2023 CVEs (page 134)
Page 134 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35083 | Medium | 6.5 | 2023-10-18 | Allows an authenticated attacker with network access to read arbitrary files on Endpoint Manager recently discovered on 2022 SU3 and all previous versions pote… |
CVE-2023-5626 | High | 8.8 | 2023-10-18 | Cross-Site Request Forgery (CSRF) in GitHub repository pkp/ojs prior to 3.3.0-16. |
CVE-2023-5552 | High | 7.1 | 2023-10-18 | A password disclosure vulnerability in the Secure PDF eXchange (SPX) feature allows attackers with full email access to decrypt PDFs in Sophos Firewall version… |
CVE-2023-45811 | High | 8.1 | 2023-10-17 | Synchrony deobfuscator is a javascript cleaner & deobfuscator. A `__proto__` pollution vulnerability exists in versions before v2.4.4. Successful exploitation… |
CVE-2023-45810 | Medium | 5.3 | 2023-10-17 | OpenFGA is a flexible authorization/permission engine built for developers and inspired by Google Zanzibar. Affected versions of OpenFGA are vulnerable to a de… |
CVE-2023-42507 | High | 7.8 | 2023-10-17 | Stack-based buffer overflow vulnerability exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploited, information may be disclosed or… |
CVE-2023-42506 | High | 7.8 | 2023-10-17 | Improper restriction of operations within the bounds of a memory buffer issue exists in OnSinView2 versions 2.0.1 and earlier. If this vulnerability is exploit… |
CVE-2023-41715 | High | 8.8 | 2023-10-17 | SonicOS post-authentication Improper Privilege Management vulnerability in the SonicOS SSL VPN Tunnel allows users to elevate their privileges inside the tunne… |
CVE-2023-41713 | High | 7.5 | 2023-10-17 | SonicOS Use of Hard-coded Password vulnerability in the 'dynHandleBuyToolbar' demo function. |
CVE-2023-41712 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the SSL VPN plainprefs.exp URL endpoint leads to a firewall crash. |
CVE-2023-41711 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication Stack-Based Buffer Overflow Vulnerability in the sonicwall.exp, prefs.exp URL endpoints lead to a firewall crash. |
CVE-2023-3042 | Medium | 5.3 | 2023-10-17 | In dotCMS, versions mentioned, a flaw in the NormalizationFilter does not strip double slashes (//) from URLs, potentially enabling bypasses for XSS and access… |
CVE-2023-39280 | Medium | 6.5 | 2023-10-17 | SonicOS p ost-authentication Stack-Based Buffer Overflow vulnerability in the ssoStats-s.xml, ssoStats-s.wri URL endpoints leads to a firewall crash. |
CVE-2023-39279 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication Stack-Based Buffer Overflow vulnerability in the getPacketReplayData.json URL endpoint leads to a firewall crash. |
CVE-2023-39278 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication user assertion failure leads to Stack-Based Buffer Overflow vulnerability via main.cgi leads to a firewall crash. |
CVE-2023-39277 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication stack-based buffer overflow vulnerability in the sonicflow.csv and appflowsessions.csv URL endpoints leads to a firewall crash. |
CVE-2023-39276 | Medium | 6.5 | 2023-10-17 | SonicOS post-authentication stack-based buffer overflow vulnerability in the getBookmarkList.json URL endpoint leads to a firewall crash. |
CVE-2023-36321 | High | 7.5 | 2023-10-17 | Connected Vehicle Systems Alliance (COVESA) up to v2.18.8 was discovered to contain a buffer overflow via the component /shared/dlt_common.c. |
CVE-2023-41631 | High | 8.8 | 2023-10-17 | eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the file upload function. |
CVE-2023-41630 | Critical | 9.8 | 2023-10-17 | eSST Monitoring v2.147.1 was discovered to contain a remote code execution (RCE) vulnerability via the Gii code generator component. |
CVE-2023-41629 | High | 7.5 | 2023-10-17 | A lack of input sanitizing in the file download feature of eSST Monitoring v2.147.1 allows attackers to execute a path traversal. |
CVE-2023-22130 | Medium | 5.9 | 2023-10-17 | Vulnerability in the Sun ZFS Storage Appliance product of Oracle Systems (component: Core). The supported version that is affected is 8.8.60. Difficult to ex… |
CVE-2023-22129 | Medium | 5.5 | 2023-10-17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Easily exploitable vulnerabi… |
CVE-2023-22128 | Low | 3.1 | 2023-10-17 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Supported versions that are affected are 10 and 11. Difficult to explo… |
CVE-2023-22127 | Medium | 6.3 | 2023-10-17 | Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Content Access SDK, Image Export SDK, PDF Export SDK, HTML Ex… |
