2023 CVEs (page 122)
Page 122 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5766 | Critical | 9.8 | 2023-11-01 | A remote code execution vulnerability in Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to remotely execute code from another win… |
CVE-2023-5765 | Critical | 9.8 | 2023-11-01 | Improper access control in the password analyzer feature in Devolutions Remote Desktop Manager 2023.2.33 and earlier on Windows allows an attacker to bypass pe… |
CVE-2023-5482 | High | 8.8 | 2023-11-01 | Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out of bounds memory access via a crafted HTM… |
CVE-2023-5480 | Medium | 6.1 | 2023-11-01 | Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass XSS preventions via a malicious file. (Ch… |
CVE-2023-5358 | Medium | 5.3 | 2023-11-01 | Improper access control in Report log filters feature in Devolutions Server 2023.2.10.0 and earlier allows attackers to retrieve logs from vaults or entries th… |
CVE-2023-20267 | Medium | 4.0 | 2023-11-01 | A vulnerability in the IP geolocation rules of Snort 3 could allow an unauthenticated, remote attacker to potentially bypass IP address restrictions. This vuln… |
CVE-2023-20264 | Medium | 6.1 | 2023-11-01 | A vulnerability in the implementation of Security Assertion Markup Language (SAML) 2.0 single sign-on (SSO) for remote access VPN in Cisco Adaptive Security Ap… |
CVE-2023-20255 | Medium | 5.3 | 2023-11-01 | A vulnerability in an API of the Web Bridge feature of Cisco Meeting Server could allow an unauthenticated, remote attacker to cause a denial of service (DoS)… |
CVE-2023-20247 | Medium | 5.0 | 2023-11-01 | A vulnerability in the remote access SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software coul… |
CVE-2023-20246 | Medium | 5.8 | 2023-11-01 | Multiple Cisco products are affected by a vulnerability in Snort access control policies that could allow an unauthenticated, remote attacker to bypass the con… |
CVE-2023-20220 | High | 7.2 | 2023-11-01 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacke… |
CVE-2023-20219 | High | 7.2 | 2023-11-01 | Multiple vulnerabilities in the web management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to e… |
CVE-2023-20196 | Medium | 4.7 | 2023-11-01 | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilitie… |
CVE-2023-20175 | High | 8.8 | 2023-11-01 | A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operati… |
CVE-2023-20170 | Medium | 6.0 | 2023-11-01 | A vulnerability in a specific Cisco ISE CLI command could allow an authenticated, local attacker to perform command injection attacks on the underlying operati… |
CVE-2023-20095 | High | 8.6 | 2023-11-01 | A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could al… |
CVE-2023-20083 | High | 8.6 | 2023-11-01 | A vulnerability in ICMPv6 inspection when configured with the Snort 2 detection engine for Cisco Firepower Threat Defense (FTD) Software could allow an unauthe… |
CVE-2023-20071 | Medium | 5.8 | 2023-11-01 | Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass the config… |
CVE-2023-20070 | Medium | 4.0 | 2023-11-01 | A vulnerability in the TLS 1.3 implementation of the Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the… |
CVE-2023-20063 | High | 8.2 | 2023-11-01 | A vulnerability in the inter-device communication mechanisms between devices that are running Cisco Firepower Threat Defense (FTD) Software and devices that ar… |
CVE-2023-20048 | Critical | 9.9 | 2023-11-01 | A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to execute cert… |
CVE-2023-20042 | Medium | 6.8 | 2023-11-01 | A vulnerability in the AnyConnect SSL VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could a… |
CVE-2023-20031 | Medium | 4.0 | 2023-11-01 | A vulnerability in the SSL/TLS certificate handling of Snort 3 Detection Engine integration with Cisco Firepower Threat Defense (FTD) Software could allow an u… |
CVE-2023-5178 | High | 8.8 | 2023-11-01 | A use-after-free vulnerability was found in drivers/nvme/target/tcp.c` in `nvmet_tcp_free_crypto` due to a logical bug in the NVMe/TCP subsystem in the Linux k… |
CVE-2023-46911 | Medium | 6.1 | 2023-11-01 | There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend. |
CVE-2023-20270 | Medium | 5.8 | 2023-11-01 | A vulnerability in the interaction between the Server Message Block (SMB) protocol preprocessor and the Snort 3 detection engine for Cisco Firepower Threat Def… |
CVE-2023-20256 | Medium | 5.0 | 2023-11-01 | Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… |
CVE-2023-20245 | Medium | 5.8 | 2023-11-01 | Multiple vulnerabilities in the per-user-override feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software… |
CVE-2023-20244 | High | 8.6 | 2023-11-01 | A vulnerability in the internal packet processing of Cisco Firepower Threat Defense (FTD) Software for Cisco Firepower 2100 Series Firewalls could allow an una… |
