2023 CVEs (page 151)
Page 151 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-5197 | High | 7.8 | 2023-09-27 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Addition and remov… |
CVE-2023-5192 | Medium | 6.5 | 2023-09-27 | Excessive Data Query Operations in a Large Data Table in GitHub repository pimcore/demo prior to 10.3.0. |
CVE-2023-5183 | Critical | 9.9 | 2023-09-27 | Unsafe deserialization of untrusted JSON allows execution of arbitrary code on affected releases of the Illumio PCE. Authentication to the API is required to e… |
CVE-2023-5176 | Critical | 9.8 | 2023-09-27 | Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-5175 | Critical | 9.8 | 2023-09-27 | During process shutdown, it was possible that an `ImageBitmap` was created that would later be used after being freed from a different codepath, leading to a p… |
CVE-2023-5174 | Critical | 9.8 | 2023-09-27 | If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free a… |
CVE-2023-5173 | High | 7.5 | 2023-09-27 | In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic (possibly under influence of a local unprivileged… |
CVE-2023-5172 | Critical | 9.8 | 2023-09-27 | A hashtable in the Ion Engine could have been mutated while there was a live interior reference, leading to a potential use-after-free and exploitable crash… |
CVE-2023-5171 | Medium | 6.5 | 2023-09-27 | During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing an attacker to write two NUL bytes, and cause a potent… |
CVE-2023-5170 | High | 7.4 | 2023-09-27 | In canvas rendering, a compromised content process could have caused a surface to change unexpectedly, leading to a memory leak of a privileged process. This m… |
CVE-2023-5169 | Medium | 6.5 | 2023-09-27 | A compromised content process could have provided malicious data in a `PathRecording` resulting in an out-of-bounds write, leading to a potentially exploitable… |
CVE-2023-5168 | Critical | 9.8 | 2023-09-27 | A compromised content process could have provided malicious data to `FilterNodeD2D1` resulting in an out-of-bounds write, leading to a potentially exploitable… |
CVE-2023-5162 | Medium | 6.4 | 2023-09-27 | The Options for Twenty Seventeen plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'social-links' shortcode in versions up to, and includin… |
CVE-2023-5161 | Medium | 6.4 | 2023-09-27 | The Modal Window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 5.3.5 due to insufficient i… |
CVE-2023-5157 | High | 7.5 | 2023-09-27 | A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service. |
CVE-2023-5135 | Medium | 6.4 | 2023-09-27 | The Simple Cloudflare Turnstile plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'gravity-simple-turnstile' shortcode in versions up to, a… |
CVE-2023-4934 | High | 8.8 | 2023-09-27 | Authorization Bypass Through User-Controlled Key vulnerability in Usta AYBS allows Authentication Abuse, Authentication Bypass. This issue affects AYBS: befor… |
CVE-2023-4737 | Critical | 9.8 | 2023-09-27 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This is… |
CVE-2023-4565 | Medium | 5.3 | 2023-09-27 | Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailab… |
CVE-2023-4506 | Low | 2.2 | 2023-09-27 | The Active Directory Integration / LDAP Integration plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 4.1.10. This is due t… |
CVE-2023-4505 | Low | 2.2 | 2023-09-27 | The Staff / Employee Business Directory for Active Directory plugin for WordPress is vulnerable to LDAP Passback in versions up to, and including, 1.2.3. This… |
CVE-2023-4423 | Medium | 4.4 | 2023-09-27 | The WP Event Manager – Events Calendar, Registrations, Sell Tickets with WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admi… |
CVE-2023-4264 | High | 7.1 | 2023-09-27 | Potential buffer overflow vulnerabilities n the Zephyr Bluetooth subsystem. |
CVE-2023-4260 | Medium | 6.3 | 2023-09-27 | Potential off-by-one buffer overflow vulnerability in the Zephyr fuse file system. |
CVE-2023-4065 | Medium | 5.5 | 2023-09-27 | A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. T… |
CVE-2023-4003 | High | 7.6 | 2023-09-27 | One Identity Password Manager version 5.9.7.1 - An unauthenticated attacker with physical access to a workstation may upgrade privileges to SYSTEM through an… |
CVE-2023-44216 | Medium | 5.3 | 2023-09-27 | PVRIC (PowerVR Image Compression) on Imagination 2018 and later GPU devices offers software-transparent compression that enables cross-origin pixel-stealing at… |
CVE-2023-44207 | Medium | 5.4 | 2023-09-27 | Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before… |
CVE-2023-44206 | Critical | 9.1 | 2023-09-27 | Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows)… |
CVE-2023-44205 | Medium | 5.3 | 2023-09-27 | Sensitive information disclosure due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 359… |
CVE-2023-44172 | Critical | 9.8 | 2023-09-27 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php. |
CVE-2023-44171 | Critical | 9.8 | 2023-09-27 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php. |
CVE-2023-44170 | Critical | 9.8 | 2023-09-27 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php. |
CVE-2023-44169 | Critical | 9.8 | 2023-09-27 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php. |
CVE-2023-44161 | Medium | 6.5 | 2023-09-27 | Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before bui… |
