2023 CVEs (page 103)
Page 103 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-6219 | High | 7.2 | 2023-11-28 | The BookingPress plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file validation on the 'bookingpress_process_upload' function… |
CVE-2023-5960 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.37 and VPN series firmware… |
CVE-2023-5797 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware v… |
CVE-2023-5650 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the ZySH of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50… |
CVE-2023-4398 | High | 7.5 | 2023-11-28 | An integer overflow vulnerability in the source code of the QuickSec IPSec toolkit used in the VPN feature of the Zyxel ATP series firmware versions 4.32 throu… |
CVE-2023-4397 | Medium | 4.4 | 2023-11-28 | A buffer overflow vulnerability in the Zyxel ATP series firmware version 5.37, USG FLEX series firmware version 5.37, USG FLEX 50(W) series firmware version 5… |
CVE-2023-47503 | Critical | 9.8 | 2023-11-28 | An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template manage… |
CVE-2023-37926 | Medium | 5.5 | 2023-11-28 | A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50(W… |
CVE-2023-37925 | Medium | 5.5 | 2023-11-28 | An improper privilege management vulnerability in the debug CLI command of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware v… |
CVE-2023-35139 | Medium | 5.2 | 2023-11-28 | A cross-site scripting (XSS) vulnerability in the CGI program of the Zyxel ATP series firmware versions 5.10 through 5.37, USG FLEX series firmware versions 5… |
CVE-2023-35136 | Medium | 5.5 | 2023-11-28 | An improper input validation vulnerability in the “Quagga” package of the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versio… |
CVE-2023-30585 | High | 7.5 | 2023-11-28 | A vulnerability has been identified in the Node.js (.msi version) installation process, specifically affecting Windows users who install Node.js using the .msi… |
CVE-2023-47437 | Medium | 5.4 | 2023-11-28 | A vulnerability has been identified in Pachno 1.0.6 allowing an authenticated attacker to execute a cross-site scripting (XSS) attack. The vulnerability exists… |
CVE-2023-29770 | High | 8.8 | 2023-11-28 | In Sentrifugo 3.5, the AssetsController::uploadsaveAction function allows an authenticated attacker to upload any file without extension filtering. |
CVE-2023-49145 | High | 7.9 | 2023-11-27 | Apache NiFi 0.7.0 through 1.23.2 include the JoltTransformJSON Processor, which provides an advanced configuration user interface that is vulnerable to DOM-bas… |
CVE-2023-48188 | Critical | 9.8 | 2023-11-27 | SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a crafted script to the getM… |
CVE-2023-46480 | Critical | 9.8 | 2023-11-27 | An issue in OwnCast v.0.1.1 allows a remote attacker to execute arbitrary code and obtain sensitive information via the authHost parameter of the indieauth fun… |
CVE-2023-46355 | Medium | 5.3 | 2023-11-27 | In the module "CSV Feeds PRO" (csvfeeds) < 2.6.1 from Bl Modules for PrestaShop, a guest can download personal information without restriction. Due to too perm… |
CVE-2023-46349 | Critical | 9.8 | 2023-11-27 | In the module "Product Catalog (CSV, Excel) Export/Update" (updateproducts) < 3.8.5 from MyPrestaModules for PrestaShop, a guest can perform SQL injection. The… |
CVE-2023-42366 | Medium | 5.5 | 2023-11-27 | A heap-buffer-overflow was discovered in BusyBox v.1.36.1 in the next_token function at awk.c:1159. |
CVE-2023-42365 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability was discovered in BusyBox v.1.36.1 via a crafted awk pattern in the awk.c copyvar function. |
CVE-2023-42364 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability in BusyBox v.1.36.1 allows attackers to cause a denial of service via a crafted awk pattern in the awk.c evaluate function. |
CVE-2023-5885 | Medium | 6.5 | 2023-11-27 | The discontinued FFS Colibri product allows a remote user to access files on the system including files containing login credentials for other users. |
CVE-2023-42363 | Medium | 5.5 | 2023-11-27 | A use-after-free vulnerability was discovered in xasprintf function in xfuncs_printf.c:344 in BusyBox v.1.36.1. |
CVE-2023-32062 | Medium | 5.0 | 2023-11-27 | OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing A… |
CVE-2023-49044 | Critical | 9.8 | 2023-11-27 | Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the ssid parameter in the function form_fast_sett… |
CVE-2023-49030 | High | 7.5 | 2023-11-27 | SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.p… |
