Low-severity CVEs (page 66)
Page 66 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-50263 | Low | 3.7 | 2023-12-12 | Nautobot is a Network Source of Truth and Network Automation Platform built as a web application atop the Django Python framework with a PostgreSQL or MySQL da… |
CVE-2023-50247 | Low | 3.7 | 2023-12-12 | h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The QUIC stack (quicly), as used by H2O up to commit 43f86e5 (in version 2.3.0-beta and pri… |
CVE-2023-49279 | Low | 3.7 | 2023-12-12 | Umbraco is an ASP.NET content management system (CMS). Starting in version 7.0.0 and prior to versions 7.15.11, 8.18.9, 10.7.0, 11.5.0, and 12.2.0, a user with… |
CVE-2023-49274 | Low | 3.7 | 2023-12-12 | Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.8.1, and 12.3.4, a user enumeration attack i… |
CVE-2023-38694 | Low | 3.5 | 2023-12-12 | Umbraco is an ASP.NET content management system (CMS). Starting in version 8.0.0 and prior to versions 8.18.10, 10.7.0, and 12.1.0, a user with access to a spe… |
CVE-2023-48430 | Low | 2.7 | 2023-12-12 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The REST API of affected devices does not check the length of parameters i… |
CVE-2023-48429 | Low | 2.7 | 2023-12-12 | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The Web UI of affected devices does not check the length of parameters in… |
CVE-2023-6727 | Low | 3.1 | 2023-12-12 | Mattermost fails to perform correct authorization checks when creating a playbook action, allowing users without access to the playbook to create playbook acti… |
CVE-2023-6547 | Low | 3.7 | 2023-12-12 | Mattermost fails to validate team membership when a user attempts to access a playbook, allowing a user with permissions to a playbook but no permissions to th… |
CVE-2023-49578 | Low | 3.5 | 2023-12-12 | SAP Cloud Connector - version 2.0, allows an authenticated user with low privilege to perform Denial of service attack from adjacent UI by sending a malicious… |
CVE-2023-49058 | Low | 3.5 | 2023-12-12 | SAP Master Data Governance File Upload application allows an attacker to exploit insufficient validation of path information provided by users, thus characters… |
CVE-2023-42874 | Low | 2.4 | 2023-12-12 | This issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14.2. Secure text fields may be displayed via the Accessibility Ke… |
CVE-2023-6194 | Low | 2.8 | 2023-12-11 | In Eclipse Memory Analyzer versions 0.7 to 1.14.0, report definition XML files are not filtered to prohibit document type definition (DTD) references to extern… |
CVE-2023-5870 | Low | 2.2 | 2023-12-10 | A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum wor… |
CVE-2023-6646 | Low | 3.5 | 2023-12-09 | A vulnerability classified as problematic has been found in linkding 1.23.0. Affected is an unknown function. The manipulation of the argument q leads to cross… |
CVE-2023-6616 | Low | 3.5 | 2023-12-08 | A vulnerability was found in SourceCodester Simple Student Attendance System 1.0 and classified as problematic. This issue affects some unknown processing of t… |
CVE-2023-6615 | Low | 3.5 | 2023-12-08 | A vulnerability, which was classified as problematic, has been found in Typecho 1.2.1. Affected by this issue is some unknown functionality of the file /admin/… |
CVE-2023-6614 | Low | 2.7 | 2023-12-08 | A vulnerability classified as problematic was found in Typecho 1.2.1. Affected by this vulnerability is an unknown functionality of the file /admin/manage-page… |
CVE-2023-6613 | Low | 2.4 | 2023-12-08 | A vulnerability classified as problematic has been found in Typecho 1.2.1. Affected is an unknown function of the file /admin/options-theme.php of the componen… |
CVE-2023-6609 | Low | 3.5 | 2023-12-08 | A vulnerability was found in osCommerce 4. It has been classified as problematic. This affects an unknown part of the file /b2b-supermarket/catalog/all-product… |
CVE-2023-49297 | Low | 3.3 | 2023-12-05 | PyDrive2 is a wrapper library of google-api-python-client that simplifies many common Google Drive API V2 tasks. Unsafe YAML deserilization will result in arbi… |
