2023 CVEs (page 148)
Page 148 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-43730 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "countries_nam… |
CVE-2023-43729 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "xsell_type_na… |
CVE-2023-43728 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_deliver… |
CVE-2023-43727 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "stock_indicat… |
CVE-2023-43726 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_produc… |
CVE-2023-43725 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_produc… |
CVE-2023-43724 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "derb6zmklgtju… |
CVE-2023-43723 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status… |
CVE-2023-43722 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "orders_status… |
CVE-2023-43721 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "PACKING_SLIPS… |
CVE-2023-43720 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "BILLING_GENDE… |
CVE-2023-43719 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SHIPPING_GEND… |
CVE-2023-43718 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_ENABL… |
CVE-2023-43717 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MSEARCH_HIGHL… |
CVE-2023-43716 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "MAX_DISPLAY_N… |
CVE-2023-43715 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "ENTRY_FIRST_N… |
CVE-2023-43714 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "SKIP_CART_PAG… |
CVE-2023-43713 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability, which allows attackers to inject JS via the "title" parameter, in the "/adm… |
CVE-2023-43712 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "access_levels… |
CVE-2023-44488 | High | 7.5 | 2023-09-30 | VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. |
CVE-2023-5313 | Medium | 5.3 | 2023-09-30 | A vulnerability classified as problematic was found in phpkobo Ajax Poll Script 3.18. Affected by this vulnerability is an unknown functionality of the file aj… |
CVE-2023-5305 | Low | 3.5 | 2023-09-30 | A vulnerability was found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file… |
CVE-2023-5304 | Low | 3.5 | 2023-09-30 | A vulnerability has been found in Online Banquet Booking System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality o… |
CVE-2023-5321 | Medium | 5.5 | 2023-09-30 | Missing Authorization in GitHub repository hamza417/inure prior to build94. |
CVE-2023-5303 | Low | 3.5 | 2023-09-30 | A vulnerability, which was classified as problematic, was found in Online Banquet Booking System 1.0. Affected is an unknown function of the file /view-booking… |
CVE-2023-5302 | Low | 3.5 | 2023-09-30 | A vulnerability, which was classified as problematic, has been found in SourceCodester Best Courier Management System 1.0. This issue affects some unknown proc… |
CVE-2023-5301 | Medium | 4.7 | 2023-09-30 | A vulnerability classified as critical was found in DedeCMS 5.7.111. This vulnerability affects the function AddMyAddon of the file album_add.php. The manipula… |
CVE-2023-5300 | Medium | 6.3 | 2023-09-30 | A vulnerability classified as critical has been found in TTSPlanning up to 20230925. This affects an unknown part. The manipulation of the argument uid leads t… |
CVE-2023-5207 | High | 8.2 | 2023-09-30 | A vulnerability was discovered in GitLab CE and EE affecting all versions starting 16.0 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1. An aut… |
CVE-2023-5298 | Medium | 5.5 | 2023-09-30 | A vulnerability was found in Tongda OA 2017. It has been rated as critical. Affected by this issue is some unknown functionality of the file general/hr/recruit… |
CVE-2023-5295 | Medium | 6.4 | 2023-09-30 | The Comments by Startbit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'vivafbcomment' shortcode in versions up to, and including, 1.4… |
CVE-2023-5201 | Critical | 9.9 | 2023-09-30 | The OpenHook plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 4.3.0 via the 'php' shortcode. This allows authentic… |
CVE-2023-43711 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "admin_firstna… |
CVE-2023-43710 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration… |
CVE-2023-43709 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration… |
CVE-2023-43708 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "configuration… |
CVE-2023-43707 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "CatalogsPageD… |
CVE-2023-43706 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "email_templat… |
CVE-2023-43705 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "translation_v… |
CVE-2023-43704 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "title" parame… |
CVE-2023-43703 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "product_info[… |
CVE-2023-43702 | Medium | 5.4 | 2023-09-30 | Os Commerce is currently susceptible to a Cross-Site Scripting (XSS) vulnerability. This vulnerability allows attackers to inject JS through the "tracking_numb… |