CVE-2023-20213 | Medium | 4.3 | 2023-11-01 | A vulnerability in the CDP processing feature of Cisco ISE could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition of th… |
CVE-2023-20206 | Medium | 6.1 | 2023-11-01 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attac… |
CVE-2023-20195 | Medium | 4.7 | 2023-11-01 | Two vulnerabilities in Cisco ISE could allow an authenticated, remote attacker to upload arbitrary files to an affected device. To exploit these vulnerabilitie… |
CVE-2023-20177 | Medium | 4.0 | 2023-11-01 | A vulnerability in the SSL file policy implementation of Cisco Firepower Threat Defense (FTD) Software that occurs when the SSL/TLS connection is configured wi… |
CVE-2023-20155 | High | 7.5 | 2023-11-01 | A vulnerability in a logging API in Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to cause the device to bec… |
CVE-2023-20114 | Medium | 6.5 | 2023-11-01 | A vulnerability in the file download feature of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to download arbi… |
CVE-2023-20086 | High | 8.6 | 2023-11-01 | A vulnerability in ICMPv6 processing of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unaut… |
CVE-2023-20074 | Medium | 4.8 | 2023-11-01 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attac… |
CVE-2023-20041 | Medium | 4.8 | 2023-11-01 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attac… |
CVE-2023-20005 | Medium | 4.8 | 2023-11-01 | Multiple vulnerabilities in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attac… |
CVE-2023-5847 | Medium | 6.7 | 2023-11-01 | Under certain conditions, a low privileged attacker could load a specially crafted file during installation or upgrade to escalate privileges on Windows and L… |
CVE-2023-5627 | High | 7.5 | 2023-11-01 | A vulnerability has been identified in NPort 6000 Series, making the authentication mechanism vulnerable. This vulnerability arises from the incorrect implemen… |
CVE-2023-40062 | High | 8.0 | 2023-11-01 | SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user… |
CVE-2023-40061 | High | 8.8 | 2023-11-01 | Insecure job execution mechanism vulnerability. This vulnerability can lead to other attacks as a result. |
CVE-2023-3972 | High | 7.8 | 2023-11-01 | A vulnerability was found in insights-client. This security issue occurs because of insecure file operations or unsafe handling of temporary files and director… |
CVE-2023-33228 | Medium | 4.5 | 2023-11-01 | The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with admin… |
CVE-2023-33227 | High | 8.0 | 2023-11-01 | The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to pe… |
CVE-2023-33226 | High | 8.0 | 2023-11-01 | The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to… |
CVE-2023-4452 | Medium | 6.5 | 2023-11-01 | A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnera… |
CVE-2023-46928 | Medium | 5.5 | 2023-11-01 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_media_change_pl /afltest/gpac/src/media_tools/isom_tools.c:3293:42. |
CVE-2023-46927 | Medium | 5.5 | 2023-11-01 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in gf_isom_use_compact_size gpac/src/isomedia/isom_write.c:3403:3 in gpac/MP4Box. |
CVE-2023-5625 | Medium | 5.3 | 2023-11-01 | A regression was introduced in the Red Hat build of python-eventlet due to a change in the patch application strategy, resulting in a patch for CVE-2021-21419… |
CVE-2023-46931 | Medium | 5.5 | 2023-11-01 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a heap-buffer-overflow in ffdmx_parse_side_data /afltest/gpac/src/filters/ff_dmx.c:202:14 in gpac/MP4Box. |
CVE-2023-46930 | Medium | 5.5 | 2023-11-01 | GPAC 2.3-DEV-rev605-gfc9e29089-master contains a SEGV in gpac/MP4Box in gf_isom_find_od_id_for_track /afltest/gpac/src/isomedia/media_odf.c:522:14. |
CVE-2023-42750 | Medium | 4.4 | 2023-11-01 | In gnss service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privil… |
CVE-2023-42655 | Medium | 6.7 | 2023-11-01 | In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of p… |
CVE-2023-42654 | Medium | 5.5 | 2023-11-01 | In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42653 | Medium | 5.5 | 2023-11-01 | In faceid service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional executi… |
CVE-2023-42652 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42651 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42650 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42649 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42648 | Medium | 5.5 | 2023-11-01 | In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42647 | Medium | 5.5 | 2023-11-01 | In Ifaa service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information di… |
