CVEs published December 15, 2023
288 CVEs were published on December 15, 2023: 16 critical, 25 high.
- Published
- 288
- Critical
- 16
- High
- 25
- Medium
- 234
- Low
- 5
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 38
Most affected products
- Adobe Experience Manager
- 187
- GitLab
- 6
- IDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- 6
- Softnext Mail SQR Expert
- 5
- Kaifa Technology WebITR
- 4
- ITPison OMICARD EDM 's SMS
- 3
- morpheus65535 bazarr
- 3
- Multisuns EasyLog web+
- 3
- SmartStar Software CWS Web-Base
- 3
- Apache Software Foundation Apache Dubbo · org.apache.dubbo:…
- 2
Critical 16
- CVE-2023-4020Unvalidated input in Silicon Labs PSA Attestation service leads to secure memory access from non-secure memorysilabs.com GSDK
- CVE-2023-50723XWiki Platform remote code execution/programming rights with configuration section from any user accountxwiki-platform · org.xwiki.platform:xwiki-platform-administ…
- CVE-2023-50722XWiki Platform XSS/CSRF Remote Code Execution in XWiki.ConfigurableClassxwiki-platform · org.xwiki.platform:xwiki-platform-administ…
- CVE-2023-50721XWiki Platform RCE from account through SearchAdminxwiki-platform · org.xwiki.platform:xwiki-platform-search-ui
- CVE-2023-46116Remote Code Execution via insufficiently sanitized call to shell.openExternaltutao tutanota
- CVE-2023-33220Stack Buffer Overflow when checking some attributes during retrofitIDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- CVE-2023-33219Stack Buffer Overflow when checking retrofit packageIDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- CVE-2023-33218Stack Buffer Overflow in a binary run at upgrade startupIDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- CVE-2023-6553Backup Migration <= 1.3.7 - Unauthenticated Remote Code Executioninisev BackupBliss – Backup & Migration with Free Cloud Sto…
- CVE-2023-48392Kaifa Technology WebITR - Hard-coded Cryptographic KeyKaifa Technology WebITR
- CVE-2023-48390Multisuns EasyLog web+ - Command InjectionMultisuns EasyLog web+
- CVE-2023-48388Multisuns EasyLog web+ - Use of Hard-coded PasswordMultisuns EasyLog web+
- CVE-2023-48384ArmorX Global Technology Corporation ArmorX Spam - SQL InjectoinArmorX Global Technology ArmorX Spam
- CVE-2023-48376SmartStar Software CWS Web-Base - Arbitrary File UploadSmartStar Software CWS Web-Base
- CVE-2023-48372ITPison OMICARD EDM 's SMS - SQL InjectionITPison OMICARD EDM 's SMS
- CVE-2023-48371ITPison OMICARD EDM 's SMS - Arbitrary File UploadITPison OMICARD EDM 's SMS
High 25
- CVE-2023-50265Bazarr Arbitrary file read in /api/swaggerui/static endpointmorpheus65535 bazarr
- CVE-2023-50264Bazarr Arbitrary file read in /system/backup/download/ endpointmorpheus65535 bazarr
- CVE-2023-50719XWiki Platform Solr search discloses password hashes of all usersxwiki-platform · org.xwiki.platform:xwiki-platform-search-s…
- CVE-2023-6680Improper Certificate Validation in GitLabGitLab
- CVE-2023-49159WordPress CommentLuv Plugin <= 3.0.4 is vulnerable to Server Side Request Forgery (SSRF)Elegant Digital Solutions CommentLuv
- CVE-2023-49187WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS)Spoonthemes Adifier - Classified Ads WordPress Theme
- CVE-2023-49185WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS)Doofinder WP & WooCommerce Search
- CVE-2023-49183WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS)NextScripts: Social Networks Auto-Poster
- CVE-2023-49182Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fabio Marzocca List all posts by AuthoFabio Marzocca List all posts by Authors, nested Categories…
- CVE-2023-49178WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS)Mr. Hdwplayer HDW Player Plugin
- CVE-2023-49177WordPress which template file Plugin <= 4.9.0 is vulnerable to Cross Site Scripting (XSS)Gilles Dumas which template file
- CVE-2023-49176WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS)CodeRevolution WP Pocket URLs
- CVE-2023-49170WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)Forms by CaptainForm – Form Builder for WordPress
- CVE-2023-33217Missing integrity check on upgrade packageIDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- CVE-2023-6837Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User ImpersonationWSO2 API Manager · WSO2 Identity Server +3
- CVE-2023-48394Kaifa Technology WebITR - Arbitrary File UploadKaifa Technology WebITR
- CVE-2023-48389Multisuns EasyLog web+ - Path TraversalMultisuns EasyLog web+
- CVE-2023-48387TAIWAN-CA(TWCA) JCICSecurityTool - Improper Input ValidationTAIWAN-CA(TWCA) JCICSecurityTool
- CVE-2023-48380Softnext Mail SQR Expert - Command InjectionSoftnext Mail SQR Expert
- CVE-2023-48378Softnext Mail SQR Expert - Path Traversal Softnext Mail SQR Expert
- CVE-2023-48375SmartStar Software CWS Web-Base - Broken Access ControlSmartStar Software CWS Web-Base
- CVE-2023-6827Essential Real Estate <= 4.3.5 - Authenticated (Subscriber+) Arbitrary File Uploadg5theme Essential Real Estate
- CVE-2023-6826E2Pdf <= 1.20.25 - Authenticated (Administrator+) Arbitrary File Uploadoleksandrz E2Pdf – Export Pdf Tool for WordPress
- CVE-2023-48373ITPison OMICARD EDM 's SMS - Path TraversalITPison OMICARD EDM 's SMS
- CVE-2023-6831Path Traversal: '\..\filename' in mlflow/mlflowmlflow/mlflow · mlflow
Medium, low and unrated 247
- CVE-2023-27317Information Disclosure Vulnerability in ONTAP 9 NetApp ONTAP
- CVE-2023-28022HCL Connections is vulnerable to sensitive information disclosureHCL Software HCL Connections
- CVE-2023-50728Unauthenticated Denial of Service in the octokit/webhooks libraryoctokit webhooks.js · @octokit/webhooks +3
- CVE-2023-50266Bazarr Blind Server-Side Request Forgery (SSRF) in the /test/<protocol>/ endpointmorpheus65535 bazarr
- CVE-2023-50720XWiki Platform Solr search discloses email addresses of usersxwiki-platform · org.xwiki.platform:xwiki-platform-search-s…
