2023 CVEs (page 154)
Page 154 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-43470 | Critical | 9.8 | 2023-09-23 | SQL injection vulnerability in janobe Online Voting System v.1.0 allows a remote attacker to execute arbitrary code via the checklogin.php component. |
CVE-2023-43469 | Critical | 9.8 | 2023-09-23 | SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the ForPass.php component. |
CVE-2023-43468 | Critical | 9.8 | 2023-09-23 | SQL injection vulnerability in janobe Online Job Portal v.2020 allows a remote attacker to execute arbitrary code via the login.php component. |
CVE-2023-43338 | Critical | 9.8 | 2023-09-23 | Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows attackers to… |
CVE-2023-43130 | Critical | 9.8 | 2023-09-22 | D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection. |
CVE-2023-43129 | Critical | 9.8 | 2023-09-22 | D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of REMOTE_PORT parameters. |
CVE-2023-40989 | Critical | 9.8 | 2023-09-22 | SQL injection vulnerbility in jeecgboot jeecg-boot v 3.0, 3.5.3 that allows a remote attacker to execute arbitrary code via a crafted request to the report/jee… |
CVE-2023-43270 | Critical | 9.8 | 2023-09-22 | dst-admin v1.5.0 was discovered to contain a remote command execution (RCE) vulnerability via the userId parameter at /home/playerOperate. |
CVE-2023-38346 | High | 8.8 | 2023-09-22 | An issue was discovered in Wind River VxWorks 6.9 and 7. The function ``tarExtract`` implements TAR file extraction and thereby also processes files within an… |
CVE-2023-43640 | Medium | 6.5 | 2023-09-22 | TaxonWorks is a web-based workbench designed for taxonomists and biodiversity scientists. Prior to version 0.34.0, a SQL injection vulnerability was found in T… |
CVE-2023-42821 | High | 7.5 | 2023-09-22 | The package `github.com/gomarkdown/markdown` is a Go library for parsing Markdown text and rendering as HTML. Prior to pseudoversion `0.0.0-20230922105210-14b1… |
CVE-2023-42812 | Medium | 6.3 | 2023-09-22 | Galaxy is an open-source platform for FAIR data analysis. Prior to version 22.05, Galaxy is vulnerable to server-side request forgery, which allows a malicious… |
CVE-2023-41031 | High | 8.0 | 2023-09-22 | Command injection in homemng.htm in Juplink RX4-1500 versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows remote authenticated attackers to execute commands via… |
CVE-2023-41029 | High | 8.0 | 2023-09-22 | Command injection vulnerability in the homemng.htm endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.2, V1.0.3, V1.0.4, and V1.0.5 allows authent… |
CVE-2023-41027 | High | 8.0 | 2023-09-22 | Credential disclosure in the '/webs/userpasswd.htm' endpoint in Juplink RX4-1500 Wifi router firmware versions V1.0.4 and V1.0.5 allows an authenticated attack… |
CVE-2023-42811 | Medium | 4.7 | 2023-09-22 | aes-gcm is a pure Rust implementation of the AES-GCM. Starting in version 0.10.0 and prior to version 0.10.3, in the AES GCM implementation of decrypt_in_place… |
CVE-2023-42798 | High | 8.2 | 2023-09-22 | AutomataCI is a template git repository equipped with a native built-in semi-autonomous CI tools. An issue in versions 1.4.1 and below can let a release job re… |
CVE-2023-43144 | Critical | 9.8 | 2023-09-22 | Projectworldsl Assets-management-system-in-php 1.0 is vulnerable to SQL Injection via the "id" parameter in delete.php. |
CVE-2023-23766 | Medium | 4.5 | 2023-09-22 | An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff in a re-opened P… |
CVE-2023-5002 | Medium | 6.0 | 2023-09-22 | A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL utilities such as pg_d… |
CVE-2023-34319 | High | 7.8 | 2023-09-22 | The fix for XSA-423 added logic to Linux'es netback driver to deal with a frontend splitting a packet in a way such that not all of the headers would come in o… |
CVE-2023-4774 | Medium | 6.4 | 2023-09-22 | The WP-Matomo Integration (WP-Piwik) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wp-piwik' shortcode in versions up to, and incl… |
CVE-2023-4716 | Medium | 6.4 | 2023-09-22 | The Media Library Assistant plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'mla_gallery' shortcode in versions up to, and including… |
