Low-severity CVEs (page 73)
Page 73 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2925 | Low | 2.4 | 2023-05-27 | A vulnerability, which was classified as problematic, was found in Webkul krayin crm 1.2.4. This affects an unknown part of the file /admin/contacts/organizati… |
CVE-2023-2922 | Low | 3.5 | 2023-05-27 | A vulnerability classified as problematic has been found in SourceCodester Comment System 1.0. Affected is an unknown function of the file index.php of the com… |
CVE-2023-33184 | Low | 3.5 | 2023-05-27 | Nextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that… |
CVE-2023-33194 | Low | 3.7 | 2023-05-26 | Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message… |
CVE-2023-28322 | Low | 3.7 | 2023-05-26 | An information disclosure vulnerability exists in curl <v8.1.0 when doing HTTP(S) transfers, libcurl might erroneously use the read callback (`CURLOPT_READFUNC… |
CVE-2023-31225 | Low | 3.3 | 2023-05-26 | The Gallery app has the risk of hijacking attacks. Successful exploitation of this vulnerability may cause download failures and affect product availability. |
CVE-2023-31124 | Low | 3.7 | 2023-05-25 | c-ares is an asynchronous resolver library. When cross-compiling c-ares and using the autotools build system, CARES_RANDOM_FILE will not be set, as seen when c… |
CVE-2023-2900 | Low | 3.7 | 2023-05-25 | A vulnerability was found in NFine Rapid Development Platform 20230511. It has been classified as problematic. Affected is an unknown function of the file /Log… |
CVE-2023-30851 | Low | 2.6 | 2023-05-25 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to… |
CVE-2023-2871 | Low | 3.3 | 2023-05-24 | A vulnerability was found in FabulaTech USB for Remote Desktop 6.1.0.0. It has been rated as problematic. Affected by this issue is the function 0x220448/0x220… |
CVE-2023-2870 | Low | 3.3 | 2023-05-24 | A vulnerability was found in EnTech Monitor Asset Manager 2.9. It has been declared as problematic. Affected by this vulnerability is the function 0x80002014 o… |
CVE-2023-33947 | Low | 2.7 | 2023-05-24 | The Object module in Liferay Portal 7.4.3.4 through 7.4.3.60, and Liferay DXP 7.4 before update 61 does not segment object definition by virtual instance in se… |
CVE-2023-33946 | Low | 2.7 | 2023-05-24 | The Object module in Liferay Portal 7.4.3.4 through 7.4.3.48, and Liferay DXP 7.4 before update 49 does properly isolate objects in difference virtual instance… |
CVE-2023-2864 | Low | 3.5 | 2023-05-24 | A vulnerability was found in SourceCodester Online Jewelry Store 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the… |
CVE-2023-2863 | Low | 2.3 | 2023-05-24 | A vulnerability has been found in Simple Design Daily Journal 1.012.GP.B on Android and classified as problematic. Affected by this vulnerability is an unknown… |
CVE-2023-2862 | Low | 3.5 | 2023-05-24 | A vulnerability, which was classified as problematic, was found in SiteServer CMS up to 7.2.1. Affected is an unknown function of the file /api/stl/actions/sea… |
CVE-2023-2826 | Low | 3.5 | 2023-05-21 | A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file… |
CVE-2023-2824 | Low | 3.5 | 2023-05-20 | A vulnerability was found in SourceCodester Dental Clinic Appointment Reservation System 1.0. It has been rated as problematic. Affected by this issue is some… |
CVE-2023-32677 | Low | 3.1 | 2023-05-19 | Zulip is an open-source team collaboration tool with unique topic-based threading. Zulip administrators can configure Zulip to limit who can add users to strea… |
CVE-2023-32675 | Low | 3.7 | 2023-05-19 | Vyper is a pythonic Smart Contract Language for the ethereum virtual machine. In contracts with more than one regular nonpayable function, it is possible to se… |
CVE-2023-2814 | Low | 3.5 | 2023-05-19 | A vulnerability classified as problematic has been found in SourceCodester Class Scheduling System 1.0. Affected is an unknown function of the file /admin/save… |
CVE-2022-35798 | Low | 3.3 | 2023-05-18 | Azure Arc Jumpstart Information Disclosure Vulnerability |
CVE-2023-32097 | Low | 3.1 | 2023-05-18 | Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key… |
