Low-severity CVEs (page 71)
Page 71 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22036 | Low | 3.7 | 2023-07-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility). Supported versi… |
CVE-2023-22010 | Low | 2.2 | 2023-07-18 | Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4.3.0.0. Difficult to exploit vulnerabil… |
CVE-2023-22006 | Low | 3.1 | 2023-07-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Networking). Supported ve… |
CVE-2023-21949 | Low | 3.7 | 2023-07-18 | Vulnerability in the Advanced Networking Option component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and 21.3-21.10. Diff… |
CVE-2023-37481 | Low | 2.7 | 2023-07-18 | Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of… |
CVE-2023-37480 | Low | 2.7 | 2023-07-18 | Fides is an open-source privacy engineering platform for managing data privacy requests and privacy regulations. The Fides webserver is vulnerable to a type of… |
CVE-2021-4428 | Low | 2.7 | 2023-07-18 | A vulnerability has been found in what3words Autosuggest Plugin up to 4.0.0 on WordPress and classified as problematic. Affected by this vulnerability is the f… |
CVE-2023-3613 | Low | 3.5 | 2023-07-17 | Mattermost WelcomeBot plugin fails to to validate the membership status when inviting or adding users to channels allowing guest accounts to be added or invite… |
CVE-2023-3590 | Low | 3.1 | 2023-07-17 | Mattermost fails to delete card attachments in Boards, allowing an attacker to access deleted attachments. |
CVE-2023-3587 | Low | 2.7 | 2023-07-17 | Mattermost fails to properly show information in the UI, allowing a system admin to modify a board state allowing any user with a valid sharing link to join th… |
CVE-2023-3584 | Low | 3.1 | 2023-07-17 | Mattermost fails to properly check the authorization of POST /api/v4/teams when passing a team override scheme ID in the request, allowing an authenticated att… |
CVE-2023-3577 | Low | 3.5 | 2023-07-17 | Mattermost fails to properly restrict requests to localhost/intranet during the interactive dialog, which could allow an attacker to perform a limited blind SS… |
CVE-2022-4952 | Low | 3.5 | 2023-07-17 | A vulnerability has been found in OmniSharp csharp-language-server-protocol up to 0.19.6 and classified as problematic. This vulnerability affects the function… |
CVE-2023-35901 | Low | 2.7 | 2023-07-17 | IBM Robotic Process Automation 21.0.0 through 21.0.7.6 and 23.0.0 through 23.0.6 is vulnerable to client side validation bypass which could allow invalid chang… |
CVE-2023-3691 | Low | 3.5 | 2023-07-16 | A vulnerability, which was classified as problematic, was found in layui up to v2.8.0-rc.16. This affects an unknown part of the component HTML Attribute Handl… |
CVE-2023-3685 | Low | 3.5 | 2023-07-16 | A vulnerability was found in Nesote Inout Search Engine AI Edition 1.1. It has been classified as problematic. This affects an unknown part of the file /index… |
CVE-2023-3684 | Low | 3.5 | 2023-07-16 | A vulnerability was found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this issue is some unknown functionality of the file /change… |
CVE-2023-3683 | Low | 3.5 | 2023-07-16 | A vulnerability has been found in LivelyWorks Articart 2.0.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the f… |
CVE-2023-3681 | Low | 3.5 | 2023-07-15 | A vulnerability classified as problematic was found in Campcodes Retro Cellphone Online Store 1.0. This vulnerability affects unknown code of the file /admin/m… |
CVE-2023-36466 | Low | 3.5 | 2023-07-14 | Discourse is an open source discussion platform. When editing a topic, there is a vulnerability that enables a user to bypass the topic title validations for t… |
CVE-2023-37275 | Low | 3.1 | 2023-07-13 | Auto-GPT is an experimental open-source application showcasing the capabilities of the GPT-4 language model. The Auto-GPT command line UI makes heavy use of co… |
CVE-2023-30565 | Low | 3.5 | 2023-07-13 | An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker. |
CVE-2023-3660 | Low | 2.4 | 2023-07-13 | A vulnerability was found in Campcodes Retro Cellphone Online Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of… |
CVE-2023-3659 | Low | 3.5 | 2023-07-13 | A vulnerability has been found in SourceCodester AC Repair and Services System 1.0 and classified as problematic. Affected by this vulnerability is an unknown… |
