2023 CVEs (page 160)
Page 160 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-3710 | Critical | 9.9 | 2023-09-12 | Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions p… |
CVE-2023-39215 | High | 7.1 | 2023-09-12 | Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. |
CVE-2023-39208 | Medium | 6.5 | 2023-09-12 | Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network… |
CVE-2023-39201 | High | 7.2 | 2023-09-12 | Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access. |
CVE-2023-21523 | Medium | 5.4 | 2023-09-12 | A Stored Cross-site Scripting (XSS) vulnerability in the Management Console (User Management and Alerts) of BlackBerry AtHoc version 7.1… |
CVE-2023-21520 | Medium | 5.3 | 2023-09-12 | A PII Enumeration via Credential Recovery in the Self Service (Credential Recovery) of BlackBerry AtHoc version 7.15 could allow an atta… |
CVE-2023-4501 | Critical | 9.8 | 2023-09-12 | User authentication with username and password credentials is ineffective in OpenText (Micro Focus) Visual COBOL, COBOL Server, Enterprise Developer, and Enter… |
CVE-2023-30962 | Medium | 6.8 | 2023-09-12 | The Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to la… |
CVE-2023-21522 | Medium | 6.1 | 2023-09-12 | A Reflected Cross-site Scripting (XSS) vulnerability in the Management Console (Reports) of BlackBerry AtHoc version 7.15 could allow an attacker to potential… |
CVE-2023-21521 | High | 7.2 | 2023-09-12 | An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read… |
CVE-2023-41764 | Medium | 5.5 | 2023-09-12 | Microsoft Office Spoofing Vulnerability |
CVE-2023-38164 | High | 7.6 | 2023-09-12 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-38163 | High | 7.8 | 2023-09-12 | Windows Defender Attack Surface Reduction Security Feature Bypass |
CVE-2023-38162 | High | 7.5 | 2023-09-12 | DHCP Server Service Denial of Service Vulnerability |
CVE-2023-38161 | High | 7.8 | 2023-09-12 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-38160 | Medium | 5.5 | 2023-09-12 | Windows TCP/IP Information Disclosure Vulnerability |
CVE-2023-38156 | High | 7.2 | 2023-09-12 | Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability |
CVE-2023-38155 | High | 7.0 | 2023-09-12 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2023-38152 | Medium | 5.3 | 2023-09-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-38150 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-38149 | High | 7.5 | 2023-09-12 | Windows TCP/IP Denial of Service Vulnerability |
CVE-2023-38148 | High | 8.8 | 2023-09-12 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability |
CVE-2023-38147 | High | 8.8 | 2023-09-12 | Windows Miracast Wireless Display Remote Code Execution Vulnerability |
CVE-2023-38146 | High | 8.8 | 2023-09-12 | Windows Themes Remote Code Execution Vulnerability |
CVE-2023-38144 | High | 7.8 | 2023-09-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-38143 | High | 7.8 | 2023-09-12 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-38142 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-38141 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-38140 | Medium | 5.5 | 2023-09-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-38139 | High | 7.8 | 2023-09-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36886 | High | 7.6 | 2023-09-12 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-36805 | High | 7.0 | 2023-09-12 | Windows MSHTML Platform Security Feature Bypass Vulnerability |
CVE-2023-36804 | High | 7.8 | 2023-09-12 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-36803 | Medium | 5.5 | 2023-09-12 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-36802 | High | 7.8 | 2023-09-12 | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability |
CVE-2023-36801 | Medium | 5.3 | 2023-09-12 | DHCP Server Service Information Disclosure Vulnerability |
CVE-2023-36800 | High | 7.6 | 2023-09-12 | Dynamics Finance and Operations Cross-site Scripting Vulnerability |
CVE-2023-36799 | Medium | 6.5 | 2023-09-12 | .NET Core and Visual Studio Denial of Service Vulnerability |
CVE-2023-36796 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-36794 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-36793 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-36792 | High | 7.8 | 2023-09-12 | Visual Studio Remote Code Execution Vulnerability |
CVE-2023-36788 | High | 7.8 | 2023-09-12 | .NET Framework Remote Code Execution Vulnerability |
CVE-2023-36777 | Medium | 5.7 | 2023-09-12 | Microsoft Exchange Server Information Disclosure Vulnerability |
CVE-2023-36773 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-36772 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-36771 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-36770 | High | 7.8 | 2023-09-12 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-36767 | Medium | 4.3 | 2023-09-12 | Microsoft Office Security Feature Bypass Vulnerability |
CVE-2023-36766 | High | 7.8 | 2023-09-12 | Microsoft Excel Information Disclosure Vulnerability |
CVE-2023-36765 | High | 7.8 | 2023-09-12 | Microsoft Office Elevation of Privilege Vulnerability |
CVE-2023-36764 | High | 8.8 | 2023-09-12 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
CVE-2023-36763 | High | 7.5 | 2023-09-12 | Microsoft Outlook Information Disclosure Vulnerability |
CVE-2023-36762 | High | 7.3 | 2023-09-12 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-36761 | Medium | 6.5 | 2023-09-12 | Microsoft Word Information Disclosure Vulnerability |
