Low-severity CVEs (page 72)
Page 72 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34110 | Low | 2.7 | 2023-06-22 | Flask-AppBuilder is an application development framework, built on top of Flask. Prior to version 4.3.2, an authenticated malicious actor with Admin privileges… |
CVE-2023-28016 | Low | 3.1 | 2023-06-22 | Host Header Injection vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to supply invalid input to cause the OSD Ba… |
CVE-2023-23343 | Low | 2.4 | 2023-06-22 | A clickjacking vulnerability in the HCL BigFix OSD Bare Metal Server version 311.12 or lower allows attacker to use transparent or opaque layers to trick a use… |
CVE-2023-25500 | Low | 3.5 | 2023-06-22 | Possible information disclosure in Vaadin 10.0.0 to 10.0.23, 11.0.0 to 14.10.1, 15.0.0 to 22.0.28, 23.0.0 to 23.3.13, 24.0.0 to 24.0.6, 24.1.0.alpha1 to 24.1.0… |
CVE-2023-0969 | Low | 3.5 | 2023-06-21 | A vulnerability in SiLabs Z/IP Gateway 7.18.01 and earlier allows an authenticated attacker within Z-Wave range to manipulate an array pointer to disclose the… |
CVE-2023-2400 | Low | 2.7 | 2023-06-20 | Improper deletion of resource in the user management feature in Devolutions Server 2023.1.8 and earlier allows an administrator to view users vaults of delete… |
CVE-2023-26429 | Low | 3.5 | 2023-06-20 | Control characters were not removed when exporting user feedback content. This allowed attackers to include unexpected content via user feedback and potentiall… |
CVE-2023-26427 | Low | 3.2 | 2023-06-20 | Default permissions for a properties file were too permissive. Local system users could read potentially sensitive information. We updated the default permissi… |
CVE-2022-48506 | Low | 2.4 | 2023-06-19 | A flawed pseudorandom number generator in Dominion Voting Systems ImageCast Precinct (ICP and ICP2) and ImageCast Evolution (ICE) scanners allows anyone to det… |
CVE-2023-3318 | Low | 3.5 | 2023-06-19 | A vulnerability was found in SourceCodester Resort Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown fun… |
CVE-2023-34414 | Low | 3.1 | 2023-06-19 | The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks tha… |
CVE-2023-3311 | Low | 2.4 | 2023-06-18 | A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file… |
CVE-2023-3309 | Low | 3.5 | 2023-06-18 | A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2023-25185 | Low | 3.8 | 2023-06-16 | An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. A mobile network solution internal fault was found in Nokia Single RAN software… |
CVE-2023-2797 | Low | 3.1 | 2023-06-16 | Mattermost fails to sanitize code permalinks, allowing an attacker to preview code from private repositories by posting a specially crafted permalink on a chan… |
CVE-2023-2431 | Low | 3.4 | 2023-06-16 | A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but spe… |
CVE-2023-3291 | Low | 3.3 | 2023-06-16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2. |
CVE-2023-34242 | Low | 3.4 | 2023-06-15 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to version 1.13.4, when Gateway API is enabled in Cilium, the… |
CVE-2023-2747 | Low | 3.1 | 2023-06-15 | The initialization vector (IV) used by the secure engine (SE) for encrypting data stored in the SE flash memory is uninitialized. |
CVE-2023-29293 | Low | 2.7 | 2023-06-15 | Adobe Commerce versions 2.4.6 (and earlier), 2.4.5-p2 (and earlier) and 2.4.4-p3 (and earlier) are affected by an Improper Input Validation vulnerability that… |
CVE-2023-32024 | Low | 3.0 | 2023-06-14 | Microsoft Power Apps Spoofing Vulnerability |
CVE-2023-3040 | Low | 3.7 | 2023-06-14 | A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access b… |
CVE-2023-3241 | Low | 3.5 | 2023-06-14 | A vulnerability was found in OTCMS up to 6.62 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/read.php?m… |
CVE-2023-3240 | Low | 3.5 | 2023-06-14 | A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file usersN… |
CVE-2023-3239 | Low | 3.5 | 2023-06-14 | A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQr… |
CVE-2023-3231 | Low | 3.1 | 2023-06-14 | A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler… |
CVE-2023-3189 | Low | 3.5 | 2023-06-14 | A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /pays… |
