2023 CVEs (page 112)
Page 112 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-25949 | Medium | 5.5 | 2023-11-14 | Uncontrolled resource consumption in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of serv… |
CVE-2023-25756 | Medium | 4.6 | 2023-11-14 | Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via adjacent… |
CVE-2023-25603 | Medium | 5.4 | 2023-11-14 | A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.0 - 6.4.1 allow an… |
CVE-2023-25080 | Medium | 5.3 | 2023-11-14 | Protection mechanism failure in some Intel(R) Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated user to potentially… |
CVE-2023-25075 | Medium | 6.7 | 2023-11-14 | Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated user to potentially… |
CVE-2023-25071 | Medium | 5.6 | 2023-11-14 | NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authenticated user to p… |
CVE-2023-24592 | High | 7.3 | 2023-11-14 | Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentially enable escalation… |
CVE-2023-24588 | Medium | 5.9 | 2023-11-14 | Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potential… |
CVE-2023-24587 | Medium | 6.9 | 2023-11-14 | Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable denial of service… |
CVE-2023-23583 | High | 8.8 | 2023-11-14 | Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially enable escalation o… |
CVE-2023-22663 | Medium | 5.9 | 2023-11-14 | Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via network access. |
CVE-2023-22448 | Medium | 5.9 | 2023-11-14 | Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via network access. |
CVE-2023-22337 | High | 7.5 | 2023-11-14 | Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2023-22329 | Low | 2.6 | 2023-11-14 | Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of service via adjacen… |
CVE-2023-22327 | Medium | 6.0 | 2023-11-14 | Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable information disclosure v… |
CVE-2023-22313 | Low | 2.3 | 2023-11-14 | Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable information disclos… |
CVE-2023-22310 | Medium | 6.5 | 2023-11-14 | Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local acces… |
CVE-2023-22305 | Medium | 6.5 | 2023-11-14 | Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of service via local acc… |
CVE-2023-22292 | High | 7.3 | 2023-11-14 | Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2023-22290 | Medium | 6.5 | 2023-11-14 | Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network access. |
CVE-2023-22285 | High | 7.5 | 2023-11-14 | Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via network access. |
CVE-2023-20596 | Critical | 9.8 | 2023-11-14 | Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code… |
CVE-2023-20592 | Medium | 6.5 | 2023-11-14 | Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache line write-back beha… |
CVE-2023-20571 | High | 8.1 | 2023-11-14 | A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentially resulting in p… |
CVE-2023-20568 | Medium | 6.7 | 2023-11-14 | Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeonInstaller.exe wit… |
CVE-2023-20567 | Medium | 6.7 | 2023-11-14 | Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSoftwareInstaller.ex… |
CVE-2023-20566 | Medium | 5.3 | 2023-11-14 | Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity. |
CVE-2023-20565 | High | 7.8 | 2023-11-14 | Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. |
CVE-2023-20563 | High | 7.8 | 2023-11-14 | Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local access. |
CVE-2023-20533 | Medium | 6.1 | 2023-11-14 | Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, potentially resulting… |
CVE-2023-20526 | Low | 1.9 | 2023-11-14 | Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memory potentially lead… |
CVE-2023-20521 | Low | 3.3 | 2023-11-14 | TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, potentially leading t… |
CVE-2023-20519 | Low | 3.3 | 2023-11-14 | A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's migration agent res… |
CVE-2023-45585 | Low | 2.3 | 2023-11-14 | An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.6.3 and below, vers… |
CVE-2023-45582 | Medium | 5.6 | 2023-11-14 | An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0 through 7.0.6 and… |
CVE-2023-44248 | Medium | 4.4 | 2023-11-14 | An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local at… |
CVE-2023-42783 | High | 7.5 | 2023-11-14 | A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 through 8.3.0 and 8.2.2 al… |
CVE-2023-41840 | High | 7.8 | 2023-11-14 | A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine lib… |
CVE-2023-41676 | Medium | 4.3 | 2023-11-14 | An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker with access to windo… |
CVE-2023-38177 | Medium | 6.1 | 2023-11-14 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2023-38151 | High | 8.8 | 2023-11-14 | Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability |
CVE-2023-36719 | High | 7.8 | 2023-11-14 | Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege Vulnerability |
CVE-2023-36705 | High | 7.8 | 2023-11-14 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-36641 | Medium | 6.5 | 2023-11-14 | A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10, FortiProxy 2.0 all versions, FortiProxy… |
CVE-2023-36633 | Medium | 5.4 | 2023-11-14 | An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated attacker to see and… |
