2023 CVEs (page 149)
Page 149 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5196 | Medium | 6.5 | 2023-09-29 | Mattermost fails to enforce character limits in all possible notification props allowing an attacker to send a really long value for a notification_prop result… |
CVE-2023-5195 | Medium | 6.5 | 2023-09-29 | Mattermost fails to properly validate the permissions when soft deleting a team allowing a team member to soft delete other teams that they are not part of |
CVE-2023-5194 | Low | 2.7 | 2023-09-29 | Mattermost fails to properly validate permissions when demoting and deactivating a user allowing for a system/user manager to demote / deactivate another manag… |
CVE-2023-5193 | Medium | 4.9 | 2023-09-29 | Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage channels to read the posts of a… |
CVE-2023-5159 | Low | 3.8 | 2023-09-29 | Mattermost fails to properly verify the permissions when managing/updating a bot allowing a User Manager role with user edit permissions to manage/update bots… |
CVE-2023-3413 | Medium | 6.5 | 2023-09-29 | An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions sta… |
CVE-2023-5198 | Medium | 4.3 | 2023-09-29 | An issue has been discovered in GitLab affecting all versions prior to 16.2.7, all versions starting from 16.3 before 16.3.5, and all versions starting from 16… |
CVE-2023-3922 | Low | 3.0 | 2023-09-29 | An issue has been discovered in GitLab affecting all versions starting from 8.15 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions sta… |
CVE-2023-32477 | High | 7.8 | 2023-09-29 | Dell Common Event Enabler 8.9.8.2 for Windows and prior, contain an improper access control vulnerability. A local low-privileged malicious user may potential… |
CVE-2023-4532 | Medium | 4.3 | 2023-09-29 | An issue has been discovered in GitLab affecting all versions starting from 16.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions sta… |
CVE-2023-44469 | Medium | 4.3 | 2023-09-29 | A Server-Side Request Forgery issue in the OpenID Connect Issuer in LemonLDAP::NG before 2.17.1 allows authenticated remote attackers to send GET requests to a… |
CVE-2023-3979 | Low | 3.1 | 2023-09-29 | An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions sta… |
CVE-2023-3920 | Medium | 4.3 | 2023-09-29 | An issue has been discovered in GitLab affecting all versions starting from 11.2 before 16.2.8, all versions starting from 16.3 before 16.3.5, all versions sta… |
CVE-2023-3917 | Medium | 4.3 | 2023-09-29 | Denial of Service in pipelines affecting all versions of Gitlab EE and CE prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows attacker to ca… |
CVE-2023-3914 | Medium | 5.4 | 2023-09-29 | A business logic error in GitLab EE affecting all versions prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allows access to internal projects… |
CVE-2023-3906 | Low | 3.5 | 2023-09-29 | An input validation issue in the asset proxy in GitLab EE, affecting all versions from 12.3 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1, al… |
CVE-2023-3115 | Medium | 5.4 | 2023-09-29 | An issue has been discovered in GitLab EE affecting all versions affecting all versions from 11.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16… |
CVE-2023-2233 | Low | 3.1 | 2023-09-29 | An improper authorization issue has been discovered in GitLab CE/EE affecting all versions starting from 11.8 before 16.2.8, all versions starting from 16.3 be… |
CVE-2023-0989 | Medium | 4.3 | 2023-09-29 | An information disclosure issue in GitLab CE/EE affecting all versions starting from 13.11 prior to 16.2.8, 16.3 prior to 16.3.5, and 16.4 prior to 16.4.1 allo… |
CVE-2023-44466 | High | 8.8 | 2023-09-29 | An issue was discovered in net/ceph/messenger_v2.c in the Linux kernel before 6.4.5. There is an integer signedness error, leading to a buffer overflow and rem… |
CVE-2023-30591 | High | 7.5 | 2023-09-29 | Denial-of-service in NodeBB <= v2.8.10 allows unauthenticated attackers to trigger a crash, when invoking `eventName.startsWith()` or `eventName.toString()`, w… |
CVE-2023-44464 | High | 7.8 | 2023-09-29 | pretix before 2023.7.2 allows Pillow to parse EPS files. |