CVE-2023-45085 | Low | 3.2 | 2023-12-05 | An issue exists in SoftIron HyperCloud where compute nodes may come online immediately without following the correct initialization process. In this instance… |
CVE-2023-44298 | Low | 3.6 | 2023-12-05 | Dell PowerEdge platforms 16G Intel E5 BIOS and Dell Precision BIOS, version 1.4.4, contain active debug code security vulnerability. An unauthenticated physic… |
CVE-2023-42572 | Low | 3.3 | 2023-12-05 | Implicit intent hijacking vulnerability in Samsung Account Web SDK prior to version 1.5.24 allows attacker to get sensitive information. |
CVE-2023-42556 | Low | 3.3 | 2023-12-05 | Improper usage of implicit intent in Contacts prior to SMR Dec-2023 Release 1 allows attacker to get sensitive information. |
CVE-2023-49284 | Low | 3.9 | 2023-12-05 | fish is a smart and user-friendly command line shell for macOS, Linux, and the rest of the family. fish shell uses certain Unicode non-characters internally fo… |
CVE-2023-49080 | Low | 3.5 | 2023-12-04 | The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and… |
CVE-2022-4957 | Low | 3.5 | 2023-12-03 | A vulnerability was found in librespeed speedtest up to 5.2.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality… |
CVE-2018-25094 | Low | 3.5 | 2023-12-03 | A vulnerability was found in ระบบบัญชีออนไลน์ Online Accounting System up to 1.4.0 and classified as problematic. This issue affects some unknown processing of… |
CVE-2023-6473 | Low | 3.5 | 2023-12-02 | A vulnerability, which was classified as problematic, was found in SourceCodester Online Quiz System 1.0. This affects an unknown part of the file take-quiz.ph… |
CVE-2023-6472 | Low | 2.4 | 2023-12-02 | A vulnerability, which was classified as problematic, has been found in PHPEMS 7.0. This issue affects some unknown processing of the file app\content\cls\api… |
CVE-2023-6467 | Low | 3.1 | 2023-12-02 | A vulnerability was found in Thecosy IceCMS 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /Websquare/likeClic… |
CVE-2023-6466 | Low | 3.5 | 2023-12-02 | A vulnerability was found in Thecosy IceCMS 2.0.1. It has been declared as problematic. This vulnerability affects unknown code of the file /planet of the comp… |
CVE-2023-6463 | Low | 3.5 | 2023-12-01 | A vulnerability has been found in SourceCodester User Registration and Login System 1.0 and classified as problematic. Affected by this vulnerability is an unk… |
CVE-2023-6462 | Low | 3.5 | 2023-12-01 | A vulnerability, which was classified as problematic, was found in SourceCodester User Registration and Login System 1.0. Affected is an unknown function of th… |
CVE-2023-28896 | Low | 3.3 | 2023-12-01 | Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CA… |
CVE-2023-28895 | Low | 3.5 | 2023-12-01 | The password for access to the debugging console of the PoWer Controller chip (PWC) of the MIB3 infotainment is hard-coded in the firmware. The console allows… |
CVE-2023-4912 | Low | 2.6 | 2023-12-01 | An issue has been discovered in GitLab EE affecting all versions starting from 10.5 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions… |
CVE-2023-4658 | Low | 3.1 | 2023-12-01 | An issue has been discovered in GitLab EE affecting all versions starting from 8.13 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions… |
CVE-2023-3443 | Low | 3.1 | 2023-12-01 | An issue has been discovered in GitLab affecting all versions starting from 12.1 before 16.4.3, all versions starting from 16.5 before 16.5.3, all versions sta… |
CVE-2023-6442 | Low | 3.5 | 2023-11-30 | A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an un… |
CVE-2023-6440 | Low | 3.5 | 2023-11-30 | A vulnerability was found in SourceCodester Book Borrower System 1.0 and classified as problematic. This issue affects some unknown processing of the file endp… |
CVE-2023-6439 | Low | 3.5 | 2023-11-30 | A vulnerability classified as problematic was found in ZenTao PMS 18.8. Affected by this vulnerability is an unknown functionality. The manipulation leads to c… |
CVE-2023-37867 | Low | 3.7 | 2023-11-30 | Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in YetAnotherStarsRating.Com YASR – Yet Another Star Rating Plugin for WordPress.This issue aff… |
CVE-2023-5275 | Low | 2.5 | 2023-11-30 | Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by… |