CVE-2023-5320 | Medium | 6.1 | 2023-09-30 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |
CVE-2023-5319 | Medium | 5.4 | 2023-09-30 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |
CVE-2023-5318 | High | 7.5 | 2023-09-30 | Use of Hard-coded Credentials in GitHub repository microweber/microweber prior to 2.0. |
CVE-2023-5317 | Medium | 5.4 | 2023-09-30 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |
CVE-2023-5316 | Medium | 6.1 | 2023-09-30 | Cross-site Scripting (XSS) - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18. |
CVE-2023-5227 | Critical | 9.8 | 2023-09-30 | Unrestricted Upload of File with Dangerous Type in GitHub repository thorsten/phpmyfaq prior to 3.1.8. |
CVE-2023-5297 | Low | 3.7 | 2023-09-29 | A vulnerability was found in Xinhu RockOA 2.3.2. It has been classified as problematic. This affects the function start of the file task.php?m=sys|runt&a=beife… |
CVE-2023-5296 | Medium | 4.3 | 2023-09-29 | A vulnerability was found in Xinhu RockOA 1.1/2.3.2/15.X3amdi and classified as problematic. Affected by this issue is some unknown functionality of the file a… |
CVE-2023-5294 | Medium | 4.7 | 2023-09-29 | A vulnerability has been found in ECshop 4.1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/order… |
CVE-2023-44270 | Medium | 5.3 | 2023-09-29 | An issue was discovered in PostCSS before 8.4.31. The vulnerability affects linters using PostCSS to parse external untrusted CSS. An attacker can prepare CSS… |
CVE-2023-5293 | Medium | 4.7 | 2023-09-29 | A vulnerability, which was classified as critical, was found in ECshop 4.1.5. Affected is an unknown function of the file /admin/leancloud.php. The manipulatio… |
CVE-2023-5287 | Low | 2.4 | 2023-09-29 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in BEECMS 4.0. This affects an unknown part of the file /admin/… |
CVE-2023-5286 | Low | 3.5 | 2023-09-29 | A vulnerability, which was classified as problematic, has been found in SourceCodester Expense Tracker App v1. Affected by this issue is some unknown functiona… |
CVE-2023-5285 | Medium | 6.3 | 2023-09-29 | A vulnerability classified as critical was found in Tongda OA 2017. Affected by this vulnerability is an unknown functionality of the file general/hr/recruit/r… |
CVE-2023-5284 | Medium | 6.3 | 2023-09-29 | A vulnerability classified as critical has been found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file upload_save_st… |
CVE-2023-5283 | Medium | 6.3 | 2023-09-29 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2023-43655 | Medium | 6.4 | 2023-09-29 | Composer is a dependency manager for PHP. Users publishing a composer.phar to a public web-accessible server where the composer.phar can be executed as a php f… |
CVE-2023-5282 | Medium | 6.3 | 2023-09-29 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2023-5281 | Medium | 6.3 | 2023-09-29 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0. It has been classified as critical. This affects an unknown part of the file remove_in… |
CVE-2023-5280 | Medium | 6.3 | 2023-09-29 | A vulnerability was found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the… |
CVE-2023-5279 | Medium | 6.3 | 2023-09-29 | A vulnerability has been found in SourceCodester Engineers Online Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functiona… |
CVE-2023-5278 | Medium | 6.3 | 2023-09-29 | A vulnerability, which was classified as critical, was found in SourceCodester Engineers Online Portal 1.0. Affected is an unknown function of the file login.p… |
CVE-2023-5277 | Medium | 6.3 | 2023-09-29 | A vulnerability, which was classified as critical, has been found in SourceCodester Engineers Online Portal 1.0. This issue affects some unknown processing of… |
CVE-2023-5276 | Medium | 6.3 | 2023-09-29 | A vulnerability classified as critical was found in SourceCodester Engineers Online Portal 1.0. This vulnerability affects unknown code of the file downloadabl… |
CVE-2023-26218 | High | 8.0 | 2023-09-29 | The Web Client component of TIBCO Software Inc.'s TIBCO Nimbus contains easily exploitable Reflected Cross Site Scripting (XSS) vulnerabilities that allow a lo… |
CVE-2023-5273 | Low | 3.5 | 2023-09-29 | A vulnerability classified as problematic was found in SourceCodester Best Courier Management System 1.0. This vulnerability affects unknown code of the file m… |
CVE-2023-5272 | Medium | 5.5 | 2023-09-29 | A vulnerability classified as critical has been found in SourceCodester Best Courier Management System 1.0. This affects an unknown part of the file edit_parce… |
CVE-2023-3024 | Medium | 5.9 | 2023-09-29 | Forcing the Bluetooth LE stack to segment 'prepare write response' packets can lead to an out-of-bounds memory access. |
CVE-2023-39410 | High | 7.5 | 2023-09-29 | When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out of memory on… |
CVE-2023-5271 | Medium | 5.5 | 2023-09-29 | A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functiona… |