CVE-2023-32301 | Low | 3.1 | 2023-06-13 | Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branche… |
CVE-2023-31142 | Low | 2.0 | 2023-06-13 | Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branche… |
CVE-2023-28602 | Low | 2.8 | 2023-06-13 | Zoom for Windows clients prior to 5.13.5 contain an improper verification of cryptographic signature vulnerability. A malicious user may potentially downgrade… |
CVE-2023-28303 | Low | 3.3 | 2023-06-13 | Windows Snipping Tool Information Disclosure Vulnerability |
CVE-2023-20867 | Low | 3.9 | 2023-06-13 | A fully compromised ESXi host can force VMware Tools to fail to authenticate host-to-guest operations, impacting the confidentiality and integrity of the guest… |
CVE-2023-33122 | Low | 3.3 | 2023-06-13 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V… |
CVE-2023-33121 | Low | 3.3 | 2023-06-13 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V… |
CVE-2023-28829 | Low | 3.9 | 2023-06-13 | A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions… |
CVE-2023-26207 | Low | 3.3 | 2023-06-13 | An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7… |
CVE-2023-26204 | Low | 3.7 | 2023-06-13 | A plaintext storage of a password vulnerability [CWE-256] in FortiSIEM 6.7 all versions, 6.6 all versions, 6.5 all versions, 6.4 all versions, 6.3 all versions… |
CVE-2023-2876 | Low | 3.1 | 2023-06-13 | Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware mod… |
CVE-2023-32114 | Low | 2.7 | 2023-06-13 | SAP NetWeaver (Change and Transport System) - versions 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an authenticated user with admin privilege… |
CVE-2015-10118 | Low | 3.5 | 2023-06-12 | A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affects the function CopyProtect_options_pa… |
CVE-2023-32312 | Low | 3.7 | 2023-06-09 | UmbracoIdentityExtensions is an Umbraco add-on package that enables easy extensibility points for ASP.Net Identity integration. In affected versions client sec… |
CVE-2023-3184 | Low | 2.4 | 2023-06-09 | A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown funct… |
CVE-2023-3183 | Low | 3.5 | 2023-06-09 | A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown… |
CVE-2023-0342 | Low | 3.1 | 2023-06-09 | MongoDB Ops Manager Diagnostics Archive may not redact sensitive PEM key file password app settings. Archives do not include the PEM files themselves. This iss… |
CVE-2023-2897 | Low | 3.7 | 2023-06-09 | The Brizy Page Builder plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.4.18. This is due to an implicit trust of… |
CVE-2023-2599 | Low | 3.1 | 2023-06-09 | The Active Directory Integration plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order… |
CVE-2023-3165 | Low | 3.5 | 2023-06-08 | A vulnerability was found in SourceCodester Life Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unk… |
CVE-2023-3163 | Low | 3.5 | 2023-06-08 | A vulnerability was found in y_project RuoYi up to 4.7.7. It has been classified as problematic. Affected is the function filterKeyword. The manipulation of th… |
CVE-2023-33847 | Low | 3.7 | 2023-06-08 | IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 does not set the secure attribute on authorization toke… |
CVE-2023-33849 | Low | 3.7 | 2023-06-07 | IBM TXSeries for Multiplatforms 8.1, 8.2, 9.1, CICS TX Standard, 11.1, CICS TX Advanced 10.1, and 11.1 could transmit sensitive information in query parameters… |
CVE-2023-29168 | Low | 3.7 | 2023-06-07 | The local Vuforia web application does not support HTTPS, and federated credentials are passed via basic authentication. |
CVE-2023-24476 | Low | 1.8 | 2023-06-07 | An attacker with local access to the machine could record the traffic, which could allow them to resend requests without the server authenticating that the… |
CVE-2023-2013 | Low | 2.6 | 2023-06-07 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 1.2 before 15.10.8, all versions starting from 15.11 before 15.11.7, all vers… |
CVE-2023-1825 | Low | 3.1 | 2023-06-07 | An issue has been discovered in GitLab EE affecting all versions starting from 15.7 before 15.10.8, all versions starting from 15.11 before 15.11.7, all versio… |
