2023 CVEs (page 125)
Page 125 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5666 | Medium | 6.4 | 2023-10-30 | The Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'tcpaccordion' shortcode in all versions up to, and including… |
CVE-2023-5583 | High | 8.8 | 2023-10-30 | The WP Simple Galleries plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.34 via deserialization of untrusted inpu… |
CVE-2023-5566 | Medium | 6.4 | 2023-10-30 | The Simple Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.0.20 due to insuffic… |
CVE-2023-5565 | Medium | 6.4 | 2023-10-30 | The Shortcode Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'shortmenu' shortcode in versions up to, and including, 3.2 due to ins… |
CVE-2023-5362 | Medium | 6.4 | 2023-10-30 | The Carousel, Recent Post Slider and Banner Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'spice_post_slider' shortcode in versi… |
CVE-2023-5335 | Medium | 6.4 | 2023-10-30 | The Buzzsprout Podcasting plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'buzzsprout' shortcode in versions up to, and including, 1.8.4… |
CVE-2023-5315 | High | 8.8 | 2023-10-30 | The Google Maps made Simple plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 0.6 due to insuffi… |
CVE-2023-5252 | Medium | 6.4 | 2023-10-30 | The FareHarbor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.6.7 due to insufficient inp… |
CVE-2023-5251 | Medium | 5.4 | 2023-10-30 | The Grid Plus plugin for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check on the 'grid_plus_save… |
CVE-2023-5250 | High | 8.8 | 2023-10-30 | The Grid Plus plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.3.3 via a shortcode attribute. This allows subscri… |
CVE-2023-5199 | Critical | 9.9 | 2023-10-30 | The PHP to Page plugin for WordPress is vulnerable Local File Inclusion to Remote Code Execution in versions up to, and including, 0.3 via the 'php-to-page' sh… |
CVE-2023-5164 | Medium | 6.4 | 2023-10-30 | The Bellows Accordion Menu plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 1.4.2 due to insu… |
CVE-2023-5049 | Medium | 6.4 | 2023-10-30 | The Giveaways and Contests by RafflePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'rafflepress' and 'rafflepress_gutenberg' s… |
CVE-2023-5833 | High | 8.8 | 2023-10-30 | Improper Access Control in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. |
CVE-2023-5832 | Critical | 9.1 | 2023-10-30 | Improper Input Validation in GitHub repository mintplex-labs/anything-llm prior to 0.1.0. |
CVE-2023-5844 | High | 7.2 | 2023-10-30 | Unverified Password Change in GitHub repository pimcore/admin-ui-classic-bundle prior to 1.2.0. |
CVE-2023-42431 | Low | 2.1 | 2023-10-30 | Cross-site Scripting (XSS) vulnerability in BlueSpiceAvatars extension of BlueSpice allows logged in user to inject arbitrary HTML into the profile image dialo… |
CVE-2023-45799 | High | 7.2 | 2023-10-30 | In MLSoft TCO!stream versions 8.0.22.1115 and below, a vulnerability exists due to insufficient permission validation. This allows an attacker to make the vict… |
CVE-2023-45798 | High | 8.4 | 2023-10-30 | In Yettiesoft VestCert versions 2.36 to 2.5.29, a vulnerability exists due to improper validation of third-party modules. This allows malicious actors to load… |
CVE-2023-45797 | Critical | 9.8 | 2023-10-30 | A Buffer overflow vulnerability in DreamSecurity MagicLine4NX versions 1.0.0.1 to 1.0.0.26 allows an attacker to remotely execute code. |
CVE-2023-45746 | Medium | 5.4 | 2023-10-30 | Cross-site scripting vulnerability in Movable Type series allows a remote authenticated attacker to inject an arbitrary script. Affected products/versions are… |
CVE-2023-44141 | High | 7.8 | 2023-10-30 | Inkdrop prior to v5.6.0 allows a local attacker to conduct a code injection attack by having a legitimate user open a specially crafted markdown file. |
CVE-2023-46867 | Medium | 6.5 | 2023-10-30 | In International Color Consortium DemoIccMAX 79ecb74, CIccXformMatrixTRC::GetCurve in IccCmm.cpp in libSampleICC.a has a NULL pointer dereference. |
CVE-2023-46866 | Medium | 6.5 | 2023-10-30 | In International Color Consortium DemoIccMAX 79ecb74, CIccCLUT::Interp3d in IccProfLib/IccTagLut.cpp in libSampleICC.a attempts to access array elements at out… |
CVE-2023-5842 | Medium | 4.8 | 2023-10-30 | Cross-site Scripting (XSS) - Stored in GitHub repository dolibarr/dolibarr prior to 16.0.5. |
