2023 CVEs (page 106)
Page 106 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48228 | High | 7.5 | 2023-11-21 | authentik is an open-source identity provider. When initialising a oauth2 flow with a `code_challenge` and `code_method` (thus requesting PKCE), the single sig… |
CVE-2023-48226 | Medium | 6.5 | 2023-11-21 | OpenReplay is a self-hosted session replay suite. In version 1.14.0, due to lack of validation Name field - Account Settings (for registration looks like valid… |
CVE-2023-47643 | Low | 3.1 | 2023-11-21 | SuiteCRM is a Customer Relationship Management (CRM) software application. Prior to version 8.4.2, Graphql Introspection is enabled without authentication, exp… |
CVE-2023-20274 | Medium | 6.3 | 2023-11-21 | A vulnerability in the installer script of Cisco AppDynamics PHP Agent could allow an authenticated, local attacker to elevate privileges on an affected device… |
CVE-2023-20272 | Medium | 6.7 | 2023-11-21 | A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to upload malicious files… |
CVE-2023-20265 | Medium | 5.5 | 2023-11-21 | A vulnerability in the web-based management interface of a small subset of Cisco IP Phones could allow an authenticated, remote attacker to conduct a stored cr… |
CVE-2023-20208 | Medium | 4.8 | 2023-11-21 | A vulnerability in the web-based management interface of Cisco ISE could allow an authenticated, remote attacker to conduct an XSS attack against a user of the… |
CVE-2023-5055 | High | 8.3 | 2023-11-21 | Possible variant of CVE-2021-3434 in function le_ecred_reconf_req. |
CVE-2023-22521 | High | 8.8 | 2023-11-21 | This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.6 of Crowd Data Center and Server. This RCE (Remote Code Executio… |
CVE-2023-22516 | High | 8.8 | 2023-11-21 | This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 8.1.0, 8.2.0, 9.0.0, 9.1.0, 9.2.0, and 9.3.0 of Bamboo Data Center and… |
CVE-2023-6213 | High | 8.8 | 2023-11-21 | Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could h… |
CVE-2023-6212 | High | 8.8 | 2023-11-21 | Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-6211 | Medium | 6.5 | 2023-11-21 | If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacker could have tricked the user into click… |
CVE-2023-6210 | Medium | 6.5 | 2023-11-21 | When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockable content such as iframes from insecure… |
CVE-2023-6209 | Medium | 6.5 | 2023-11-21 | Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could be used to override the specified host. T… |
CVE-2023-6208 | High | 8.8 | 2023-11-21 | When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a temporary storage not unlike the clipboa… |
CVE-2023-6207 | High | 8.8 | 2023-11-21 | Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefox ESR < 115.5.0, and Thunderbird < 115.5. |
CVE-2023-6206 | Medium | 5.4 | 2023-11-21 | The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission prompts. It was possible to use this fact t… |
CVE-2023-6205 | Medium | 6.5 | 2023-11-21 | It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to an exploitable crash. This vulnerability… |
CVE-2023-6204 | Medium | 6.5 | 2023-11-21 | On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak memory data into the images created on t… |
CVE-2023-49061 | Medium | 6.1 | 2023-11-21 | An attacker could have performed HTML template injection via Reader Mode and exfiltrated user information. This vulnerability affects Firefox for iOS < 120. |
CVE-2023-49060 | Critical | 9.8 | 2023-11-21 | An attacker could have accessed internal pages or data by ex-filtrating a security key from ReaderMode via the `referrerpolicy` attribute. This vulnerability a… |
CVE-2023-48124 | Medium | 5.4 | 2023-11-21 | Cross Site Scripting in SUP Online Shopping v.1.0 allows a remote attacker to execute arbitrary code via the Name, Email and Address parameters in the Register… |
CVE-2023-6235 | High | 7.8 | 2023-11-21 | An uncontrolled search path element vulnerability has been found in the Duet Display product, affecting version 2.5.9.1. An attacker could place an arbitrary l… |
CVE-2023-28802 | Medium | 4.9 | 2023-11-21 | An Improper Validation of Integrity Check Value in Zscaler Client Connector on Windows allows an authenticated user to disable ZIA/ZPA by interrupting the serv… |