CVE-2023-0508 | Low | 3.1 | 2023-06-07 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.4 before 15.10.8, all versions starting from 15.11 before 15.11.7, all ver… |
CVE-2023-3144 | Low | 3.5 | 2023-06-07 | A vulnerability classified as problematic was found in SourceCodester Online Discussion Forum Site 1.0. Affected by this vulnerability is an unknown functional… |
CVE-2023-3143 | Low | 3.5 | 2023-06-07 | A vulnerability classified as problematic has been found in SourceCodester Online Discussion Forum Site 1.0. Affected is an unknown function of the file admin\… |
CVE-2023-2961 | Low | 3.3 | 2023-06-06 | A segmentation fault flaw was found in the Advancecomp package. This may lead to decreased availability. |
CVE-2023-2602 | Low | 3.3 | 2023-06-06 | A vulnerability was found in the pthread_create() function in libcap. This issue may allow a malicious actor to use cause __real_pthread_create() to return an… |
CVE-2023-33957 | Low | 2.6 | 2023-06-06 | notation is a CLI tool to sign and verify OCI artifacts and container images. An attacker who has compromised a registry and added a high number of signatures… |
CVE-2023-32683 | Low | 3.5 | 2023-06-06 | Synapse is a Matrix protocol homeserver written in Python with the Twisted framework. A discovered oEmbed or image URL can bypass the `url_preview_url_blacklis… |
CVE-2023-3121 | Low | 3.5 | 2023-06-06 | A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic. This vulnerability affects unknown code of the f… |
CVE-2018-25087 | Low | 3.5 | 2023-06-06 | A vulnerability classified as problematic was found in Arborator Server. This vulnerability affects the function start of the file project.cgi. The manipulatio… |
CVE-2017-20185 | Low | 3.5 | 2023-06-06 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Fuzzy SWMP. It has been rated as problematic. This issue affects some unknown processing of the fi… |
CVE-2015-10117 | Low | 3.5 | 2023-06-06 | A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPress. Affected is an unknown function. Th… |
CVE-2015-10113 | Low | 3.5 | 2023-06-05 | A vulnerability classified as problematic was found in WooFramework Tweaks Plugin up to 1.0.1 on WordPress. Affected by this vulnerability is the function admi… |
CVE-2023-32334 | Low | 3.7 | 2023-06-05 | IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 and IBM Maximo Application Suite 8.8.0 stores sensitive information in URL parameters. This may lead to informatio… |
CVE-2014-125105 | Low | 2.4 | 2023-06-05 | A vulnerability was found in Broken Link Checker Plugin up to 1.10.1 on WordPress. It has been declared as problematic. Affected by this vulnerability is the f… |
CVE-2013-10028 | Low | 3.5 | 2023-06-04 | A vulnerability was found in EELV Newsletter Plugin 2.x on WordPress. It has been rated as problematic. Affected by this issue is the function style_newsletter… |
CVE-2023-3085 | Low | 3.5 | 2023-06-03 | A vulnerability, which was classified as problematic, has been found in X-WRT luci up to 22.10_b202303061504. This issue affects the function run_action of the… |
CVE-2023-3044 | Low | 3.3 | 2023-06-02 | An excessively large PDF page size (found in fuzz testing, unlikely in normal PDF files) can result in a divide-by-zero in Xpdf's text extraction code. Thi… |
CVE-2023-2687 | Low | 2.9 | 2023-06-02 | Buffer overflow in Platform CLI component in Silicon Labs Gecko SDK v4.2.1 and earlier allows user to overwrite limited structures on the heap. |
CVE-2023-3060 | Low | 3.5 | 2023-06-02 | A vulnerability has been found in code-projects Agro-School Management System 1.0 and classified as problematic. This vulnerability affects the function doAddQ… |
CVE-2023-3058 | Low | 3.5 | 2023-06-02 | A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile… |
CVE-2016-15032 | Low | 3.5 | 2023-06-02 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic has been found in mback2k mh_httpbl Extension up to 1.1.7 on TYPO3. This affects the… |
CVE-2015-10110 | Low | 3.5 | 2023-06-02 | A vulnerability classified as problematic was found in ruddernation TinyChat Room Spy Plugin up to 1.2.8 on WordPress. This vulnerability affects the function… |
CVE-2023-34339 | Low | 3.3 | 2023-06-01 | In JetBrains Ktor before 2.3.1 headers containing authentication data could be added to the exception's message |