CVE-2023-32096 | Low | 3.1 | 2023-05-18 | Compiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key… |
CVE-2023-0965 | Low | 3.1 | 2023-05-18 | Compiler removal of buffer clearing in sli_cryptoacc_transparent_key_agreement in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material d… |
CVE-2023-2790 | Low | 2.3 | 2023-05-18 | A vulnerability classified as problematic has been found in TOTOLINK N200RE 9.3.5u.6255_B20211224. Affected is an unknown function of the file /squashfs-root/e… |
CVE-2023-2789 | Low | 3.5 | 2023-05-18 | A vulnerability was found in GNU cflow 1.7. It has been rated as problematic. This issue affects the function func_body/parse_variable_declaration of the file… |
CVE-2023-28369 | Low | 3.3 | 2023-05-18 | Brother iPrint&Scan V6.11.2 and earlier contains an improper access control vulnerability. This vulnerability may be exploited by the other app installed on th… |
CVE-2023-31135 | Low | 3.3 | 2023-05-17 | Dgraph is an open source distributed GraphQL database. Existing Dgraph audit logs are vulnerable to brute force attacks due to nonce collisions. The first 12 b… |
CVE-2023-2768 | Low | 3.5 | 2023-05-17 | A vulnerability was found in Sucms 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file admin_ads.php?action… |
CVE-2023-2608 | Low | 3.1 | 2023-05-17 | The Multiple Page Generator Plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to time-based SQL Injection via the orderby and order para… |
CVE-2022-42336 | Low | 3.3 | 2023-05-17 | Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting o… |
CVE-2023-32994 | Low | 3.7 | 2023-05-16 | Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the configur… |
CVE-2023-2740 | Low | 3.5 | 2023-05-16 | A vulnerability, which was classified as problematic, has been found in SourceCodester Guest Management System 1.0. Affected by this issue is some unknown func… |
CVE-2023-20726 | Low | 3.3 | 2023-05-15 | In mnld, there is a possible leak of GPS location due to a missing permission check. This could lead to local information disclosure with no additional executi… |
CVE-2023-2692 | Low | 3.5 | 2023-05-14 | A vulnerability has been found in SourceCodester ICT Laboratory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unkno… |
CVE-2023-2691 | Low | 3.5 | 2023-05-14 | A vulnerability, which was classified as problematic, was found in SourceCodester Personnel Property Equipment System 1.0. Affected is an unknown function of t… |
CVE-2023-2678 | Low | 3.5 | 2023-05-12 | A vulnerability has been found in SourceCodester File Tracker Manager System 1.0 and classified as problematic. This vulnerability affects unknown code of the… |
CVE-2023-2671 | Low | 3.5 | 2023-05-12 | A vulnerability was found in SourceCodester Lost and Found Information System 1.0. It has been rated as problematic. This issue affects some unknown processing… |
CVE-2023-2667 | Low | 3.5 | 2023-05-12 | A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as problematic. Affected by this vulnerability is an unkn… |
CVE-2023-2664 | Low | 2.9 | 2023-05-11 | In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow. |
CVE-2023-2663 | Low | 2.9 | 2023-05-11 | In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. |
CVE-2023-2662 | Low | 2.9 | 2023-05-11 | In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero. |
CVE-2023-32082 | Low | 3.1 | 2023-05-11 | etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key na… |
CVE-2023-2657 | Low | 3.5 | 2023-05-11 | A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functi… |
CVE-2023-0859 | Low | 2.2 | 2023-05-11 | Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Se… |
CVE-2023-0858 | Low | 3.1 | 2023-05-11 | Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to… |
CVE-2023-23910 | Low | 3.9 | 2023-05-10 | Out-of-bounds write for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to poten… |
CVE-2023-23909 | Low | 2.8 | 2023-05-10 | Out-of-bounds read for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to potent… |
CVE-2023-22447 | Low | 2.0 | 2023-05-10 | Insertion of sensitive information into log file in the Open CAS software for Linux maintained by Intel before version 22.6.2 may allow a privileged user to po… |
