2023 CVEs (page 136)
Page 136 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45659 | Low | 3.6 | 2023-10-17 | Engelsystem is a shift planning system for chaos events. If a users' password is compromised and an attacker gained access to a users' account, i.e., logged i… |
CVE-2023-45152 | Low | 2.0 | 2023-10-17 | Engelsystem is a shift planning system for chaos events. A Blind SSRF in the "Import schedule" functionality makes it possible to perform a port scan against t… |
CVE-2023-40373 | Medium | 5.3 | 2023-10-17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) is vulnerable to denial of service with a specially crafted query containing common table exp… |
CVE-2023-40372 | Medium | 5.3 | 2023-10-17 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted SQL statement using External… |
CVE-2023-38719 | Medium | 5.1 | 2023-10-17 | IBM Db2 11.5 could allow a local user with special privileges to cause a denial of service during database deactivation on DPF. IBM X-Force ID: 261607. |
CVE-2023-40374 | Medium | 5.3 | 2023-10-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 is vulnerable to denial of service with a specially crafted query statement. IBM X-Forc… |
CVE-2023-30991 | High | 7.5 | 2023-10-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force… |
CVE-2023-45807 | Medium | 5.4 | 2023-10-16 | OpenSearch is a community-driven, open source fork of Elasticsearch and Kibana following the license change in early 2021. There is an issue with the implement… |
CVE-2023-45540 | Medium | 6.5 | 2023-10-16 | An issue in Jorani Leave Management System 1.0.3 allows a remote attacker to execute arbitrary HTML code via a crafted script to the comment field of the List… |
CVE-2023-45131 | High | 7.5 | 2023-10-16 | Discourse is an open source platform for community discussion. New chat messages can be read by making an unauthenticated POST request to MessageBus. This issu… |
CVE-2023-44394 | Medium | 4.3 | 2023-10-16 | MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by a… |
CVE-2023-44391 | Medium | 5.3 | 2023-10-16 | Discourse is an open source platform for community discussion. User summaries are accessible for anonymous users even when `hide_user_profiles_from_public` is… |
CVE-2023-44388 | High | 7.5 | 2023-10-16 | Discourse is an open source platform for community discussion. A malicious request can cause production log files to quickly fill up and thus result in the ser… |
CVE-2023-43814 | Low | 3.7 | 2023-10-16 | Discourse is an open source platform for community discussion. Attackers with details specific to a poll in a topic can use the `/polls/grouped_poll_results` e… |
CVE-2023-43659 | High | 8.0 | 2023-10-16 | Discourse is an open source platform for community discussion. Improper escaping of user input allowed for Cross-site Scripting attacks via the digest email pr… |
CVE-2023-43658 | High | 8.0 | 2023-10-16 | dicourse-calendar is a plugin for the Discourse messaging platform which adds the ability to create a dynamic calendar in the first post of a topic. Improper e… |
CVE-2023-38740 | Medium | 5.3 | 2023-10-16 | IBM Db2 for Linux, UNIX, and Windows (includes Db2 Connect Server) 11.5 is vulnerable to a denial of service with a specially crafted SQL statement. IBM X-For… |
CVE-2023-38728 | Medium | 5.3 | 2023-10-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted XML query st… |
CVE-2023-45542 | Medium | 6.1 | 2023-10-16 | Cross Site Scripting vulnerability in mooSocial 3.1.8 allows a remote attacker to obtain sensitive information via a crafted script to the q parameter in the S… |
CVE-2023-45147 | Medium | 4.9 | 2023-10-16 | Discourse is an open source community platform. In affected versions any user can create a topic and add arbitrary custom fields to a topic. The severity of th… |
CVE-2023-45144 | Critical | 10.0 | 2023-10-16 | com.xwiki.identity-oauth:identity-oauth-ui is a package to aid in building identity and service providers based on OAuth authorizations. When a user logs in vi… |
CVE-2023-45141 | High | 8.6 | 2023-10-16 | Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allow… |
CVE-2023-45128 | Critical | 10.0 | 2023-10-16 | Fiber is an express inspired web framework written in Go. A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the application, which allow… |
CVE-2023-42459 | High | 8.6 | 2023-10-16 | Fast DDS is a C++ implementation of the DDS (Data Distribution Service) standard of the OMG (Object Management Group). In affected versions specific DATA subme… |