CVE-2023-3363 | Low | 3.9 | 2023-07-13 | An information disclosure issue in Gitlab CE/EE affecting all versions from 13.6 prior to 15.11.10, all versions from 16.0 prior to 16.0.6, all versions from 1… |
CVE-2023-21262 | Low | 3.1 | 2023-07-13 | In startInput of AudioPolicyInterfaceImpl.cpp, there is a possible way of erroneously displaying the microphone privacy indicator due to a race condition. This… |
CVE-2023-21246 | Low | 3.3 | 2023-07-13 | In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead… |
CVE-2023-37948 | Low | 3.7 | 2023-07-12 | Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle at… |
CVE-2023-38069 | Low | 3.3 | 2023-07-12 | In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases |
CVE-2021-44696 | Low | 3.3 | 2023-07-12 | Adobe Prelude version 22.1.1 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker co… |
CVE-2021-43760 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43759 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2021-43758 | Low | 3.3 | 2023-07-12 | Adobe Media Encoder versions 22.0, 15.4.2 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory… |
CVE-2023-33880 | Low | 3.3 | 2023-07-12 | In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33879 | Low | 3.3 | 2023-07-12 | In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-34117 | Low | 3.3 | 2023-07-11 | Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access. |
CVE-2022-29562 | Low | 3.7 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-1936 | Low | 3.5 | 2023-07-11 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 before 15.11.10, all versions starting from 16.0 before 16.0.6, all vers… |
CVE-2023-3566 | Low | 3.5 | 2023-07-10 | A vulnerability was found in wallabag 2.5.4. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /confi… |
CVE-2023-3564 | Low | 3.5 | 2023-07-10 | A vulnerability was found in GZ Scripts GZ Multi Hotel Booking System 1.8. It has been classified as problematic. Affected is an unknown function of the file /… |
CVE-2023-3563 | Low | 3.5 | 2023-07-10 | A vulnerability was found in GZ Scripts GZ E Learning Platform 1.8 and classified as problematic. This issue affects some unknown processing of the component U… |
CVE-2023-3562 | Low | 3.5 | 2023-07-10 | A vulnerability has been found in GZ Scripts PHP CRM Platform 1.8 and classified as problematic. This vulnerability affects unknown code of the file /index.php… |
CVE-2023-3561 | Low | 3.5 | 2023-07-10 | A vulnerability, which was classified as problematic, was found in GZ Scripts PHP GZ Hotel Booking Script 1.8. This affects an unknown part of the file /load.p… |
CVE-2023-3560 | Low | 3.5 | 2023-07-10 | A vulnerability, which was classified as problematic, has been found in GZ Scripts Ticket Booking Script 1.8. Affected by this issue is some unknown functional… |
CVE-2023-3559 | Low | 3.5 | 2023-07-10 | A vulnerability classified as problematic was found in GZ Scripts PHP GZ Appointment Scheduling Script 1.8. Affected by this vulnerability is an unknown functi… |
CVE-2023-3558 | Low | 3.5 | 2023-07-10 | A vulnerability classified as problematic has been found in GZ Scripts Event Booking Calendar 1.8. Affected is an unknown function of the file /load.php. The m… |
CVE-2023-3557 | Low | 3.5 | 2023-07-10 | A vulnerability was found in GZ Scripts Property Listing Script 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /… |
CVE-2023-3556 | Low | 3.5 | 2023-07-10 | A vulnerability was found in GZ Scripts Car Listing Script PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the file /p… |
CVE-2023-3555 | Low | 3.5 | 2023-07-10 | A vulnerability was found in GZ Scripts PHP Vacation Rental Script 1.8. It has been classified as problematic. This affects an unknown part of the file /previe… |
CVE-2023-3554 | Low | 3.5 | 2023-07-10 | A vulnerability was found in GZ Scripts GZ Forum Script 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the file /pr… |
CVE-2023-3209 | Low | 3.5 | 2023-07-10 | The MStore API WordPress plugin before 3.9.7 does not secure most of its AJAX actions by implementing privilege checks, nonce checks, or a combination of both. |