CVE-2023-46865 | High | 7.2 | 2023-10-30 | /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing this code into an ima… |
CVE-2023-4393 | Medium | 5.4 | 2023-10-30 | HTML and SMTP injections on the registration page of LiquidFiles versions 3.7.13 and below, allow an attacker to perform more advanced phishing attacks against… |
CVE-2023-46864 | Medium | 5.3 | 2023-10-30 | Peppermint Ticket Management through 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/ticket/1/file/download?filepath=../ POST request. |
CVE-2023-46863 | High | 7.5 | 2023-10-30 | Peppermint Ticket Management before 0.2.4 allows remote attackers to read arbitrary files via a /api/v1/users/file/download?filepath=./../ POST request. |
CVE-2023-46862 | Medium | 4.7 | 2023-10-29 | An issue was discovered in the Linux kernel through 6.5.9. During a race with SQ thread exit, an io_uring/fdinfo.c io_uring_show_fdinfo NULL pointer dereferenc… |
CVE-2023-40685 | High | 7.4 | 2023-10-29 | Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability. A malicious actor with command line… |
CVE-2023-5840 | High | 8.8 | 2023-10-29 | Weak Password Recovery Mechanism for Forgotten Password in GitHub repository linkstackorg/linkstack prior to v4.2.9. |
CVE-2023-5839 | High | 7.8 | 2023-10-29 | Privilege Chaining in GitHub repository hestiacp/hestiacp prior to 1.8.9. |
CVE-2023-5838 | Critical | 9.8 | 2023-10-29 | Insufficient Session Expiration in GitHub repository linkstackorg/linkstack prior to v4.2.9. |
CVE-2023-46858 | Medium | 5.4 | 2023-10-29 | Moodle 4.3 allows /grade/report/grader/index.php?searchvalue= reflected XSS when logged in as a teacher. NOTE: the Moodle Security FAQ link states "Some forms… |
CVE-2023-43041 | Medium | 6.5 | 2023-10-29 | IBM QRadar SIEM 7.5 is vulnerable to information exposure allowing a delegated Admin tenant user with a specific domain security profile assigned to see data f… |
CVE-2023-40686 | Medium | 4.9 | 2023-10-29 | Management Central as part of IBM i 7.2, 7.3, 7.4, and 7.5 Navigator contains a local privilege escalation vulnerability. A malicious actor with command line… |
CVE-2023-5837 | Low | 3.5 | 2023-10-28 | A vulnerability classified as problematic was found in AlexanderLivanov FotosCMS2 up to 2.4.3. This vulnerability affects unknown code of the file profile.php… |
CVE-2023-5836 | Medium | 6.3 | 2023-10-28 | A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of th… |
CVE-2023-46854 | Medium | 5.4 | 2023-10-28 | Proxmox proxmox-widget-toolkit before 4.0.9, as used in multiple Proxmox products, allows XSS via the edit notes feature. |
CVE-2023-45897 | Medium | 5.5 | 2023-10-28 | exfatprogs before 1.2.2 allows out-of-bounds memory access, such as in read_file_dentry_set. |
CVE-2023-5835 | Low | 3.5 | 2023-10-28 | A vulnerability classified as problematic was found in hu60t hu60wap6. Affected by this vulnerability is the function markdown of the file src/class/ubbparser… |
CVE-2023-5426 | High | 7.5 | 2023-10-28 | The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdm_wp_delete_user… |
CVE-2023-5425 | High | 8.8 | 2023-10-28 | The Post Meta Data Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the pmdm_wp_change_user… |
CVE-2023-46215 | High | 7.5 | 2023-10-28 | Insertion of Sensitive Information into Log File vulnerability in Apache Airflow Celery provider, Apache Airflow. Sensitive information logged as clear text w… |
CVE-2023-46570 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32 function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-46569 | Critical | 9.8 | 2023-10-28 | An out-of-bounds read in radare2 v.5.8.9 and before exists in the print_insn32_fpu function of libr/arch/p/nds32/nds32-dis.h. |
CVE-2023-46468 | High | 7.8 | 2023-10-28 | An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function. |
CVE-2023-46467 | Medium | 5.4 | 2023-10-28 | Cross Site Scripting vulnerability in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted payload to the username para… |
CVE-2023-43322 | High | 8.8 | 2023-10-28 | ZPE Systems, Inc Nodegrid OS v5.0.0 to v5.0.17, v5.2.0 to v5.2.19, v5.4.0 to v5.4.16, v5.6.0 to v5.6.13, v5.8.0 to v5.8.10, and v5.10.0 to v5.10.3 was discover… |