CVE-2023-43784 | High | 7.5 | 2023-09-22 | Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there i… |
CVE-2023-43783 | High | 7.5 | 2023-09-22 | Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversa… |
CVE-2023-43782 | Medium | 5.5 | 2023-09-22 | Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversar… |
CVE-2023-43771 | Medium | 5.5 | 2023-09-22 | In nqptp-message-handlers.c in nqptp before 1.2.3, crafted packets received on the control port could crash the program. |
CVE-2023-43770 | Medium | 6.1 | 2023-09-22 | Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcu… |
CVE-2023-43090 | Medium | 5.5 | 2023-09-22 | A vulnerability was found in GNOME Shell. GNOME Shell's lock screen allows an unauthenticated local user to view windows of the locked desktop session by using… |
CVE-2023-43767 | High | 7.5 | 2023-09-22 | Certain WithSecure products allow Denial of Service via the aepack archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server Securi… |
CVE-2023-43766 | High | 7.8 | 2023-09-22 | Certain WithSecure products allow Local privilege escalation via the lhz archive unpack handler. This affects WithSecure Client Security 15, WithSecure Server… |
CVE-2023-43765 | High | 7.5 | 2023-09-22 | Certain WithSecure products allow Denial of Service in the aeelf component. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecu… |
CVE-2023-43763 | Medium | 6.1 | 2023-09-22 | Certain WithSecure products allow XSS via an unvalidated parameter in the endpoint. This affects WithSecure Policy Manager 15 on Windows and Linux. |
CVE-2023-43762 | Critical | 9.8 | 2023-09-22 | Certain WithSecure products allow Unauthenticated Remote Code Execution via the web server (backend). This affects WithSecure Policy Manager 15 and Policy Mana… |
CVE-2023-43761 | High | 7.5 | 2023-09-22 | Certain WithSecure products allow Denial of Service (infinite loop). This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecure Emai… |
CVE-2023-43760 | High | 7.5 | 2023-09-22 | Certain WithSecure products allow Denial of Service via a fuzzed PE32 file. This affects WithSecure Client Security 15, WithSecure Server Security 15, WithSecu… |
CVE-2023-23364 | High | 8.1 | 2023-09-22 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows… |
CVE-2023-23363 | High | 8.1 | 2023-09-22 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows r… |
CVE-2023-23362 | High | 8.8 | 2023-09-22 | An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to… |
CVE-2023-31719 | Critical | 9.8 | 2023-09-22 | FUXA <= 1.1.12 is vulnerable to SQL Injection via /api/signin. |
CVE-2023-31718 | High | 7.5 | 2023-09-22 | FUXA <= 1.1.12 is vulnerable to Local via Inclusion via /api/download. |
CVE-2023-31717 | High | 7.5 | 2023-09-22 | A SQL Injection attack in FUXA <= 1.1.12 allows exfiltration of confidential information from the database. |
CVE-2023-31716 | High | 7.5 | 2023-09-22 | FUXA <= 1.1.12 has a Local File Inclusion vulnerability via file=fuxa.log |
CVE-2023-5068 | High | 7.8 | 2023-09-21 | Delta Electronics DIAScreen may write past the end of an allocated buffer while parsing a specially crafted input file. This could allow an attacker to execu… |
CVE-2023-4504 | High | 7.0 | 2023-09-21 | Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflo… |
CVE-2023-43128 | Critical | 9.8 | 2023-09-21 | D-LINK DIR-806 1200M11AC wireless router DIR806A1_FW100CNb11 is vulnerable to command injection due to lax filtering of HTTP_ST parameters. |
CVE-2023-41616 | Medium | 4.8 | 2023-09-21 | A reflected cross-site scripting (XSS) vulnerability in the Search Student function of Student Management System v1.2.3 and before allows attackers to execute… |
CVE-2023-41614 | Medium | 4.8 | 2023-09-21 | A stored cross-site scripting (XSS) vulnerability in the Add Animal Details function of Zoo Management System v1.0 allows attackers to execute arbitrary web sc… |
CVE-2023-42261 | High | 7.5 | 2023-09-21 | Mobile Security Framework (MobSF) <=v3.7.8 Beta is vulnerable to Insecure Permissions. NOTE: the vendor's position is that authentication is intentionally not… |
