2023 CVEs (page 102)
Page 102 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-30588 | Medium | 5.3 | 2023-11-28 | When an invalid public key is used to create an x509 certificate using the crypto.X509Certificate() API a non-expect termination occurs making it susceptible t… |
CVE-2023-29060 | Medium | 5.4 | 2023-11-28 | The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports. If exploited, a threat actor with physical access t… |
CVE-2023-49078 | Medium | 5.4 | 2023-11-28 | raptor-web is a CMS for game server communities that can be used to host information and keep track of players. In version 0.4.4 of raptor-web, it is possible… |
CVE-2023-48121 | Medium | 5.3 | 2023-11-28 | An authentication bypass vulnerability in the Direct Connection Module in Ezviz CS-C6N-xxx prior to v5.3.x build 20230401, Ezviz CS-CV310-xxx prior to v5.3.x b… |
CVE-2023-42504 | Medium | 5.8 | 2023-11-28 | An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of servic… |
CVE-2023-40056 | High | 8.0 | 2023-11-28 | SQL Injection Remote Code Vulnerability was found in the SolarWinds Platform. This vulnerability can be exploited with a low privileged account. … |
CVE-2023-48848 | High | 7.5 | 2023-11-28 | An arbitrary file read vulnerability in ureport v2.2.9 allows a remote attacker to arbitrarily read files on the server by inserting a crafted path. |
CVE-2023-45286 | Medium | 5.9 | 2023-11-28 | A race condition in go-resty can result in HTTP request body disclosure across requests. This condition can be triggered by calling sync.Pool.Put with the same… |
CVE-2023-42505 | Medium | 4.3 | 2023-11-28 | An authenticated user with read permissions on database connections metadata could potentially access sensitive information such as the connection's username. … |
CVE-2023-42502 | Medium | 4.8 | 2023-11-28 | An authenticated attacker with update datasets permission could change a dataset link to an untrusted site by spoofing the HTTP Host header, users could be red… |
CVE-2023-41264 | Critical | 9.8 | 2023-11-28 | Netwrix Usercube before 6.0.215, in certain misconfigured on-premises installations, allows authentication bypass on deployment endpoints, leading to privilege… |
CVE-2023-49062 | High | 7.5 | 2023-11-28 | Katran could disclose non-initialized kernel memory as part of an IP header. The issue was present for IPv4 encapsulation and ICMP (v4) Too Big packet generati… |
CVE-2023-46589 | High | 7.5 | 2023-11-28 | Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82… |
CVE-2023-49314 | High | 7.8 | 2023-11-28 | Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings s… |
CVE-2023-49313 | Critical | 9.8 | 2023-11-28 | A dylib injection vulnerability in XMachOViewer 0.04 allows attackers to compromise integrity. By exploiting this, unauthorized code can be injected into the p… |
CVE-2023-6239 | Medium | 5.4 | 2023-11-28 | Under rare conditions, the effective permissions of an object might be incorrectly calculated if the object has a specific configuration of metadata-driven per… |
CVE-2023-48042 | Medium | 6.1 | 2023-11-28 | Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript… |
CVE-2023-6359 | Medium | 5.4 | 2023-11-28 | A Cross-Site Scripting (XSS) vulnerability has been found in Alumne LMS affecting version 4.0.0.1.08. An attacker could exploit the 'localidad' parameter to in… |
CVE-2023-6201 | High | 8.8 | 2023-11-28 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Univera Computer System Panorama allows Command Inj… |
CVE-2023-5981 | Medium | 5.9 | 2023-11-28 | A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct… |
CVE-2023-42004 | High | 8.0 | 2023-11-28 | IBM Security Guardium 11.3, 11.4, and 11.5 is potentially vulnerable to CSV injection. A remote attacker could execute malicious commands due to improper vali… |
CVE-2023-6151 | High | 7.5 | 2023-11-28 | Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipa… |
CVE-2023-6150 | High | 7.5 | 2023-11-28 | Incorrect Use of Privileged APIs vulnerability in ESKOM Computer e-municipality module allows Collect Data as Provided by Users. This issue affects e-municipa… |
CVE-2023-4667 | High | 8.1 | 2023-11-28 | The web interface of the PAC Device allows the device administrator user profile to store malicious scripts in some fields. The stored malicious script is the… |
CVE-2023-34055 | Medium | 5.3 | 2023-11-28 | In Spring Boot versions 2.7.0 - 2.7.17, 3.0.0-3.0.12 and 3.1.0-3.1.5, it is possible for a user to provide specially crafted HTTP requests that may cause a den… |
CVE-2023-34054 | Medium | 5.3 | 2023-11-28 | In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, it is possible for a user to provide specially crafted HTTP r… |