CVE-2023-48034 | Medium | 6.1 | 2023-11-27 | An issue discovered in Acer Wireless Keyboard SK-9662 allows attacker in physical proximity to both decrypt wireless keystrokes and inject arbitrary keystrokes… |
CVE-2023-49316 | High | 7.5 | 2023-11-27 | In Math/BinaryField.php in phpseclib 3 before 3.0.34, excessively large degrees can lead to a denial of service. |
CVE-2023-6329 | Critical | 9.8 | 2023-11-27 | An authentication bypass vulnerability exists in Control iD iDSecure v4.7.32.0. The login routine used by iDS-Core.dll contains a "passwordCustom" option that… |
CVE-2023-5974 | Critical | 9.8 | 2023-11-27 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter. |
CVE-2023-5958 | Medium | 6.1 | 2023-11-27 | The POST SMTP Mailer WordPress plugin before 2.7.1 does not escape email message content before displaying it in the backend, allowing an unauthenticated attac… |
CVE-2023-5942 | Medium | 5.4 | 2023-11-27 | The Medialist WordPress plugin before 1.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the… |
CVE-2023-5906 | High | 7.5 | 2023-11-27 | The Job Manager & Career WordPress plugin before 1.4.4 contains a vulnerability in the Directory Listings system, which allows an unauthorized user to view and… |
CVE-2023-5845 | Medium | 5.3 | 2023-11-27 | The Simple Social Media Share Buttons WordPress plugin before 5.1.1 leaks password-protected post content to unauthenticated visitors in some meta tags |
CVE-2023-5738 | Medium | 5.4 | 2023-11-27 | The WordPress Backup & Migration WordPress plugin before 1.4.4 does not sanitise and escape some parameters, which could allow users with a role as low as Subs… |
CVE-2023-5737 | Medium | 4.3 | 2023-11-27 | The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users with a role as low as Subscriber to update… |
CVE-2023-5653 | Medium | 6.1 | 2023-11-27 | The WassUp Real Time Analytics WordPress plugin through 1.9.4.5 does not escape IP address provided via some headers before outputting them back in an admin pa… |
CVE-2023-5641 | Medium | 6.1 | 2023-11-27 | The Martins Free & Easy SEO BackLink Link Building Network WordPress plugin before 1.2.30 does not sanitise and escape a parameter before outputting it back in… |
CVE-2023-5620 | Medium | 5.4 | 2023-11-27 | The Web Push Notifications WordPress plugin before 4.35.0 does not prevent visitors on the site from changing some of the plugin options, some of which may be… |
CVE-2023-5611 | Medium | 5.3 | 2023-11-27 | The Seraphinite Accelerator WordPress plugin before 2.20.32 does not have authorisation and CSRF checks when resetting and importing its settings, allowing una… |
CVE-2023-5604 | Critical | 9.8 | 2023-11-27 | The Asgaros Forum WordPress plugin before 2.7.1 allows forum administrators, who may not be WordPress (super-)administrators, to set insecure configuration tha… |
CVE-2023-5560 | Medium | 6.1 | 2023-11-27 | The WP-UserOnline WordPress plugin before 2.88.3 does not sanitise and escape the X-Forwarded-For header before outputting its content on the page, which allow… |
CVE-2023-5559 | Critical | 9.1 | 2023-11-27 | The 10Web Booster WordPress plugin before 2.24.18 does not validate the option name given to some AJAX actions, allowing unauthenticated users to delete arbitr… |
CVE-2023-5525 | Medium | 4.3 | 2023-11-27 | The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` AJAX action, allowing any user with a va… |
CVE-2023-5325 | Medium | 6.1 | 2023-11-27 | The Woocommerce Vietnam Checkout WordPress plugin before 2.0.6 does not escape the custom shipping phone field no the checkout form leading to XSS |
CVE-2023-5239 | High | 7.5 | 2023-11-27 | The Security & Malware scan by CleanTalk WordPress plugin before 2.121 retrieves client IP addresses from potentially untrusted headers, allowing an attacker t… |
CVE-2023-5209 | Medium | 4.8 | 2023-11-27 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.5 does not sanitise and escape some of its settings, which could allow high privi… |
CVE-2023-4922 | Critical | 9.8 | 2023-11-27 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter. |
CVE-2023-4642 | Medium | 5.9 | 2023-11-27 | The kk Star Ratings WordPress plugin before 5.4.6 does not implement atomic operations, allowing one user vote multiple times on a poll due to a Race Condition. |
CVE-2023-4514 | Medium | 5.4 | 2023-11-27 | The Mmm Simple File List WordPress plugin through 2.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post… |
CVE-2023-4297 | Medium | 4.3 | 2023-11-27 | The Mmm Simple File List WordPress plugin through 2.3 does not validate the generated path to list files from, allowing any authenticated users, such as subscr… |
