2023 CVEs (page 161)
Page 161 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-35671 | Medium | 5.5 | 2023-09-11 | In onHostEmulationData of HostEmulationManager.java, there is a possible way for a general purpose NFC reader to read the full card number and expiry details w… |
CVE-2023-35670 | High | 7.8 | 2023-09-11 | In computeValuesFromData of FileUtils.java, there is a possible way to insert files to other apps' external private directories due to a path traversal error… |
CVE-2023-35669 | High | 7.8 | 2023-09-11 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to control other running activities due to unsafe deserialization. Th… |
CVE-2023-35667 | High | 7.8 | 2023-09-11 | In updateList of NotificationAccessSettings.java, there is a possible way to hide approved notification listeners in the settings due to a logic error in the c… |
CVE-2023-35666 | High | 7.8 | 2023-09-11 | In bta_av_rc_msg of bta_av_act.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with n… |
CVE-2023-35665 | High | 7.8 | 2023-09-11 | In multiple files, there is a possible way to import a contact from another user due to a missing permission check. This could lead to local escalation of priv… |
CVE-2023-35664 | Medium | 5.5 | 2023-09-11 | In convertSubgraphFromHAL of ShimConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disc… |
CVE-2023-35658 | High | 8.8 | 2023-09-11 | In gatt_process_prep_write_rsp of gatt_cl.cc, there is a possible privilege escalation due to a use after free. This could lead to remote (proximal/adjacent) c… |
CVE-2023-4318 | Medium | 4.3 | 2023-09-11 | The Herd Effects WordPress plugin before 5.2.4 does not have CSRF when deleting its items, which could allow attackers to make logged in admins delete arbitrar… |
CVE-2023-4314 | High | 7.2 | 2023-09-11 | The wpDataTables WordPress plugin before 2.1.66 does not validate the "Serialized PHP array" input data before deserializing the data. This allows admins to de… |
CVE-2023-4307 | Medium | 4.3 | 2023-09-11 | The Lock User Account WordPress plugin through 1.0.3 does not have CSRF check when bulk locking and unlocking accounts, which could allow attackers to make log… |
CVE-2023-4294 | Medium | 6.1 | 2023-09-11 | The URL Shortify WordPress plugin before 1.7.6 does not properly escape the value of the referer header, thus allowing an unauthenticated attacker to inject ma… |
CVE-2023-4278 | High | 7.5 | 2023-09-11 | The MasterStudy LMS WordPress Plugin WordPress plugin before 3.0.18 does not have proper checks in place during registration allowing anyone to register on the… |
CVE-2023-4270 | Medium | 6.1 | 2023-09-11 | The Min Max Control WordPress plugin before 4.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Si… |
CVE-2023-4060 | Medium | 4.8 | 2023-09-11 | The WP Adminify WordPress plugin before 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor… |
CVE-2023-4022 | Medium | 4.8 | 2023-09-11 | The Herd Effects WordPress plugin before 5.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2023-41336 | Medium | 6.5 | 2023-09-11 | ux-autocomplete is a JavaScript Autocomplete functionality for Symfony. Under certain circumstances, an attacker could successfully submit an entity id for an… |
CVE-2023-40946 | Critical | 9.8 | 2023-09-11 | Schoolmate 1.3 is vulnerable to SQL Injection in the variable $username from SESSION in ValidateLogin.php. |
CVE-2023-40945 | Critical | 9.8 | 2023-09-11 | Sourcecodester Doctor Appointment System 1.0 is vulnerable to SQL Injection in the variable $userid at doctors\myDetails.php. |
CVE-2023-40944 | Critical | 9.8 | 2023-09-11 | Schoolmate 1.3 is vulnerable to SQL Injection in the variable $schoolname from Database at ~\header.php. |
CVE-2023-40150 | Critical | 9.8 | 2023-09-11 | Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code e… |
CVE-2023-3510 | Medium | 5.4 | 2023-09-11 | The FTP Access WordPress plugin through 1.0 does not have authorisation and CSRF checks when updating its settings and is missing sanitisation as well as escap… |
CVE-2023-3170 | Medium | 4.8 | 2023-09-11 | The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not validate and escape some setting… |
CVE-2023-3169 | Medium | 6.1 | 2023-09-11 | The tagDiv Composer WordPress plugin before 4.2, used as a companion by the Newspaper and Newsmag themes from tagDiv, does not have authorisation in a REST rou… |