CVE-2023-44160 | Medium | 6.5 | 2023-09-27 | Sensitive information manipulation due to cross-site request forgery. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before bui… |
CVE-2023-44159 | High | 7.5 | 2023-09-27 | Sensitive information disclosure due to cleartext storage of sensitive information. The following products are affected: Acronis Cyber Protect 15 (Linux, Windo… |
CVE-2023-44158 | High | 7.5 | 2023-09-27 | Sensitive information disclosure due to insufficient token field masking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before… |
CVE-2023-44157 | High | 7.8 | 2023-09-27 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 35979. |
CVE-2023-44156 | High | 7.5 | 2023-09-27 | Sensitive information disclosure due to spell-jacking. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. |
CVE-2023-44155 | High | 7.5 | 2023-09-27 | Sensitive information leak through log files. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979. |
CVE-2023-44154 | High | 8.1 | 2023-09-27 | Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows)… |
CVE-2023-44153 | High | 7.5 | 2023-09-27 | Sensitive information disclosure due to cleartext storage of sensitive information in memory. The following products are affected: Acronis Cyber Protect 15 (Li… |
CVE-2023-44152 | Critical | 9.1 | 2023-09-27 | Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS… |
CVE-2023-44129 | Low | 3.6 | 2023-09-27 | The vulnerability is that the Messaging ("com.android.mms") app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.an… |
CVE-2023-44128 | Medium | 5.0 | 2023-09-27 | he vulnerability is to delete arbitrary files in LGInstallService ("com.lge.lginstallservies") app. The app contains the exported "com.lge.lginstallservies.Ins… |
CVE-2023-44127 | Low | 3.6 | 2023-09-27 | he vulnerability is that the Call management ("com.android.server.telecom") app patched by LG launches implicit intents that disclose sensitive data to all thi… |
CVE-2023-44126 | Low | 3.6 | 2023-09-27 | The vulnerability is that the Call management ("com.android.server.telecom") app patched by LG sends a lot of LG-owned implicit broadcasts that disclose sensit… |
CVE-2023-44125 | Medium | 6.1 | 2023-09-27 | The vulnerability is the use of implicit PendingIntents without the PendingIntent.FLAG_IMMUTABLE set that leads to theft and/or (over-)write of arbitrary files… |
CVE-2023-44124 | Medium | 6.1 | 2023-09-27 | The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools… |
CVE-2023-44123 | Medium | 6.1 | 2023-09-27 | The vulnerability is the use of implicit PendingIntents with the PendingIntent.FLAG_MUTABLE set that leads to theft and/or (over-)write of arbitrary files with… |
CVE-2023-44122 | Medium | 6.1 | 2023-09-27 | The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreens… |
CVE-2023-44121 | Medium | 5.0 | 2023-09-27 | The vulnerability is an intent redirection in LG ThinQ Service ("com.lge.lms2") in the "com/lge/lms/things/ui/notification/NotificationManager.java" file. This… |
CVE-2023-44044 | High | 7.2 | 2023-09-27 | Super Store Finder v3.6 and below was discovered to contain a SQL injection vulnerability via the Search parameter at /admin/stores.php. |
CVE-2023-44043 | Medium | 6.1 | 2023-09-27 | A reflected cross-site scripting (XSS) vulnerability in /install/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via… |
CVE-2023-44042 | Medium | 5.4 | 2023-09-27 | A stored cross-site scripting (XSS) vulnerability in /settings/index.php of Black Cat CMS 1.4.1 allows attackers to execute arbitrary web scripts or HTML via a… |
CVE-2023-44023 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi_set f… |
CVE-2023-44022 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the speed_dir parameter in the formSetSpeedWan functio… |
CVE-2023-44021 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the formSetClientState function. |
CVE-2023-44020 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the security parameter in the formWifiBasicSet functio… |
CVE-2023-44019 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the mac parameter in the GetParentControlInfo function. |
CVE-2023-44018 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the domain parameter in the add_white_node function. |
CVE-2023-44017 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the timeZone parameter in the fromSetSysTime function. |
CVE-2023-44016 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the deviceId parameter in the addWifiMacFilter functio… |
CVE-2023-44015 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the schedEndTime parameter in the setSchedWifi functio… |
CVE-2023-44014 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain multiple stack overflows in the formSetMacFilterCfg function via the macFil… |
CVE-2023-44013 | Critical | 9.8 | 2023-09-27 | Tenda AC10U v1.0 US_AC10UV1.0RTL_V15.03.06.49_multi_TDE01 was discovered to contain a stack overflow via the list parameter in the fromSetIpMacBind function. |
CVE-2023-43857 | Medium | 5.4 | 2023-09-27 | Dreamer CMS v4.1.3 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /admin/u/toIndex. |
CVE-2023-43856 | High | 7.5 | 2023-09-27 | Dreamer CMS v4.1.3 was discovered to contain an arbitrary file read vulnerability via the component /admin/TemplateController.java. |