CVE-2023-34442 | Low | 3.3 | 2023-07-10 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Camel.This issue affects Apache Camel: from 3.X t… |
CVE-2023-28953 | Low | 3.1 | 2023-07-10 | IBM Cognos Analytics on Cloud Pak for Data 4.0 could allow an attacker to make system calls that might compromise the security of the containers due to misconf… |
CVE-2015-10121 | Low | 3.5 | 2023-07-10 | A vulnerability has been found in Beeliked Microsite Plugin up to 1.0.1 on WordPress and classified as problematic. Affected by this vulnerability is the funct… |
CVE-2015-10120 | Low | 3.5 | 2023-07-10 | A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPress. Affected is the function update_opt… |
CVE-2015-10119 | Low | 3.5 | 2023-07-10 | A vulnerability, which was classified as problematic, has been found in View All Posts Page Plugin up to 0.9.0 on WordPress. This issue affects the function ac… |
CVE-2023-37269 | Low | 2.0 | 2023-07-07 | Winter is a free, open-source content management system (CMS) based on the Laravel PHP framework. Users with the `backend.manage_branding` permission can uploa… |
CVE-2023-3544 | Low | 3.5 | 2023-07-07 | A vulnerability was found in GZ Scripts Time Slot Booking Calendar PHP 1.8. It has been declared as problematic. This vulnerability affects unknown code of the… |
CVE-2023-3543 | Low | 3.5 | 2023-07-07 | A vulnerability was found in GZ Scripts Availability Booking Calendar PHP 1.8. It has been classified as problematic. This affects an unknown part of the file… |
CVE-2023-37264 | Low | 3.7 | 2023-07-07 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 0.35.0, pipelines do not validate child UIDs, wh… |
CVE-2023-3542 | Low | 3.5 | 2023-07-07 | A vulnerability was found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /contact.ph… |
CVE-2023-3541 | Low | 3.5 | 2023-07-07 | A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2023-3540 | Low | 3.5 | 2023-07-07 | A vulnerability, which was classified as problematic, was found in SimplePHPscripts NewsLetter Script PHP 2.4. Affected is an unknown function of the file /pre… |
CVE-2023-3539 | Low | 3.5 | 2023-07-07 | A vulnerability, which was classified as problematic, has been found in SimplePHPscripts Simple Forum PHP 2.7. This issue affects some unknown processing of th… |
CVE-2023-3538 | Low | 3.5 | 2023-07-07 | A vulnerability classified as problematic was found in SimplePHPscripts Photo Gallery PHP 2.0. This vulnerability affects unknown code of the file /preview.php… |
CVE-2023-3537 | Low | 3.5 | 2023-07-07 | A vulnerability classified as problematic has been found in SimplePHPscripts News Script PHP Pro 2.4. This affects an unknown part of the file /preview.php of… |
CVE-2023-3536 | Low | 3.5 | 2023-07-07 | A vulnerability was found in SimplePHPscripts Funeral Script PHP 3.1. It has been rated as problematic. Affected by this issue is some unknown functionality of… |
CVE-2023-3535 | Low | 3.5 | 2023-07-07 | A vulnerability was found in SimplePHPscripts FAQ Script PHP 2.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionali… |
CVE-2023-30648 | Low | 3.3 | 2023-07-06 | Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the system. |
CVE-2023-3506 | Low | 3.5 | 2023-07-04 | A vulnerability was found in Active It Zone Active eCommerce CMS 6.5.0. It has been declared as problematic. This vulnerability affects unknown code of the fil… |
CVE-2023-3505 | Low | 3.5 | 2023-07-04 | A vulnerability was found in Onest CRM 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/project/update/2 of the comp… |
CVE-2023-2010 | Low | 3.1 | 2023-07-04 | The Forminator WordPress plugin before 1.24.1 does not use an atomic operation to check whether a user has already voted, and then update that information. Thi… |
CVE-2023-25523 | Low | 3.3 | 2023-07-04 | NVIDIA CUDA toolkit for Linux and Windows contains a vulnerability in the nvdisasm binary file, where an attacker may cause a NULL pointer dereference by pr… |
CVE-2023-34450 | Low | 3.7 | 2023-07-03 | CometBFT is a Byzantine Fault Tolerant (BFT) middleware that takes a state transition machine and replicates it on many machines. An internal modification made… |
CVE-2023-3485 | Low | 3.0 | 2023-06-30 | Insecure defaults in open-source Temporal Server before version 1.20 on all platforms allows an attacker to craft a task token with access to a namespace other… |