CVE-2023-39227 | Medium | 6.1 | 2023-09-11 | Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials. |
CVE-2023-38256 | Medium | 6.8 | 2023-09-11 | Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 vulnerable to a path traversal atta… |
CVE-2023-36497 | High | 8.8 | 2023-09-11 | Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 could allow a guest user to elevate… |
CVE-2023-2705 | Medium | 6.1 | 2023-09-11 | The gAppointments WordPress plugin before 1.10.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-S… |
CVE-2023-41256 | Critical | 9.1 | 2023-09-11 | Dover Fueling Solutions MAGLINK LX Web Console Configuration versions 2.5.1, 2.5.2, 2.5.3, 2.6.1, 2.11, 3.0, 3.2, and 3.3 are vulnerable to authentication byp… |
CVE-2023-41103 | Medium | 5.4 | 2023-09-11 | Interact 7.9.79.5 allows stored Cross-site Scripting (XSS) attacks in several locations, allowing an attacker to store a JavaScript payload. |
CVE-2023-40032 | Medium | 5.5 | 2023-09-11 | libvips is a demand-driven, horizontally threaded image processing library. A specially crafted SVG input can cause libvips versions 8.14.3 or earlier to segfa… |
CVE-2023-39780 | High | 8.8 | 2023-09-11 | On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_apply.htm qos_bw_rulelist parameter. NOTE: f… |
CVE-2023-39070 | High | 7.8 | 2023-09-11 | An issue in Cppcheck 2.12 dev allows a local attacker to execute arbitrary code via the removeContradiction parameter in token.cpp:1934. |
CVE-2023-39068 | High | 7.5 | 2023-09-11 | Buffer Overflow vulnerability in NBD80S09S-KLC v.YK_HZXM_NBD80S09S-KLC_V4.03.R11.7601.Nat.OnvifC.20230414.bin and NBD80N32RA-KL-V3 v.YK_HZXM_NBD80N32RA-KL_V4.0… |
CVE-2023-39063 | High | 7.8 | 2023-09-11 | Buffer Overflow vulnerability in RaidenFTPD 2.4.4005 allows a local attacker to execute arbitrary code via the Server name field of the Step by step setup wiza… |
CVE-2023-38829 | High | 8.8 | 2023-09-11 | An issue in NETIS SYSTEMS WF2409E v.3.6.42541 allows a remote attacker to execute arbitrary code via the ping and traceroute functions of the diagnostic tools… |
CVE-2023-38743 | High | 7.2 | 2023-09-11 | Zoho ManageEngine ADManager Plus before Build 7200 allows admin users to execute commands on the host machine. |
CVE-2023-31468 | High | 7.8 | 2023-09-11 | An issue was discovered in Inosoft VisiWin 7 through 2022-2.1 (Runtime RT7.3 RC3 20221209.5). The "%PROGRAMFILES(X86)%\INOSOFT GmbH" folder has weak permission… |
CVE-2023-31069 | Critical | 9.8 | 2023-09-11 | An issue was discovered in TSplus Remote Access through 16.0.2.14. Credentials are stored as cleartext within the HTML source code of the login page. |
CVE-2023-31068 | Critical | 9.8 | 2023-09-11 | An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)… |
CVE-2023-31067 | Critical | 9.8 | 2023-09-11 | An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)… |
CVE-2023-41609 | Medium | 6.1 | 2023-09-11 | An open redirect vulnerability in the sanitize_url() parameter of CouchCMS v2.3 allows attackers to redirect a victim user to an arbitrary web site via a craft… |
CVE-2023-41593 | Medium | 5.4 | 2023-09-11 | Multiple cross-site scripting (XSS) vulnerabilities in Dairy Farm Shop Management System Using PHP and MySQL v1.1 allow attackers to execute arbitrary web scri… |
CVE-2023-39067 | Medium | 6.1 | 2023-09-11 | Cross Site Scripting vulnerability in ZLMediaKiet v.4.0 and v.5.0 allows an attacker to execute arbitrary code via a crafted script to the URL. |
CVE-2023-30058 | Critical | 9.8 | 2023-09-11 | novel-plus 3.6.2 is vulnerable to SQL Injection. |
CVE-2023-41000 | Medium | 5.5 | 2023-09-11 | GPAC through 2.2.1 has a use-after-free vulnerability in the function gf_bifs_flush_command_list in bifs/memory_decoder.c. |
CVE-2023-36140 | Critical | 9.8 | 2023-09-11 | In PHPJabbers Cleaning Business Software 1.0, there is no encryption on user passwords allowing an attacker to gain access to all user accounts. |
CVE-2023-27470 | High | 7.0 | 2023-09-11 | BASupSrvcUpdater.exe in N-able Take Control Agent through 7.0.41.1141 before 7.0.43 has a TOCTOU Race Condition via a pseudo-symlink at %PROGRAMDATA%\GetSuppor… |