CVE-2023-43830 | Medium | 5.4 | 2023-09-27 | A Cross-site scripting (XSS) vulnerability in /panel/configuration/financial/ of Subrion v4.2.1 allows attackers to execute arbitrary web scripts or HTML via a… |
CVE-2023-43828 | Medium | 5.4 | 2023-09-27 | A Cross-site scripting (XSS) vulnerability in /panel/languages/ of Subrion v4.2.1 allow attackers to execute arbitrary web scripts or HTML via a crafted payloa… |
CVE-2023-43825 | High | 7.8 | 2023-09-27 | Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user… |
CVE-2023-43775 | Medium | 4.7 | 2023-09-27 | Denial-of-service vulnerability in the web server of the Eaton SMP Gateway allows attacker to potentially force an unexpected restart of the automation platf… |
CVE-2023-43646 | High | 8.6 | 2023-09-27 | get-func-name is a module to retrieve a function's name securely and consistently both in NodeJS and the browser. Versions prior to 2.0.1 are subject to a regu… |
CVE-2023-43645 | Medium | 5.9 | 2023-09-27 | OpenFGA is an authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA is vulnerable to a denial of service attack when ce… |
CVE-2023-43614 | Medium | 6.1 | 2023-09-27 | Cross-site scripting vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an a… |
CVE-2023-43610 | High | 8.8 | 2023-09-27 | SQL injection vulnerability in Order Data Edit page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with editor (without setting authority) or highe… |
CVE-2023-43493 | Medium | 4.9 | 2023-09-27 | SQL injection vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a user with author or higher privilege to obtain sensitive in… |
CVE-2023-43484 | Medium | 6.1 | 2023-09-27 | Cross-site scripting vulnerability in Item List page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitra… |
CVE-2023-43381 | High | 7.5 | 2023-09-27 | SQL Injection vulnerability in Tianchoy Blog v.1.8.8 allows a remote attacker to obtain sensitive information via the id parameter in the login.php |
CVE-2023-43331 | Medium | 5.4 | 2023-09-27 | A cross-site scripting (XSS) vulnerability in the Add User function of Small CRM v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted p… |
CVE-2023-43291 | Critical | 9.8 | 2023-09-27 | Deserialization of Untrusted Data in emlog pro v.2.1.15 and earlier allows a remote attacker to execute arbitrary code via the cache.php component. |
CVE-2023-43263 | Medium | 6.1 | 2023-09-27 | A Cross-site scripting (XSS) vulnerability in Froala Editor v.4.1.1 allows attackers to execute arbitrary code via the Markdown component. |
CVE-2023-43234 | Critical | 9.8 | 2023-09-27 | DedeBIZ v6.2.11 was discovered to contain multiple remote code execution (RCE) vulnerabilities at /admin/file_manage_control.php via the $activepath and $filen… |
CVE-2023-43232 | Medium | 5.4 | 2023-09-27 | A stored cross-site scripting (XSS) vulnerability in the Website column management function of DedeBIZ v6.2.11 allows attackers to execute arbitrary web script… |
CVE-2023-43222 | Critical | 9.8 | 2023-09-27 | SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file. |
CVE-2023-43216 | Critical | 9.8 | 2023-09-27 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php. |
CVE-2023-43187 | Critical | 9.8 | 2023-09-27 | A remote code execution (RCE) vulnerability in the xmlrpc.php endpoint of NodeBB Inc NodeBB forum software prior to v1.18.6 allows attackers to execute arbitra… |
CVE-2023-43154 | Critical | 9.8 | 2023-09-27 | In Macrob7 Macs Framework Content Management System (CMS) 1.1.4f, loose comparison in "isValidLogin()" function during login attempt results in PHP type confus… |
CVE-2023-42820 | High | 7.0 | 2023-09-27 | JumpServer is an open source bastion host. This vulnerability is due to exposing the random number seed to the API, potentially allowing the randomly generated… |
CVE-2023-42819 | High | 8.9 | 2023-09-27 | JumpServer is an open source bastion host. Logged-in users can access and modify the contents of any file on the system. A user can use the 'Job-Template' menu… |
CVE-2023-42657 | Critical | 9.9 | 2023-09-27 | In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a directory traversal vulnerability was discovered. An attacker could leverage this vulnerability to pe… |
CVE-2023-42487 | High | 7.5 | 2023-09-27 | Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') |
CVE-2023-42486 | Medium | 6.3 | 2023-09-27 | Fortect - CWE-428: Unquoted Search Path or Element, may be used by local user to elevate privileges. |
CVE-2023-42462 | High | 7.7 | 2023-09-27 | GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses… |
CVE-2023-42461 | Medium | 6.5 | 2023-09-27 | GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses… |
CVE-2023-42460 | Medium | 5.3 | 2023-09-27 | Vyper is a Pythonic Smart Contract Language for the EVM. The `_abi_decode()` function does not validate input when it is nested in an expression. Uses of `_abi… |
CVE-2023-42453 | Low | 3.1 | 2023-09-27 | Synapse is an open-source Matrix homeserver written and maintained by the Matrix.org Foundation. Users were able to forge read receipts for any event (if they… |
CVE-2023-41996 | Medium | 5.5 | 2023-09-27 | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6. Apps that fail verification checks may still launch. |
CVE-2023-41995 | High | 7.8 | 2023-09-27 | A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to execu… |