CVE-2023-46587 | High | 7.8 | 2023-10-27 | Buffer Overflow vulnerability in XnView Classic v.2.51.5 allows a local attacker to execute arbitrary code via a crafted TIF file. |
CVE-2023-5834 | Low | 3.8 | 2023-10-27 | HashiCorp Vagrant's Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized fil… |
CVE-2023-46490 | Medium | 6.5 | 2023-10-27 | SQL Injection vulnerability in Cacti v1.2.25 allows a remote attacker to obtain sensitive information via the form_actions() function in the managers.php funct… |
CVE-2023-5830 | High | 7.3 | 2023-10-27 | A vulnerability classified as critical has been found in ColumbiaSoft Document Locator. This affects an unknown part of the file /api/authentication/login of t… |
CVE-2023-46510 | Critical | 9.8 | 2023-10-27 | An issue in ZIONCOM (Hong Kong) Technology Limited A7000R v.4.1cu.4154 allows an attacker to execute arbitrary code via the cig-bin/cstecgi.cgi to the settings… |
CVE-2023-46509 | Critical | 9.8 | 2023-10-27 | An issue in Contec SolarView Compact v.6.0 and before allows an attacker to execute arbitrary code via the texteditor.php component. |
CVE-2023-46211 | Medium | 6.5 | 2023-10-27 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Brainstorm Force Ultimate Addons for WPBakery Page Builder plugin <= 3.19.14 versions. |
CVE-2023-46209 | High | 7.1 | 2023-10-27 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in G5Theme Grid Plus – Unlimited grid plugin <= 1.3.2 versions. |
CVE-2023-46208 | High | 7.1 | 2023-10-27 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in StylemixThemes Motors – Car Dealer, Classifieds & Listing plugin <= 1.4.6 versions. |
CVE-2023-46200 | Medium | 5.9 | 2023-10-27 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Stephen Darlington, Wandle Software Limited Smart App Banner plugin <= 1.1.3 versions. |
CVE-2023-44480 | High | 8.8 | 2023-10-27 | Leave Management System Project v1.0 is vulnerable to multiple Authenticated SQL Injection vulnerabilities. The 'setcasualleave' parameter of the admin/setleav… |
CVE-2023-40140 | High | 7.8 | 2023-10-27 | In android_view_InputDevice_create of android_view_InputDevice.cpp, there is a possible way to execute arbitrary code due to a use after free. This could lead… |
CVE-2023-40139 | Medium | 5.5 | 2023-10-27 | In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with… |
CVE-2023-40138 | Low | 3.3 | 2023-10-27 | In FillUi of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure with… |
CVE-2023-40137 | Low | 3.3 | 2023-10-27 | In multiple functions of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informatio… |
CVE-2023-40136 | Low | 3.3 | 2023-10-27 | In setHeader of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclos… |
CVE-2023-40135 | Low | 3.3 | 2023-10-27 | In applyCustomDescription of SaveUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information… |
CVE-2023-40134 | Low | 3.3 | 2023-10-27 | In isFullScreen of FillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local information disclosure… |
CVE-2023-40133 | Medium | 5.5 | 2023-10-27 | In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy. This could lead to local informatio… |
CVE-2023-40131 | High | 7.0 | 2023-10-27 | In GpuService of GpuService.cpp, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additiona… |
CVE-2023-40130 | High | 7.8 | 2023-10-27 | In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code. This could lead to local escalation of pr… |
CVE-2023-40129 | High | 8.8 | 2023-10-27 | In build_read_multi_rsp of gatt_sr.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) cod… |
CVE-2023-40128 | High | 7.8 | 2023-10-27 | In several functions of xmlregexp.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege wi… |
CVE-2023-40127 | Low | 3.3 | 2023-10-27 | In multiple locations, there is a possible way to access screenshots due to a confused deputy. This could lead to local information disclosure with no addition… |
CVE-2023-40125 | High | 7.8 | 2023-10-27 | In onCreate of ApnEditor.java, there is a possible way for a Guest user to change the APN due to a permission bypass. This could lead to local escalation of pr… |
CVE-2023-40123 | Medium | 5.5 | 2023-10-27 | In updateActionViews of PipMenuView.java, there is a possible bypass of a multi user security boundary due to a confused deputy. This could lead to local infor… |
