2023 CVEs (page 162)
Page 162 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-41564 | Medium | 6.1 | 2023-09-08 | An arbitrary file upload vulnerability in the Upload Asset function of Cockpit CMS v2.6.3 allows attackers to execute arbitrary code via uploading a crafted .s… |
CVE-2023-4844 | Medium | 6.3 | 2023-09-08 | A vulnerability was found in SourceCodester Simple Membership System 1.0. It has been classified as critical. This affects an unknown part of the file club_edi… |
CVE-2023-42278 | High | 7.5 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse(). |
CVE-2023-42277 | Critical | 9.8 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath. |
CVE-2023-42276 | Critical | 9.8 | 2023-09-08 | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray. |
CVE-2023-40306 | Medium | 6.1 | 2023-09-08 | SAP S/4HANA Manage Catalog Items and Cross-Catalog searches Fiori apps allow an attacker to redirect users to a malicious site due to insufficient URL validati… |
CVE-2023-30995 | High | 7.5 | 2023-09-08 | IBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP requ… |
CVE-2023-24965 | Medium | 5.8 | 2023-09-08 | IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. IBM X-Force ID: 246713. |
CVE-2023-41318 | Medium | 4.1 | 2023-09-08 | matrix-media-repo is a highly customizable multi-domain media repository for the Matrix chat ecosystem. In affected versions an attacker could upload a malicio… |
CVE-2023-32332 | Medium | 5.4 | 2023-09-08 | IBM Maximo Application Suite 8.9, 8.10 and IBM Maximo Asset Management 7.6.1.2, 7.6.1.3 are vulnerable to HTML injection. A remote attacker could inject malici… |
CVE-2023-42268 | Critical | 9.8 | 2023-09-08 | Jeecg boot up to v3.5.3 was discovered to contain a SQL injection vulnerability via the component /jeecg-boot/jmreport/show. |
CVE-2023-41578 | High | 7.5 | 2023-09-08 | Jeecg boot up to v3.5.3 was discovered to contain an arbitrary file read vulnerability via the interface /testConnection. |
CVE-2023-41575 | Medium | 5.4 | 2023-09-08 | Multiple stored cross-site scripting (XSS) vulnerabilities in /bbdms/sign-up.php of Blood Bank & Donor Management v2.2 allow attackers to execute arbitrary web… |
CVE-2023-41338 | Medium | 5.3 | 2023-09-08 | Fiber is an Express inspired web framework built in the go language. Versions of gofiber prior to 2.49.2 did not properly restrict access to localhost. This is… |
CVE-2023-38736 | High | 7.5 | 2023-09-08 | IBM QRadar WinCollect Agent 10.0 through 10.1.6, when installed to run as ADMIN or SYSTEM, is vulnerable to a local escalation of privilege attack that a norma… |
CVE-2023-4782 | Medium | 6.3 | 2023-09-08 | Terraform version 1.0.8 through 1.5.6 allows arbitrary file write during the `init` operation if run on maliciously crafted Terraform configuration. This vulne… |
CVE-2023-39712 | Medium | 6.1 | 2023-09-08 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts… |
CVE-2023-28010 | Medium | 4.0 | 2023-09-08 | In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks. |
CVE-2023-4843 | Medium | 4.3 | 2023-09-08 | Pega Platform versions 7.1 to 8.8.3 are affected by an HTML Injection issue with a name field utilized in Visual Business Director, however this field can only… |
CVE-2023-39322 | High | 7.5 | 2023-09-08 | QUIC connections do not set an upper bound on the amount of data buffered when reading post-handshake messages, allowing a malicious QUIC connection to cause u… |
CVE-2023-39321 | High | 7.5 | 2023-09-08 | Processing an incomplete post-handshake message for a QUIC connection can cause a panic. |
CVE-2023-39320 | Critical | 9.8 | 2023-09-08 | The go.mod toolchain directive, introduced in Go 1.21, can be leveraged to execute scripts and binaries relative to the root of the module when the "go" comman… |
CVE-2023-39319 | Medium | 6.1 | 2023-09-08 | The html/template package does not apply the proper rules for handling occurrences of "<script", "<!--", and "</script" within JS literals in <script> contexts… |
CVE-2023-39318 | Medium | 6.1 | 2023-09-08 | The html/template package does not properly handle HTML-like "" comment tokens, nor hashbang "#!" comment tokens, in <script> contexts. This may cause the temp… |
CVE-2023-39676 | Medium | 6.1 | 2023-09-08 | FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback parameter at ajax… |
CVE-2023-40924 | High | 7.5 | 2023-09-08 | SolarView Compact < 6.00 is vulnerable to Directory Traversal. |
