe driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial

4.4
CVE-2022-48386

the apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service wi

4.4
CVE-2022-48385

In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

7.8
CVE-2022-48384

In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48383

.In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no

4.4
CVE-2022-48382

In log service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

4.4
CVE-2022-48381

In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local

4.4
CVE-2022-48380

In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local

5.5
CVE-2022-48379

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi

5.5
CVE-2022-48378

In engineermode service, there is a possible missing permission check. This could lead to local denial of service with n

5.5
CVE-2022-48377

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi

5.5
CVE-2022-48376

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no addi

5.5
CVE-2022-48375

In contacts service, there is a possible missing permission check. This could lead to local denial of service with no ad

4.4
CVE-2022-48374

In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

4.4
CVE-2022-48373

In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial o

4.4
CVE-2022-48372

In bootcp service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denia

5.5
CVE-2022-48371

In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no

5.5
CVE-2022-48370

In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no

7.8
CVE-2022-48369

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48368

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48250

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48249

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48248

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48247

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48246

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48245

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48244

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

7.8
CVE-2022-48243

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.