Lista CVE 2023/49xxx

CVE nel gruppo: 49xxx

CVE-2023-49105 (Clicca per dettagli)

CVE-2023-49106 (Clicca per dettagli)

CVE-2023-49107 (Missing Password Field Masking Vulnerability in Hitachi Device Manager)

CVE-2023-49108 (Generation of Error Message Containing Sensitive Information Vulnerability in Hitachi Device Manager)

CVE-2023-49109 (Clicca per dettagli)

CVE-2023-49110 (Remote Code Execution in Apache Dolphinscheduler)

CVE-2023-49111 (XML External Entity Injection in Kiuwan SAST)

CVE-2023-49112 (Reflected Cross-Site-Scripting in Kiuwan SAST)

CVE-2023-49113 (Insecure Direct Object Reference in Kiuwan SAST)

CVE-2023-49114 (Sensitive Data Stored Insecurely in Kiuwan SAST Local Analyzer)

CVE-2023-49115 (Local Privilege Escalation via DLL Hijacking)

CVE-2023-49117 (MachineSense FeverWarn Missing Authentication for Critical Function)

CVE-2023-49118 (Clicca per dettagli)

CVE-2023-49119 (Dsoftbus has an out-of-bounds read vulnerability)

CVE-2023-49121 (Clicca per dettagli)

CVE-2023-49122 (Clicca per dettagli)

CVE-2023-49123 (Clicca per dettagli)

CVE-2023-49124 (Clicca per dettagli)

CVE-2023-49125 (Clicca per dettagli)

CVE-2023-49126 (Clicca per dettagli)

CVE-2023-49127 (Clicca per dettagli)

CVE-2023-49128 (Clicca per dettagli)

CVE-2023-49129 (Clicca per dettagli)

CVE-2023-49130 (Clicca per dettagli)

CVE-2023-49131 (Clicca per dettagli)

CVE-2023-49132 (Clicca per dettagli)

CVE-2023-49133 (Clicca per dettagli)

CVE-2023-49134 (Clicca per dettagli)

CVE-2023-49135 (Clicca per dettagli)

CVE-2023-49140 (multimedia player has a UAF vulnerability)

CVE-2023-49141 (Clicca per dettagli)

CVE-2023-49142 (Clicca per dettagli)

CVE-2023-49143 (multimedia audio has a UAF vulnerability)

CVE-2023-49144 (Clicca per dettagli)

CVE-2023-49145 (Clicca per dettagli)

CVE-2023-49146 (Apache NiFi: Improper Neutralization of Input in Advanced User Interface for Jolt)

CVE-2023-49147 (Clicca per dettagli)

CVE-2023-49148 (Clicca per dettagli)

CVE-2023-49149 (WordPress Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates Plugin <= 3.0.5 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-49150 (WordPress Currency Converter Calculator Plugin <= 1.3.1 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49151 (WordPress Crypto Converter Widget Plugin <= 1.8.1 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49152 (WordPress Google Calendar Events Plugin <= 3.2.6 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49153 (WordPress Credit Tracker Plugin <= 1.1.17 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49154 (WordPress Add to Cart Text Changer and Customize Button, Add Custom Icon Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-49155 (WordPress Button Generator – easily Button Builder plugin <= 2.3.8 - Broken Access Control vulnerability)

CVE-2023-49156 (WordPress Button Generator – easily Button Builder Plugin <= 2.3.8 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-49157 (WordPress GoDaddy Email Marketing plugin <= 1.4.3 - Broken Access Control vulnerability)

CVE-2023-49158 (WordPress Multiple Post Passwords Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49159 (WordPress LadiApp plugin <= 4.4 - Broken Access Control lead to XSS vulnerability)

CVE-2023-49160 (WordPress CommentLuv Plugin <= 3.0.4 is vulnerable to Server Side Request Forgery (SSRF))

CVE-2023-49161 (WordPress Formzu WP Plugin <= 1.6.6 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49162 (WordPress Bravo Translate Plugin <= 1.2 is vulnerable to SQL Injection)

CVE-2023-49163 (WordPress BigCommerce Plugin <= 5.0.6 is vulnerable to Sensitive Data Exposure)

CVE-2023-49164 (WordPress teachPress Plugin <= 9.0.5 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-49165 (WordPress Ocean Extra Plugin <= 2.2.2 is vulnerable to Cross Site Request Forgery (CSRF))

CVE-2023-49166 (WordPress Client Dash Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49167 (WordPress MSync Plugin <= 1.0.0 is vulnerable to SQL Injection)

CVE-2023-49168 (WordPress Database for CF7 plugin <= 1.2.4 - Broken Access Control vulnerability)

CVE-2023-49169 (WordPress BP Better Messages Plugin <= 2.4.0 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49170 (WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49171 (WordPress Forms by CaptainForm Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49172 (WordPress Innovs HR Plugin <= 1.0.3.4 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49173 (WordPress BrainCert – HTML5 Virtual Classroom Plugin <= 1.30 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49174 (WordPress 10to8 Online Appointment Booking System Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49175 (WordPress Responsive Lightbox Plugin <= 2.4.5 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49176 (WordPress KP Fastest Tawk.to Chat Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49177 (WordPress WP Pocket URLs Plugin <= 1.0.2 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49178 (WordPress which template file Plugin <= 4.9.0 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49179 (WordPress HDW Player Plugin (Video Player & Video Gallery) Plugin <= 5.0 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49180 (WordPress Event post Plugin <= 5.8.6 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49181 (WordPress Automatic Youtube Video Posts Plugin Plugin <= 5.2.2 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49182 (WordPress WP Event Manager Plugin <= 3.1.40 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49183 (Clicca per dettagli)

CVE-2023-49184 (WordPress NextScripts Plugin <= 4.4.2 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49185 (WordPress Parallax Slider Block Plugin <= 1.2.4 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49187 (WordPress Doofinder for WooCommerce Plugin <= 2.1.7 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49188 (WordPress Adifier System Plugin < 3.1.4 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49189 (WordPress Track Geolocation Of Users Using Contact Form 7 Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49190 (WordPress Social Share Buttons & Analytics Plugin – GetSocial.io Plugin <= 4.3.12 is vulnerable to Cross Site Scripting (XSS))

CVE-2023-49191 (WordPress Site Offline Plugin <= 1.5.6 is vulnerable to Cross Site Scripting (XSS))