CVE-2023-39584 | High | 7.5 | 2023-09-08 | Hexo up to v7.0.0 (RC2) was discovered to contain an arbitrary file read vulnerability. |
CVE-2023-39076 | Medium | 4.6 | 2023-09-08 | Injecting random data into the USB memory area on a General Motors (GM) Chevrolet Equinox 2021 Software. 2021.03.26 (build version) vehicle causes a Denial of… |
CVE-2023-4807 | High | 7.8 | 2023-09-08 | Issue summary: The POLY1305 MAC (message authentication code) implementation contains a bug that might corrupt the internal state of applications on the Window… |
CVE-2023-4777 | Low | 3.1 | 2023-09-08 | An incorrect permission check in Qualys Container Scanning Connector Plugin 1.6.2.6 and earlier allows attackers with global Item/Configure permission (while… |
CVE-2023-41775 | Medium | 5.5 | 2023-09-08 | Improper access control vulnerability in 'direct' Desktop App for macOS ver 2.6.0 and earlier allows a local attacker to bypass access restriction and to use c… |
CVE-2023-34041 | Medium | 5.3 | 2023-09-08 | Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerabil… |
CVE-2023-32470 | Medium | 5.0 | 2023-09-08 | Dell Digital Delivery versions prior to 5.0.82.0 contain an Insecure Operation on Windows Junction / Mount Point vulnerability. A local malicious user could p… |
CVE-2023-41615 | Critical | 9.8 | 2023-09-08 | Zoo Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities in the Admin sign-in page via the username and password fields. |
CVE-2023-41594 | High | 7.5 | 2023-09-08 | Dairy Farm Shop Management System Using PHP and MySQL v1.1 was discovered to contain multiple SQL injection vulnerabilities in the Login function via the Usern… |
CVE-2023-40953 | High | 8.8 | 2023-09-08 | icms 7.0.16 is vulnerable to Cross Site Request Forgery (CSRF). |
CVE-2023-40353 | Low | 2.0 | 2023-09-08 | An issue was discovered in Exynos Mobile Processor 980 and 2100. An integer overflow at a buffer index can prevent the execution of requested services via a cr… |
CVE-2023-39620 | High | 7.5 | 2023-09-08 | An Issue in Buffalo America, Inc. TeraStation NAS TS5410R v.5.00 thru v.0.07 allows a remote attacker to obtain sensitive information via the guest account fun… |
CVE-2023-37759 | Critical | 9.8 | 2023-09-08 | Incorrect access control in the User Registration page of Crypto Currency Tracker (CCT) before v9.5 allows unauthenticated attackers to register as an Admin ac… |
CVE-2023-37377 | Low | 2.0 | 2023-09-08 | An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of… |
CVE-2023-37368 | Medium | 5.9 | 2023-09-08 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos Mobile Processor, Automotive Processor, and Modem - Exynos… |
CVE-2023-37367 | Medium | 5.3 | 2023-09-08 | An issue was discovered in Samsung Exynos Mobile Processor, Automotive Processor, and Modem (Exynos 9820, Exynos 980, Exynos 850, Exynos 1080, Exynos 2100, Exy… |
CVE-2023-40271 | High | 7.5 | 2023-09-08 | In Trusted Firmware-M through TF-Mv1.8.0, for platforms that integrate the CryptoCell accelerator, when the CryptoCell PSA Driver software Interface is selecte… |
CVE-2023-36184 | High | 7.5 | 2023-09-08 | CMysten Labs Sui blockchain v1.2.0 was discovered to contain a stack overflow via the component /spec/openrpc.json. |
CVE-2023-40584 | Medium | 6.5 | 2023-09-07 | Argo CD is a declarative continuous deployment for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server component is v… |
CVE-2023-40029 | Critical | 9.9 | 2023-09-07 | Argo CD is a declarative continuous deployment for Kubernetes. Argo CD Cluster secrets might be managed declaratively using Argo CD / kubectl apply. As a resul… |
CVE-2023-41646 | Medium | 5.3 | 2023-09-07 | Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/ |
CVE-2023-41161 | Medium | 5.4 | 2023-09-07 | Multiple stored cross-site scripting (XSS) vulnerabilities in Usermin 2.000 allow remote attackers to inject arbitrary web script or HTML via the key comment t… |
CVE-2023-30908 | Critical | 9.8 | 2023-09-07 | A remote authentication bypass issue exists in a OneView API. |
CVE-2023-41316 | Medium | 5.5 | 2023-09-07 | Tolgee is an open-source localization platform. Due to lack of validation field - Org Name, bad actor can send emails with HTML injected code to the victims. R… |
CVE-2023-20194 | Medium | 4.9 | 2023-09-07 | A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affe… |