CVE-2023-5274 | Low | 2.5 | 2023-11-30 | Improper Input Validation vulnerability in simulation function of GX Works2 allows an attacker to cause a denial-of-service (DoS) condition on the function by… |
CVE-2023-49652 | Low | 2.7 | 2023-11-29 | Incorrect permission checks in Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11 and earlier allow attackers with global Item/Configure permission (w… |
CVE-2023-29066 | Low | 3.2 | 2023-11-28 | The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify informat… |
CVE-2023-29063 | Low | 2.4 | 2023-11-28 | The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for… |
CVE-2023-29062 | Low | 3.8 | 2023-11-28 | The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately vali… |
CVE-2023-6287 | Low | 3.3 | 2023-11-27 | Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files. |
CVE-2023-35075 | Low | 3.1 | 2023-11-27 | Mattermost fails to use innerText / textContent when setting the channel name in the webapp during autocomplete, allowing an attacker to inject HTML to a vict… |
CVE-2023-6313 | Low | 3.5 | 2023-11-27 | A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality… |
CVE-2023-6303 | Low | 2.4 | 2023-11-27 | A vulnerability was found in CSZCMS 1.3.0. It has been classified as problematic. This affects an unknown part of the file /admin/settings/ of the component Si… |
CVE-2023-6301 | Low | 3.5 | 2023-11-27 | A vulnerability has been found in SourceCodester Best Courier Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown… |
CVE-2023-6300 | Low | 3.5 | 2023-11-27 | A vulnerability, which was classified as problematic, was found in SourceCodester Best Courier Management System 1.0. Affected is an unknown function. The mani… |
CVE-2023-48711 | Low | 3.7 | 2023-11-24 | google-translate-api-browser is an npm package which interfaces with the google translate web api. A Server-Side Request Forgery (SSRF) Vulnerability is presen… |
CVE-2023-6275 | Low | 3.5 | 2023-11-24 | A vulnerability was found in TOTVS Fluig Platform 1.6.x/1.7.x/1.8.0/1.8.1. It has been rated as problematic. Affected by this issue is some unknown functionali… |
CVE-2023-6251 | Low | 3.5 | 2023-11-24 | Cross-site Request Forgery (CSRF) in Checkmk < 2.2.0p15, < 2.1.0p37, <= 2.0.0p39 allow an authenticated attacker to delete user-messages for individual users. |
CVE-2023-26279 | Low | 3.3 | 2023-11-24 | IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a local user to perform unauthorized actions due to improper encoding. IBM X-Force ID: 248160. |
CVE-2021-39008 | Low | 2.7 | 2023-11-23 | IBM QRadar WinCollect Agent 10.0 through 10.1.7 could allow a privileged user to obtain sensitive information due to missing best practices. IBM X-Force ID: 2… |
CVE-2023-48706 | Low | 3.6 | 2023-11-22 | Vim is a UNIX editor that, prior to version 9.0.2121, has a heap-use-after-free vulnerability. When executing a `:s` command for the very first time and using… |
CVE-2023-6164 | Low | 2.2 | 2023-11-22 | The MainWP Dashboard – WordPress Manager for Multiple Websites Maintenance plugin for WordPress is vulnerable to CSS Injection via the ‘newColor’ parameter in… |
CVE-2023-6160 | Low | 3.3 | 2023-11-22 | The LifterLMS – WordPress LMS Plugin for eLearning plugin for WordPress is vulnerable to Directory Traversal in versions up to, and including, 7.4.2 via the ma… |
CVE-2021-22143 | Low | 2.1 | 2023-11-22 | The Elastic APM .NET Agent can leak sensitive HTTP header information when logging the details during an application error. Normally, the APM agent will saniti… |
CVE-2021-22151 | Low | 3.1 | 2023-11-22 | It was discovered that Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily travers… |
CVE-2023-48307 | Low | 3.5 | 2023-11-21 | Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. Starting in version 1.13.0 and prior to version 2.2.8 and 3.3.0, an attacker… |
CVE-2023-48303 | Low | 2.4 | 2023-11-21 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.11, 26.0.6, and 27.1… |
CVE-2023-48302 | Low | 3.5 | 2023-11-21 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1… |
CVE-2023-48301 | Low | 3.5 | 2023-11-21 | Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to versions 25.0.13, 26.0.8, and 27.1… |