CVE-2023-3035 | Low | 3.5 | 2023-06-01 | A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. Affected by this vulnerability is an unkn… |
CVE-2023-32181 | Low | 3.3 | 2023-06-01 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf allows for DoS via malformed configuration files Th… |
CVE-2023-22652 | Low | 3.3 | 2023-06-01 | A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in openSUSE libeconf leads to DoS via malformed config files. This issue… |
CVE-2018-25086 | Low | 3.5 | 2023-06-01 | A vulnerability was found in sea75300 FanPress CM up to 3.6.3. It has been classified as problematic. This affects the function getArticlesPreview of the file… |
CVE-2010-10010 | Low | 3.5 | 2023-06-01 | A vulnerability classified as problematic has been found in Stars Alliance PsychoStats up to 3.2.2a. This affects an unknown part of the file upload/admin/logi… |
CVE-2023-3017 | Low | 2.4 | 2023-05-31 | A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been classified as problematic. This affects an unknown part of the f… |
CVE-2023-2758 | Low | 3.7 | 2023-05-31 | A denial of service vulnerability exists in Contec CONPROSYS HMI System versions 3.5.2 and prior. When there is a time-zone mismatch in certain configuration f… |
CVE-2023-3016 | Low | 3.5 | 2023-05-31 | A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admi… |
CVE-2023-3014 | Low | 3.5 | 2023-05-31 | A vulnerability, which was classified as problematic, was found in BeipyVideoResolution up to 2.6. Affected is an unknown function of the file admin/admincore… |
CVE-2023-3005 | Low | 3.5 | 2023-05-31 | A vulnerability, which was classified as problematic, was found in SourceCodester Local Service Search Engine Management System 1.0. This affects an unknown pa… |
CVE-2023-2434 | Low | 3.8 | 2023-05-31 | The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'reset' function in versions up to, a… |
CVE-2015-10107 | Low | 3.5 | 2023-05-31 | A vulnerability was found in Simplr Registration Form Plus+ Plugin up to 2.3.4 on WordPress and classified as problematic. This issue affects some unknown proc… |
CVE-2014-125103 | Low | 2.4 | 2023-05-31 | A vulnerability was found in BestWebSoft Twitter Plugin up to 1.3.2 on WordPress. It has been declared as problematic. Affected by this vulnerability is the fu… |
CVE-2023-28351 | Low | 3.3 | 2023-05-31 | An issue was discovered in Faronics Insight 10.0.19045 on Windows. Every keystroke made by any user on a computer with the Student application installed is log… |
CVE-2022-39074 | Low | 3.3 | 2023-05-30 | There is an unauthorized access vulnerability in some ZTE mobile phones. If a malicious application is installed on the phone, it could start a non-public inte… |
CVE-2023-32684 | Low | 2.7 | 2023-05-30 | Lima launches Linux virtual machines, typically on macOS, for running containerd. Prior to version 0.16.0, a virtual machine instance with a malicious disk ima… |
CVE-2023-2981 | Low | 3.5 | 2023-05-30 | A vulnerability, which was classified as problematic, has been found in Abstrium Pydio Cells 4.2.0. This issue affects some unknown processing of the component… |
CVE-2023-2973 | Low | 2.4 | 2023-05-30 | A vulnerability, which was classified as problematic, has been found in SourceCodester Students Online Internship Timesheet Syste 1.0. Affected by this issue i… |
CVE-2023-2117 | Low | 2.7 | 2023-05-30 | The Image Optimizer by 10web WordPress plugin before 1.0.27 does not sanitize the dir parameter when handling the get_subdirs ajax action, allowing a high priv… |
CVE-2023-33183 | Low | 2.6 | 2023-05-30 | Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server i… |
CVE-2023-2970 | Low | 3.5 | 2023-05-30 | A vulnerability classified as problematic was found in MindSpore 2.0.0-alpha/2.0.0-rc1. This vulnerability affects the function JsonHelper::UpdateArray of the… |
CVE-2023-30571 | Low | 3.9 | 2023-05-29 | Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask() call inside archive_write_disk_posix.c changes the umask of the… |
CVE-2021-37845 | Low | 3.7 | 2023-05-29 | An issue was discovered in Citadel through webcit-932. A meddler-in-the-middle attacker can fixate their own session during the cleartext phase before a STARTT… |