CVE-2023-5599 | Medium | 5.4 | 2023-11-21 | A stored Cross-site Scripting (XSS) vulnerability affecting 3DDashboard in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allows… |
CVE-2023-5598 | Medium | 5.4 | 2023-11-21 | Stored Cross-site Scripting (XSS) vulnerabilities affecting 3DSwym in 3DSwymer from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2023x allow an at… |
CVE-2023-5776 | Medium | 4.3 | 2023-11-21 | The Post Meta Data Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.2.1. This is due to missing… |
CVE-2023-5553 | High | 7.6 | 2023-11-21 | During internal Axis Security Development Model (ASDM) threat-modelling, a flaw was found in the protection for device tampering (commonly known as Secure Boot… |
CVE-2023-4424 | High | 8.3 | 2023-11-21 | An malicious BLE device can cause buffer overflow by sending malformed advertising packet BLE device using Zephyr OS, leading to DoS or potential RCE on the vi… |
CVE-2023-4149 | Critical | 9.8 | 2023-11-21 | A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full system control. Those c… |
CVE-2023-46935 | Medium | 5.4 | 2023-11-21 | eyoucms v1.6.4 is vulnerable Cross Site Scripting (XSS), which can lead to stealing sensitive information of logged-in users. |
CVE-2023-21418 | High | 7.1 | 2023-11-21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for fil… |
CVE-2023-21417 | High | 7.1 | 2023-11-21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allo… |
CVE-2023-21416 | High | 7.1 | 2023-11-21 | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing f… |
CVE-2023-45886 | High | 7.5 | 2023-11-21 | The BGP daemon (bgpd) in IP Infusion ZebOS through 7.10.6 allow remote attackers to cause a denial of service by sending crafted BGP update messages containing… |
CVE-2023-42770 | Critical | 10.0 | 2023-11-21 | Red Lion SixTRAK and VersaTRAK Series RTUs with authenticated users enabled (UDR-A) any Sixnet UDR message will meet an authentication challenge over UDP/IP… |
CVE-2023-6144 | Critical | 9.1 | 2023-11-21 | Dev blog v1.0 allows to exploit an account takeover through the "user" cookie. With this, an attacker can access any user's session just by knowing their usern… |
CVE-2023-6142 | Medium | 5.4 | 2023-11-21 | Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malici… |
CVE-2023-40151 | Critical | 10.0 | 2023-11-21 | When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RTUs with authenti… |
CVE-2023-6199 | Medium | 6.5 | 2023-11-20 | Book Stack version 23.10.2 allows filtering local files on the server. This is possible because the application is vulnerable to SSRF. |
CVE-2023-48310 | Critical | 9.1 | 2023-11-20 | TestingPlatform is a testing platform for Internet Security Standards. Prior to version 2.1.1, user input is not filtered correctly. Nmap options are accepted… |
CVE-2023-48051 | High | 7.5 | 2023-11-20 | An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding. |
CVE-2023-48192 | High | 7.8 | 2023-11-20 | An issue in TOTOlink A3700R v.9.1.2u.6134_B20201202 allows a local attacker to execute arbitrary code via the setTracerouteCfg function. |
CVE-2023-48176 | Critical | 9.8 | 2023-11-20 | An Insecure Permissions issue in WebsiteGuide v.0.2 allows a remote attacker to gain escalated privileges via crafted jwt (JSON web token). |
CVE-2023-6178 | Medium | 6.8 | 2023-11-20 | An arbitrary file write vulnerability exists where an authenticated attacker with privileges on the managing application could alter Nessus Rules variables to… |
CVE-2023-6062 | Medium | 6.8 | 2023-11-20 | An arbitrary file write vulnerability exists where an authenticated, remote attacker with administrator privileges on the Nessus application could alter Nessu… |
CVE-2023-47311 | Medium | 6.1 | 2023-11-20 | An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking. |
CVE-2023-47172 | High | 7.8 | 2023-11-20 | Certain WithSecure products allow Local Privilege Escalation. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Email and S… |
CVE-2023-46471 | Medium | 5.4 | 2023-11-20 | Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable script… |
CVE-2023-46470 | Medium | 5.4 | 2023-11-20 | Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in t… |
CVE-2023-48111 | High | 7.5 | 2023-11-20 | Tenda AX1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the function saveParentControlInfo . This vulnerability allows attac… |