CVE-2023-40121 | Medium | 5.5 | 2023-10-27 | In appendEscapedSQLString of DatabaseUtils.java, there is a possible SQL injection due to unsafe deserialization. This could lead to local information disclosu… |
CVE-2023-40120 | High | 7.8 | 2023-10-27 | In multiple locations, there is a possible way to bypass user notification of foreground services due to improper input validation. This could lead to local es… |
CVE-2023-40117 | High | 7.8 | 2023-10-27 | In resetSettingsLocked of SettingsProvider.java, there is a possible lockscreen bypass due to a permissions bypass. This could lead to local escalation of priv… |
CVE-2023-40116 | High | 7.8 | 2023-10-27 | In onTaskAppeared of PipTaskOrganizer.java, there is a possible way to bypass background activity launch restrictions due to a logic error in the code. This co… |
CVE-2023-35794 | High | 8.8 | 2023-10-27 | An issue was discovered in Cassia Access Controller 2.1.1.2303271039. The Web SSH terminal endpoint (spawned console) can be accessed without authentication. S… |
CVE-2023-32738 | Medium | 5.9 | 2023-10-27 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alkaweb Eonet Manual User Approve plugin <= 2.1.3 versions. |
CVE-2023-5829 | Medium | 6.3 | 2023-10-27 | A vulnerability was found in code-projects Admission Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2023-5828 | High | 7.3 | 2023-10-27 | A vulnerability was found in Nanning Ontall Longxing Industrial Development Zone Project Construction and Installation Management System up to 20231026. It has… |
CVE-2023-46853 | Critical | 9.8 | 2023-10-27 | In Memcached before 1.6.22, an off-by-one error exists when processing proxy requests in proxy mode, if \n is used instead of \r\n. |
CVE-2023-46852 | High | 7.5 | 2023-10-27 | In Memcached before 1.6.22, a buffer overflow exists when processing multiget requests in proxy mode, if there are many spaces after the "get" substring. |
CVE-2023-46407 | Medium | 5.5 | 2023-10-27 | FFmpeg prior to commit bf814 was discovered to contain an out of bounds read via the dist->alphabet_size variable in the read_vlc_prefix() function. |
CVE-2023-29009 | Medium | 6.1 | 2023-10-27 | baserCMS is a website development framework with WebAPI that runs on PHP8 and CakePHP4. There is a XSS Vulnerability in Favorites Feature to baserCMS. This iss… |
CVE-2023-4967 | High | 8.2 | 2023-10-27 | Denial of Service in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA Virtual Server |
CVE-2023-46290 | High | 8.1 | 2023-10-27 | Due to inadequate code logic, a previously unauthenticated threat actor could potentially obtain a local Windows OS user token through the FactoryTalk® Servic… |
CVE-2023-46289 | High | 7.5 | 2023-10-27 | Rockwell Automation FactoryTalk View Site Edition insufficiently validates user input, which could potentially allow threat actors to send malicious data brin… |
CVE-2023-46246 | Medium | 4.0 | 2023-10-27 | Vim is an improved version of the good old UNIX editor Vi. Heap-use-after-free in memory allocated in the function `ga_grow_inner` in in the file `src/alloc.c`… |
CVE-2023-27858 | High | 7.8 | 2023-10-27 | Rockwell Automation Arena Simulation contains an arbitrary code execution vulnerability that could potentially allow a malicious user to commit unauthorized c… |
CVE-2023-27854 | High | 7.8 | 2023-10-27 | An arbitrary code execution vulnerability was reported to Rockwell Automation in Arena Simulation that could potentially allow a malicious user to commit unau… |
CVE-2023-5827 | Medium | 5.5 | 2023-10-27 | A vulnerability was found in Shanghai CTI Navigation CTI Monitoring and Early Warning System 2.2. It has been classified as critical. This affects an unknown p… |
CVE-2023-5826 | Medium | 5.5 | 2023-10-27 | A vulnerability was found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. Affected by this issue is some unknown functionality… |
CVE-2023-46604 | Critical | 10.0 | 2023-10-27 | The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a… |
CVE-2023-5443 | High | 7.5 | 2023-10-27 | Improper Protection for Outbound Error Messages and Alert Signals vulnerability in EDM Informatics E-invoice allows Account Footprinting. This issue affects E… |
CVE-2023-46394 | Medium | 5.4 | 2023-10-27 | A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via… |
CVE-2023-46393 | High | 7.5 | 2023-10-27 | gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted… |