CVE-2023-4630 | Medium | 5.0 | 2023-09-11 | An issue has been discovered in GitLab affecting all versions starting from 10.6 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions sta… |
CVE-2023-40786 | Medium | 5.4 | 2023-09-11 | HKcms v2.3.0.230709 is vulnerable to Cross Site Scripting (XSS) allowing administrator cookies to be stolen. |
CVE-2023-36980 | Medium | 5.3 | 2023-09-11 | An issue in Ethereum Blockchain v0.1.1+commit.6ff4cd6 cause the balance to be zeroed out when the value of betsize+casino.balance exceeds the threshold. |
CVE-2023-36161 | High | 7.5 | 2023-09-11 | An issue was discovered in Qubo Smart Plug 10A version HSP02_01_01_14_SYSTEM-10A, allows attackers to cause a denial of service (DoS) via Wi-Fi deauthenticatio… |
CVE-2023-3612 | High | 8.2 | 2023-09-11 | Govee Home app has unprotected access to WebView component which can be opened by any app on the device. By sending an URL to a specially crafted site, the att… |
CVE-2023-4585 | High | 8.8 | 2023-09-11 | Memory safety bugs present in Firefox 116, Firefox ESR 115.1, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume tha… |
CVE-2023-4584 | High | 8.8 | 2023-09-11 | Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence… |
CVE-2023-4583 | High | 7.5 | 2023-09-11 | When checking if the Browsing Context had been discarded in `HttpBaseChannel`, if the load group was not available then it was assumed to have already been dis… |
CVE-2023-4582 | High | 8.8 | 2023-09-11 | Due to large allocation checks in Angle for glsl shaders being too lenient a buffer overflow could have occurred when allocating too much private shader memory… |
CVE-2023-4581 | Medium | 4.3 | 2023-09-11 | Excel `.xll` add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their pot… |
CVE-2023-4580 | Medium | 6.5 | 2023-09-11 | Push notifications stored on disk in private browsing mode were not being encrypted potentially allowing the leak of sensitive information. This vulnerability… |
CVE-2023-4579 | Low | 3.1 | 2023-09-11 | Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could… |
CVE-2023-4578 | Medium | 6.5 | 2023-09-11 | When calling `JS::CheckRegExpSyntax` a Syntax Error could have been set which would end in calling `convertToRuntimeErrorAndClear`. A path in the function coul… |
CVE-2023-4577 | Medium | 6.5 | 2023-09-11 | When `UpdateRegExpStatics` attempted to access `initialStringHeap` it could already have been garbage collected prior to entering the function, which could pot… |
CVE-2023-4576 | High | 8.6 | 2023-09-11 | On Windows, an integer overflow could occur in `RecordedSourceSurfaceCreation` which resulted in a heap buffer overflow potentially leaking sensitive data that… |
CVE-2023-4575 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simul… |
CVE-2023-4574 | Medium | 6.5 | 2023-09-11 | When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simu… |
CVE-2023-4104 | Medium | 5.5 | 2023-09-11 | An invalid Polkit Authentication check and missing authentication requirements for D-Bus methods allowed any local user to configure arbitrary VPN setups. *Thi… |
CVE-2023-4816 | Medium | 6.9 | 2023-09-11 | A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability… |
CVE-2023-4573 | Medium | 6.5 | 2023-09-11 | When receiving rendering data over IPC `mStream` could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exp… |
CVE-2023-42471 | Critical | 9.8 | 2023-09-11 | The wave.ai.browser application through 1.0.35 for Android allows a remote attacker to execute arbitrary JavaScript code via a crafted intent. It contains a ma… |
CVE-2023-42470 | Critical | 9.8 | 2023-09-11 | The Imou Life com.mm.android.smartlifeiot application through 6.8.0 for Android allows Remote Code Execution via a crafted intent to an exported component. Thi… |
CVE-2023-35845 | Medium | 4.7 | 2023-09-11 | Anaconda 3 2023.03-1-Linux allows local users to disrupt TLS certificate validation by modifying the cacert.pem file used by the installed pip program. This oc… |
CVE-2023-40039 | Critical | 9.8 | 2023-09-11 | An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value… |
CVE-2023-40040 | Medium | 5.3 | 2023-09-11 | An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacker can start the camera feed via the com… |
CVE-2023-42467 | Medium | 5.5 | 2023-09-11 | QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.bl… |