CVE-2023-40852 | Critical | 9.8 | 2023-10-16 | SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive inform… |
CVE-2023-40851 | Medium | 5.4 | 2023-10-16 | Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitr… |
CVE-2023-38720 | Medium | 5.3 | 2023-10-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.5 and 11.5 is vulnerable to denial of service with a specially crafted ALTER TABLE stateme… |
CVE-2023-30987 | Medium | 5.3 | 2023-10-16 | IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on cer… |
CVE-2023-5561 | Medium | 5.3 | 2023-10-16 | WordPress does not properly restrict which user fields are searchable via the REST API, allowing unauthenticated attackers to discern the email addresses of us… |
CVE-2023-5177 | Medium | 5.3 | 2023-10-16 | The Vrm 360 3D Model Viewer WordPress plugin through 1.2.1 exposes the full path of a file when putting in a non-existent file in a parameter of the shortcode. |
CVE-2023-5167 | Medium | 5.4 | 2023-10-16 | The User Activity Log Pro WordPress plugin before 2.3.4 does not properly escape recorded User-Agents in the user activity logs dashboard, which may allow visi… |
CVE-2023-5133 | High | 7.5 | 2023-10-16 | This user-activity-log-pro WordPress plugin before 2.3.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate i… |
CVE-2023-5089 | Medium | 5.3 | 2023-10-16 | The Defender Security WordPress plugin before 4.1.0 does not prevent redirects to the login page via the auth_redirect WordPress function, allowing an unauthen… |
CVE-2023-5087 | Medium | 5.4 | 2023-10-16 | The Page Builder: Pagelayer WordPress plugin before 1.7.8 doesn't prevent attackers with author privileges and higher from inserting malicious JavaScript insid… |
CVE-2023-5057 | Medium | 5.4 | 2023-10-16 | The ActivityPub WordPress plugin before 1.0.0 does not escape user metadata before outputting them in mentions, which could allow users with a role of Contribu… |
CVE-2023-5003 | High | 7.5 | 2023-10-16 | The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an administrator wants to e… |
CVE-2023-4971 | High | 7.2 | 2023-10-16 | The Weaver Xtreme Theme Support WordPress plugin before 6.3.1 unserialises the content of an imported file, which could lead to PHP object injections issues wh… |
CVE-2023-4950 | Medium | 6.1 | 2023-10-16 | The Interactive Contact Form and Multi Step Form Builder WordPress plugin before 3.4 does not sanitise and escape some parameters, which could allow unauthenti… |
CVE-2023-4933 | Medium | 5.3 | 2023-10-16 | The WP Job Openings WordPress plugin before 3.4.3 does not block listing the contents of the directories where it stores attachments to job applications, allow… |
CVE-2023-4862 | Medium | 4.8 | 2023-10-16 | The File Manager Pro WordPress plugin before 1.8.1 does not adequately validate and escape some inputs, leading to XSS by high-privilege users. |
CVE-2023-4861 | High | 7.2 | 2023-10-16 | The File Manager Pro WordPress plugin before 1.8.1 allows admin users to upload arbitrary files, even in environments where such a user should not be able to g… |
CVE-2023-4821 | Medium | 5.4 | 2023-10-16 | The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin before 1.1.1 does not filter all potentially dangerous file extensions. Therefore, an a… |
CVE-2023-4820 | Medium | 5.4 | 2023-10-16 | The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.0.12 does not sanitize and escape the media url field in posts, which could allow users… |
CVE-2023-4819 | Medium | 6.1 | 2023-10-16 | The Shared Files WordPress plugin before 1.7.6 does not return the right Content-Type header for the specified uploaded file. Therefore, an attacker can upload… |
CVE-2023-4811 | Medium | 5.4 | 2023-10-16 | The WordPress File Upload WordPress plugin before 4.23.3 does not sanitise and escape some of its settings, which could allow high privilege users such as cont… |
CVE-2023-4805 | Medium | 5.4 | 2023-10-16 | The Tutor LMS WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow users such as subscriber to perform Stored Cro… |
CVE-2023-4800 | Medium | 6.5 | 2023-10-16 | The DoLogin Security WordPress plugin before 3.7.1 does not restrict the access of a widget that shows the IPs of failed logins to low privileged users. |
CVE-2023-4798 | Medium | 5.4 | 2023-10-16 | The User Avatar WordPress plugin before 1.2.2 does not properly sanitize and escape certain of its shortcodes attributes, which could allow relatively low-priv… |
CVE-2023-4795 | Medium | 5.4 | 2023-10-16 | The Testimonial Slider Shortcode WordPress plugin before 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in the… |
