Low-severity CVEs (page 74)
Page 74 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2391 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This issue affects some unknown processing of the file scgi-bin/platf… |
CVE-2023-2390 | Low | 2.4 | 2023-04-28 | A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. This vulnerability affects unknown code of the file scgi-bin/pla… |
CVE-2023-2389 | Low | 2.4 | 2023-04-28 | A vulnerability, which was classified as problematic, was found in Netgear SRX5308 up to 4.3.5-3. This affects an unknown part of the file scgi-bin/platform.cg… |
CVE-2023-2388 | Low | 2.4 | 2023-04-28 | A vulnerability, which was classified as problematic, has been found in Netgear SRX5308 up to 4.3.5-3. Affected by this issue is some unknown functionality of… |
CVE-2023-2387 | Low | 2.4 | 2023-04-28 | A vulnerability classified as problematic was found in Netgear SRX5308 up to 4.3.5-3. Affected by this vulnerability is an unknown functionality of the file sc… |
CVE-2023-2386 | Low | 2.4 | 2023-04-28 | A vulnerability classified as problematic has been found in Netgear SRX5308 up to 4.3.5-3. Affected is an unknown function of the file scgi-bin/platform.cgi?pa… |
CVE-2023-2385 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been rated as problematic. This issue affects some unknown processing of the file scgi-bin/p… |
CVE-2023-2384 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been declared as problematic. This vulnerability affects unknown code of the file scgi-bin/p… |
CVE-2023-2383 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3. It has been classified as problematic. This affects an unknown part of the file scgi-bin/platform.c… |
CVE-2023-2382 | Low | 2.4 | 2023-04-28 | A vulnerability was found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this issue is some unknown functionality of the file scgi… |
CVE-2023-2381 | Low | 2.4 | 2023-04-28 | A vulnerability has been found in Netgear SRX5308 up to 4.3.5-3 and classified as problematic. Affected by this vulnerability is an unknown functionality of th… |
CVE-2023-2372 | Low | 2.4 | 2023-04-28 | A vulnerability, which was classified as problematic, has been found in SourceCodester Online DJ Management System 1.0. Affected by this issue is some unknown… |
CVE-2023-28820 | Low | 2.0 | 2023-04-28 | Concrete CMS (previously concrete5) before 9.1 is vulnerable to stored XSS in RSS Displayer via the href attribute because the link element input was not sanit… |
CVE-2023-28819 | Low | 3.5 | 2023-04-28 | Concrete CMS (previously concrete5) versions 8.5.12 and below, 9.0.0 through 9.0.2 is vulnerable to Stored XSS in uploaded file and folder names. |
CVE-2023-28473 | Low | 3.3 | 2023-04-28 | Concrete CMS (previously concrete5) versions 8.5.12 and below, and 9.0 through 9.1.3 is vulnerable to possible Auth bypass in the jobs section. |
CVE-2023-30624 | Low | 3.9 | 2023-04-27 | Wasmtime is a standalone runtime for WebAssembly. Prior to versions 6.0.2, 7.0.1, and 8.0.1, Wasmtime's implementation of managing per-instance state, such as… |
CVE-2023-2350 | Low | 3.5 | 2023-04-27 | A vulnerability classified as problematic was found in SourceCodester Service Provider Management System 1.0. Affected by this vulnerability is an unknown func… |
CVE-2023-2349 | Low | 3.5 | 2023-04-27 | A vulnerability classified as problematic has been found in SourceCodester Service Provider Management System 1.0. Affected is an unknown function of the file… |
CVE-2023-2294 | Low | 3.5 | 2023-04-26 | A vulnerability was found in UCMS 1.6.0. It has been classified as problematic. This affects an unknown part of the file saddpost.php of the component Column C… |
CVE-2023-2293 | Low | 2.4 | 2023-04-25 | A vulnerability was found in SourceCodester Purchase Order Management System 1.0. It has been classified as problematic. This affects an unknown part of the fi… |
CVE-2023-25815 | Low | 3.3 | 2023-04-25 | In Git for Windows, the Windows port of Git, no localized messages are shipped with the installer. As a consequence, Git is expected not to localize messages a… |
CVE-2022-23721 | Low | 3.8 | 2023-04-25 | PingID integration for Windows login prior to 2.9 does not handle duplicate usernames, which can lead to a username collision when two people with the same use… |