CVE-2023-38344 | Medium | 6.5 | 2023-09-21 | An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /land… |
CVE-2023-38343 | High | 7.5 | 2023-09-21 | An XXE (XML external entity injection) vulnerability exists in the CSEP component of Ivanti Endpoint Manager before 2022 SU4. External entity references are en… |
CVE-2023-42482 | Medium | 4.7 | 2023-09-21 | Samsung Mobile Processor Exynos 2200 allows a GPU Use After Free. |
CVE-2023-34576 | Critical | 9.8 | 2023-09-21 | SQL injection vulnerability in updatepos.php in PrestaShop opartfaq through 1.0.3 allows remote attackers to run arbitrary SQL commands via unspedified vector. |
CVE-2023-42280 | High | 7.5 | 2023-09-21 | mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in a… |
CVE-2023-41993 | High | 8.8 | 2023-09-21 | The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is awa… |
CVE-2023-41992 | High | 7.8 | 2023-09-21 | The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be… |
CVE-2023-41991 | Medium | 5.5 | 2023-09-21 | A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signat… |
CVE-2023-42810 | Critical | 9.8 | 2023-09-21 | systeminformation is a System Information Library for Node.JS. Versions 5.0.0 through 5.21.6 have a SSID Command Injection Vulnerability. The problem was fixed… |
CVE-2023-42279 | Critical | 9.8 | 2023-09-21 | Dreamer CMS v4.1.3 was discovered to contain a SQL injection vulnerability via the model-form-management-field form. |
CVE-2023-42807 | Medium | 6.3 | 2023-09-21 | Frappe LMS is an open source learning management system. In versions 1.0.0 and prior, on the People Page of LMS, there was an SQL Injection vulnerability. The… |
CVE-2023-42806 | Medium | 6.5 | 2023-09-21 | Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, not signing and verifying `$\mathsf{cid}$` allows an attacker (which must be… |
CVE-2023-42805 | High | 7.5 | 2023-09-21 | quinn-proto is a state machine for the QUIC transport protocol. Prior to versions 0.9.5 and 0.10.5, receiving unknown QUIC frames in a QUIC packet could result… |
CVE-2023-42458 | Low | 3.7 | 2023-09-21 | Zope is an open-source web application server. Prior to versions 4.8.10 and 5.8.5, there is a stored cross site scripting vulnerability for SVG images. Note th… |
CVE-2023-34577 | Critical | 9.8 | 2023-09-21 | SQL injection vulnerability in Prestashop opartplannedpopup 1.4.11 and earlier allows remote attackers to run arbitrary SQL commands via OpartPlannedPopupModul… |
CVE-2023-42456 | Low | 3.3 | 2023-09-21 | Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authen… |
CVE-2023-42457 | High | 7.5 | 2023-09-21 | plone.rest allows users to use HTTP verbs such as GET, POST, PUT, DELETE, etc. in Plone. Starting in the 2.x branch and prior to versions 2.0.1 and 3.0.1, when… |
CVE-2023-41048 | Low | 3.7 | 2023-09-21 | plone.namedfile allows users to handle `File` and `Image` fields targeting, but not depending on, Plone Dexterity content. Prior to versions 5.6.1, 6.0.3, 6.1… |
CVE-2023-40183 | High | 7.5 | 2023-09-21 | DataEase is an open source data visualization and analysis tool. Prior to version 1.18.11, DataEase has a vulnerability that allows an attacker to to obtain us… |
CVE-2023-43637 | High | 7.8 | 2023-09-21 | Due to the implementation of "deriveVaultKey", prior to version 7.10, the generated vault key would always have the last 16 bytes predetermined to be "arfooba… |
CVE-2023-43634 | High | 8.8 | 2023-09-21 | When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used. In a previous project, CYMOTIVE found that the configurati… |
CVE-2023-43633 | High | 8.8 | 2023-09-21 | On boot, the Pillar eve container checks for the existence and content of “/config/GlobalConfig/global.json”. If the file exists, it overrides the existing c… |
CVE-2023-43632 | Critical | 9.0 | 2023-09-21 | As noted in the “VTPM.md” file in the eve documentation, “VTPM is a server listening on port 8877 in EVE, exposing limited functionality of the TPM to the cli… |
CVE-2023-43631 | High | 8.8 | 2023-09-21 | On boot, the Pillar eve container checks for the existence and content of “/config/authorized_keys”. If the file is present, and contains a supported public… |