CVE-2023-22126 | Medium | 5.3 | 2023-10-17 | Vulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Content Server). The supported version that is affected is 12.2… |
CVE-2023-22125 | Medium | 5.4 | 2023-10-17 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are a… |
CVE-2023-22124 | Medium | 5.4 | 2023-10-17 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are a… |
CVE-2023-22123 | Medium | 5.4 | 2023-10-17 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are a… |
CVE-2023-22122 | Medium | 5.9 | 2023-10-17 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are a… |
CVE-2023-22121 | Medium | 5.4 | 2023-10-17 | Vulnerability in the Oracle Banking Trade Finance product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that are a… |
CVE-2023-22119 | Medium | 5.9 | 2023-10-17 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that… |
CVE-2023-22118 | Medium | 6.5 | 2023-10-17 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that… |
CVE-2023-22117 | Medium | 5.4 | 2023-10-17 | Vulnerability in the Oracle FLEXCUBE Universal Banking product of Oracle Financial Services Applications (component: Infrastructure). Supported versions that… |
CVE-2023-22115 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.33 and prior. Easily exploita… |
CVE-2023-22114 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily ex… |
CVE-2023-22113 | Low | 2.7 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.33 and prior… |
CVE-2023-22112 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily ex… |
CVE-2023-22111 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.33 and prior. Easily exploita… |
CVE-2023-22110 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily ex… |
CVE-2023-22109 | Medium | 4.6 | 2023-10-17 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Dashboards). Supported versions tha… |
CVE-2023-22108 | High | 7.5 | 2023-10-17 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14… |
CVE-2023-22107 | Medium | 6.1 | 2023-10-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: UI Components). Supported versions that are aff… |
CVE-2023-22106 | Medium | 6.5 | 2023-10-17 | Vulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business Suite (component: API). Supported versions that are affected are… |
CVE-2023-22105 | Medium | 5.4 | 2023-10-17 | Vulnerability in the BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0 and 7.0.0.0.0. Easi… |
CVE-2023-22104 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable v… |
CVE-2023-22103 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0… |
CVE-2023-22102 | High | 8.3 | 2023-10-17 | Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to… |
CVE-2023-22101 | High | 8.1 | 2023-10-17 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14… |
CVE-2023-22100 | High | 7.9 | 2023-10-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily… |
CVE-2023-22099 | High | 8.2 | 2023-10-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily… |
CVE-2023-22098 | High | 8.2 | 2023-10-17 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.12. Easily… |
CVE-2023-22097 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily ex… |
CVE-2023-22096 | Medium | 4.3 | 2023-10-17 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vuln… |
CVE-2023-22095 | Medium | 6.5 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). The supported version that is affected is 8.1.0. Easily exploitable… |
CVE-2023-22094 | High | 7.9 | 2023-10-17 | Vulnerability in the MySQL Installer product of Oracle MySQL (component: Installer: General). Supported versions that are affected are Prior to 1.6.8. Easily… |
CVE-2023-22093 | Medium | 6.5 | 2023-10-17 | Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (component: Requisition and Vacancy). Supported versions that are affected are 12… |
CVE-2023-22092 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily ex… |
CVE-2023-22091 | Medium | 4.8 | 2023-10-17 | Vulnerability in the Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are af… |
CVE-2023-22090 | Medium | 6.5 | 2023-10-17 | Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Events & Notifications). The supported vers… |
CVE-2023-22089 | Critical | 9.8 | 2023-10-17 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14… |
CVE-2023-22088 | Medium | 4.3 | 2023-10-17 | Vulnerability in the Oracle Communications Order and Service Management product of Oracle Communications Applications (component: User Management). Supported… |
CVE-2023-22087 | High | 8.8 | 2023-10-17 | Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affec… |