CVE-2023-36560 | High | 8.8 | 2023-11-14 | ASP.NET Security Feature Bypass Vulnerability |
CVE-2023-36553 | Critical | 9.8 | 2023-11-14 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5… |
CVE-2023-36439 | High | 8.0 | 2023-11-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36428 | Medium | 5.5 | 2023-11-14 | Microsoft Local Security Authority Subsystem Service Information Disclosure Vulnerability |
CVE-2023-36427 | High | 7.0 | 2023-11-14 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2023-36425 | High | 8.0 | 2023-11-14 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability |
CVE-2023-36424 | High | 7.8 | 2023-11-14 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36423 | High | 8.8 | 2023-11-14 | Microsoft Remote Registry Service Remote Code Execution Vulnerability |
CVE-2023-36422 | High | 7.8 | 2023-11-14 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
CVE-2023-36413 | Medium | 6.5 | 2023-11-14 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2023-36410 | High | 7.6 | 2023-11-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-36408 | High | 7.8 | 2023-11-14 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2023-36407 | High | 7.8 | 2023-11-14 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2023-36406 | Medium | 5.5 | 2023-11-14 | Windows Hyper-V Information Disclosure Vulnerability |
CVE-2023-36405 | High | 7.0 | 2023-11-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36404 | Medium | 5.5 | 2023-11-14 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36403 | High | 7.0 | 2023-11-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36402 | High | 8.8 | 2023-11-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36401 | High | 7.2 | 2023-11-14 | Microsoft Remote Registry Service Remote Code Execution Vulnerability |
CVE-2023-36400 | High | 8.8 | 2023-11-14 | Windows HMAC Key Derivation Elevation of Privilege Vulnerability |
CVE-2023-36399 | High | 7.1 | 2023-11-14 | Windows Storage Elevation of Privilege Vulnerability |
CVE-2023-36398 | Medium | 6.5 | 2023-11-14 | Windows NTFS Information Disclosure Vulnerability |
CVE-2023-36397 | Critical | 9.8 | 2023-11-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-36396 | High | 7.8 | 2023-11-14 | Windows Compressed Folder Remote Code Execution Vulnerability |
CVE-2023-36395 | High | 7.5 | 2023-11-14 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2023-36394 | High | 7.0 | 2023-11-14 | Windows Search Service Elevation of Privilege Vulnerability |
CVE-2023-36393 | High | 7.8 | 2023-11-14 | Windows User Interface Application Core Remote Code Execution Vulnerability |
CVE-2023-36392 | High | 7.5 | 2023-11-14 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-36052 | High | 8.6 | 2023-11-14 | Azure CLI REST Command Information Disclosure Vulnerability |
CVE-2023-36050 | High | 8.0 | 2023-11-14 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-36047 | High | 7.8 | 2023-11-14 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2023-36046 | High | 7.1 | 2023-11-14 | Windows Authentication Denial of Service Vulnerability |
CVE-2023-36045 | High | 7.8 | 2023-11-14 | Microsoft Office Graphics Remote Code Execution Vulnerability |
CVE-2023-36043 | Medium | 6.5 | 2023-11-14 | Open Management Infrastructure Information Disclosure Vulnerability |
CVE-2023-36042 | Medium | 6.2 | 2023-11-14 | Visual Studio Denial of Service Vulnerability |
CVE-2023-36041 | High | 7.8 | 2023-11-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-36039 | High | 8.0 | 2023-11-14 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-36037 | High | 7.8 | 2023-11-14 | Microsoft Excel Security Feature Bypass Vulnerability |
CVE-2023-36036 | High | 7.8 | 2023-11-14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-36035 | High | 8.0 | 2023-11-14 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-36033 | High | 7.8 | 2023-11-14 | Windows DWM Core Library Elevation of Privilege Vulnerability |
CVE-2023-36031 | High | 7.6 | 2023-11-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-36030 | Medium | 6.1 | 2023-11-14 | Microsoft Dynamics 365 Sales Spoofing Vulnerability |
CVE-2023-36028 | Critical | 9.8 | 2023-11-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-36025 | High | 8.8 | 2023-11-14 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2023-36021 | High | 8.0 | 2023-11-14 | Microsoft On-Prem Data Gateway Security Feature Bypass Vulnerability |
CVE-2023-36018 | High | 7.8 | 2023-11-14 | Visual Studio Code Jupyter Extension Spoofing Vulnerability |
CVE-2023-36017 | High | 8.8 | 2023-11-14 | Windows Scripting Engine Memory Corruption Vulnerability |
CVE-2023-36016 | Medium | 6.2 | 2023-11-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-34991 | Critical | 9.8 | 2023-11-14 | A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4… |
CVE-2023-33304 | Medium | 4.4 | 2023-11-14 | A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass system protections v… |
CVE-2023-28002 | Medium | 6.4 | 2023-11-14 | An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versions, 6.2 all version… |
CVE-2023-26205 | High | 8.1 | 2023-11-14 | An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6.1 all versions may… |
CVE-2023-6131 | High | 8.8 | 2023-11-14 | Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |
CVE-2023-6130 | High | 8.8 | 2023-11-14 | Path Traversal: '\..\filename' in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2. |