CVE-2023-47643 | Low | 3.1 | 2023-11-21 | SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exp… |
CVE-2023-47072 | Low | 3.3 | 2023-11-17 | Adobe After Effects version 24.0.2 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to dis… |
CVE-2023-48649 | Low | 3.5 | 2023-11-17 | Concrete CMS before 8.5.13 and 9.x before 9.2.2 allows stored XSS on the Admin page via an uploaded file name. |
CVE-2023-48237 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. In affected versions when shifting lines in operator pending mode and using a very large value, it may be possi… |
CVE-2023-48236 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. When using the z= command, the user may overflow the count with values larger than MAX_INT. Impact is low, user… |
CVE-2023-48235 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. When parsing relative ex addresses one may unintentionally cause an overflow. Ironically this happens in the ex… |
CVE-2023-48234 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. When getting the count for a normal mode z command, it may overflow for large counts given. Impact is low, user… |
CVE-2023-48233 | Low | 2.8 | 2023-11-16 | Vim is an open source command line text editor. If the count after the :s command is larger than what fits into a (signed) long variable, abort with e_value_to… |
CVE-2023-48232 | Low | 3.9 | 2023-11-16 | Vim is an open source command line text editor. A floating point exception may occur when calculating the line offset for overlong lines and smooth scrolling i… |
CVE-2023-48231 | Low | 3.9 | 2023-11-16 | Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the a… |
CVE-2023-47060 | Low | 3.3 | 2023-11-16 | Adobe Premiere Pro version 24.0 (and earlier) and 23.6 (and earlier) are affected by an Access of Uninitialized Pointer vulnerability that could lead to disclo… |
CVE-2023-30954 | Low | 2.7 | 2023-11-15 | The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not y… |
CVE-2023-23549 | Low | 2.7 | 2023-11-15 | Improper Input Validation in Checkmk <2.2.0p15, <2.1.0p37, <=2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long ho… |
CVE-2023-43588 | Low | 3.5 | 2023-11-15 | Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network access. |
CVE-2023-39206 | Low | 3.7 | 2023-11-14 | Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access. |
CVE-2023-39202 | Low | 3.1 | 2023-11-14 | Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via local access. |
CVE-2023-47641 | Low | 3.4 | 2023-11-14 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the incons… |
CVE-2023-47126 | Low | 3.7 | 2023-11-14 | TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions the login screen of the standalone install too… |
CVE-2023-38411 | Low | 3.9 | 2023-11-14 | Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user to potentially enable escalation of pr… |
CVE-2023-28723 | Low | 3.3 | 2023-11-14 | Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentia… |
CVE-2023-28404 | Low | 3.8 | 2023-11-14 | Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authenticated user to poten… |
CVE-2023-22329 | Low | 2.6 | 2023-11-14 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacen… |
CVE-2023-22313 | Low | 2.3 | 2023-11-14 | Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclos… |
CVE-2023-20526 | Low | 1.9 | 2023-11-14 | Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially lead… |
CVE-2023-20521 | Low | 3.3 | 2023-11-14 | TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading t… |
CVE-2023-20519 | Low | 3.3 | 2023-11-14 | A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent res… |
CVE-2022-46647 | Low | 2.2 | 2023-11-14 | Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to potentially enable information disclosure vi… |
CVE-2022-46646 | Low | 2.2 | 2023-11-14 | Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated user to potentially enable information dis… |
CVE-2022-46301 | Low | 1.9 | 2023-11-14 | Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access. |
CVE-2022-46299 | Low | 3.3 | 2023-11-14 | Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local acce… |