CVE-2023-28847 | Low | 3.1 | 2023-04-25 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. In Nextcloud Server 24.0.0 prior to 24.0.11 and 25.0.0 prior t… |
CVE-2023-2281 | Low | 3.1 | 2023-04-25 | When archiving a team, Mattermost fails to sanitize the related Websocket event sent to currently connected clients. This allows the clients to see the name, d… |
CVE-2012-10014 | Low | 3.5 | 2023-04-24 | A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress. Affected is the function backend_localization… |
CVE-2012-10013 | Low | 3.5 | 2023-04-24 | A vulnerability was found in Kau-Boy Backend Localization Plugin up to 1.6.1 on WordPress. It has been rated as problematic. This issue affects some unknown pr… |
CVE-2023-30544 | Low | 3.9 | 2023-04-24 | Kiwi TCMS is an open source test management system. In versions of Kiwi TCMS prior to 12.2, users were able to update their email addresses via the `My profile… |
CVE-2023-25511 | Low | 3.3 | 2023-04-22 | NVIDIA CUDA Toolkit for Linux and Windows contains a vulnerability in cuobjdump, where a division-by-zero error may enable a user to cause a crash, which may l… |
CVE-2023-25510 | Low | 3.3 | 2023-04-22 | NVIDIA CUDA Toolkit SDK for Linux and Windows contains a NULL pointer dereference in cuobjdump, where a local user running the tool against a malformed binary… |
CVE-2023-30618 | Low | 3.2 | 2023-04-21 | Kitchen-Terraform provides a set of Test Kitchen plugins which enable the use of Test Kitchen to converge a Terraform configuration and verify the resulting in… |
CVE-2023-2226 | Low | 3.3 | 2023-04-21 | Due to insufficient validation in the PE and OLE parsers in Rapid7's Velociraptor versions earlier than 0.6.8 allows attacker to crash Velociraptor during pars… |
CVE-2023-2220 | Low | 3.5 | 2023-04-21 | A vulnerability was found in Dream Technology mica up to 3.0.5. It has been classified as problematic. Affected is an unknown function of the component Form Ob… |
CVE-2023-2219 | Low | 3.5 | 2023-04-21 | A vulnerability was found in SourceCodester Task Reminder System 1.0 and classified as problematic. This issue affects some unknown processing of the file /cla… |
CVE-2023-2216 | Low | 3.5 | 2023-04-21 | A vulnerability classified as problematic was found in Campcodes Coffee Shop POS System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2023-22846 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vuln… |
CVE-2023-22354 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulner… |
CVE-2023-22321 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerab… |
CVE-2023-22295 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerabili… |
CVE-2023-2112 | Low | 3.6 | 2023-04-20 | Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0. |
CVE-2022-4942 | Low | 3.5 | 2023-04-20 | A vulnerability was found in mportuga eslint-detailed-reporter up to 0.9.0 and classified as problematic. Affected by this issue is the function renderIssue in… |
CVE-2022-38125 | Low | 2.9 | 2023-04-19 | Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Secomea SiteManager (FTP Agent modules) allows Exploiting Trust in Client. |
CVE-2023-28440 | Low | 2.7 | 2023-04-18 | Discourse is an open source platform for community discussion. In affected versions a maliciously crafted request from a Discourse administrator can lead to a… |
CVE-2023-26049 | Low | 2.4 | 2023-04-18 | Jetty is a java based web server and servlet engine. Nonstandard cookie parsing in Jetty may allow an attacker to smuggle cookies within other cookies, or othe… |
CVE-2023-22003 | Low | 3.3 | 2023-04-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported versions that are affected are 10 and 11. Easily exploitable vu… |
CVE-2023-21999 | Low | 3.6 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Pr… |
CVE-2023-21991 | Low | 3.2 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Pr… |
CVE-2023-21988 | Low | 3.8 | 2023-04-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.44 and Pr… |
CVE-2023-21968 | Low | 3.7 | 2023-04-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected… |