CVE-2023-34053 | Medium | 5.3 | 2023-11-28 | In Spring Framework versions 6.0.0 - 6.0.13, it is possible for a user to provide specially crafted HTTP requests that may cause a denial-of-service (DoS) cond… |
CVE-2023-4226 | High | 8.8 | 2023-11-28 | Unrestricted file upload in `/main/inc/ajax/work.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code ex… |
CVE-2023-4225 | High | 8.8 | 2023-11-28 | Unrestricted file upload in `/main/inc/ajax/exercise.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote cod… |
CVE-2023-4224 | High | 8.8 | 2023-11-28 | Unrestricted file upload in `/main/inc/ajax/dropbox.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote code… |
CVE-2023-4223 | High | 8.8 | 2023-11-28 | Unrestricted file upload in `/main/inc/ajax/document.ajax.php` in Chamilo LMS <= v1.11.24 allows authenticated attackers with learner role to obtain remote cod… |
CVE-2023-4222 | High | 7.2 | 2023-11-28 | Command injection in `main/lp/openoffice_text_document.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote c… |
CVE-2023-4221 | High | 7.2 | 2023-11-28 | Command injection in `main/lp/openoffice_presentation.class.php` in Chamilo LMS <= v1.11.24 allows users permitted to upload Learning Paths to obtain remote co… |
CVE-2023-4220 | High | 8.1 | 2023-11-28 | Unrestricted file upload in big file upload functionality in `/main/inc/lib/javascript/bigupload/inc/bigUpload.php` in Chamilo LMS <= v1.11.24 allows unauthent… |
CVE-2023-48023 | Critical | 9.1 | 2023-11-28 | Anyscale Ray 2.6.3 and 2.8.0 allows /log_proxy SSRF. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation… |
CVE-2023-48022 | Critical | 9.8 | 2023-11-28 | Anyscale Ray 2.6.3 and 2.8.0 allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is… |
CVE-2023-3545 | Critical | 9.8 | 2023-11-28 | Improper sanitisation in `main/inc/lib/fileUpload.lib.php` in Chamilo LMS <= v1.11.20 on Windows and Apache installations allows unauthenticated attackers to b… |
CVE-2023-3533 | Critical | 9.8 | 2023-11-28 | Path traversal in file upload functionality in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to pe… |
CVE-2023-3368 | Critical | 9.8 | 2023-11-28 | Command injection in `/main/webservices/additional_webservices.php` in Chamilo LMS <= v1.11.20 allows unauthenticated attackers to obtain remote code execution… |
CVE-2023-24023 | Medium | 6.8 | 2023-11-28 | Bluetooth BR/EDR devices with Secure Simple Pairing and Secure Connections pairing in Bluetooth Core Specification 4.2 through 5.4 allow certain man-in-the-mid… |
CVE-2023-6226 | Medium | 4.3 | 2023-11-28 | The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 5.1… |
CVE-2023-6225 | Medium | 6.4 | 2023-11-28 | The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's su_meta shortcode combined wi… |
CVE-2023-49075 | High | 8.4 | 2023-11-28 | The Admin Classic Bundle provides a Backend UI for Pimcore. `AdminBundle\Security\PimcoreUserTwoFactorCondition` introduced in v11 disable the two factor authe… |
CVE-2023-48713 | Medium | 6.5 | 2023-11-28 | Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to… |
CVE-2023-32065 | Medium | 5.8 | 2023-11-28 | OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be received by Or… |
CVE-2023-32064 | Medium | 5.0 | 2023-11-28 | OroCommerce package with customer portal and non authenticated visitor website base features. Back-office users can access information about Customer and Custo… |
CVE-2023-32063 | Medium | 5.0 | 2023-11-28 | OroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access information from any call event, bypas… |
CVE-2023-6219 | High | 7.2 | 2023-11-28 | The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpress_process_upload' function… |
CVE-2023-5960 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware… |
CVE-2023-5797 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware v… |
CVE-2023-5650 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50… |
CVE-2023-4398 | High | 7.5 | 2023-11-28 | An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 throu… |
CVE-2023-4397 | Medium | 4.4 | 2023-11-28 | A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5… |
CVE-2023-47503 | Critical | 9.8 | 2023-11-28 | An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template manage… |
CVE-2023-37926 | Medium | 5.5 | 2023-11-28 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W… |
CVE-2023-37925 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware v… |
CVE-2023-35139 | Medium | 5.2 | 2023-11-28 | A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5… |
CVE-2023-35136 | Medium | 5.5 | 2023-11-28 | An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versio… |
CVE-2023-30585 | High | 7.5 | 2023-11-28 | A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows users who install Node.js using the .msi… |
