2023 CVEs (page 140)
Page 140 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-26319 | Medium | 6.7 | 2023-10-11 | Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Xiaomi Xiaomi Router allows Command Injection. |
CVE-2023-26318 | Medium | 6.7 | 2023-10-11 | Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Xiaomi Xiaomi Router allows Overflow Buffers. |
CVE-2023-5511 | High | 8.8 | 2023-10-11 | Cross-Site Request Forgery (CSRF) in GitHub repository snipe/snipe-it prior to v.6.2.3. |
CVE-2023-45194 | Medium | 4.3 | 2023-10-11 | Use of default credentials vulnerability in MR-GM2 firmware Ver. 3.00.03 and earlier, and MR-GM3 (-D/-K/-S/-DK/-DKS/-M/-W) firmware Ver. 1.03.45 and earlier al… |
CVE-2023-44689 | Medium | 4.3 | 2023-10-11 | e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versions prior to 1.1.1.0 are vulnerable to i… |
CVE-2023-26220 | Medium | 5.4 | 2023-10-10 | The Spotfire Library component of TIBCO Software Inc.'s Spotfire Analyst and Spotfire Server contains an easily exploitable vulnerability that allows a low pri… |
CVE-2023-36127 | High | 7.5 | 2023-10-10 | User enumeration is found in in PHPJabbers Appointment Scheduler 3.0. This issue occurs during password recovery, where a difference in messages could allow an… |
CVE-2023-36126 | Medium | 6.1 | 2023-10-10 | There is a Cross Site Scripting (XSS) vulnerability in the "theme" parameter of preview.php in PHPJabbers Appointment Scheduler v3.0 |
CVE-2023-45312 | High | 8.8 | 2023-10-10 | In the mtproto_proxy (aka MTProto proxy) component through 0.7.2 for Erlang, a low-privileged remote attacker can access an improperly secured default installa… |
CVE-2023-45648 | Medium | 5.3 | 2023-10-10 | Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.81… |
CVE-2023-31096 | High | 7.8 | 2023-10-10 | An issue was discovered in Broadcom) LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 (aka AGRSM64.sys). There is Local Privilege Escalation to SYSTEM… |
CVE-2023-5497 | Medium | 6.3 | 2023-10-10 | A vulnerability classified as critical has been found in Tongda OA 2017 11.10. Affected is an unknown function of the file general/hr/salary/welfare_manage/del… |
CVE-2023-4309 | Critical | 10.0 | 2023-10-10 | Election Services Co. (ESC) Internet Election Service is vulnerable to SQL injection in multiple pages and parameters. These vulnerabilities allow an unauthent… |
CVE-2023-45129 | Medium | 4.9 | 2023-10-10 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Prior to version 1.94.0, a malicious server ACL event can impa… |
CVE-2023-42795 | Medium | 5.3 | 2023-10-10 | Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 th… |
CVE-2023-42794 | Medium | 5.9 | 2023-10-10 | Incomplete Cleanup vulnerability in Apache Tomcat. The internal fork of Commons FileUpload packaged with Apache Tomcat 9.0.70 through 9.0.80 and 8.5.85 throug… |
CVE-2023-41774 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41773 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41772 | High | 7.8 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-41771 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41770 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41769 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41768 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41767 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41766 | High | 7.8 | 2023-10-10 | Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability |
CVE-2023-41765 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-41763 | Medium | 5.3 | 2023-10-10 | Skype for Business Elevation of Privilege Vulnerability |
CVE-2023-38171 | High | 7.5 | 2023-10-10 | Microsoft QUIC Denial of Service Vulnerability |
CVE-2023-38166 | High | 8.1 | 2023-10-10 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-38159 | High | 7.0 | 2023-10-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-36902 | High | 7.0 | 2023-10-10 | Windows Runtime Remote Code Execution Vulnerability |
CVE-2023-36790 | High | 7.8 | 2023-10-10 | Windows RDP Encoder Mirror Driver Elevation of Privilege Vulnerability |
CVE-2023-36789 | High | 7.2 | 2023-10-10 | Skype for Business Remote Code Execution Vulnerability |
CVE-2023-36786 | High | 7.2 | 2023-10-10 | Skype for Business Remote Code Execution Vulnerability |
CVE-2023-36785 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36780 | High | 7.2 | 2023-10-10 | Skype for Business Remote Code Execution Vulnerability |
CVE-2023-36778 | High | 8.0 | 2023-10-10 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36776 | High | 7.0 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36743 | High | 7.8 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36737 | High | 7.8 | 2023-10-10 | Azure Network Watcher VM Agent Elevation of Privilege Vulnerability |
CVE-2023-36732 | High | 7.8 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36731 | High | 7.8 | 2023-10-10 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-36730 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36729 | High | 7.8 | 2023-10-10 | Named Pipe File System Elevation of Privilege Vulnerability |