CVE-2023-48110 | High | 7.5 | 2023-11-20 | Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the urls parameter in the function saveParentControlInfo . This vulnerability allows attack… |
CVE-2023-48109 | High | 7.5 | 2023-11-20 | Tenda AX1803 v1.0.0.1 was discovered to contain a heap overflow via the deviceId parameter in the function saveParentControlInfo . This vulnerability allows at… |
CVE-2023-47417 | Medium | 6.1 | 2023-11-20 | Cross Site Scripting (XSS) vulnerability in the component /shells/embedder.html of DZSlides after v2011.07.25 allows attackers to execute arbitrary code via a… |
CVE-2023-46990 | Critical | 9.8 | 2023-11-20 | Deserialization of Untrusted Data in PublicCMS v.4.0.202302.e allows a remote attacker to execute arbitrary code via a crafted script to the writeReplace funct… |
CVE-2023-38823 | Critical | 9.8 | 2023-11-20 | Buffer Overflow vulnerability in Tenda Ac19 v.1.0, AC18, AC9 v.1.0, AC6 v.2.0 and v.1.0 allows a remote attacker to execute arbitrary code via the formSetCfm f… |
CVE-2023-5799 | Medium | 5.4 | 2023-11-20 | The WP Hotel Booking WordPress plugin before 2.0.8 does not have proper authorisation when deleting a package, allowing Contributor and above roles to delete p… |
CVE-2023-5652 | Critical | 9.8 | 2023-11-20 | The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not escape user input before using it in a SQL… |
CVE-2023-5651 | Medium | 5.4 | 2023-11-20 | The WP Hotel Booking WordPress plugin before 2.0.8 does not have authorisation and CSRF checks, as well as does not ensure that the package to be deleted is a… |
CVE-2023-5640 | Critical | 9.8 | 2023-11-20 | The Article Analytics WordPress plugin does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to una… |
CVE-2023-5610 | Medium | 5.4 | 2023-11-20 | The Seraphinite Accelerator WordPress plugin before 2.2.29 does not validate the URL to redirect any authenticated user to, leading to an arbitrary redirect |
CVE-2023-5609 | Medium | 6.1 | 2023-11-20 | The Seraphinite Accelerator WordPress plugin before 2.2.29 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflect… |
CVE-2023-5509 | Medium | 5.4 | 2023-11-20 | The myStickymenu WordPress plugin before 2.6.5 does not adequately authorize some ajax calls, allowing any logged-in user to perform the actions. |
CVE-2023-5343 | Medium | 4.8 | 2023-11-20 | The Popup box WordPress plugin before 3.7.9 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-5340 | Critical | 9.8 | 2023-11-20 | The Five Star Restaurant Menu and Food Ordering WordPress plugin before 2.4.11 unserializes user input via an AJAX action available to unauthenticated users, a… |
CVE-2023-5140 | Medium | 6.1 | 2023-11-20 | The Bonus for Woo WordPress plugin before 5.8.3 does not sanitise and escape some parameters before outputting them back in pages, leading to Reflected Cross-S… |
CVE-2023-5119 | Medium | 4.8 | 2023-11-20 | The Forminator WordPress plugin before 1.27.0 does not properly sanitize the redirect-url field in the form submission settings, which could allow high-privile… |
CVE-2023-4970 | Medium | 4.8 | 2023-11-20 | The PubyDoc WordPress plugin through 2.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform C… |
CVE-2023-4824 | High | 8.8 | 2023-11-20 | The WooHoo Newspaper Magazine theme does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change… |
CVE-2023-4808 | Medium | 4.8 | 2023-11-20 | The WP Post Popup WordPress plugin through 3.7.3 does not sanitise and escape some of its inputs, which could allow high privilege users such as admin to perfo… |
CVE-2023-4799 | Medium | 5.4 | 2023-11-20 | The Magic Embeds WordPress plugin before 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where t… |
CVE-2023-48309 | Medium | 5.3 | 2023-11-20 | NextAuth.js provides authentication for Next.js. `next-auth` applications prior to version 4.24.5 that rely on the default Middleware authorization are affecte… |
CVE-2023-48300 | Medium | 6.3 | 2023-11-20 | The `Embed Privacy` plugin for WordPress that prevents the loading of embedded external content is vulnerable to Stored Cross-Site Scripting via `embed_privacy… |
CVE-2023-48293 | High | 8.8 | 2023-11-20 | The XWiki Admin Tools Application provides tools to help the administration of XWiki. Prior to version 4.5.1, a cross-site request forgery vulnerability in the… |
