01642 06 11 11 Arrange Call

CVE Database

Year: 2023

CVE Database Year: 2023

CVE-2023-0001: Cortex XDR Agent Information Exposure Vulnerability: Cleartext Disclosure of Admin Password
CVE-2023-0002: Privilege Escalation Vulnerability in Palo Alto Networks Cortex XDR Agent on Windows Devices
CVE-2023-0003: File Disclosure Vulnerability in Palo Alto Networks Cortex XSOAR Server Software
CVE-2023-0004: Local File Deletion Vulnerability in Palo Alto Networks PAN-OS Software
CVE-2023-0005: Vulnerability in Palo Alto Networks PAN-OS Software Exposes Plaintext Secrets and Encrypted API Keys
CVE-2023-0006: Race condition vulnerability in Palo Alto Networks GlobalProtect app allows local file deletion with elevated privileges
CVE-2023-0007: Cross-Site Scripting (XSS) Vulnerability in Palo Alto Networks PAN-OS Software on Panorama Appliances
CVE-2023-0008: Race condition vulnerability in Palo Alto Networks PAN-OS software allows authenticated administrators to export local files through the web interface
CVE-2023-0009: Local Privilege Escalation Vulnerability in Palo Alto Networks GlobalProtect App on Windows
CVE-2023-0010: Reflected XSS Vulnerability in Palo Alto Networks PAN-OS Captive Portal Feature
CVE-2023-0011: Arbitrary Command Execution via TOBY-L2 Serial Interface
CVE-2023-0012: Privilege Escalation via SAP_LocalAdmin Membership in SAP Host Agent (Windows)
CVE-2023-0013: Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver Application Server ABAP Keyword Documentation
CVE-2023-0014: Ambiguous Format Information Disclosure Vulnerability in SAP NetWeaver ABAP Server and ABAP Platform
CVE-2023-0015: XSS Vulnerability in SAP BusinessObjects Business Intelligence Platform
CVE-2023-0016: SAP BPC MS 10.0 - Version 810 SQL Injection Vulnerability
CVE-2023-0017: Unauthenticated Access Control Vulnerability in SAP NetWeaver AS for Java - Version 7.50
CVE-2023-0018: Stored XSS Vulnerability in SAP BusinessObjects Business Intelligence Platform CMC Application
CVE-2023-0019: SAP GRC (Process Control) Remote-Enabled Function Module Data Exposure Vulnerability
CVE-2023-0020: Unauthorized Access to Sensitive Information in SAP BusinessObjects Business Intelligence Platform
CVE-2023-0021: Unauthenticated Code Injection Vulnerability in SAP NetWeaver
CVE-2023-0022: Remote Code Execution Vulnerability in SAP BusinessObjects Business Intelligence Analysis Edition for OLAP
CVE-2023-0023: Sensitive Data Exposure in SAP Bank Account Management Application
CVE-2023-0024: Cross-Site Scripting Vulnerability in SAP Solution Manager (BSP Application) Version 720
CVE-2023-0025: SAP Solution Manager (BSP Application) - Version 720 Link Manipulation Vulnerability
CVE-2023-0026: Denial of Service (DoS) Vulnerability in Juniper Networks Junos OS and Junos OS Evolved
CVE-2023-0027: Modbus TCP Server AOI Unauthorized Information Disclosure Vulnerability
CVE-2023-0028: Stored Cross-site Scripting (XSS) Vulnerability in linagora/twake GitHub Repository (prior to 2023.Q1.1200+)
CVE-2023-0029: Remote Denial of Service Vulnerability in Multilaser RE708 RE1200R4GC-2T2R-V3_v3411b_MUL029B
CVE-2023-0030: Use-After-Free Vulnerability in Linux Kernel's Nouveau Driver Allows Privilege Escalation
CVE-2023-0033: Stored Cross-Site Scripting Vulnerability in PDF Viewer WordPress Plugin
CVE-2023-0034: Stored Cross-Site Scripting Vulnerability in JetWidgets For Elementor WordPress Plugin
CVE-2023-0035: Authentication Bypass Vulnerability in softbus_client_stub in OpenHarmony-v3.0.5 and Prior Versions
CVE-2023-0036: Authentication Bypass Vulnerability in OpenHarmony-v3.0.5 and Prior Versions: SA Relay Attack
CVE-2023-0037: SQL Injection Vulnerability in 10Web Map Builder for Google Maps WordPress Plugin
CVE-2023-0038: Stored Cross-Site Scripting Vulnerability in Survey Maker – Best WordPress Survey Plugin Plugin
CVE-2023-0040: CRLF Injection Vulnerability in Async HTTP Client
CVE-2023-0041: Insufficient Session Expiration in IBM Security Guardium 11.5 Allows User Takeover
CVE-2023-0042: Arbitrary Protocol Redirection Vulnerability in GitLab Pages