CVE-2023-43309 | Medium | 4.8 | 2023-09-21 | There is a stored cross-site scripting (XSS) vulnerability in Webmin 2.002 and below via the Cluster Cron Job tab Input field, which allows attackers to run ma… |
CVE-2023-43274 | High | 7.5 | 2023-09-21 | Phpjabbers PHP Shopping Cart 4.2 is vulnerable to SQL Injection via the id parameter. |
CVE-2023-43242 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter removeRuleList in form2IPQoSTcDel. |
CVE-2023-43241 | Critical | 9.8 | 2023-09-21 | D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter TXPower and GuardInt in SetWLanRadioSecurity. |
CVE-2023-43240 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter sip_address in ipportFilter. |
CVE-2023-43239 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter flag_5G in showMACfilterMAC. |
CVE-2023-43238 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter nvmacaddr in form2Dhcpip.cgi. |
CVE-2023-43237 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter macCloneMac in setMAC. |
CVE-2023-43236 | Critical | 9.8 | 2023-09-21 | D-Link DIR-816 A2 v1.10CNB05 was discovered to contain a stack overflow via parameter statuscheckpppoeuser in dir_setWanWifi. |
CVE-2023-43235 | Critical | 9.8 | 2023-09-21 | D-Link DIR-823G v1.0.2B05 was discovered to contain a stack overflow via parameter StartTime and EndTime in SetWifiDownSettings. |
CVE-2023-4753 | Low | 3.9 | 2023-09-21 | OpenHarmony v3.2.1 and prior version has a system call function usage error. Local attackers can crash kernel by the error input. |
CVE-2023-5104 | Medium | 6.5 | 2023-09-21 | Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0. |
CVE-2023-4760 | High | 7.6 | 2023-09-21 | In Eclipse RAP versions from 3.0.0 up to and including 3.25.0, Remote Code Execution is possible on Windows when using the FileUpload component. The reas… |
CVE-2023-4292 | Medium | 5.3 | 2023-09-21 | Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a SQL injection vulnerability via manipulated parameters… |
CVE-2023-4291 | Critical | 9.8 | 2023-09-21 | Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a remote code execution (RCE) vulnerability via manipula… |
CVE-2023-4152 | High | 7.5 | 2023-09-21 | Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a… |
CVE-2023-43669 | High | 7.5 | 2023-09-21 | The Tungstenite crate before 0.20.1 for Rust allows remote attackers to cause a denial of service (minutes of CPU consumption) via an excessive length of an HT… |
CVE-2023-39252 | Medium | 5.9 | 2023-09-21 | Dell SCG Policy Manager 5.16.00.14 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vu… |
CVE-2023-43135 | Critical | 9.8 | 2023-09-20 | There is an unauthorized access vulnerability in TP-LINK ER5120G 4.0 2.0.0 Build 210817 Rel.80868n, which allows attackers to obtain sensitive information of t… |
CVE-2023-39675 | Critical | 9.8 | 2023-09-20 | SimpleImportProduct Prestashop Module v6.2.9 was discovered to contain a SQL injection vulnerability via the key parameter at send.php. |
CVE-2023-37279 | High | 7.5 | 2023-09-20 | Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a craft… |
CVE-2023-36234 | Medium | 5.4 | 2023-09-20 | Cross Site Scripting (XSS) vulnerability in Netbox 3.5.1, allows attackers to execute arbitrary code via Name field in device-roles/add function. |
CVE-2023-36109 | Critical | 9.8 | 2023-09-20 | Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jer… |
CVE-2023-34575 | Critical | 9.8 | 2023-09-20 | SQL injection vulnerability in PrestaShop opartsavecart through 2.0.7 allows remote attackers to run arbitrary SQL commands via OpartSaveCartDefaultModuleFront… |
CVE-2023-42322 | Critical | 9.8 | 2023-09-20 | Insecure Permissions vulnerability in icmsdev iCMS v.7.0.16 allows a remote attacker to obtain sensitive information. |
CVE-2023-42321 | High | 8.8 | 2023-09-20 | Cross Site Request Forgery (CSRF) vulnerability in icmsdev iCMSv.7.0.16 allows a remote attacker to execute arbitrary code via the user.admincp.php, members.ad… |
CVE-2023-39677 | High | 7.5 | 2023-09-20 | MyPrestaModules Prestashop Module v6.2.9 and UpdateProducts Prestashop Module v3.6.9 were discovered to contain a PHPInfo information disclosure vulnerability… |