CVE-2023-20193 | Medium | 6.0 | 2023-09-07 | A vulnerability in the Embedded Service Router (ESR) of Cisco ISE could allow an authenticated, local attacker to read, write, or delete arbitrary files on the… |
CVE-2023-37798 | Medium | 5.4 | 2023-09-07 | A stored cross-site scripting (XSS) vulnerability in the new REDCap project creation function of Vanderbilt REDCap 13.1.35 allows attackers to execute arbitrar… |
CVE-2023-4685 | High | 7.8 | 2023-09-07 | Delta Electronics' CNCSoft-B version 1.0.0.4 and DOPSoft versions 4.0.0.82 and prior are vulnerable to stack-based buffer overflow, which could allow an attack… |
CVE-2023-4528 | High | 7.2 | 2023-09-07 | Unsafe deserialization in JSCAPE MFT Server versions prior to 2023.1.9 (Windows, Linux, and MacOS) permits an attacker to run arbitrary Java code (including OS… |
CVE-2023-41064 | High | 7.8 | 2023-09-07 | A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.1, macOS Monterey 12.6.9, macOS Ventura… |
CVE-2023-41061 | High | 7.8 | 2023-09-07 | A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.1. A maliciously crafted attachment may… |
CVE-2023-40060 | High | 7.2 | 2023-09-07 | A vulnerability has been identified within Serv-U 15.4 and 15.4 Hotfix 1 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication… |
CVE-2023-30800 | High | 7.5 | 2023-09-07 | The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server'… |
CVE-2023-40942 | Critical | 9.8 | 2023-09-07 | Tenda AC9 V3.0BR_V15.03.06.42_multi_TD01 was discovered stack overflow via parameter 'firewall_value' at url /goform/SetFirewallCfg. |
CVE-2023-39711 | Medium | 6.1 | 2023-09-07 | Multiple cross-site scripting (XSS) vulnerabilities in Free and Open Source Inventory Management System v1.0 allows attackers to execute arbitrary web scripts… |
CVE-2023-3747 | Medium | 5.5 | 2023-09-07 | Zero Trust Administrators have the ability to disallow end users from disabling WARP on their devices. Override codes can also be created by the Administrators… |
CVE-2023-39424 | Critical | 9.9 | 2023-09-07 | A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web… |
CVE-2023-39423 | High | 8.6 | 2023-09-07 | The RDPData.dll file exposes the /irmdata/api/common endpoint that handles session IDs, among other features. By using a UNION SQL operator, an attacker can l… |
CVE-2023-39422 | Medium | 6.5 | 2023-09-07 | The /irmdata/api/ endpoints exposed by the IRM Next Generation booking engine authenticates requests using HMAC tokens. These tokens are however exposed in a J… |
CVE-2023-39421 | High | 7.7 | 2023-09-07 | The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Von… |
CVE-2023-39420 | Critical | 9.9 | 2023-09-07 | The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresp… |
CVE-2023-36635 | High | 7.1 | 2023-09-07 | An improper access control in Fortinet FortiSwitchManager version 7.2.0 through 7.2.2 7.0.0 through 7.0.1 may allow a remote authenticated read-only user to m… |
CVE-2023-39240 | High | 7.2 | 2023-09-07 | It is identified a format string vulnerability in ASUS RT-AX56U V2’s iperf client function API. This vulnerability is caused by lacking validation for a speci… |
CVE-2023-39239 | High | 7.2 | 2023-09-07 | It is identified a format string vulnerability in ASUS RT-AX56U V2’s General function API. This vulnerability is caused by lacking validation for a specific v… |
CVE-2023-39238 | High | 7.2 | 2023-09-07 | It is identified a format string vulnerability in ASUS RT-AX56U V2. This vulnerability is caused by lacking validation for a specific value within its set_ipe… |
CVE-2023-4815 | High | 8.8 | 2023-09-07 | Missing Authentication for Critical Function in GitHub repository answerdev/answer prior to v1.1.3. |
CVE-2023-39237 | High | 8.8 | 2023-09-07 | ASUS RT-AC86U Traffic Analyzer - Apps analysis function has insufficient filtering of special character. A remote attacker with regular user privilege can exp… |
CVE-2023-39236 | High | 8.8 | 2023-09-07 | ASUS RT-AC86U Traffic Analyzer - Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit… |
CVE-2023-38033 | High | 8.8 | 2023-09-07 | ASUS RT-AC86U unused Traffic Analyzer legacy Statistic function has insufficient filtering of special character. A remote attacker with regular user privilege… |
CVE-2023-38032 | High | 8.8 | 2023-09-07 | ASUS RT-AC86U AiProtection security- related function has insufficient filtering of special character. A remote attacker with regular user privilege can explo… |
