2023 CVEs (page 141)
Page 141 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36724 | Medium | 5.5 | 2023-10-10 | Windows Power Management Service Information Disclosure Vulnerability |
CVE-2023-36723 | High | 7.8 | 2023-10-10 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2023-36722 | Medium | 4.4 | 2023-10-10 | Active Directory Domain Services Information Disclosure Vulnerability |
CVE-2023-36721 | High | 7.0 | 2023-10-10 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-36720 | High | 7.5 | 2023-10-10 | Windows Mixed Reality Developer Tools Denial of Service Vulnerability |
CVE-2023-36718 | High | 7.8 | 2023-10-10 | Microsoft Virtual Trusted Platform Module Remote Code Execution Vulnerability |
CVE-2023-36717 | Medium | 6.5 | 2023-10-10 | Windows Virtual Trusted Platform Module Denial of Service Vulnerability |
CVE-2023-36713 | Medium | 5.5 | 2023-10-10 | Windows Common Log File System Driver Information Disclosure Vulnerability |
CVE-2023-36712 | High | 7.8 | 2023-10-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36711 | High | 7.8 | 2023-10-10 | Windows Runtime C++ Template Library Elevation of Privilege Vulnerability |
CVE-2023-36710 | High | 7.8 | 2023-10-10 | Windows Media Foundation Core Remote Code Execution Vulnerability |
CVE-2023-36709 | High | 7.5 | 2023-10-10 | Microsoft AllJoyn API Denial of Service Vulnerability |
CVE-2023-36707 | Medium | 6.5 | 2023-10-10 | Windows Deployment Services Denial of Service Vulnerability |
CVE-2023-36706 | Medium | 6.5 | 2023-10-10 | Windows Deployment Services Information Disclosure Vulnerability |
CVE-2023-36704 | High | 7.8 | 2023-10-10 | Windows Setup Files Cleanup Remote Code Execution Vulnerability |
CVE-2023-36703 | High | 7.5 | 2023-10-10 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-36702 | High | 7.8 | 2023-10-10 | Microsoft DirectMusic Remote Code Execution Vulnerability |
CVE-2023-36701 | High | 7.8 | 2023-10-10 | Microsoft Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2023-36698 | Medium | 4.4 | 2023-10-10 | Windows Kernel Security Feature Bypass Vulnerability |
CVE-2023-36697 | Medium | 6.8 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36606 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36605 | High | 7.4 | 2023-10-10 | Windows Named Pipe Filesystem Elevation of Privilege Vulnerability |
CVE-2023-36603 | High | 7.5 | 2023-10-10 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2023-36602 | High | 7.5 | 2023-10-10 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2023-36598 | High | 7.8 | 2023-10-10 | Microsoft WDAC ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-36596 | High | 7.5 | 2023-10-10 | Remote Procedure Call Information Disclosure Vulnerability |
CVE-2023-36594 | High | 7.8 | 2023-10-10 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-36593 | High | 7.8 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36592 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36591 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36590 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36589 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36585 | High | 7.5 | 2023-10-10 | Windows upnphost.dll Denial of Service Vulnerability |
CVE-2023-36584 | Medium | 5.4 | 2023-10-10 | Windows Mark of the Web Security Feature Bypass Vulnerability |
CVE-2023-36583 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36582 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36581 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36579 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36578 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36577 | High | 8.8 | 2023-10-10 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36576 | Medium | 5.5 | 2023-10-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36575 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36574 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36573 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36572 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36571 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36570 | High | 7.3 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36569 | High | 8.4 | 2023-10-10 | Microsoft Office Elevation of Privilege Vulnerability |
CVE-2023-36568 | High | 7.0 | 2023-10-10 | Microsoft Office Click-To-Run Elevation of Privilege Vulnerability |
CVE-2023-36567 | High | 7.5 | 2023-10-10 | Windows Deployment Services Information Disclosure Vulnerability |
CVE-2023-36566 | Medium | 6.5 | 2023-10-10 | Microsoft Common Data Model SDK Denial of Service Vulnerability |
CVE-2023-36565 | High | 7.0 | 2023-10-10 | Microsoft Office Graphics Elevation of Privilege Vulnerability |
CVE-2023-36564 | Medium | 6.5 | 2023-10-10 | Windows Search Security Feature Bypass Vulnerability |
CVE-2023-36563 | Medium | 6.5 | 2023-10-10 | Microsoft WordPad Information Disclosure Vulnerability |
CVE-2023-36561 | High | 7.3 | 2023-10-10 | Azure DevOps Server Elevation of Privilege Vulnerability |