CVE-2023-4252 | Medium | 5.3 | 2023-11-27 | The EventPrime WordPress plugin through 3.2.9 specifies the price of a booking in the client request, allowing an attacker to purchase bookings without payment. |
CVE-2023-49047 | High | 7.5 | 2023-11-27 | Tenda AX1803 v1.0.0.1 contains a stack overflow via the devName parameter in the function formSetDeviceName. |
CVE-2023-49042 | Critical | 9.8 | 2023-11-27 | Heap Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the schedStartTime parameter or the schedEndTime p… |
CVE-2023-49040 | Critical | 9.8 | 2023-11-27 | An issue in Tneda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the adslPwd parameter in the form_fast_setting_internet_set function. |
CVE-2023-49028 | Medium | 5.4 | 2023-11-27 | Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the user parameter in the l… |
CVE-2023-42000 | Critical | 9.8 | 2023-11-27 | Arcserve UDP prior to 9.2 contains a path traversal vulnerability in com.ca.arcflash.ui.server.servlet.FileHandlingServlet.doUpload(). An unauthenticated remot… |
CVE-2023-41999 | Critical | 9.8 | 2023-11-27 | An authentication bypass exists in Arcserve UDP prior to version 9.2. An unauthenticated, remote attacker can obtain a valid authentication identifier that all… |
CVE-2023-41998 | Critical | 9.8 | 2023-11-27 | Arcserve UDP prior to 9.2 contained a vulnerability in the com.ca.arcflash.rps.webservice.RPSService4CPMImpl interface. A routine exists that allows an attacke… |
CVE-2023-2707 | Medium | 4.8 | 2023-11-27 | The gAppointments WordPress plugin through 1.9.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to p… |
CVE-2023-49046 | Critical | 9.8 | 2023-11-27 | Stack Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the devName parameter in the function formAddMacf… |
CVE-2023-49043 | Critical | 9.8 | 2023-11-27 | Buffer Overflow vulnerability in Tenda AX1803 v.1.0.0.1 allows a remote attacker to execute arbitrary code via the wpapsk_crypto parameter in the function from… |
CVE-2023-49029 | Medium | 6.1 | 2023-11-27 | Cross Site Scripting vulnerability in smpn1smg absis v.2017-10-19 and before allows a remote attacker to execute arbitrary code via the nama parameter in the l… |
CVE-2023-41257 | High | 8.8 | 2023-11-27 | A type confusion vulnerability exists in the way Foxit Reader 12.1.2.15356 handles field value properties. A specially crafted Javascript code inside a malici… |
CVE-2023-40194 | High | 8.8 | 2023-11-27 | An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to mistreatment of whitespace character… |
CVE-2023-39542 | High | 8.8 | 2023-11-27 | A code execution vulnerability exists in the Javascript saveAs API of Foxit Reader 12.1.3.15356. A specially crafted malformed file can create arbitrary files… |
CVE-2023-38573 | High | 8.8 | 2023-11-27 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles a signature field. A specially crafted Javascript code inside a malicious PD… |
CVE-2023-35985 | High | 8.8 | 2023-11-27 | An arbitrary file creation vulnerability exists in the Javascript exportDataObject API of Foxit Reader 12.1.3.15356 due to a failure to properly validate a dan… |
CVE-2023-32616 | High | 8.8 | 2023-11-27 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15356 handles 3D annotations. A specially crafted Javascript code inside a malicious PDF d… |
CVE-2023-31275 | High | 8.8 | 2023-11-27 | An uninitialized pointer use vulnerability exists in the functionality of WPS Office 11.2.0.11537 that handles Data elements in an Excel file. A specially craf… |
CVE-2023-6287 | Low | 3.3 | 2023-11-27 | Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.8 allows local attacker to retrieve passwords via reading log files. |
CVE-2023-4931 | Medium | 6.3 | 2023-11-27 | Uncontrolled search path element vulnerability in Plesk Installer affects version 3.27.0.0. A local attacker could execute arbitrary code by injecting DLL file… |
CVE-2023-4590 | High | 7.3 | 2023-11-27 | Buffer overflow vulnerability in Frhed hex editor, affecting version 1.6.0. This vulnerability could allow an attacker to execute arbitrary code via a long fil… |
CVE-2023-5871 | Medium | 5.3 | 2023-11-27 | A flaw was found in libnbd, due to a malicious Network Block Device (NBD), a protocol for accessing Block Devices such as hard disks over a Network. This issue… |
CVE-2023-5607 | High | 8.4 | 2023-11-27 | An improper limitation of a path name to a restricted directory (path traversal) vulnerability in the TACC ePO extension, for on-premises ePO servers, prior t… |