CVE-2023-4783 | Medium | 5.4 | 2023-10-16 | The Magee Shortcodes WordPress plugin through 2.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wh… |
CVE-2023-4776 | High | 8.8 | 2023-10-16 | The School Management System WordPress plugin before 2.2.5 uses the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare t… |
CVE-2023-4725 | Medium | 4.8 | 2023-10-16 | The Simple Posts Ticker WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin t… |
CVE-2023-4691 | High | 7.2 | 2023-10-16 | The WordPress Online Booking and Scheduling Plugin WordPress plugin before 22.4 does not properly sanitise and escape a parameter before using it in a SQL stat… |
CVE-2023-4687 | Medium | 6.1 | 2023-10-16 | The Page Builder: Pagelayer WordPress plugin before 1.7.7 doesn't prevent unauthenticated attackers from updating a post's header or footer code on scheduled p… |
CVE-2023-4666 | Critical | 9.8 | 2023-10-16 | The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated… |
CVE-2023-4646 | Medium | 5.4 | 2023-10-16 | The Simple Posts Ticker WordPress plugin before 1.1.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post… |
CVE-2023-4643 | High | 8.8 | 2023-10-16 | The Enable Media Replace WordPress plugin before 4.1.3 unserializes user input via the Remove Background feature, which could allow Author+ users to perform PH… |
CVE-2023-4388 | Medium | 4.8 | 2023-10-16 | The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stor… |
CVE-2023-4290 | Medium | 6.1 | 2023-10-16 | The WP Matterport Shortcode WordPress plugin before 2.1.7 does not escape the PHP_SELF server variable when outputting it in attributes, leading to Reflected C… |
CVE-2023-4289 | Medium | 5.4 | 2023-10-16 | The WP Matterport Shortcode WordPress plugin before 2.1.8 does not validate and escape some of its shortcode attributes before outputting them back in a page/p… |
CVE-2023-45150 | Medium | 4.3 | 2023-10-16 | Nextcloud calendar is a calendar app for the Nextcloud server platform. Due to missing precondition checks the server was trying to validate strings of any len… |
CVE-2023-45149 | Medium | 4.3 | 2023-10-16 | Nextcloud talk is a chat module for the Nextcloud server platform. In affected versions brute force protection of public talk conversation passwords can be byp… |
CVE-2023-43121 | High | 7.5 | 2023-10-16 | A Directory Traversal vulnerability discovered in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7, and before 31.7.2 a… |
CVE-2023-43119 | Critical | 9.8 | 2023-10-16 | An Access Control issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, also fixed in 22.7, 31.7.2 allows attackers to gain escalated priv… |
CVE-2023-43118 | High | 8.8 | 2023-10-16 | Cross Site Request Forgery (CSRF) vulnerability in Chalet application in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, fixed in 31.7.2 and 32.5.1.5 al… |
CVE-2023-3746 | Medium | 5.4 | 2023-10-16 | The ActivityPub WordPress plugin before 1.0.0 does not sanitize and escape some data from post content, which could allow contributor and above role to perform… |
CVE-2023-3707 | Medium | 4.3 | 2023-10-16 | The ActivityPub WordPress plugin before 1.0.0 does not ensure that post contents to be displayed are public and belong to the plugin, allowing any authenticate… |
CVE-2023-3706 | Medium | 4.3 | 2023-10-16 | The ActivityPub WordPress plugin before 1.0.0 does not ensure that post titles to be displayed are public and belong to the plugin, allowing any authenticated… |
CVE-2023-3279 | Medium | 4.9 | 2023-10-16 | The WordPress Gallery Plugin WordPress plugin before 3.39 does not validate some block attributes before using them to generate paths passed to include functio… |
CVE-2023-3155 | High | 7.2 | 2023-10-16 | The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to Arbitrary File Read and Delete due to a lack of input parameter validation in the `g… |
CVE-2023-3154 | High | 7.5 | 2023-10-16 | The WordPress Gallery Plugin WordPress plugin before 3.39 is vulnerable to PHAR Deserialization due to a lack of input parameter validation in the `gallery_edi… |
CVE-2023-29484 | Medium | 6.5 | 2023-10-16 | In Terminalfour before 8.3.16, misconfigured LDAP users are able to login with an invalid password. |
CVE-2023-45683 | High | 7.1 | 2023-10-16 | github.com/crewjam/saml is a saml library for the go language. In affected versions the package does not validate the ACS Location URI according to the SAML bi… |
CVE-2023-45669 | Medium | 4.8 | 2023-10-16 | WebAuthn4J Spring Security provides Web Authentication specification support for Spring applications. Affected versions are subject to improper signature count… |