CVE-2023-36557 | High | 7.8 | 2023-10-10 | PrintHTML API Remote Code Execution Vulnerability |
CVE-2023-36438 | High | 7.5 | 2023-10-10 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2023-36436 | High | 7.8 | 2023-10-10 | Windows MSHTML Platform Remote Code Execution Vulnerability |
CVE-2023-36435 | High | 7.5 | 2023-10-10 | Microsoft QUIC Denial of Service Vulnerability |
CVE-2023-36434 | Critical | 9.8 | 2023-10-10 | Windows IIS Server Elevation of Privilege Vulnerability |
CVE-2023-36433 | Medium | 6.5 | 2023-10-10 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
CVE-2023-36431 | High | 7.5 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36429 | Medium | 6.5 | 2023-10-10 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
CVE-2023-36420 | High | 7.8 | 2023-10-10 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36419 | High | 8.8 | 2023-10-10 | Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability |
CVE-2023-36418 | High | 7.8 | 2023-10-10 | Azure RTOS GUIX Studio Remote Code Execution Vulnerability |
CVE-2023-36417 | High | 7.8 | 2023-10-10 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-36416 | Medium | 6.1 | 2023-10-10 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-36415 | High | 8.8 | 2023-10-10 | Azure Identity SDK Remote Code Execution Vulnerability |
CVE-2023-36414 | High | 8.8 | 2023-10-10 | Azure Identity SDK Remote Code Execution Vulnerability |
CVE-2023-35349 | Critical | 9.8 | 2023-10-10 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-29348 | High | 7.5 | 2023-10-10 | Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability |
CVE-2023-5496 | Low | 3.1 | 2023-10-10 | A vulnerability was found in Translator PoqDev Add-On 1.0.11 on Firefox. It has been rated as problematic. This issue affects some unknown processing of the co… |
CVE-2023-5495 | Medium | 6.3 | 2023-10-10 | A vulnerability was found in QDocs Smart School 6.4.1. It has been classified as critical. This affects an unknown part of the file /course/filterRecords/ of t… |
CVE-2023-44399 | Medium | 5.3 | 2023-10-10 | ZITADEL provides identity infrastructure. In versions 2.37.2 and prior, ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which h… |
CVE-2023-44249 | Medium | 4.3 | 2023-10-10 | An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7… |
CVE-2023-42788 | High | 7.8 | 2023-10-10 | An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer version 7… |
CVE-2023-42787 | Medium | 6.5 | 2023-10-10 | A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and before 7.2.3 and FortiAnalyzer version 7.4… |
CVE-2023-42782 | Medium | 5.3 | 2023-10-10 | A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3 allows a remote unauthenticated attacke… |
CVE-2023-41841 | High | 8.1 | 2023-10-10 | An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging to the prof-admin profile to perform… |
CVE-2023-41838 | High | 7.1 | 2023-10-10 | An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and 7.2.0 through 7.2.3 may allow attacker… |
CVE-2023-41679 | High | 8.5 | 2023-10-10 | An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 through 7.0.7, 6.4.0 through 6.4.11, 6.2 all… |
CVE-2023-41675 | Medium | 5.3 | 2023-10-10 | A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiProxy version 7.2.0 through 7.2.2 and… |
CVE-2023-40718 | High | 7.5 | 2023-10-10 | A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features via crafted TCP packets. |
CVE-2023-37939 | Low | 3.3 | 2023-10-10 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0, 7.0 all versions, 6.4 all versions, 6.2… |
CVE-2023-37935 | Medium | 6.5 | 2023-10-10 | A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5 and 7.4.0 allows an attacker to view p… |
CVE-2023-36637 | Low | 3.5 | 2023-10-10 | An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authe… |
CVE-2023-36556 | High | 8.8 | 2023-10-10 | An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an auth… |
CVE-2023-36555 | Low | 3.9 | 2023-10-10 | An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized c… |
CVE-2023-36550 | Critical | 9.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-36549 | High | 8.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-36548 | Critical | 9.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-36547 | Critical | 9.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-36478 | High | 7.5 | 2023-10-10 | Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, and 9.0.0 through 9.4.52, an integer ove… |
CVE-2023-34993 | Critical | 9.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-34992 | Critical | 10.0 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to execute unauthorized… |
CVE-2023-34989 | High | 8.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-34988 | High | 8.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-34987 | High | 8.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |
CVE-2023-34986 | High | 8.8 | 2023-10-10 | A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through… |