CVE-2023-26148 | Medium | 5.4 | 2023-09-29 | All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r… |
CVE-2023-26147 | Medium | 5.3 | 2023-09-29 | All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can… |
CVE-2023-26146 | Medium | 6.1 | 2023-09-29 | All versions of the package ithewei/libhv are vulnerable to Cross-site Scripting (XSS) such that when a file with a name containing a malicious payload is serv… |
CVE-2023-5077 | High | 7.6 | 2023-09-29 | The Vault and Vault Enterprise ("Vault") Google Cloud secrets engine did not preserve existing Google Cloud IAM Conditions upon creating or updating rolesets… |
CVE-2023-3775 | Medium | 4.2 | 2023-09-29 | A Vault Enterprise Sentinel Role Governing Policy created by an operator to restrict access to resources in one namespace can be applied to requests outside in… |
CVE-2023-43654 | Critical | 10.0 | 2023-09-28 | TorchServe is a tool for serving and scaling PyTorch models in production. TorchServe default configuration lacks proper input validation, enabling third parti… |
CVE-2023-44174 | Medium | 6.4 | 2023-09-28 | Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Stored Cross-Site Scripting vulnerability. |
CVE-2023-44166 | Critical | 9.8 | 2023-09-28 | The 'age' parameter of the process_registration.php resource does not validate the characters received and they are sent unfiltered to the database. |
CVE-2023-44164 | Critical | 9.8 | 2023-09-28 | The 'Email' parameter of the process_login.php resource does not validate the characters received and they are sent unfiltered to the database. |
CVE-2023-44163 | Critical | 9.8 | 2023-09-28 | The 'search' parameter of the process_search.php resource does not validate the characters received and they are sent unfiltered to the database. |
CVE-2023-43739 | Critical | 9.8 | 2023-09-28 | The 'bookisbn' parameter of the cart.php resource does not validate the characters received and they are sent unfiltered to the database. |
CVE-2023-43662 | High | 8.6 | 2023-09-28 | ShokoServer is a media server which specializes in organizing anime. In affected versions the `/api/Image/WithPath` endpoint is accessible without authenticati… |
CVE-2023-43014 | High | 8.8 | 2023-09-28 | Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page… |
CVE-2023-5185 | Critical | 9.1 | 2023-09-28 | Gym Management System Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'file' parameter of profile/i.php page, allowing an authent… |
CVE-2023-5053 | Critical | 9.8 | 2023-09-28 | Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. |
CVE-2023-5004 | Critical | 9.8 | 2023-09-28 | Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI. |
CVE-2023-4316 | High | 7.5 | 2023-09-28 | Zod in versions 3.21.0 up to and including 3.22.3 allows an attacker to perform a denial of service while validating emails. |
CVE-2023-44173 | Medium | 5.4 | 2023-09-28 | Online Movie Ticket Booking System v1.0 is vulnerable to an authenticated Reflected Cross-Site Scripting vulnerability. |
CVE-2023-43740 | High | 8.8 | 2023-09-28 | Online Book Store Project v1.0 is vulnerable to an Insecure File Upload vulnerability on the 'image' parameter of admin_edit.php page, allowing an authenticate… |
CVE-2023-43013 | Critical | 9.8 | 2023-09-28 | Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an externa… |
CVE-2023-41911 | Medium | 4.7 | 2023-09-28 | Samsung Mobile Processor Exynos 2200 allows a GPU Double Free (issue 1 of 2). |
CVE-2023-43323 | Medium | 6.5 | 2023-09-28 | mooSocial 3.1.8 is vulnerable to external service interaction on post function. When executed, the server sends a HTTP and DNS request to external server. The… |
CVE-2023-43226 | High | 8.8 | 2023-09-28 | An arbitrary file upload vulnerability in dede/baidunews.php in DedeCMS 5.7.111 and earlier allows attackers to execute arbitrary code via uploading a crafted… |
CVE-2023-5256 | High | 7.5 | 2023-09-28 | In certain scenarios, Drupal's JSON:API module will output error backtraces. With some configurations, this may cause sensitive information to be cached and ma… |
