Low-severity CVEs (page 75)
Page 75 of 100 — low-severity CVEs, newest first, with CVSS scores and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2013-10022 | Low | 3.5 | 2023-04-05 | A vulnerability, which was classified as problematic, has been found in BestWebSoft Contact Form Plugin 3.51 on WordPress. Affected by this issue is the functi… |
CVE-2023-1860 | Low | 3.5 | 2023-04-05 | A vulnerability was found in Keysight IXIA Hawkeye 3.3.16.28. It has been declared as problematic. This vulnerability affects unknown code of the file /license… |
CVE-2023-1857 | Low | 2.4 | 2023-04-05 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown function… |
CVE-2023-1853 | Low | 3.5 | 2023-04-05 | A vulnerability, which was classified as problematic, has been found in SourceCodester Online Payroll System 1.0. This issue affects some unknown processing of… |
CVE-2023-1852 | Low | 3.5 | 2023-04-05 | A vulnerability classified as problematic was found in SourceCodester Online Payroll System 1.0. This vulnerability affects unknown code of the file /admin/ded… |
CVE-2023-1851 | Low | 3.5 | 2023-04-05 | A vulnerability classified as problematic has been found in SourceCodester Online Payroll System 1.0. This affects an unknown part of the file /admin/employee_… |
CVE-2023-26437 | Low | 3.4 | 2023-04-04 | Denial of service vulnerability in PowerDNS Recursor allows authoritative servers to be marked unavailable.This issue affects Recursor: through 4.6.5, through… |
CVE-2022-48435 | Low | 3.3 | 2023-04-04 | In JetBrains PhpStorm before 2023.1 source code could be logged in the local idea.log file |
CVE-2023-1768 | Low | 3.7 | 2023-04-04 | Inappropriate error handling in Tribe29 Checkmk <= 2.1.0p25, <= 2.0.0p34, <= 2.2.0b3 (beta), and all versions of Checkmk 1.6.0 causes the symmetric encryption… |
CVE-2022-43772 | Low | 3.8 | 2023-04-03 | Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x with the Big Data Plugin expose the username and passwo… |
CVE-2023-28834 | Low | 3.5 | 2023-04-03 | Nextcloud Server is an open source personal cloud server. Nextcloud Server 24.0.0 until 24.0.6 and 25.0.0 until 25.0.4, as well as Nextcloud Enterprise Server… |
CVE-2023-26112 | Low | 3.7 | 2023-04-03 | All versions of the package configobj are vulnerable to Regular Expression Denial of Service (ReDoS) via the validate function, using (.+?)\((.*)\). **Note:**… |
CVE-2023-1799 | Low | 3.5 | 2023-04-02 | A vulnerability, which was classified as problematic, was found in EyouCMS up to 1.5.4. This affects an unknown part of the file login.php. The manipulation of… |
CVE-2023-1798 | Low | 3.5 | 2023-04-02 | A vulnerability, which was classified as problematic, has been found in EyouCMS up to 1.5.4. Affected by this issue is some unknown functionality of the file l… |
CVE-2023-1796 | Low | 2.4 | 2023-04-02 | A vulnerability classified as problematic has been found in SourceCodester Employee Payslip Generator 1.0. Affected is an unknown function of the file /classes… |
CVE-2023-1795 | Low | 3.5 | 2023-04-02 | A vulnerability was found in SourceCodester Gadget Works Online Ordering System 1.0. It has been rated as problematic. This issue affects some unknown processi… |
CVE-2023-1794 | Low | 3.5 | 2023-04-02 | A vulnerability was found in SourceCodester Police Crime Record Management System 1.0. It has been declared as problematic. This vulnerability affects unknown… |
CVE-2023-0195 | Low | 2.0 | 2023-04-01 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer driver nvlddmkm.sys, where an can cause CWE-1284, which may lead to hyp… |
CVE-2023-0194 | Low | 2.0 | 2023-04-01 | NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer driver, where an invalid display configuration may lead to de… |
CVE-2023-28845 | Low | 3.5 | 2023-03-31 | Nextcloud talk is a video & audio conferencing app for Nextcloud. In affected versions the talk app does not properly filter access to a conversations member l… |
CVE-2023-1772 | Low | 3.5 | 2023-03-31 | A vulnerability was found in DataGear up to 4.5.1. It has been classified as problematic. This affects an unknown part of the component Diagram Type Handler. T… |