CVE-2022-42878 | Low | 2.8 | 2023-05-10 | Null pointer dereference for some Intel(R) Trace Analyzer and Collector software before version 2021.8.0 published Dec 2022 may allow an authenticated user to… |
CVE-2022-41808 | Low | 3.3 | 2023-05-10 | Improper buffer restriction in software for the Intel QAT Driver for Linux before version 1.7.l.4.12 may allow an authenticated user to potentially enable deni… |
CVE-2022-41621 | Low | 3.3 | 2023-05-10 | Improper access control in some Intel(R) QAT drivers for Windows before version 1.9.0 may allow an authenticated user to potentially enable information disclos… |
CVE-2022-40974 | Low | 1.8 | 2023-05-10 | Incomplete cleanup in the Intel(R) IPP Cryptography software before version 2021.6 may allow a privileged user to potentially enable information disclosure via… |
CVE-2022-32577 | Low | 3.4 | 2023-05-10 | Improper input validation in BIOS Firmware for some Intel(R) NUC Kits before version PY0081 may allow a privileged user to potentially enable information discl… |
CVE-2022-27856 | Low | 3.4 | 2023-05-10 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Atlas Gondal Export All URLs plugin <= 4.1 versions. |
CVE-2022-36330 | Low | 1.9 | 2023-05-10 | A buffer overflow vulnerability was discovered on firmware version validation that could lead to an unauthenticated remote code execution in Western Digital My… |
CVE-2021-46762 | Low | 3.9 | 2023-05-09 | Insufficient input validation in the SMU may allow an attacker to corrupt SMU SRAM potentially leading to a loss of integrity or denial of service. |
CVE-2023-29333 | Low | 3.3 | 2023-05-09 | Microsoft Access Denial of Service Vulnerability |
CVE-2023-31136 | Low | 3.7 | 2023-05-09 | PostgresNIO is a Swift client for PostgreSQL. Any user of PostgresNIO prior to version 1.14.2 connecting to servers with TLS enabled is vulnerable to a man-in-… |
CVE-2023-31975 | Low | 3.3 | 2023-05-09 | yasm v1.3.0 was discovered to contain a memory leak via the function yasm_intnum_copy at /libyasm/intnum.c. Note: Multiple third parties dispute this as a bug… |
CVE-2023-30985 | Low | 3.3 | 2023-05-09 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applica… |
CVE-2023-29128 | Low | 3.8 | 2023-05-09 | A vulnerability has been identified in SIMATIC Cloud Connect 7 CC712 (All versions >= V2.0 < V2.1), SIMATIC Cloud Connect 7 CC716 (All versions >= V2.0 < V2.1)… |
CVE-2023-27410 | Low | 2.7 | 2023-05-09 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A heap-based buffer overflow vulnerability was found in the `edgebox_web_app` bi… |
CVE-2023-27409 | Low | 2.5 | 2023-05-09 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found in the `deviceinfo` binary via the `mac… |
CVE-2023-27408 | Low | 3.3 | 2023-05-09 | A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The `i2c` mutex file is created with the permissions bits of `-rw-rw-rw-`. This… |
CVE-2023-2590 | Low | 3.5 | 2023-05-09 | Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9. |
CVE-2023-32112 | Low | 2.8 | 2023-05-09 | Vendor Master Hierarchy - versions SAP_APPL 500, SAP_APPL 600, SAP_APPL 602, SAP_APPL 603, SAP_APPL 604, SAP_APPL 605, SAP_APPL 606, SAP_APPL 616, SAP_APPL 617… |
CVE-2023-29092 | Low | 3.1 | 2023-05-09 | An issue was discovered in Exynos Mobile Processor and Modem for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, and Exynos 1080. Binding of a wrong resource… |
CVE-2023-28764 | Low | 3.7 | 2023-05-09 | SAP BusinessObjects Platform - versions 420, 430, Information design tool transmits sensitive information as cleartext in the binaries over the network. This c… |
CVE-2023-22813 | Low | 3.3 | 2023-05-08 | A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile A… |
CVE-2023-28194 | Low | 3.3 | 2023-05-08 | The issue was addressed with improved checks. This issue is fixed in iOS 16.4 and iPadOS 16.4. An app may be able to unexpectedly create a bookmark on the Home… |
CVE-2023-27928 | Low | 3.3 | 2023-05-08 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15… |
CVE-2023-23543 | Low | 3.6 | 2023-05-08 | The issue was addressed with additional restrictions on the observability of app states. This issue is fixed in macOS Ventura 13.3, iOS 15.7.4 and iPadOS 15.7… |