CVE-2023-43701 | Medium | 4.3 | 2023-11-27 | Improper payload validation and an improper REST API response type, made it possible for an authenticated malicious actor to store malicious code into Chart's… |
CVE-2023-42501 | Medium | 4.3 | 2023-11-27 | Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and annotations. This issue affects Apache… |
CVE-2023-40610 | Medium | 6.3 | 2023-11-27 | Improper authorization check and possible privilege escalation on Apache Superset up to but excluding 2.1.2. Using the default examples database connection tha… |
CVE-2023-6254 | High | 8.1 | 2023-11-27 | A Vulnerability in OTRS AgentInterface and ExternalInterface allows the reading of plain text passwords which are send back to the client in the server respons… |
CVE-2023-6202 | Medium | 4.3 | 2023-11-27 | Mattermost fails to perform proper authorization in the /plugins/focalboard/api/v2/users endpoint allowing an attacker who is a guest user and knows the ID of… |
CVE-2023-49068 | High | 7.5 | 2023-11-27 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache DolphinScheduler.This issue affects Apache DolphinScheduler: before 3.2.1. … |
CVE-2023-48369 | Medium | 4.3 | 2023-11-27 | Mattermost fails to limit the log size of server logs allowing an attacker sending specially crafted requests to different endpoints to potentially overflow th… |
CVE-2023-48268 | Medium | 4.3 | 2023-11-27 | Mattermost fails to limit the amount of data extracted from compressed archives during board import in Mattermost Boards allowing an attacker to consume excess… |
CVE-2023-47168 | Medium | 4.3 | 2023-11-27 | Mattermost fails to properly check a redirect URL parameter allowing for an open redirect was possible when the user clicked "Back to Mattermost" after providi… |
CVE-2023-45223 | Medium | 4.3 | 2023-11-27 | Mattermost fails to properly validate the "Show Full Name" option in a few endpoints in Mattermost Boards, allowing a member to get the full name of another us… |
CVE-2023-43754 | Medium | 4.3 | 2023-11-27 | Mattermost fails to check whether the “Allow users to view archived channels” setting is enabled during permalink previews display, allowing members to view… |
CVE-2023-40703 | Medium | 4.3 | 2023-11-27 | Mattermost fails to properly limit the characters allowed in different fields of a block in Mattermost Boards allowing a attacker to consume excessive resource… |
CVE-2023-35075 | Low | 3.1 | 2023-11-27 | Mattermost fails to use innerText / textContent when setting the channel name in the webapp during autocomplete, allowing an attacker to inject HTML to a vict… |
CVE-2023-47865 | Medium | 4.3 | 2023-11-27 | Mattermost fails to check if hardened mode is enabled when overriding the username and/or the icon when posting a post. If settings allowed integrations to ove… |
CVE-2023-25632 | Medium | 5.5 | 2023-11-27 | The Android Mobile Whale browser app before 3.0.1.2 allows the attacker to bypass its browser unlock function via 'Open in Whale' feature. |
CVE-2023-6313 | Low | 3.5 | 2023-11-27 | A vulnerability was found in SourceCodester URL Shortener 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality… |
CVE-2023-6312 | Medium | 4.7 | 2023-11-27 | A vulnerability was found in SourceCodester Loan Management System 1.0. It has been classified as critical. Affected is the function delete_user of the file de… |
CVE-2023-6311 | Medium | 4.7 | 2023-11-27 | A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical. This issue affects the function delete_ltype of the file del… |
CVE-2023-6310 | Medium | 4.7 | 2023-11-27 | A vulnerability has been found in SourceCodester Loan Management System 1.0 and classified as critical. This vulnerability affects the function delete_borrower… |
CVE-2023-6309 | Medium | 5.5 | 2023-11-27 | A vulnerability, which was classified as critical, was found in moses-smt mosesdecoder up to 4.0. This affects an unknown part of the file contrib/iSenWeb/tran… |
CVE-2023-6308 | Medium | 6.3 | 2023-11-27 | A vulnerability, which was classified as critical, has been found in Xiamen Four-Faith Video Surveillance Management System 2016/2017. Affected by this issue i… |
CVE-2023-6307 | Medium | 6.3 | 2023-11-27 | A vulnerability classified as critical was found in jeecgboot JimuReport up to 1.6.1. Affected by this vulnerability is an unknown functionality of the file /d… |
CVE-2023-6306 | Medium | 6.3 | 2023-11-27 | A vulnerability classified as critical has been found in SourceCodester Free and Open Source Inventory Management System 1.0. Affected is an unknown function o… |
CVE-2023-6305 | Medium | 6.3 | 2023-11-27 | A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been rated as critical. This issue affects some unknow… |