CVE-2023-21963 | Low | 2.7 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection Handling). Supported versions that are affected are 5.7.40 and prior… |
CVE-2023-21938 | Low | 3.7 | 2023-04-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected… |
CVE-2023-21937 | Low | 3.7 | 2023-04-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected… |
CVE-2023-21928 | Low | 1.8 | 2023-04-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: IPS repository daemon). The supported version that is affected is 11. Difficult to… |
CVE-2023-2155 | Low | 2.4 | 2023-04-18 | A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of th… |
CVE-2023-2153 | Low | 3.5 | 2023-04-18 | A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality… |
CVE-2023-30540 | Low | 3.5 | 2023-04-17 | Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this informati… |
CVE-2015-10103 | Low | 2.8 | 2023-04-17 | A vulnerability, which was classified as problematic, was found in InternalError503 Forget It up to 1.3. This affects an unknown part of the file js/settings.j… |
CVE-2023-27525 | Low | 3.1 | 2023-04-17 | An authenticated user with Gamma role authorization could have access to metadata information using non trivial methods in Apache Superset up to and including… |
CVE-2023-22687 | Low | 3.7 | 2023-04-16 | Insecure Storage of Sensitive Information vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup plugin <= 1.9.4.0 versions. |
CVE-2015-10101 | Low | 3.5 | 2023-04-15 | A vulnerability classified as problematic was found in Google Analytics Top Content Widget Plugin up to 1.5.6 on WordPress. Affected by this vulnerability is a… |
CVE-2023-29203 | Low | 3.7 | 2023-04-15 | XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable from sub… |
CVE-2023-2100 | Low | 3.5 | 2023-04-15 | A vulnerability classified as problematic was found in SourceCodester Vehicle Service Management System 1.0. This vulnerability affects unknown code of the fil… |
CVE-2023-2099 | Low | 3.5 | 2023-04-15 | A vulnerability classified as problematic has been found in SourceCodester Vehicle Service Management System 1.0. This affects an unknown part of the file /cla… |
CVE-2023-2098 | Low | 3.5 | 2023-04-15 | A vulnerability was found in SourceCodester Vehicle Service Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown fun… |
CVE-2023-29383 | Low | 3.3 | 2023-04-14 | In Shadow 4.13, it is possible to inject control characters into fields provided to the SUID program chfn (change finger). Although it is not possible to explo… |
CVE-2023-2077 | Low | 3.5 | 2023-04-14 | A vulnerability, which was classified as problematic, has been found in Campcodes Online Traffic Offense Management System 1.0. This issue affects some unknown… |
CVE-2023-2076 | Low | 3.5 | 2023-04-14 | A vulnerability classified as problematic was found in Campcodes Online Traffic Offense Management System 1.0. This vulnerability affects unknown code of the f… |
CVE-2023-2058 | Low | 2.4 | 2023-04-14 | A vulnerability was found in EyouCms up to 1.6.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2023-2057 | Low | 2.4 | 2023-04-14 | A vulnerability was found in EyouCms 1.5.4. It has been classified as problematic. Affected is an unknown function of the file login.php?m=admin&c=Arctype&a=ed… |
CVE-2023-2055 | Low | 3.5 | 2023-04-14 | A vulnerability has been found in Campcodes Advanced Online Voting System 1.0 and classified as problematic. This vulnerability affects unknown code of the fil… |
CVE-2023-2044 | Low | 3.5 | 2023-04-14 | A vulnerability has been found in Control iD iDSecure 4.7.29.1 and classified as problematic. This vulnerability affects unknown code of the component Disposit… |
CVE-2023-27703 | Low | 3.3 | 2023-04-12 | The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface. |
CVE-2023-28301 | Low | 3.7 | 2023-04-11 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
CVE-2023-22808 | Low | 3.3 | 2023-04-11 | An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost… |
CVE-2022-46396 | Low | 3.3 | 2023-04-11 | An issue was discovered in the Arm Mali Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount outs… |
CVE-2020-9009 | Low | 3.7 | 2023-04-11 | The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the database (via action=shipnotify) becaus… |