CVE-2023-43664 | Medium | 4.3 | 2023-09-28 | PrestaShop is an Open Source e-commerce web application. In the Prestashop Back office interface, an employee can list all modules without any access rights: m… |
CVE-2023-43663 | Medium | 6.3 | 2023-09-28 | PrestaShop is an Open Source e-commerce web application. In affected versions any module can be disabled or uninstalled from back office, even with low user ri… |
CVE-2023-43657 | High | 7.2 | 2023-09-28 | discourse-encrypt is a plugin that provides a secure communication channel through Discourse. Improper escaping of encrypted topic titles could lead to a cross… |
CVE-2023-43044 | Medium | 5.3 | 2023-09-28 | IBM License Metric Tool 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request contain… |
CVE-2023-40375 | High | 7.4 | 2023-09-28 | Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access… |
CVE-2023-5217 | High | 8.8 | 2023-09-28 | Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap… |
CVE-2023-5187 | High | 8.8 | 2023-09-28 | Use after free in Extensions in Google Chrome prior to 117.0.5938.132 allowed an attacker who convinced a user to install a malicious extension to potentially… |
CVE-2023-5186 | High | 8.8 | 2023-09-28 | Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to pot… |
CVE-2023-30415 | Critical | 9.8 | 2023-09-28 | Sourcecodester Packers and Movers Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /inquiries/view_inquir… |
CVE-2023-43884 | Medium | 5.4 | 2023-09-28 | A Cross-site scripting (XSS) vulnerability in Reference ID from the panel Transactions, of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or… |
CVE-2023-43879 | Medium | 4.8 | 2023-09-28 | Rite CMS 3.0 has a Cross-Site scripting (XSS) vulnerability that allows attackers to execute arbitrary code via a crafted payload into the Global Content Block… |
CVE-2023-43878 | Medium | 5.4 | 2023-09-28 | Rite CMS 3.0 has Multiple Cross-Site scripting (XSS) vulnerabilities that allow attackers to execute arbitrary code via a crafted payload into the Main Menu It… |
CVE-2023-43876 | Medium | 5.4 | 2023-09-28 | A Cross-Site Scripting (XSS) vulnerability in installation of October v.3.4.16 allows an attacker to execute arbitrary web scripts via a crafted payload inject… |
CVE-2023-5215 | Medium | 5.3 | 2023-09-28 | A flaw was found in libnbd. A server can reply with a block size larger than 2^63 (the NBD spec states the size is a 64-bit unsigned value). This issue could l… |
CVE-2023-43874 | Medium | 5.4 | 2023-09-28 | Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Copyright a… |
CVE-2023-43873 | Medium | 5.4 | 2023-09-28 | A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the… |
CVE-2023-43872 | Medium | 5.4 | 2023-09-28 | A File upload vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS). |
CVE-2023-43871 | Medium | 5.4 | 2023-09-28 | A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS). |
CVE-2023-43868 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via websGetVar function. |
CVE-2023-43867 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanL2TP function. |
CVE-2023-43866 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard7 function. |
CVE-2023-43865 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPTP function. |
CVE-2023-43864 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard55 function. |
CVE-2023-43863 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanDhcpplus function. |
CVE-2023-43862 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formLanguageChange function. |
CVE-2023-43861 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanPPPoE function. |
CVE-2023-43860 | High | 7.5 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWanNonLogin function. |
CVE-2023-42756 | Medium | 4.4 | 2023-09-28 | A flaw was found in the Netfilter subsystem of the Linux kernel. A race condition between IPSET_CMD_ADD and IPSET_CMD_SWAP can lead to a kernel panic due to th… |
CVE-2023-40307 | Medium | 6.3 | 2023-09-28 | An attacker with standard privileges on macOS when requesting administrator privileges from the application can submit input which causes a buffer overflow res… |
