Search vulnerabilities

Results 425,803

CVE-2023-33931

WordPress YouTube Playlist Player Plugin <= 4.6.4 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in Ciprian Popescu YouTube Playlist Player plugin <= 4.6.4 versions.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
CVE-2023-33929

WordPress Easy Admin Menu Plugin <= 1.3 is vulnerable to Cross Site Scripting (XSS)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joaquín Ruiz Easy Admin Menu plugin <= 1.3 versions.

CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2023-33926

WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2023-33925

WordPress WooCommerce Product Categories Selection Widget Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin <= 2.0 versions.

CVSS 3.1 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
CVE-2023-33922

WordPress Elementor plugin <= 3.13.2 - Broken Access Control vulnerability

Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.13.2.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Products
CVE-2023-33918

In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Sc7731e Sc9832e and 6 more
CVE-2023-33917

In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Sc7731e Sc9832e and 6 more
CVE-2023-33916

In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Sc7731e Sc9832e and 6 more
CVE-2023-33915

In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 T760 and 2 more
CVE-2023-33914

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed

CVSS 3.1 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 T760 and 2 more
CVE-2023-33913

In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with System execution privileges needed

CVSS 3.1 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 T606 and 7 more
CVE-2023-33912

In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-33911

In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android Sc7731e Sc9832e and 6 more
CVE-2023-33910

In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-33909

In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-33908

In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc9832e and 10 more
CVE-2023-33907

In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-33906

In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-33902

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more
CVE-2023-33901

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Products
Android S8000 Sc7731e and 11 more