CVE-2023-45660 | Medium | 4.3 | 2023-10-16 | Nextcloud mail is an email app for the Nextcloud home server platform. In affected versions a missing check of origin, target and cookies allows for an attacke… |
CVE-2023-45151 | Medium | 6.5 | 2023-10-16 | Nextcloud server is an open source home cloud platform. Affected versions of Nextcloud stored OAuth2 tokens in plaintext which allows an attacker who has gaine… |
CVE-2023-45148 | Medium | 4.3 | 2023-10-16 | Nextcloud is an open source home cloud server. When Memcached is used as `memcache.distributed` the rate limiting in Nextcloud Server could be reset unexpected… |
CVE-2023-43120 | High | 8.8 | 2023-10-16 | An issue discovered in Extreme Networks Switch Engine (EXOS) before 32.5.1.5, before 22.7 and before 31.7.1 allows attackers to gain escalated privileges via c… |
CVE-2023-40180 | High | 7.5 | 2023-10-16 | silverstripe-graphql is a package which serves Silverstripe data in GraphQL representations. An attacker could use a recursive graphql query to execute a Dist… |
CVE-2023-45985 | High | 7.5 | 2023-10-16 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 were discovered to contain a stack overflow in the function setParentalRules… |
CVE-2023-45984 | Critical | 9.8 | 2023-10-16 | TOTOLINK X5000R V9.1.0u.6118_B20201102 and TOTOLINK A7000R V9.1.0u.6115_B20201022 was discovered to contain a stack overflow via the lang parameter in the func… |
CVE-2023-45690 | Medium | 4.9 | 2023-10-16 | Default file permissions on South River Technologies' Titan MFT and Titan SFTP servers on Linux allows a user that's authentication to the OS to read sensitive… |
CVE-2023-45689 | Medium | 6.5 | 2023-10-16 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker with adm… |
CVE-2023-45688 | Medium | 4.3 | 2023-10-16 | Lack of sufficient path validation in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated attacker to get the size of a… |
CVE-2023-45687 | High | 8.8 | 2023-10-16 | A session fixation vulnerability in South River Technologies' Titan MFT and Titan SFTP servers on Linux and Windows allows an attacker to bypass the server's a… |
CVE-2023-45686 | High | 7.2 | 2023-10-16 | Insufficient path validation when writing a file via WebDAV in South River Technologies' Titan MFT and Titan SFTP servers on Linux allows an authenticated atta… |
CVE-2023-45685 | Critical | 9.1 | 2023-10-16 | Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authent… |
CVE-2023-20198 | Critical | 10.0 | 2023-10-16 | Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list… |
CVE-2023-46087 | Medium | 4.3 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in Mahlamusa Who Hit The Page – Hit Counter plugin <= 1.4.14.3 versions. |
CVE-2023-5575 | Medium | 6.5 | 2023-10-16 | Improper access control in the permission inheritance in Devolutions Server 2022.3.13.0 and earlier allows an attacker that compromised a low privileged user… |
CVE-2023-46066 | Medium | 5.9 | 2023-10-16 | Auth. (editor+) Stored Cross-Site Scripting (XSS) vulnerability in Codedrafty Mediabay – Media Library Folders plugin <= 1.6 versions. |
CVE-2023-44987 | Medium | 5.9 | 2023-10-16 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Timely - Appointment software Timely Booking Button plugin <= 2.0.2 versions. |
CVE-2023-45836 | Medium | 4.3 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in XYDAC Ultimate Taxonomy Manager plugin <= 2.0 versions. |
CVE-2023-45831 | Medium | 5.4 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in Pixelative, Mohsin Rafique AMP WP – Google AMP For WordPress plugin <= 1.5.15 versions. |
CVE-2023-45763 | Medium | 5.4 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in Taggbox plugin <= 2.9 versions. |
CVE-2023-45753 | Medium | 4.3 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in Gilles Dumas which template file plugin <= 4.6.0 versions. |
CVE-2023-45752 | Medium | 4.3 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in 10 Quality Post Gallery plugin <= 2.3.12 versions. |
CVE-2023-45749 | Medium | 4.3 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in Alexey Golubnichenko AGP Font Awesome Collection plugin <= 3.2.4 versions. |
CVE-2023-45748 | Medium | 4.3 | 2023-10-16 | Cross-Site Request Forgery (CSRF) vulnerability in MailMunch MailChimp Forms by MailMunch plugin <= 3.1.4 versions. |
CVE-2023-44986 | Medium | 5.9 | 2023-10-16 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Tyche Softwares Abandoned Cart Lite for WooCommerce plugin <= 5.15.2 versions. |