Menu

Star on GitHub · 3.4k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 240/577
4.8
CVE-2023-3650

The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-

5.4
CVE-2023-3575

The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which c

6.1
CVE-2023-3524

The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading

6.8
CVE-2023-3492

The WP Shopping Pages WordPress plugin through 1.14 does not have CSRF check in some places, and is missing sanitisation

8.1
CVE-2023-3365

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting ship

8.8
CVE-2023-2843

The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parame

5.5
CVE-2023-27373

An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attack

5.4
CVE-2023-0604

The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow h

7.5
CVE-2021-24916

The Qubely WordPress plugin before 1.8.6 allows unauthenticated user to send arbitrary e-mails to arbitrary addresses vi

5.5
CVE-2023-4194

A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filt

7.8
CVE-2023-4147

A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID

7.2
CVE-2023-36220

Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary

6.5
CVE-2022-38795

In Gitea through 1.17.1, repo cloning can occur in the migration function.

7.8
CVE-2023-3896

Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3

7.1
CVE-2023-38392

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 ve

9.8
CVE-2023-32090

Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials

8.6
CVE-2023-0426

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported

8.6
CVE-2023-0425

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported

5.9
CVE-2023-39903

An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in thi

4.4
CVE-2023-20818

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

6.7
CVE-2023-20817

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

6.7
CVE-2023-20816

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

6.7
CVE-2023-20815

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

6.7
CVE-2023-20814

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local esca

4.4
CVE-2023-20813

In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local infor

4.4
CVE-2023-20812

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local infor

6.7
CVE-2023-20811

In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

4.4
CVE-2023-20810

In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local informat

6.7
CVE-2023-20809

In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of p

6.7
CVE-2023-20808

In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.7
CVE-2023-20807

In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20806

In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.7
CVE-2023-20805

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.7
CVE-2023-20804

In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.5
CVE-2023-20803

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

6.5
CVE-2023-20802

In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation o

6.4
CVE-2023-20801

In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

6.5
CVE-2023-20800

In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege

4.4
CVE-2023-20798

In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local

6.7
CVE-2023-20797

In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local es

4.4
CVE-2023-20796

In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of ser

6.7
CVE-2023-20795

In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

4.4
CVE-2023-20793

In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service

4.4
CVE-2023-20790

In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information di

4.4
CVE-2023-20789

In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information

6.4
CVE-2023-20788

In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

6.4
CVE-2023-20787

In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege

6.7
CVE-2023-20786

In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of pr

6.4
CVE-2023-20785

In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of

6.7
CVE-2023-20784

In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalatio

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.

Watch the demo →