CVE-2023-3477 | Low | 3.5 | 2023-06-30 | A vulnerability was found in RocketSoft Rocket LMS 1.7. It has been declared as problematic. This vulnerability affects unknown code of the file /contact/store… |
CVE-2023-3476 | Low | 3.5 | 2023-06-30 | A vulnerability was found in SimplePHPscripts GuestBook Script 2.2. It has been classified as problematic. This affects an unknown part of the file preview.php… |
CVE-2023-3475 | Low | 3.5 | 2023-06-30 | A vulnerability was found in SimplePHPscripts Event Script 2.1 and classified as problematic. Affected by this issue is some unknown functionality of the file… |
CVE-2023-3474 | Low | 3.5 | 2023-06-30 | A vulnerability has been found in SimplePHPscripts Simple Blog 3.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2023-3465 | Low | 3.5 | 2023-06-29 | A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been declared as problematic. Affected by this vulnerability is an unknown func… |
CVE-2023-3464 | Low | 3.5 | 2023-06-29 | A vulnerability was found in SimplePHPscripts Classified Ads Script 1.8. It has been classified as problematic. Affected is an unknown function of the file /pr… |
CVE-2023-30946 | Low | 3.5 | 2023-06-29 | A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have access to and consequently could not s… |
CVE-2022-29147 | Low | 3.1 | 2023-06-29 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-21512 | Low | 2.4 | 2023-06-28 | Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without p… |
CVE-2023-3436 | Low | 3.3 | 2023-06-27 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream. |
CVE-2023-22834 | Low | 2.7 | 2023-06-27 | The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass fo… |
CVE-2023-35930 | Low | 3.7 | 2023-06-26 | SpiceDB is an open source, Google Zanzibar-inspired, database system for creating and managing security-critical application permissions. Any user making a neg… |
CVE-2023-35931 | Low | 3.1 | 2023-06-23 | Shescape is a simple shell escape library for JavaScript. An attacker may be able to get read-only access to environment variables. This bug has been patched i… |
CVE-2023-32417 | Low | 2.4 | 2023-06-23 | This issue was addressed by restricting options offered on a locked device. This issue is fixed in watchOS 9.5. An attacker with physical access to a locked Ap… |
CVE-2023-32394 | Low | 2.4 | 2023-06-23 | The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. A person with physic… |
CVE-2023-32390 | Low | 2.4 | 2023-06-23 | The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. Photos belonging to the Hidden… |
CVE-2023-32386 | Low | 3.3 | 2023-06-23 | A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4… |
CVE-2023-32365 | Low | 2.4 | 2023-06-23 | The issue was addressed with improved checks. This issue is fixed in iOS 15.7.6 and iPadOS 15.7.6, iOS 16.5 and iPadOS 16.5. Shake-to-undo may allow a deleted… |
CVE-2022-42834 | Low | 3.3 | 2023-06-23 | An access issue was addressed with improved access restrictions. This issue is fixed in macOS Monterey 12.6.3, macOS Ventura 13, macOS Big Sur 11.7.3. An app m… |
CVE-2023-3303 | Low | 3.5 | 2023-06-23 | Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9. |
CVE-2023-28064 | Low | 3.5 | 2023-06-23 | Dell BIOS contains an Out-of-bounds Write vulnerability. An unauthenticated physical attacker may potentially exploit this vulnerability, leading to denial of… |
CVE-2023-3382 | Low | 3.5 | 2023-06-23 | A vulnerability, which was classified as problematic, has been found in SourceCodester Game Result Matrix System 1.0. Affected by this issue is some unknown fu… |
CVE-2023-3381 | Low | 3.5 | 2023-06-23 | A vulnerability classified as problematic was found in SourceCodester Online School Fees System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2023-32464 | Low | 2.7 | 2023-06-23 | Dell VxRail, versions prior to 7.0.450, contain an improper certificate validation vulnerability. A high privileged remote attacker may potentially exploit th… |
CVE-2023-32463 | Low | 3.4 | 2023-06-23 | Dell VxRail, version(s) 8.0.100 and earlier contain a denial-of-service vulnerability in the upgrade functionality. A remote unauthenticated attacker could po… |