CVE-2023-23541 | Low | 3.3 | 2023-05-08 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.4 and iPadOS 16… |
CVE-2023-23523 | Low | 3.3 | 2023-05-08 | A logic issue was addressed with improved restrictions. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4. Photos belonging to the Hidden Pho… |
CVE-2023-30844 | Low | 3.0 | 2023-05-08 | Mutagen provides real-time file synchronization and flexible network forwarding for developers. Prior to versions 0.16.6 and 0.17.1 in `mutagen` and prior to v… |
CVE-2023-2565 | Low | 3.5 | 2023-05-07 | A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown… |
CVE-2023-2560 | Low | 3.5 | 2023-05-06 | A vulnerability was found in jja8 NewBingGoGo up to 2023.5.5.2. It has been rated as problematic. This issue affects some unknown processing. The manipulation… |
CVE-2017-20183 | Low | 3.5 | 2023-05-05 | A vulnerability was found in External Media without Import Plugin up to 1.0.0 on WordPress. It has been declared as problematic. This vulnerability affects the… |
CVE-2023-31413 | Low | 3.3 | 2023-05-04 | Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to b… |
CVE-2023-2521 | Low | 3.5 | 2023-05-04 | A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of t… |
CVE-2022-4376 | Low | 3.1 | 2023-05-03 | An issue has been discovered in GitLab affecting all versions before 15.9.6, all versions starting from 15.10 before 15.10.5, all versions starting from 15.11… |
CVE-2023-27892 | Low | 3.8 | 2023-05-02 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_con… |
CVE-2023-2477 | Low | 3.5 | 2023-05-02 | A vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability is the function tagLoad of the file Cx.p… |
CVE-2023-2476 | Low | 3.5 | 2023-05-02 | A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement… |
CVE-2023-2475 | Low | 3.5 | 2023-05-02 | A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Mes… |
CVE-2014-125100 | Low | 3.5 | 2023-05-02 | A vulnerability classified as problematic was found in BestWebSoft Job Board Plugin 1.0.0 on WordPress. This vulnerability affects unknown code. The manipulati… |
CVE-2013-10026 | Low | 3.5 | 2023-05-02 | A vulnerability, which was classified as problematic, has been found in Mail Subscribe List Plugin up to 2.0.10 on WordPress. This issue affects some unknown p… |
CVE-2023-2197 | Low | 2.5 | 2023-05-01 | HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CB… |
CVE-2018-25085 | Low | 2.4 | 2023-05-01 | A vulnerability classified as problematic was found in Responsive Menus 7.x-1.x-dev on Drupal. Affected by this vulnerability is the function responsive_menus_… |
CVE-2015-10104 | Low | 3.5 | 2023-04-30 | A vulnerability, which was classified as problematic, has been found in Icons for Features Plugin 1.0.0 on WordPress. Affected by this issue is some unknown fu… |
CVE-2023-2425 | Low | 2.4 | 2023-04-29 | A vulnerability was found in SourceCodester Simple Student Information System 1.0. It has been classified as problematic. This affects an unknown part of the f… |
CVE-2023-2421 | Low | 3.5 | 2023-04-29 | A vulnerability classified as problematic has been found in Control iD RHiD 23.3.19.0. Affected is an unknown function of the file /v2/#/add/department. The ma… |
CVE-2023-2418 | Low | 3.1 | 2023-04-29 | A vulnerability was found in Konga 2.8.3 on Kong. It has been classified as problematic. This affects an unknown part of the component Login API. The manipulat… |
CVE-2023-2397 | Low | 2.4 | 2023-04-28 | A vulnerability, which was classified as problematic, has been found in SourceCodester Simple Mobile Comparison Website 1.0. This issue affects some unknown pr… |
CVE-2023-30857 | Low | 3.7 | 2023-04-28 | @aedart/support is the support package for Ion, a monorepo for JavaScript/TypeScript packages. Prior to version `0.6.1`, there is a possible prototype pollutio… |
CVE-2023-2394 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. Affected by this issue is some unknown functionality of the compo… |
CVE-2023-2393 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of… |
CVE-2023-2392 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. Affected is an unknown function of the file scgi-bin/platfor… |