CVE-2023-22086 | High | 7.5 | 2023-10-17 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14… |
CVE-2023-22085 | High | 8.8 | 2023-10-17 | Vulnerability in the Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: Opera). The supported version that is affec… |
CVE-2023-22084 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and… |
CVE-2023-22083 | Medium | 4.3 | 2023-10-17 | Vulnerability in the Oracle Enterprise Session Border Controller product of Oracle Communications (component: Web UI). Supported versions that are affected ar… |
CVE-2023-22082 | Medium | 5.4 | 2023-10-17 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Pod Admin). Supported versions that are affected… |
CVE-2023-22081 | Medium | 5.3 | 2023-10-17 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions… |
CVE-2023-22080 | Medium | 6.1 | 2023-10-17 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology). Supported versions that are affected are… |
CVE-2023-22079 | Medium | 6.5 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily ex… |
CVE-2023-22078 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0… |
CVE-2023-22077 | Medium | 4.9 | 2023-10-17 | Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11… |
CVE-2023-22076 | Medium | 6.1 | 2023-10-17 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Personalization). Supported versions that are affected are 1… |
CVE-2023-22075 | Low | 2.4 | 2023-10-17 | Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily… |
CVE-2023-22074 | Low | 2.4 | 2023-10-17 | Vulnerability in the Oracle Database Sharding component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily… |
CVE-2023-22073 | Medium | 4.3 | 2023-10-17 | Vulnerability in the Oracle Notification Server component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easi… |
CVE-2023-22072 | Critical | 9.8 | 2023-10-17 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 12.2.1.3.0. Easi… |
CVE-2023-22071 | Medium | 5.9 | 2023-10-17 | Vulnerability in the PL/SQL component of Oracle Database Server. Supported versions that are affected are 19.3-19.20 and 21.3-21.11. Easily exploitable vulne… |
CVE-2023-22070 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0… |
CVE-2023-22069 | Critical | 9.8 | 2023-10-17 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14… |
CVE-2023-22068 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily ex… |
CVE-2023-22067 | Medium | 5.3 | 2023-10-17 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are… |
CVE-2023-22066 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily ex… |
CVE-2023-22065 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily ex… |
CVE-2023-22064 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily ex… |
CVE-2023-22059 | Medium | 6.5 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0… |
CVE-2023-22032 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0… |
CVE-2023-22029 | Medium | 6.1 | 2023-10-17 | Vulnerability in the Oracle Commerce Guided Search product of Oracle Commerce (component: Workbench). The supported version that is affected is 11.3.2. Easil… |
CVE-2023-22028 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.43 and prior and 8.0.3… |
CVE-2023-22026 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.3… |
CVE-2023-22025 | Low | 3.7 | 2023-10-17 | Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot). Supported vers… |
CVE-2023-22019 | High | 7.5 | 2023-10-17 | Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web Listener). The supported version that is affected is 12.2.1.4.0… |
CVE-2023-22015 | Medium | 4.9 | 2023-10-17 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.3… |
CVE-2023-43794 | Medium | 6.5 | 2023-10-17 | Nocodb is an open source Airtable alternative. Affected versions of nocodb contain a SQL injection vulnerability, that allows an authenticated attacker with cr… |
CVE-2023-4896 | Medium | 6.8 | 2023-10-17 | A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface… |
CVE-2023-45952 | Critical | 9.8 | 2023-10-17 | An arbitrary file upload vulnerability in the component ajax_link.php of lylme_spage v1.7.0 allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2023-45951 | Critical | 9.8 | 2023-10-17 | lylme_spage v1.7.0 was discovered to contain a SQL injection vulnerability via the $userip parameter at function.php. |
CVE-2023-45803 | Medium | 4.2 | 2023-10-17 | urllib3 is a user-friendly HTTP client library for Python. urllib3 previously wouldn't remove the HTTP request body when an HTTP redirect response using status… |
CVE-2023-27133 | Critical | 9.8 | 2023-10-17 | TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder. This may en… |