Pagina 2 – Azienda Sicura

Lista CVE 2023/34xxx

CVE-2023-34022 (WordPress Church Admin Plugin <= 3.7.29 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-34023 (WordPress Dynamic QR Code Generator Plugin <= 0.0.5 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-34024 (WordPress WordPress Social Login Plugin <= 3.0.4 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-34025 (WordPress WP Full Auto Tags Manager Plugin <= 2.2 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-34026 (WordPress LWS Hide Login Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-34027 (WordPress This Day In History Plugin <= 3.10.1 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-34028 (WordPress Recently Viewed Products Plugin <= 1.0.0 is vulnerable to PHP Object Injection)

CVE-2023-34029 (WordPress WOLF Plugin <= 1.0.7 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-34030 (WordPress Disable WordPress Update Notifications Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-34031 (WordPress Complianz and Complianz Premium plugins – Cross Site Request Forgery (CSRF))

CVE-2023-34032 (WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-34033 (WordPress bbPress Toolkit Plugin <= 1.0.12 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-34034 (WordPress Ajax Pagination and Infinite Scroll Plugin <= 2.0.1 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-34037 (Forwarded header exploit with Spring HATEOAS on WebFlux)

CVE-2023-34041 (Java Deserialization vulnerability in Spring-Kafka When Improperly Configured)

CVE-2023-34042 (CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter)

CVE-2023-34045 (Information disclosure vulnerability in bluetooth device-sharing functionality)

CVE-2023-34046 (VMware Fusion installer local privilege escalation)

CVE-2023-34047 (VMware Fusion TOCTOU local privilege escalation vulnerability)

CVE-2023-34048 (Exposure of data and identity to wrong session in Spring for GraphQL)

CVE-2023-34049 (VMware vCenter Server Out-of-Bounds Write Vulnerability)

CVE-2023-34050 (Salt security advisory release – 2023-OCT-27)

CVE-2023-34051 (Spring AMQP Deserialization Vulnerability)

CVE-2023-34054 (Spring Framework server Web Observations DoS Vulnerability)

CVE-2023-34055 (Reactor Netty HTTP Server Metrics DoS Vulnerability)

CVE-2023-34056 (Spring Boot server Web Observations DoS Vulnerability)

CVE-2023-34057 (VMware vCenter Server Partial Information Disclosure Vulnerability)