CVE-2023-1771 | Low | 3.5 | 2023-03-31 | A vulnerability was found in SourceCodester Grade Point Average GPA Calculator 1.0 and classified as problematic. Affected by this issue is the function get_sc… |
CVE-2023-1746 | Low | 3.5 | 2023-03-30 | A vulnerability, which was classified as problematic, was found in Dreamer CMS up to 3.5.0. Affected is an unknown function of the component File Upload Handle… |
CVE-2023-1743 | Low | 3.5 | 2023-03-30 | A vulnerability classified as problematic has been found in SourceCodester Grade Point Average GPA Calculator 1.0. This affects an unknown part of the file ind… |
CVE-2023-28835 | Low | 3.5 | 2023-03-30 | Nextcloud server is an open source home cloud implementation. In affected versions the generated fallback password when creating a share was using a weak compl… |
CVE-2023-28833 | Low | 2.4 | 2023-03-30 | Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a… |
CVE-2023-23677 | Low | 3.8 | 2023-03-30 | Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions. |
CVE-2022-37376 | Low | 3.3 | 2023-03-29 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Editor 11.1.1.53537. User interaction is re… |
CVE-2023-1690 | Low | 3.5 | 2023-03-29 | A vulnerability, which was classified as problematic, has been found in SourceCodester Earnings and Expense Tracker App 1.0. This issue affects some unknown pr… |
CVE-2023-1689 | Low | 3.5 | 2023-03-29 | A vulnerability classified as problematic was found in SourceCodester Earnings and Expense Tracker App 1.0. This vulnerability affects unknown code of the file… |
CVE-2023-1688 | Low | 3.5 | 2023-03-29 | A vulnerability classified as problematic has been found in SourceCodester Earnings and Expense Tracker App 1.0. This affects an unknown part of the file Maste… |
CVE-2023-1687 | Low | 3.5 | 2023-03-29 | A vulnerability classified as problematic has been found in SourceCodester Simple Task Allocation System 1.0. Affected is an unknown function of the file Login… |
CVE-2023-1686 | Low | 3.5 | 2023-03-29 | A vulnerability was found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. It has been rated as problematic. This issue affects some unknown processi… |
CVE-2022-27598 | Low | 2.7 | 2023-03-29 | A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrato… |
CVE-2022-27597 | Low | 2.7 | 2023-03-29 | A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrato… |
CVE-2022-1230 | Low | 3.9 | 2023-03-28 | This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prior to 4.5.40.5 phones. An attacker must… |
CVE-2023-25817 | Low | 3.5 | 2023-03-27 | Nextcloud server is an open source, personal cloud implementation. In versions from 24.0.0 and before 24.0.9 a user could escalate their permissions to delete… |
CVE-2023-1075 | Low | 3.3 | 2023-03-27 | A flaw was found in the Linux Kernel. The tls_is_tx_ready() incorrectly checks for list emptiness, potentially accessing a type confused entry to the list_head… |
CVE-2021-3923 | Low | 2.3 | 2023-03-27 | A flaw was found in the Linux kernel's implementation of RDMA over infiniband. An attacker with a privileged local account can leak kernel stack information wh… |
CVE-2022-39043 | Low | 2.4 | 2023-03-27 | Juiker app stores debug logs which contains sensitive information to mobile external storage. An unauthenticated physical attacker can access these files to ac… |
CVE-2023-28858 | Low | 3.7 | 2023-03-26 | redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an un… |
CVE-2023-1635 | Low | 3.5 | 2023-03-25 | A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the file apiRun.php. Th… |
CVE-2016-15030 | Low | 3.5 | 2023-03-25 | A vulnerability classified as problematic has been found in Arno0x TwoFactorAuth. This affects an unknown part of the file login/login.php. The manipulation of… |
CVE-2023-1176 | Low | 3.3 | 2023-03-24 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2. |
CVE-2023-1616 | Low | 3.5 | 2023-03-24 | A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Tit… |
CVE-2023-1613 | Low | 3.5 | 2023-03-23 | A vulnerability has been found in Rebuild up to 3.2.3 and classified as problematic. This vulnerability affects unknown code of the file /feeds/post/publish. T… |