CVE-2023-38885 | High | 8.8 | 2023-11-20 | OpenSIS Classic Community Edition version 9.0 lacks cross-site request forgery (CSRF) protection throughout the whole app. This may allow an attacker to trick… |
CVE-2023-38884 | High | 7.5 | 2023-11-20 | An Insecure Direct Object Reference (IDOR) vulnerability in the Community Edition version 9.0 of openSIS Classic allows an unauthenticated remote attacker to a… |
CVE-2023-38883 | Medium | 6.1 | 2023-11-20 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitra… |
CVE-2023-38882 | Medium | 6.1 | 2023-11-20 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitra… |
CVE-2023-38881 | Medium | 6.1 | 2023-11-20 | A reflected cross-site scripting (XSS) vulnerability in the Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to execute arbitra… |
CVE-2023-38880 | Critical | 9.8 | 2023-11-20 | The Community Edition version 9.0 of OS4ED's openSIS Classic has a broken access control vulnerability in the database backup functionality. Whenever an admin… |
CVE-2023-38879 | High | 7.5 | 2023-11-20 | The Community Edition version 9.0 of OS4ED's openSIS Classic allows remote attackers to read arbitrary files via a directory traversal vulnerability in the 'fi… |
CVE-2023-48292 | Critical | 9.6 | 2023-11-20 | The XWiki Admin Tools Application provides tools to help the administration of XWiki. Starting in version 4.4 and prior to version 4.5.1, a cross site request… |
CVE-2023-48241 | High | 7.5 | 2023-11-20 | XWiki Platform is a generic wiki platform. Starting in version 6.3-milestone-2 and prior to versions 14.10.15, 15.5.1, and 15.6RC1, the Solr-based search sugge… |
CVE-2023-48240 | Critical | 9.0 | 2023-11-20 | XWiki Platform is a generic wiki platform. The rendered diff in XWiki embeds images to be able to compare the contents and not display a difference for an actu… |
CVE-2023-48223 | Medium | 5.9 | 2023-11-20 | fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3.2, the fast-jwt library does not properly prevent JWT algorithm confusion for… |
CVE-2023-48221 | High | 7.3 | 2023-11-20 | wire-avs provides Audio, Visual, and Signaling (AVS) functionality sure the secure messaging software Wire. Prior to versions 9.2.22 and 9.3.5, a remote format… |
CVE-2023-48218 | Medium | 5.3 | 2023-11-20 | The Strapi Protected Populate Plugin protects `get` endpoints from revealing too much information. Prior to version 1.3.4, users were able to bypass the field… |
CVE-2023-35762 | Critical | 9.9 | 2023-11-20 | Versions of INEA ME RTU firmware 3.36b and prior are vulnerable to operating system (OS) command injection, which could allow remote code execution. |
CVE-2023-29155 | Critical | 9.8 | 2023-11-20 | Versions of INEA ME RTU firmware 3.36b and prior do not require authentication to the "root" account on the host system of the device. This could allow an atta… |
CVE-2023-36013 | Medium | 6.5 | 2023-11-20 | PowerShell Information Disclosure Vulnerability |
CVE-2023-6197 | Medium | 5.4 | 2023-11-20 | The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.4. This is due to missing or inco… |
CVE-2023-6196 | High | 8.8 | 2023-11-20 | The Audio Merchant plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 5.0.4. This is due to missing or inco… |
CVE-2023-48090 | High | 7.1 | 2023-11-20 | GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leaks in extract_attributes media_tools/m3u8.c:329. |
CVE-2023-48039 | Medium | 5.5 | 2023-11-20 | GPAC 2.3-DEV-rev617-g671976fcc-master is vulnerable to memory leak in gf_mpd_parse_string media_tools/mpd.c:75. |
CVE-2023-47772 | Medium | 6.5 | 2023-11-20 | Contributor+ Stored Cross-Site Scripting (XSS) vulnerability in Slider Revolution <= 6.6.14. |
CVE-2023-6045 | Medium | 5.9 | 2023-11-20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through type confusion. |
CVE-2023-5593 | High | 7.8 | 2023-11-20 | The out-of-bounds write vulnerability in the Windows-based SecuExtender SSL VPN Client software version 4.0.4.0 could allow an authenticated local user to gain… |
CVE-2023-47217 | Medium | 4.0 | 2023-11-20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker cause DOS through buffer overflow. |
CVE-2023-46705 | Medium | 6.2 | 2023-11-20 | in OpenHarmony v3.2.2 and prior versions allow a local attacker causes system information leak through type confusion. |