CVE-2023-43869 | Critical | 9.8 | 2023-09-28 | D-Link DIR-619L B1 2.02 is vulnerable to Buffer Overflow via formSetWAN_Wizard56 function. |
CVE-2023-5233 | Medium | 6.4 | 2023-09-28 | The Font Awesome Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'fawesome' shortcode in versions up to, and including, 5.0 d… |
CVE-2023-5232 | Medium | 6.4 | 2023-09-28 | The Font Awesome More Icons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' shortcode in versions up to, and including, 3.5 due to… |
CVE-2023-5230 | Medium | 6.4 | 2023-09-28 | The TM WooCommerce Compare & Wishlist plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'tm_woo_wishlist_table' shortcode in versions up to… |
CVE-2023-44276 | Medium | 5.4 | 2023-09-28 | OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard. |
CVE-2023-44275 | Medium | 5.4 | 2023-09-28 | OPNsense before 23.7.5 allows XSS via the index.php column_count parameter to the Lobby Dashboard. |
CVE-2023-26149 | Medium | 6.1 | 2023-09-28 | Versions of the package quill-mention before 4.0.0 are vulnerable to Cross-site Scripting (XSS) due to improper user-input sanitization, via the renderList fun… |
CVE-2023-26145 | High | 7.4 | 2023-09-28 | This affects versions of the package pydash before 6.0.0. A number of pydash methods such as pydash.objects.invoke() and pydash.collections.invoke_map() accept… |
CVE-2023-44273 | Critical | 9.8 | 2023-09-28 | Consensys gnark-crypto through 0.11.2 allows Signature Malleability. This occurs because deserialisation of EdDSA and ECDSA signatures does not ensure that the… |
CVE-2023-38877 | High | 8.8 | 2023-09-28 | A host header injection vulnerability exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). By sending a specially crafted host header in… |
CVE-2023-38874 | High | 8.8 | 2023-09-28 | A remote code execution (RCE) vulnerability via an insecure file upload exists in gugoan's Economizzer v.0.9-beta1 and commit 3730880 (April 2023). A malicious… |
CVE-2023-38873 | Medium | 6.5 | 2023-09-28 | The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer is vulnerable to Clickjacking. Clickjacking, also known as a "UI redress attack", is when… |
CVE-2023-38872 | Low | 3.7 | 2023-09-28 | An Insecure Direct Object Reference (IDOR) vulnerability in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1 allows any unauthenticated attacker… |
CVE-2023-38871 | Medium | 5.3 | 2023-09-28 | The commit 3730880 (April 2023) and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password functionalities. Th… |
CVE-2023-38870 | Critical | 9.8 | 2023-09-28 | A SQL injection vulnerability exists in gugoan Economizzer commit 3730880 (April 2023) and v.0.9-beta1. The cash book has a feature to list accomplishments by… |
CVE-2023-42222 | High | 8.8 | 2023-09-28 | WebCatalog before 49.0 is vulnerable to Incorrect Access Control. WebCatalog calls the Electron shell.openExternal function without verifying that the URL is f… |
CVE-2023-41450 | High | 8.8 | 2023-09-28 | An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. |
CVE-2023-41447 | Medium | 6.1 | 2023-09-28 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the subcmd para… |
CVE-2023-41446 | Medium | 6.1 | 2023-09-28 | Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted script to the title parame… |
CVE-2023-41444 | High | 7.8 | 2023-09-28 | An issue in Binalyze IREC.sys v.3.11.0 and before allows a local attacker to execute arbitrary code and escalate privileges via the fun_1400084d0 function in I… |
CVE-2023-5244 | Medium | 6.1 | 2023-09-28 | Cross-site Scripting (XSS) - Reflected in GitHub repository microweber/microweber prior to 2.0. |
CVE-2023-43320 | High | 8.8 | 2023-09-27 | An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows… |
CVE-2023-43314 | High | 7.5 | 2023-09-27 | ** UNSUPPORTED WHEN ASSIGNED **The buffer overflow vulnerability in the Zyxel PMG2005-T20B firmware version V1.00(ABNK.2)b11_C0 could allow an unauthenticated… |
CVE-2023-43233 | Medium | 6.1 | 2023-09-27 | A stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML… |
CVE-2023-43191 | Medium | 5.4 | 2023-09-27 | SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in th… |