CVE-2023-1513 | Low | 3.3 | 2023-03-23 | A flaw was found in KVM. When calling the KVM_GET_DEBUGREGS ioctl, on 32-bit systems, there might be some uninitialized portions of the kvm_debugregs structure… |
CVE-2023-1609 | Low | 3.5 | 2023-03-23 | A vulnerability was found in Zhong Bang CRMEB Java up to 1.3.4. It has been rated as problematic. This issue affects the function save of the file /api/admin/s… |
CVE-2023-1593 | Low | 3.5 | 2023-03-23 | A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some u… |
CVE-2023-1573 | Low | 3.5 | 2023-03-22 | A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Han… |
CVE-2023-1570 | Low | 3.3 | 2023-03-22 | A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function __interceptor_memcpy of the file… |
CVE-2023-1569 | Low | 3.5 | 2023-03-22 | A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2023-1568 | Low | 3.5 | 2023-03-22 | A vulnerability classified as problematic has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of… |
CVE-2023-1567 | Low | 3.5 | 2023-03-22 | A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown… |
CVE-2023-1572 | Low | 2.0 | 2023-03-22 | A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic. This vulnerability affects unknown code of the component Plugin Handler… |
CVE-2023-1565 | Low | 3.5 | 2023-03-22 | A vulnerability was found in FeiFeiCMS 2.7.130201. It has been classified as problematic. This affects an unknown part of the file \Public\system\slide_add.htm… |
CVE-2023-1560 | Low | 2.8 | 2023-03-22 | A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader… |
CVE-2023-1562 | Low | 3.5 | 2023-03-22 | Mattermost fails to check the "Show Full Name" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to lea… |
CVE-2023-25923 | Low | 2.7 | 2023-03-21 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an attacker to upload files that could be used in a denial of service a… |
CVE-2023-25689 | Low | 2.7 | 2023-03-21 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An attacker c… |
CVE-2016-15029 | Low | 3.5 | 2023-03-21 | A vulnerability has been found in Ydalb mapicoin up to 1.9.0 and classified as problematic. This vulnerability affects unknown code of the file webroot/stats.p… |
CVE-2023-1541 | Low | 3.8 | 2023-03-21 | Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1507 | Low | 3.5 | 2023-03-20 | A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionalit… |
CVE-2023-1500 | Low | 3.5 | 2023-03-19 | A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functional… |
CVE-2023-1488 | Low | 3.3 | 2023-03-18 | A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40… |
CVE-2023-1485 | Low | 3.5 | 2023-03-18 | A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /b… |
CVE-2023-1481 | Low | 3.5 | 2023-03-18 | A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue… |
CVE-2023-1451 | Low | 3.3 | 2023-03-17 | A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the fil… |
CVE-2023-1450 | Low | 3.3 | 2023-03-17 | A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulatio… |
CVE-2023-1447 | Low | 3.5 | 2023-03-17 | A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown func… |
CVE-2023-1445 | Low | 3.3 | 2023-03-17 | A vulnerability classified as problematic has been found in Filseclab Twister Antivirus 8. Affected is the function 0x80112053 in the library fildds.sys of the… |
CVE-2023-23935 | Low | 3.5 | 2023-03-16 | Discourse is an open-source messaging platform. In versions 3.0.1 and prior on the `stable` branch and versions 3.1.0.beta2 and prior on the `beta` and `tests-… |
CVE-2023-21454 | Low | 2.4 | 2023-03-16 | Improper authorization in Samsung Keyboard prior to SMR Mar-2023 Release 1 allows physical attacker to access users text history on the lockscreen. |
CVE-2023-21452 | Low | 3.3 | 2023-03-16 | Improper usage of implicit intent in Bluetooth prior to SMR Mar-2023 Release 1 allows attacker to get MAC address of connected device. |
CVE-2023-1421 | Low | 3.5 | 2023-03-15 | A reflected cross-site scripting vulnerability in the OAuth flow completion endpoints in Mattermost allows an attacker to send AJAX requests on behalf of the v… |