CVE-2023-4879 | Medium | 4.8 | 2023-09-10 | Cross-site Scripting (XSS) - Stored in GitHub repository instantsoft/icms2 prior to 2.16.1.-git. |
CVE-2023-4878 | Medium | 5.4 | 2023-09-10 | Server-Side Request Forgery (SSRF) in GitHub repository instantsoft/icms2 prior to 2.16.1-git. |
CVE-2023-4873 | Medium | 6.3 | 2023-09-10 | A vulnerability, which was classified as critical, was found in Byzoro Smart S45F Multi-Service Secure Gateway Intelligent Management Platform up to 20230906… |
CVE-2023-4872 | Medium | 6.3 | 2023-09-10 | A vulnerability, which was classified as critical, has been found in SourceCodester Contact Manager App 1.0. This issue affects some unknown processing of the… |
CVE-2023-4871 | Medium | 6.3 | 2023-09-10 | A vulnerability classified as critical was found in SourceCodester Contact Manager App 1.0. This vulnerability affects unknown code of the file delete.php. The… |
CVE-2023-4870 | Low | 3.5 | 2023-09-10 | A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the c… |
CVE-2023-4877 | High | 7.5 | 2023-09-10 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. |
CVE-2023-4876 | High | 7.5 | 2023-09-10 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository hamza417/inure prior to build92. |
CVE-2023-4869 | Medium | 4.3 | 2023-09-10 | A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of… |
CVE-2023-4868 | Medium | 4.3 | 2023-09-10 | A vulnerability was found in SourceCodester Contact Manager App 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown function… |
CVE-2023-4867 | Medium | 6.3 | 2023-09-10 | A vulnerability was found in Xintian Smart Table Integrated Management System 5.6.9. It has been classified as critical. Affected is an unknown function of the… |
CVE-2023-4866 | Medium | 6.3 | 2023-09-10 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of th… |
CVE-2023-4865 | Medium | 4.3 | 2023-09-09 | A vulnerability has been found in SourceCodester Take-Note App 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation lea… |
CVE-2023-41915 | High | 8.1 | 2023-09-09 | OpenPMIx PMIx before 4.2.6 and 5.0.x before 5.0.1 allows attackers to obtain ownership of arbitrary files via a race condition during execution of library code… |
CVE-2023-4864 | Low | 3.5 | 2023-09-09 | A vulnerability, which was classified as problematic, was found in SourceCodester Take-Note App 1.0. This affects an unknown part of the file index.php. The ma… |
CVE-2023-4875 | Low | 2.2 | 2023-09-09 | Null pointer dereference when composing from a specially crafted draft message in Mutt >1.5.2 <2.2.12 |
CVE-2023-4874 | Medium | 4.3 | 2023-09-09 | Null pointer dereference when viewing a specially crafted email in Mutt >1.5.2 <2.2.12 |
CVE-2023-4852 | Medium | 6.3 | 2023-09-09 | A vulnerability was found in IBOS OA 4.5.5 and classified as critical. This issue affects some unknown processing of the file ?r=dashboard/database/optimize. T… |
CVE-2023-4851 | Medium | 6.3 | 2023-09-09 | A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects unknown code of the file ?r=dashboard/position/edit&op=m… |
CVE-2023-4850 | Medium | 6.3 | 2023-09-09 | A vulnerability, which was classified as critical, was found in IBOS OA 4.5.5. This affects an unknown part of the file ?r=dashboard/position/del. The manipula… |
CVE-2023-4849 | Medium | 6.3 | 2023-09-09 | A vulnerability, which was classified as critical, has been found in IBOS OA 4.5.5. Affected by this issue is some unknown functionality of the file ?r=file/da… |
CVE-2023-4848 | Medium | 6.3 | 2023-09-09 | A vulnerability classified as critical was found in SourceCodester Simple Book Catalog App 1.0. Affected by this vulnerability is an unknown functionality of t… |
CVE-2023-4847 | Low | 3.5 | 2023-09-09 | A vulnerability classified as problematic has been found in SourceCodester Simple Book Catalog App 1.0. Affected is an unknown function of the component Update… |
CVE-2023-4846 | Medium | 6.3 | 2023-09-09 | A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been rated as critical. This issue affects some unknown processing of the file… |
CVE-2023-4845 | Medium | 6.3 | 2023-09-09 | A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file… |
CVE-2023-4838 | Medium | 6.4 | 2023-09-09 | The Simple Download Counter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in versions up to, and including, 1.6… |