CVE-2023-1988 | Low | 3.5 | 2023-04-11 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown function… |
CVE-2022-43952 | Low | 3.5 | 2023-04-11 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiADC version 7.1.1 and below, version 7.0… |
CVE-2023-29112 | Low | 3.7 | 2023-04-11 | The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or headings with custom CSS classes into a… |
CVE-2023-29111 | Low | 3.1 | 2023-04-11 | The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information… |
CVE-2023-29110 | Low | 3.7 | 2023-04-11 | The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows… |
CVE-2023-29192 | Low | 2.7 | 2023-04-10 | SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This… |
CVE-2022-46717 | Low | 2.4 | 2023-04-10 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2. A user with physical access to a locked Apple Watch ma… |
CVE-2022-32871 | Low | 2.4 | 2023-04-10 | A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to a device may be able to use Siri to acc… |
CVE-2018-25084 | Low | 3.5 | 2023-04-10 | A vulnerability, which was classified as problematic, has been found in Ping Identity Self-Service Account Manager 1.1.2. Affected by this issue is some unknow… |
CVE-2014-125097 | Low | 3.5 | 2023-04-10 | A vulnerability, which was classified as problematic, was found in BestWebSoft Facebook Like Button up to 2.33. Affected is the function fcbkbttn_settings_page… |
CVE-2014-125096 | Low | 3.5 | 2023-04-10 | A vulnerability was found in Fancy Gallery Plugin 1.5.12 on WordPress. It has been declared as problematic. Affected by this vulnerability is an unknown functi… |
CVE-2009-10004 | Low | 3.5 | 2023-04-10 | A vulnerability was found in Turante Sandbox Theme up to 1.5.2. It has been classified as problematic. This affects the function sandbox_body_class of the file… |
CVE-2014-125095 | Low | 3.5 | 2023-04-09 | A vulnerability was found in BestWebSoft Contact Form Plugin 1.3.4 on WordPress and classified as problematic. Affected by this issue is the function bws_add_m… |
CVE-2013-10024 | Low | 3.5 | 2023-04-08 | A vulnerability has been found in Exit Strategy Plugin 1.55 on WordPress and classified as problematic. Affected by this vulnerability is an unknown functional… |
CVE-2023-1961 | Low | 2.4 | 2023-04-08 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the… |
CVE-2015-10098 | Low | 3.5 | 2023-04-08 | A vulnerability was found in Broken Link Checker Plugin up to 1.10.5 on WordPress. It has been rated as problematic. Affected by this issue is the function pri… |
CVE-2023-1948 | Low | 3.5 | 2023-04-08 | A vulnerability, which was classified as problematic, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects some unknown process… |
CVE-2023-1946 | Low | 2.4 | 2023-04-07 | A vulnerability was found in SourceCodester Survey Application System 1.0 and classified as problematic. This issue affects some unknown processing of the comp… |
CVE-2014-125094 | Low | 3.5 | 2023-04-06 | A vulnerability classified as problematic was found in phpMiniAdmin up to 1.8.120510. Affected by this vulnerability is an unknown functionality. The manipulat… |
CVE-2023-26083 | Low | 3.3 | 2023-04-06 | Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0… |
CVE-2022-46781 | Low | 3.3 | 2023-04-06 | An issue was discovered in the Arm Mali GPU Kernel Driver. A non-privileged user can make improper GPU memory processing operations to access a limited amount… |
CVE-2023-1071 | Low | 3.1 | 2023-04-05 | An issue has been discovered in GitLab affecting all versions from 15.5 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting fro… |
CVE-2023-0450 | Low | 3.7 | 2023-04-05 | An issue has been discovered in GitLab affecting all versions starting from 8.1 to 15.8.5, and from 15.9 to 15.9.4, and from 15.10 to 15.10.1. It was possible… |
CVE-2022-3375 | Low | 3.1 | 2023-04-05 | An issue has been discovered in GitLab affecting all versions starting from 11.10 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions st… |
CVE-2023-28633 | Low | 3.5 | 2023-04-05 | GLPI is a free asset and IT management software package. Starting in version 0.84 and prior to versions 9.5.13 and 10.0.7, usage of RSS feeds is subject to ser… |