CVE-2023-22591 | Low | 3.9 | 2023-03-15 | IBM Robotic Process Automation 21.0.1 through 21.0.7 and 23.0.0 through 23.0.1 could allow a user with physical access to the system due to session tokens for… |
CVE-2023-1418 | Low | 3.5 | 2023-03-15 | A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is… |
CVE-2023-26084 | Low | 3.7 | 2023-03-15 | The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-… |
CVE-2023-23395 | Low | 3.1 | 2023-03-14 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-1397 | Low | 3.5 | 2023-03-14 | A vulnerability classified as problematic has been found in SourceCodester Online Student Management System 1.0. Affected is an unknown function of the file pr… |
CVE-2023-1396 | Low | 3.5 | 2023-03-14 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0. It has been rated as problematic. This issue affects some unknown pro… |
CVE-2023-1395 | Low | 3.5 | 2023-03-14 | A vulnerability was found in SourceCodester Yoga Class Registration System 1.0. It has been declared as problematic. This vulnerability affects the function qu… |
CVE-2023-1296 | Low | 2.7 | 2023-03-14 | HashiCorp Nomad and Nomad Enterprise 1.4.0 up to 1.5.0 did not correctly enforce deny policies applied to a workload’s variables. Fixed in 1.4.6 and 1.5.1. |
CVE-2023-27462 | Low | 3.1 | 2023-03-14 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The client query handler of the affected application fails to check for proper… |
CVE-2022-47163 | Low | 3.1 | 2023-03-14 | Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, josh401 WP CSV to Database – Insert CSV file content into WordPress plugin <= 2.6 versio… |
CVE-2023-0973 | Low | 2.2 | 2023-03-13 | STEPTools v18SP1 ifcmesh library (v18.1) is affected due to a null pointer dereference, which could allow an attacker to deny application usage when reading a… |
CVE-2023-1367 | Low | 3.8 | 2023-03-13 | Code Injection in GitHub repository alextselegidis/easyappointments prior to 1.5.0. |
CVE-2023-1363 | Low | 3.5 | 2023-03-13 | A vulnerability, which was classified as problematic, was found in SourceCodester Computer Parts Sales and Inventory System 1.0. Affected is an unknown functio… |
CVE-2023-1359 | Low | 2.4 | 2023-03-12 | A vulnerability has been found in SourceCodester Gadget Works Online Ordering System 1.0 and classified as problematic. This vulnerability affects unknown code… |
CVE-2022-48366 | Low | 3.7 | 2023-03-12 | An issue was discovered in eZ Platform Ibexa Kernel before 1.3.19. It allows determining account existence via a timing attack. |
CVE-2013-10021 | Low | 3.5 | 2023-03-11 | A vulnerability was found in dd32 Debug Bar Plugin up to 0.8 on WordPress. It has been declared as problematic. Affected by this vulnerability is the function… |
CVE-2023-1354 | Low | 3.5 | 2023-03-11 | A vulnerability has been found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0 and classified as problematic. Affec… |
CVE-2023-1353 | Low | 3.5 | 2023-03-11 | A vulnerability, which was classified as problematic, was found in SourceCodester Design and Implementation of Covid-19 Directory on Vaccination System 1.0. Af… |
CVE-2023-1349 | Low | 3.5 | 2023-03-11 | A vulnerability, which was classified as problematic, has been found in Hsycms 3.1. Affected by this issue is some unknown functionality of the file controller… |
CVE-2022-37939 | Low | 2.3 | 2023-03-10 | A potential security vulnerability has been identified in HPE Superdome Flex and Superdome Flex 280 servers. The vulnerability could be locally exploited to al… |
CVE-2017-20182 | Low | 3.5 | 2023-03-10 | A vulnerability was found in Mobile Vikings Django AJAX Utilities up to 1.2.1 and classified as problematic. This issue affects the function Pagination of the… |
CVE-2013-10020 | Low | 3.5 | 2023-03-10 | A vulnerability, which was classified as problematic, was found in MMDeveloper A Forms Plugin up to 1.4.2 on WordPress. This affects an unknown part of the fil… |
CVE-2023-1302 | Low | 3.5 | 2023-03-09 | A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file nor… |
CVE-2023-1084 | Low | 2.7 | 2023-03-09 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15… |
CVE-2023-26209 | Low | 3.7 | 2023-03-09 | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows a remote unauthenticated… |