CVE-2023-0043: Reflected Cross-Site Scripting Vulnerability in Custom Add User WordPress Plugin
CVE-2023-0044: Cross-Site Attack Vulnerability in Quarkus Form Authentication
CVE-2023-0045: Delayed IBPB Vulnerability in prctl syscall
CVE-2023-0046: GitHub Repository File and Resource Naming Vulnerability in lirantal/daloradius
CVE-2023-0048: Code Injection Vulnerability in lirantal/daloradius GitHub Repository
CVE-2023-0049: Critical Out-of-bounds Read Vulnerability in vim/vim Repository (CVE-XXXX-XXXX)
CVE-2023-0050: Stored XSS Vulnerability in GitLab Allows Arbitrary Actions on Behalf of Victims
CVE-2023-0051: Critical Heap-based Buffer Overflow in vim/vim Repository (CVE-XXXX-XXXX)
CVE-2023-0052: Unauthenticated Command Execution in SAUTER Controls Nova 200–220 Series
CVE-2023-0053: Clear-text Transmission of Sensitive Information in SAUTER Controls Nova 200–220 Series
CVE-2023-0054: Critical Out-of-bounds Write Vulnerability in vim/vim Repository (CVE-XXXX-XXXX)
CVE-2023-0055: Insecure Handling of Sensitive Cookies in pyload/pyload Repository
CVE-2023-0056: Title: HAProxy Uncontrolled Resource Consumption Vulnerability Allows Remote Crash
CVE-2023-0057: UI Layer or Frame Restriction Vulnerability in pyload/pyload (prior to 0.5.0b3.dev33)
CVE-2023-0058: Vulnerability: Cross-Site Request Forgery (CSRF) and Stored Cross-Site Scripting (XSS) in Tiempo.com WordPress Plugin
CVE-2023-0059: Stored Cross-Site Scripting Vulnerability in Youzify WordPress Plugin
CVE-2023-0060: Stored Cross-Site Scripting Vulnerability in Responsive Gallery Grid WordPress Plugin
CVE-2023-0061: Stored Cross-Site Scripting Vulnerability in Judge.me Product Reviews for WooCommerce WordPress Plugin
CVE-2023-0062: Stored Cross-Site Scripting Vulnerability in EAN for WooCommerce WordPress Plugin
CVE-2023-0063: Stored Cross-Site Scripting Vulnerability in WordPress Shortcodes Plugin
CVE-2023-0064: Stored Cross-Site Scripting Vulnerability in eVision Responsive Column Layout Shortcodes WordPress Plugin
CVE-2023-0065: Stored Cross-Site Scripting Vulnerability in i2 Pros & Cons WordPress Plugin
CVE-2023-0066: Stored Cross-Site Scripting Vulnerability in Companion Sitemap Generator WordPress Plugin
CVE-2023-0067: Stored Cross-Site Scripting Vulnerability in Timed Content WordPress Plugin
CVE-2023-0068: Stored Cross-Site Scripting Vulnerability in Product GTIN (EAN, UPC, ISBN) for WooCommerce WordPress Plugin
CVE-2023-0069: Stored Cross-Site Scripting Vulnerability in WPaudio MP3 Player WordPress Plugin
CVE-2023-0070: Stored Cross-Site Scripting Vulnerability in ResponsiveVoice Text To Speech WordPress Plugin
CVE-2023-0071: Stored Cross-Site Scripting Vulnerability in WP Tabs WordPress Plugin
CVE-2023-0072: Stored Cross-Site Scripting Vulnerability in WC Vendors Marketplace WordPress Plugin
CVE-2023-0073: Stored Cross-Site Scripting Vulnerability in Client Logo Carousel WordPress Plugin
CVE-2023-0074: Stored Cross-Site Scripting Vulnerability in WP Social Widget WordPress Plugin
CVE-2023-0075: Stored Cross-Site Scripting Vulnerability in Amazon JS WordPress Plugin
CVE-2023-0076: Stored Cross-Site Scripting Vulnerability in Download Attachments WordPress Plugin
CVE-2023-0077: Integer Overflow Vulnerability in Synology Router Manager (SRM) CGI Component
CVE-2023-0078: Stored XSS Vulnerability in Resume Builder WordPress Plugin
CVE-2023-0079: Stored Cross-Site Scripting Vulnerability in Customer Reviews for WooCommerce WordPress Plugin
CVE-2023-0080: Arbitrary File Inclusion and Remote Code Execution Vulnerability in Customer Reviews for WooCommerce WordPress Plugin
CVE-2023-0081: Stored Cross-Site Scripting Vulnerability in MonsterInsights WordPress Plugin
CVE-2023-0082: Stored Cross-Site Scripting Vulnerability in ExactMetrics WordPress Plugin
CVE-2023-0083: ArKUI Framework Subsystem Improper Input Validation Vulnerability
CVE-2023-0084: Stored Cross-Site Scripting Vulnerability in Metform Elementor Contact Form Builder Plugin for WordPress
CVE-2023-0085: Vulnerability: reCaptcha Bypass in Metform Elementor Contact Form Builder Plugin