CVE-2023-5270 | Medium | 5.5 | 2023-09-29 | A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown… |
CVE-2023-5269 | Medium | 5.5 | 2023-09-29 | A vulnerability was found in SourceCodester Best Courier Management System 1.0. It has been classified as critical. Affected is an unknown function of the file… |
CVE-2023-5268 | Medium | 6.3 | 2023-09-29 | A vulnerability was found in DedeBIZ 6.2 and classified as critical. This issue affects some unknown processing of the file /src/admin/makehtml_taglist_action… |
CVE-2023-5267 | Medium | 5.5 | 2023-09-29 | A vulnerability has been found in Tongda OA 2017 and classified as critical. This vulnerability affects unknown code of the file general/hr/recruit/hr_pool/del… |
CVE-2023-5266 | Medium | 6.3 | 2023-09-29 | A vulnerability, which was classified as critical, was found in DedeBIZ 6.2. This affects an unknown part of the file /src/admin/tags_main.php. The manipulatio… |
CVE-2023-5265 | Medium | 5.5 | 2023-09-29 | A vulnerability, which was classified as critical, has been found in Tongda OA 2017. Affected by this issue is some unknown functionality of the file general/h… |
CVE-2023-5264 | Medium | 6.3 | 2023-09-29 | A vulnerability classified as critical was found in huakecms 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/cms_content.php… |
CVE-2023-5289 | High | 8.8 | 2023-09-29 | Allocation of Resources Without Limits or Throttling in GitHub repository ikus060/rdiffweb prior to 2.8.4. |
CVE-2023-5263 | Medium | 6.3 | 2023-09-29 | A vulnerability was found in ZZZCMS 2.1.7 and classified as critical. Affected by this issue is the function restore of the file /admin/save.php of the compone… |
CVE-2023-5262 | Medium | 6.3 | 2023-09-29 | A vulnerability has been found in OpenRapid RapidCMS 1.3.1 and classified as critical. Affected by this vulnerability is the function isImg of the file /admin/… |
CVE-2023-41691 | High | 7.1 | 2023-09-29 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pensopay WooCommerce PensoPay plugin <= 6.3.1 versions. |
CVE-2023-41687 | Medium | 6.5 | 2023-09-29 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Irina Sokolovskaya Goods Catalog plugin <= 2.4.1 versions. |
CVE-2023-41666 | Medium | 6.5 | 2023-09-29 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Stockdio Stock Quotes List plugin <= 2.9.9 versions. |
CVE-2023-41663 | High | 7.1 | 2023-09-29 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Giovambattista Fazioli WP Bannerize Pro plugin <= 1.6.9 versions. |
CVE-2023-41662 | High | 7.1 | 2023-09-29 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Ulf Benjaminsson WP-dTree plugin <= 4.4.5 versions. |
CVE-2023-41661 | Medium | 5.9 | 2023-09-29 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PressPage Entertainment Inc. Smarty for WordPress plugin <= 3.1.35 versions. |
CVE-2023-41658 | High | 7.1 | 2023-09-29 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Photo Gallery Slideshow & Masonry Tiled Gallery plugin <= 1.0.13 versions. |
CVE-2023-41657 | Medium | 5.9 | 2023-09-29 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Groundhogg Inc. HollerBox plugin <= 2.3.2 versions. |
CVE-2023-41655 | Medium | 5.9 | 2023-09-29 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Andreas Heigl authLdap plugin <= 2.5.9 versions. |
CVE-2023-39308 | High | 7.1 | 2023-09-29 | Unauth. Stored Cross-Site Scripting (XSS) vulnerability in UserFeedback Team User Feedback plugin <= 1.0.7 versions. |
CVE-2023-43944 | Medium | 5.4 | 2023-09-29 | A Stored Cross Site Scripting (XSS) vulnerability was found in SourceCodester Task Management System 1.0. It allows attackers to execute arbitrary code via par… |
CVE-2023-43909 | Critical | 9.1 | 2023-09-29 | Hospital Management System thru commit 4770d was discovered to contain a SQL injection vulnerability via the app_contact parameter in appsearch.php. |
CVE-2023-5288 | Critical | 9.8 | 2023-09-29 | A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset the SIM an… |
CVE-2023-5261 | Medium | 5.5 | 2023-09-29 | A vulnerability, which was classified as critical, was found in Tongda OA 2017. Affected is an unknown function of the file general/hr/manage/staff_title_evalu… |
CVE-2023-5260 | Medium | 6.3 | 2023-09-29 | A vulnerability, which was classified as critical, has been found in SourceCodester Simple Membership System 1.0. This issue affects some unknown processing of… |
CVE-2023-5259 | Low | 2.7 | 2023-09-29 | A vulnerability classified as problematic was found in ForU CMS. This vulnerability affects unknown code of the file /admin/cms_admin.php. The manipulation of… |
CVE-2023-5258 | Medium | 6.3 | 2023-09-29 | A vulnerability classified as critical has been found in OpenRapid RapidCMS 1.3.1. This affects an unknown part of the file /resource/addgood.php. The manipula… |
CVE-2023-5257 | Low | 3.5 | 2023-09-29 | A vulnerability was found in WhiteHSBG JNDIExploit 1.4 on Windows. It has been rated as problematic. Affected by this issue is the function handleFileRequest o… |