CVE-2023-38031 | High | 8.8 | 2023-09-07 | ASUS RT-AC86U Adaptive QoS - Web History function has insufficient filtering of special character. A remote attacker with regular user privilege can exploit t… |
CVE-2023-34357 | High | 7.8 | 2023-09-07 | Soar Cloud Ltd. HR Portal has a weak Password Recovery Mechanism for Forgotten Password. The reset password link sent out through e-mail, and the link will re… |
CVE-2023-4792 | Medium | 4.3 | 2023-09-07 | The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplication due to a missing capability check… |
CVE-2023-4772 | Medium | 6.4 | 2023-09-07 | The Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'newsletter_form' shortcode in versions up to, and including, 7.8.9 du… |
CVE-2023-41329 | Low | 3.9 | 2023-09-06 | WireMock is a tool for mocking HTTP services. The proxy mode of WireMock, can be protected by the network restrictions configuration, as documented in Preventi… |
CVE-2023-41327 | Medium | 4.6 | 2023-09-06 | WireMock is a tool for mocking HTTP services. WireMock can be configured to only permit proxying (and therefore recording) to certain addresses. This is achiev… |
CVE-2023-41053 | Low | 3.3 | 2023-09-06 | Redis is an in-memory database that persists on disk. Redis does not correctly identify keys accessed by `SORT_RO` and as a result may grant users executing th… |
CVE-2023-40397 | Critical | 9.8 | 2023-09-06 | The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5. A remote attacker may be able to cause arbitrary javascript code execu… |
CVE-2023-40392 | Low | 3.3 | 2023-09-06 | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.5. An app may be able to read sensi… |
CVE-2023-39967 | Critical | 10.0 | 2023-09-06 | WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request mi… |
CVE-2023-39956 | Medium | 6.1 | 2023-09-06 | Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps that are launched as command lin… |
CVE-2023-38616 | High | 7.0 | 2023-09-06 | A race condition was addressed with improved state handling. This issue is fixed in macOS Ventura 13.5. An app may be able to execute arbitrary code with kerne… |
CVE-2023-38605 | Low | 3.3 | 2023-09-06 | This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Ventura 13.5. An app may be able to determine a user’s… |
CVE-2023-29198 | Medium | 6.0 | 2023-09-06 | Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps using `contextIsolation` and `co… |
CVE-2023-23623 | High | 7.5 | 2023-09-06 | Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. A Content-Security-Policy that disables eval… |
CVE-2023-4809 | High | 7.5 | 2023-09-06 | In pf packet processing with a 'scrub fragment reassemble' rule, a packet containing multiple IPv6 fragment headers would be reassembled, and then immediately… |
CVE-2023-41601 | Medium | 6.1 | 2023-09-06 | Multiple cross-site scripting (XSS) vulnerabilities in install/index.php of CSZ CMS v1.3.0 allow attackers to execute arbitrary web scripts or HTML via a craft… |
CVE-2023-40591 | High | 7.5 | 2023-09-06 | go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node, can be made to consume unbounded amounts of memory w… |
CVE-2023-41330 | Critical | 9.8 | 2023-09-06 | knplabs/knp-snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. ## Issue On March 17th the vulnerability CVE-202… |
CVE-2023-41328 | Medium | 4.2 | 2023-09-06 | Frappe is a low code web framework written in Python and Javascript. A SQL Injection vulnerability has been identified in the Frappe Framework which could allo… |
CVE-2023-41319 | High | 8.8 | 2023-09-06 | Fides is an open-source privacy engineering platform for managing the fulfillment of data privacy requests in a runtime environment, and the enforcement of pri… |
CVE-2023-41050 | Medium | 6.8 | 2023-09-06 | AccessControl provides a general security framework for use in Zope. Python's "format" functionality allows someone controlling the format string to "read" obj… |
CVE-2023-39511 | Medium | 6.1 | 2023-09-06 | Cacti is an open source operational monitoring and fault management framework. Affected versions are subject to a Stored Cross-Site-Scripting (XSS) Vulnerabili… |
CVE-2023-38486 | High | 7.7 | 2023-09-06 | A vulnerability in the secure boot implementation on affected Aruba 9200 and 9000 Series Controllers and Gateways allows an attacker to bypass security control… |