CVE-2023-42646 | Medium | 5.5 | 2023-11-01 | In Ifaa service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42645 | Medium | 5.5 | 2023-11-01 | In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information dis… |
CVE-2023-42644 | Medium | 5.5 | 2023-11-01 | In dm service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42643 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42642 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42641 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42640 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42639 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42638 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42637 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42636 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42635 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42634 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42633 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42632 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-42631 | Medium | 5.5 | 2023-11-01 | In validationtools, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed |
CVE-2023-1720 | Critical | 9.6 | 2023-11-01 | Lack of mime type response header in Bitrix24 22.0.300 allows authenticated remote attackers to execute arbitrary JavaScript code in the victim's browser, and… |
CVE-2023-1719 | High | 7.5 | 2023-11-01 | Global variable extraction in bitrix/modules/main/tools.php in Bitrix24 22.0.300 allows unauthenticated remote attackers to (1) enumerate attachments on the se… |
CVE-2023-1718 | High | 7.5 | 2023-11-01 | Improper file stream access in /desktop_app/file.ajax.php?action=uploadfile in Bitrix24 22.0.300 allows unauthenticated remote attackers to cause denial-of-se… |
CVE-2023-1717 | Critical | 9.6 | 2023-11-01 | Prototype pollution in bitrix/templates/bitrix24/components/bitrix/menu/left_vertical/script.js in Bitrix24 22.0.300 allows remote attackers to execute arbitr… |
CVE-2023-1716 | Critical | 9.0 | 2023-11-01 | Cross-site scripting (XSS) vulnerability in Invoice Edit Page in Bitrix24 22.0.300 allows attackers to execute arbitrary JavaScript code in the victim's brows… |
CVE-2023-1715 | Critical | 9.0 | 2023-11-01 | A logic error when using mb_strpos() to check for potential XSS payload in Bitrix24 22.0.300 allows attackers to bypass XSS sanitisation via placing HTML tags… |
CVE-2023-1714 | High | 8.8 | 2023-11-01 | Unsafe variable extraction in bitrix/modules/main/classes/general/user_options.php in Bitrix24 22.0.300 allows remote authenticated attackers to execute arbitr… |
CVE-2023-1713 | High | 8.8 | 2023-11-01 | Insecure temporary file creation in bitrix/modules/crm/lib/order/import/instagram.php in Bitrix24 22.0.300 hosted on Apache HTTP Server allows remote authentic… |
CVE-2023-4198 | Medium | 6.5 | 2023-11-01 | Improper Access Control in Dolibarr ERP CRM <= v17.0.3 allows an unauthorized authenticated user to read a database table containing customer data |
CVE-2023-4197 | High | 7.5 | 2023-11-01 | Improper input validation in Dolibarr ERP CRM <= v18.0.1 fails to strip certain PHP code from user-supplied input when creating a Website, allowing an attacker… |
CVE-2023-5516 | Medium | 5.3 | 2023-11-01 | Poorly constructed webap requests and URI components with special characters trigger unhandled errors and exceptions, disclosing information about the underly… |
CVE-2023-5515 | Medium | 5.3 | 2023-11-01 | The responses for web queries with certain parameters disclose internal path of resources. This information can be used to learn internal structure of the app… |
CVE-2023-5514 | Medium | 5.3 | 2023-11-01 | The response messages received from the eSOMS report generation using certain parameter queries with full file path can be abused for enumerating the local fi… |
CVE-2023-2622 | Low | 2.7 | 2023-11-01 | Authenticated clients can read arbitrary files on the MAIN Computer system using the remote procedure call (RPC) of the InspectSetup service endpoint. The low… |
CVE-2023-2621 | Medium | 6.5 | 2023-11-01 | The McFeeder server (distributed as part of SSW package), is susceptible to an arbitrary file write vulnerability on the MAIN computer system. This vulnerabil… |
CVE-2023-5899 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5898 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5897 | High | 8.8 | 2023-11-01 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/customLocale prior to 1.2.0-1. |
CVE-2023-5896 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/pkp-lib prior to 3.4.0-4. |
CVE-2023-5895 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - DOM in GitHub repository pkp/pkp-lib prior to 3.3.0-16. |
CVE-2023-5894 | Medium | 5.4 | 2023-11-01 | Cross-site Scripting (XSS) - Stored in GitHub repository pkp/ojs prior to 3.3.0-16. |