CVE-2023-0086: Cross-Site Request Forgery Vulnerability in JetWidgets for Elementor Plugin
CVE-2023-0087: Stored Cross-Site Scripting Vulnerability in Swifty Page Manager Plugin for WordPress
CVE-2023-0088: Cross-Site Request Forgery Vulnerability in Swifty Page Manager Plugin for WordPress
CVE-2023-0089: Remote Code Execution Vulnerability in Proofpoint Enterprise Protection (PPS/POD) Webutils
CVE-2023-0090: Remote Code Execution Vulnerability in Proofpoint Enterprise Protection (PPS/POD) Webservices
CVE-2023-0091: Keycloak Client Credential Flow Token Revocation Vulnerability
CVE-2023-0092: CVE-2023-0092
CVE-2023-0093: Command Injection Vulnerability in Okta Advanced Server Access Client
CVE-2023-0094: Stored Cross-Site Scripting Vulnerability in UpQode Google Maps WordPress Plugin
CVE-2023-0095: Stored Cross-Site Scripting Vulnerability in Page View Count WordPress Plugin
CVE-2023-0096: Stored Cross-Site Scripting Vulnerability in Happyforms WordPress Plugin
CVE-2023-0097: Stored Cross-Site Scripting Vulnerability in The Post Grid, Post Carousel, & List Category Posts WordPress Plugin
CVE-2023-0098: SQL Injection Vulnerability in Simple URLs WordPress Plugin
CVE-2023-0099: Reflected Cross-Site Scripting Vulnerability in Simple URLs WordPress Plugin
CVE-2023-0100: HTTP Host Header Tampering Vulnerability in Eclipse BIRT
CVE-2023-0101: Privilege Escalation Vulnerability in Nessus Versions 8.10.1 - 8.15.8 and 10.0.0 - 10.4.1
CVE-2023-0102: Missing Authentication in LS ELECTRIC XBC-DN32U OS 01.80 Allows Arbitrary File Deletion
CVE-2023-0103: Denial-of-Service Vulnerability in LS ELECTRIC XBC-DN32U Operating System Version 01.80
CVE-2023-0104: ZipSlip Vulnerability in Weintek EasyBuilder Pro
CVE-2023-0105: Email Trust Vulnerability in Keycloak: Impersonation and Lockout
CVE-2023-0106: Stored Cross-site Scripting (XSS) Vulnerability in GitHub Repository usememos/memos prior to 0.10.0
CVE-2023-0107: Stored Cross-site Scripting (XSS) Vulnerability in GitHub Repository usememos/memos prior to 0.10.0
CVE-2023-0108: Stored Cross-site Scripting (XSS) Vulnerability in GitHub Repository usememos/memos prior to 0.10.0
CVE-2023-0109: CVE-2023-0109
CVE-2023-0110: Stored Cross-site Scripting (XSS) Vulnerability in GitHub Repository usememos/memos prior to 0.10.0
CVE-2023-0111: Stored Cross-site Scripting (XSS) Vulnerability in GitHub Repository usememos/memos prior to 0.10.0
CVE-2023-0112: Stored Cross-site Scripting (XSS) Vulnerability in GitHub Repository usememos/memos prior to 0.10.0
CVE-2023-0113: Netis Netcore Router Backup Handler Information Disclosure Vulnerability
CVE-2023-0114: Cleartext Storage Vulnerability in Netis Netcore Router Backup Handler (VDB-217592)
CVE-2023-0116: Unauthenticated Broadcast Vulnerability in Reminder Module
CVE-2023-0117: Insecure Application Identity Verification in hwKitAssistant: Implications for MeeTime Availability
CVE-2023-0118: Foreman Arbitrary Code Execution Vulnerability
CVE-2023-0119: Stored Cross-site Scripting Vulnerability in Foreman's Comment Section
CVE-2023-0120: Improper Permission Validation Allows Unauthorized Editing of Label Descriptions in GitLab
CVE-2023-0121: Denial of Service Vulnerability in GitLab CE/EE: Resource Consumption via Malicious Test Report Artifacts
CVE-2023-0122: Pre-Auth Denial of Service (DoS) Vulnerability in Linux Kernel NVMe Functionality
CVE-2023-0123: Stack-Based Buffer Overflow in Delta Electronics DOPSoft Versions 4.00.16.22 and Prior
CVE-2023-0124: Out-of-Bounds Write Vulnerability in Delta Electronics DOPSoft Software
CVE-2023-0125: Cross-Site Scripting (XSS) Vulnerability in Control iD Gerencia Web 1.30
CVE-2023-0126: SMA1000 Firmware Version 12.4.2 Pre-Authentication Path Traversal Vulnerability
CVE-2023-0127: Firmware_update Command Injection Vulnerability in Restricted Telnet Interface
CVE-2023-0128: Use After Free Vulnerability in Google Chrome's Overview Mode on Chrome OS
CVE-2023-0129: Heap Buffer Overflow in Google Chrome Network Service
CVE-2023-0130: Spoofing Omnibox Contents via Fullscreen API in Google Chrome on Android