CVE-2023-47437 | Medium | 5.4 | 2023-11-28 | A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists… |
CVE-2023-29770 | High | 8.8 | 2023-11-28 | In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering. |
CVE-2023-49145 | High | 7.9 | 2023-11-27 | Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-bas… |
CVE-2023-48188 | Critical | 9.8 | 2023-11-27 | SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getM… |
CVE-2023-46480 | Critical | 9.8 | 2023-11-27 | An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth fun… |
CVE-2023-46355 | Medium | 5.3 | 2023-11-27 | In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too perm… |
CVE-2023-46349 | Critical | 9.8 | 2023-11-27 | In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The… |
CVE-2023-42366 | Medium | 5.5 | 2023-11-27 | A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159. |
CVE-2023-42365 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function. |
CVE-2023-42364 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function. |
CVE-2023-5885 | Medium | 6.5 | 2023-11-27 | The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users. |
CVE-2023-42363 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1. |
CVE-2023-32062 | Medium | 5.0 | 2023-11-27 | OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing A… |
CVE-2023-49044 | Critical | 9.8 | 2023-11-27 | Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_sett… |
CVE-2023-49030 | High | 7.5 | 2023-11-27 | SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.p… |
CVE-2023-48034 | Medium | 6.1 | 2023-11-27 | An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes… |
CVE-2023-49316 | High | 7.5 | 2023-11-27 | In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service. |
CVE-2023-6329 | Critical | 9.8 | 2023-11-27 | An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that… |
CVE-2023-5974 | Critical | 9.8 | 2023-11-27 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter. |
CVE-2023-5958 | Medium | 6.1 | 2023-11-27 | The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attac… |
CVE-2023-5942 | Medium | 5.4 | 2023-11-27 | The Medialist WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the… |
CVE-2023-5906 | High | 7.5 | 2023-11-27 | The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and… |
CVE-2023-5845 | Medium | 5.3 | 2023-11-27 | The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags |
CVE-2023-5738 | Medium | 5.4 | 2023-11-27 | The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subs… |
CVE-2023-5737 | Medium | 4.3 | 2023-11-27 | The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update… |
CVE-2023-5653 | Medium | 6.1 | 2023-11-27 | The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin pa… |
CVE-2023-5641 | Medium | 6.1 | 2023-11-27 | The Martins Free & Easy SEO BackLink Link Building Network WordPress plugin before 1.2.30 does not sanitise and escape a parameter before outputting it back in… |
CVE-2023-5620 | Medium | 5.4 | 2023-11-27 | The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be… |
CVE-2023-5611 | Medium | 5.3 | 2023-11-27 | The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing una… |
CVE-2023-5604 | Critical | 9.8 | 2023-11-27 | The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration tha… |
CVE-2023-5560 | Medium | 6.1 | 2023-11-27 | The WP-UserOnline WordPress plugin before 2.88.3 does not sanitise and escape the X-Forwarded-For header before outputting its content on the page, which allow… |
CVE-2023-5559 | Critical | 9.1 | 2023-11-27 | The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitr… |
CVE-2023-5525 | Medium | 4.3 | 2023-11-27 | The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a va… |
CVE-2023-5325 | Medium | 6.1 | 2023-11-27 | The Woocommerce Vietnam Checkout WordPress plugin before 2.0.6 does not escape the custom shipping phone field no the checkout form leading to XSS |
CVE-2023-5239 | High | 7.5 | 2023-11-27 | The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker t… |
CVE-2023-5209 | Medium | 4.8 | 2023-11-27 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.5 does not sanitise and escape some of its settings, which could allow high privi… |
CVE-2023-4922 | Critical | 9.8 | 2023-11-27 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter. |
CVE-2023-4642 | Medium | 5.9 | 2023-11-27 | The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. |
CVE-2023-4514 | Medium | 5.4 | 2023-11-27 | The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post… |
CVE-2023-4297 | Medium | 4.3 | 2023-11-27 | The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscr… |
CVE-2023-4252 | Medium | 5.3 | 2023-11-27 | The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment. |