CVE-2023-36728 | Medium | 5.5 | 2023-10-10 | Microsoft SQL Server Denial of Service Vulnerability |
CVE-2023-36726 | High | 7.8 | 2023-10-10 | Windows Internet Key Exchange (IKE) Extension Elevation of Privilege Vulnerability |
CVE-2023-36725 | High | 7.8 | 2023-10-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36724 | Medium | 5.5 | 2023-10-10 | Windows Power Management Service Information Disclosure Vulnerability |
CVE-2023-36723 | High | 7.8 | 2023-10-10 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2023-36722 | Medium | 4.4 | 2023-10-10 | Active Directory Domain Services Information Disclosure Vulnerability |
CVE-2023-36721 | High | 7.0 | 2023-10-10 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-36720 | High | 7.5 | 2023-10-10 | Windows Mixed Reality Developer Tools Denial of Service Vulnerability |
CVE-2023-36718 | High | 7.8 | 2023-10-10 | Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability |
CVE-2023-36717 | Medium | 6.5 | 2023-10-10 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
CVE-2023-36713 | Medium | 5.5 | 2023-10-10 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2023-36712 | High | 7.8 | 2023-10-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36711 | High | 7.8 | 2023-10-10 | Windows Runtime C++ Template Library Elevation of Privilege Vulnerability |
CVE-2023-36710 | High | 7.8 | 2023-10-10 | Windows Media Foundation Core Remote Code Execution Vulnerability |
CVE-2023-36709 | High | 7.5 | 2023-10-10 | Microsoft AllJoyn API Denial of Service Vulnerability |
CVE-2023-36707 | Medium | 6.5 | 2023-10-10 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2023-36706 | Medium | 6.5 | 2023-10-10 | Windows Deployment Services Information Disclosure Vulnerability |
CVE-2023-36704 | High | 7.8 | 2023-10-10 | Windows Setup Files Cleanup Remote Code Execution Vulnerability |
CVE-2023-36703 | High | 7.5 | 2023-10-10 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-36702 | High | 7.8 | 2023-10-10 | Microsoft DirectMusic Remote Code Execution Vulnerability |
CVE-2023-36701 | High | 7.8 | 2023-10-10 | Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2023-36698 | Medium | 4.4 | 2023-10-10 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2023-36697 | Medium | 6.8 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36606 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36605 | High | 7.4 | 2023-10-10 | Windows Named Pipe Filesystem Elevation of Privilege Vulnerability |
CVE-2023-36603 | High | 7.5 | 2023-10-10 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2023-36602 | High | 7.5 | 2023-10-10 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2023-36598 | High | 7.8 | 2023-10-10 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-36596 | High | 7.5 | 2023-10-10 | Remote Procedure Call Information Disclosure Vulnerability |
CVE-2023-36594 | High | 7.8 | 2023-10-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-36593 | High | 7.8 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36592 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36591 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36590 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36589 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36585 | High | 7.5 | 2023-10-10 | Windows upnphost.dll Denial of Service Vulnerability |
CVE-2023-36584 | Medium | 5.4 | 2023-10-10 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2023-36583 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36582 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36581 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36579 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36578 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36577 | High | 8.8 | 2023-10-10 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36576 | Medium | 5.5 | 2023-10-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36575 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36574 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36573 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36572 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36571 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36570 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36569 | High | 8.4 | 2023-10-10 | Microsoft Office Elevation of Privilege Vulnerability |
CVE-2023-36568 | High | 7.0 | 2023-10-10 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
CVE-2023-36567 | High | 7.5 | 2023-10-10 | Windows Deployment Services Information Disclosure Vulnerability |
CVE-2023-36566 | Medium | 6.5 | 2023-10-10 | Microsoft Common Data Model SDK Denial of Service Vulnerability |
CVE-2023-36565 | High | 7.0 | 2023-10-10 | Microsoft Office Graphics Elevation of Privilege Vulnerability |
CVE-2023-36564 | Medium | 6.5 | 2023-10-10 | Windows Search Security Feature Bypass Vulnerability |