- CVE-2023-5310Z-Wave Denial of Service caused by Stream of Packetssilabs.com Gecko SDK
- CVE-2023-3904Improper Validation of Specified Type of Input in GitLabGitLab
- CVE-2023-5061Missing Authorization in GitLabGitLab
- CVE-2023-5512Improper Control of Generation of Code ('Code Injection') in GitLabGitLab
- CVE-2023-6051Improper Control of Generation of Code ('Code Injection') in GitLabGitLab
- CVE-2023-49749WordPress SureTriggers Plugin <= 1.0.23 is vulnerable to Cross Site Request Forgery (CSRF)SureTriggers – Connect All Your Plugins, Apps, Tools & Auto…
- CVE-2023-49744WordPress Gift Up Gift Cards for WordPress and WooCommerce Plugin <= 2.21.3 is vulnerable to Cross Site Request Forgery (CSRF)Gift Up Gift Cards for WordPress and WooCommerce
- CVE-2023-49197WordPress DoFollow Case by Case Plugin <= 3.4.2 is vulnerable to Cross Site Request Forgery (CSRF)Apasionados, Apasionados del Marketing, NetConsulting DoFol…
- CVE-2023-3511Incorrect Authorization in GitLabGitLab
- CVE-2023-49829WordPress Tutor LMS Plugin <= 2.2.4 is vulnerable to Cross Site Scripting (XSS)Themeum Tutor LMS – eLearning and online course solution
- CVE-2023-49823WordPress Bold Page Builder Plugin <= 4.6.1 is vulnerable to Cross Site Scripting (XSS)BoldThemes Bold Page Builder
- CVE-2023-49767WordPress Biteship Plugin <= 2.2.24 is vulnerable to Cross Site Scripting (XSS)Biteship: Plugin Ongkos Kirim Kurir Instant, Reguler, Kargo
- CVE-2023-49747WordPress Guest Author Plugin <= 2.3 is vulnerable to Cross Site Scripting (XSS)WebFactory Guest Author
- CVE-2023-49191WordPress GDPR Cookie Consent by Supsystic Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)GDPR Cookie Consent by Supsystic
- CVE-2023-49190WordPress Site Offline Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS)Chandra Shekhar Sahu Site Offline Or Coming Soon Or Mainten…
- CVE-2023-49189WordPress Social Share Buttons & Analytics Plugin – GetSocial.io Plugin <= 4.3.12 is vulnerable to Cross Site Scripting (XSS)Getsocial, S.A. Social Share Buttons & Analytics Plugin – G…
- CVE-2023-49188WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)ZealousWeb Track Geolocation Of Users Using Contact Form
- CVE-2023-49184WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS)WPDeveloper Parallax Slider Block
- CVE-2023-49181WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS)WP Event Manager – Events Calendar, Registrations, Sell Tic…
- CVE-2023-49180WordPress Automatic Youtube Video Posts Plugin Plugin <= 5.2.2 is vulnerable to Cross Site Scripting (XSS)Ternstyle Automatic Youtube Video Posts Plugin
- CVE-2023-49179WordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS)N.O.U.S. Open Useful and Simple Event post
- CVE-2023-49175WordPress KP Fastest Tawk.to Chat Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)Kreativo Pro KP Fastest Tawk.to Chat
- CVE-2023-49174WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS)dFactory Responsive Lightbox & Gallery
- CVE-2023-49169WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)Ads by datafeedr.com
- CVE-2023-49165WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)Real Big Plugins Client Dash
- CVE-2023-48765WordPress Email Address Encoder Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)Till Krüss Email Address Encoder
- CVE-2023-49160WordPress Formzu WP Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS)Formzu WP
- CVE-2023-50871In JetBrains YouTrack before 2023.3.22268 authorization check for inline comments inside thread replies was missedJetBrains YouTrack
- CVE-2023-50870In JetBrains TeamCity before 2023.11.1 a CSRF on login was possibleJetBrains TeamCity
- CVE-2023-30867Apache StreamPark (incubating): Authenticated system users could trigger SQL injection vulnerabilityApache Software Foundation Apache StreamPark · org.apache.s…
- CVE-2023-49898Apache StreamPark (incubating): Authenticated system users could trigger remote command executionApache Software Foundation Apache StreamPark · org.apache.s…
- CVE-2023-33222Stack buffer overflow when reading DESFire cardIDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- CVE-2023-33221 Heap Buffer Overflow when reading DESFire cardIDEMIA SIGMA Lite & Lite + · IDEMIA SIGMA Wide +4
- CVE-2023-48522Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48604Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48512Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48468Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48501Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48564Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48607Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48454Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48503Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48589Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48538Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48473Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48496Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48441Adobe Experience Manager | Improper Access Control (CWE-284)Adobe Experience Manager
- CVE-2023-48591Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48505Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48567Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48550Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48575Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48581Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48624Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48488Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48622Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48532Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48457Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48565Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48452Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48481Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48614Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48451Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48617Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48527Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48543Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48583Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48464Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-47064Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48472Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48613Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48483Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48620Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48537Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48587Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48563Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48515Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48443Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48490Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48517Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48595Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48586Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48551Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48559Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48588Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48618Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48605Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48459Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48533Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48445Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48448Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48518Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48539Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48561Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48471Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48458Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48462Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48474Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48570Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48546Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48510Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48449Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48508Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48526Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48498Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48460Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48465Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48536Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48568Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48621Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48612Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48576Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-47065Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48542Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48453Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48608Adobe Experience Manager | Improper Input Validation (CWE-20)Adobe Experience Manager
- CVE-2023-48528Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48476Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48544Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48579Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48592Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48571Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48584Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48500Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48456Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48482Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48497Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48562Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48540Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48552Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48489Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48477Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48596Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48447Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48525Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48623Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48513Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48444Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48531Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48521Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48440Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48470Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48520Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48467Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48541Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48524Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48578Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48616Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48556Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48461Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48580Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48601Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48516Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48557Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48499Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48519Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48480Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48478Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48553Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48555Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48493Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48574Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48598Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48585Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48486Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48619Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48450Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48530Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48507Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48611Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48549Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48569Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48547Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48463Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48529Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48469Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48455Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48548Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48534Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48535Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48602Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48479Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48590Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48545Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48554Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48442Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48573Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48475Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48446Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48610Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48558Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48491Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48577Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48609Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48597Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48600Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48566Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48495Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48511Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48466Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48572Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48594Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48603Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48514Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48504Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48484Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48593Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48487Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48560Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48509Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48502Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48506Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48494Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48582Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48492Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48606Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48615Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48599Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48523Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-48485Adobe Experience Manager | Cross-site Scripting (DOM-based XSS) (CWE-79)Adobe Experience Manager
- CVE-2023-6839Due to improper error handling, a REST API resource could expose a server side error containing an internal WSO2 specific package name in thWSO2 API Manager
- CVE-2023-6838Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint.WSO2 API Manager · WSO2 Identity Server +1
- CVE-2023-48395Kaifa Technology WebITR - SQL InjectionKaifa Technology WebITR
- CVE-2023-6836Multiple WSO2 products have been identified as vulnerable due to an XML External Entity (XXE) attack abuses a widely available but rarely usWSO2 API Manager · WSO2 API Microgateway +10
- CVE-2023-48393Kaifa Technology WebITR - Error Message LeakageKaifa Technology WebITR
- CVE-2023-6835Multiple WSO2 products have been identified as vulnerable due to lack of server-side input validation in the Forum feature, API rating couldWSO2 API Manager · WSO2 IoT Server +1
- CVE-2023-48382Softnext Mail SQR Expert - Local File Inclusion-2Softnext Mail SQR Expert
- CVE-2023-48381Softnext Mail SQR Expert - Local File Inclusion-1Softnext Mail SQR Expert
- CVE-2023-46279Apache Dubbo: Bypass deny serialize list check in Apache DubboApache Software Foundation Apache Dubbo · org.apache.dubbo:…
- CVE-2023-29234Bypass serialize checks in Apache DubboApache Software Foundation Apache Dubbo · org.apache.dubbo:…
- CVE-2023-48379Softnext Mail SQR Expert - Blind Server-Side Request Forgey (SSRF)Softnext Mail SQR Expert
- CVE-2023-48374SmartStar Software CWS Web-Base - Use of Hard-coded CredentialsSmartStar Software CWS Web-Base
- CVE-2023-50715User accounts disclosed to unauthenticated actors on the LANhome-assistant core · homeassistant
- CVE-2023-36878Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft Edge
- CVE-2023-6832Business Logic Errors in microweber/microwebermicroweber/microweber
- CVE-2023-40954A SQL injection vulnerability in Grzegorz Marczynski Dynamic Progress Bar (aka web_progress) v.
- CVE-2023-42183lockss-daemon (aka Classic LOCKSS Daemon) before 1.77.3 performs post-Unicode normalization, which may allow bypass of intended access restr
- CVE-2023-48050SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance (aka odoo-biometric-atten
- CVE-2023-50089A Command Injection vulnerability exists in NETGEAR WNR2000v4 version 1.0.0.70.
- CVE-2023-50469Shenzhen Libituo Technology Co., Ltd LBT-T300-T310 v2.2.2.6 was discovered to contain a buffer overflow via the ApCliEncrypType parameter at
- CVE-2023-50917MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters.
- CVE-2023-50918app/Controller/AuditLogsController.php in MISP before 2.4.182 mishandles ACLs for audit logs.