CVE-2023-36760 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-36759 | Medium | 6.7 | 2023-09-12 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-36758 | High | 7.8 | 2023-09-12 | Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-36757 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-36756 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36745 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36744 | High | 8.0 | 2023-09-12 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-36742 | High | 7.8 | 2023-09-12 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2023-36740 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-36739 | High | 7.8 | 2023-09-12 | 3D Viewer Remote Code Execution Vulnerability |
CVE-2023-36736 | Medium | 4.4 | 2023-09-12 | Microsoft Identity Linux Broker Remote Code Execution Vulnerability |
CVE-2023-35355 | High | 7.8 | 2023-09-12 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-33136 | High | 8.8 | 2023-09-12 | Azure DevOps Server Remote Code Execution Vulnerability |
CVE-2023-29463 | High | 8.8 | 2023-09-12 | The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user c… |
CVE-2023-29332 | High | 7.5 | 2023-09-12 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability |
CVE-2023-34470 | Medium | 6.8 | 2023-09-12 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the local network. A successful exploit of this vulnerabi… |
CVE-2023-34469 | Medium | 4.9 | 2023-09-12 | AMI AptioV contains a vulnerability in BIOS where an Attacker may use an improper access control via the physical network. A successful exploit of this vulner… |
CVE-2023-0119 | Medium | 5.4 | 2023-09-12 | A stored Cross-site scripting vulnerability was found in foreman. The Comment section in the Hosts tab has incorrect filtering of user input data. As a result… |
CVE-2023-4914 | High | 7.5 | 2023-09-12 | Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1. |
CVE-2023-4913 | Medium | 6.1 | 2023-09-12 | Cross-site Scripting (XSS) - Reflected in GitHub repository cecilapp/cecil prior to 7.47.1. |
CVE-2023-4863 | High | 8.8 | 2023-09-12 | Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write v… |
CVE-2023-40784 | Critical | 9.8 | 2023-09-12 | DedeCMS 5.7.102 has a File Upload vulnerability via uploads/dede/module_make.php. |
CVE-2023-40218 | Low | 2.0 | 2023-09-12 | An issue was discovered in the NPU kernel driver in Samsung Exynos Mobile Processor 9820, 980, 2100, 2200, 1280, and 1380. An integer overflow can bypass detec… |
CVE-2023-40834 | Critical | 9.8 | 2023-09-12 | OpenCart CMS v4.0.2.2 was discovered to lack a protective mechanism on its login page against excessive login attempts, allowing unauthenticated attackers to g… |
CVE-2023-2071 | Critical | 9.8 | 2023-09-12 | Rockwell Automation FactoryTalk View Machine Edition on the PanelView Plus, improperly verifies user’s input, which allows unauthenticated attacker to achieve… |
CVE-2023-39150 | Critical | 9.8 | 2023-09-12 | ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is relate… |
CVE-2023-41013 | Medium | 6.1 | 2023-09-12 | Cross Site Scripting (XSS) in Webmail Calendar in IceWarp 10.3.1 allows remote attackers to inject arbitrary web script or HTML via the "p4" field. |
CVE-2023-40712 | Medium | 6.5 | 2023-09-12 | Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated users who have access to see the task/dag in the UI, to craft a… |
CVE-2023-40611 | Medium | 4.3 | 2023-09-12 | Apache Airflow, versions before 2.7.1, is affected by a vulnerability that allows authenticated and DAG-view authorized Users to modify some DAG run detail val… |
CVE-2023-39637 | Critical | 9.8 | 2023-09-12 | D-Link DIR-816 A2 1.10 B05 was discovered to contain a command injection vulnerability via the component /goform/Diagnosis. |
CVE-2023-27169 | Medium | 6.5 | 2023-09-12 | Xpand IT Write-back manager v2.3.1 uses a hardcoded salt in license class configuration which leads to the generation of a hardcoded and predictable symmetric… |
CVE-2023-4759 | High | 8.8 | 2023-09-12 | Arbitrary File Overwrite in Eclipse JGit <= 6.6.0 In Eclipse JGit, all versions <= 6.6.0.202305301015-r, a symbolic link present in a specially crafted git re… |
CVE-2023-41846 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-41033 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in Parasolid V35.0 (All versions < V35.0.260), Parasolid V35.1 (All versions < V35.1.246), Parasolid V36.0 (All versions <… |
CVE-2023-41032 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.253), Parasolid V35.1 (All versions <… |
CVE-2023-40732 | Low | 3.9 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application does not invalidate the sessio… |
CVE-2023-40731 | Medium | 5.7 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application allows users to upload arbitrary file types. This could… |
CVE-2023-40730 | High | 7.1 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application lacks sufficient authorization… |
CVE-2023-40729 | High | 7.3 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application lacks security control to prevent unencrypted communica… |
CVE-2023-40728 | High | 7.3 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application stores sensitive application d… |
CVE-2023-40727 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The QMS.Mobile module of the affected application uses weak outdated application… |
CVE-2023-40726 | High | 8.8 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application server responds with sensitive information about the se… |
CVE-2023-40725 | Medium | 4.0 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). The affected application returns inconsistent error messages in response to inva… |
CVE-2023-40724 | High | 7.3 | 2023-09-12 | A vulnerability has been identified in QMS Automotive (All versions < V12.39). User credentials are found in memory as plaintext. An attacker could perform a m… |
CVE-2023-38076 | High | 7.8 | 2023-09-12 | A vulnerability has been identified in JT2Go (All versions < V14.3.0.1), Teamcenter Visualization V13.3 (All versions < V13.3.0.12), Teamcenter Visualization V… |