2023 CVEs (page 165)
Page 165 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33016 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN firmware while parsing MLO (multi-link operation). |
CVE-2023-33015 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. |
CVE-2023-28584 | High | 7.5 | 2023-09-05 | Transient DOS in WLAN Host when a mobile station receives invalid channel in CSA IE while doing channel switch announcement (CSA). |
CVE-2023-28581 | Critical | 9.8 | 2023-09-05 | Memory corruption in WLAN Firmware while parsing receieved GTK Keys in GTK KDE. |
CVE-2023-28573 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing WMI command parameters. |
CVE-2023-28567 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command through WMI interfaces. |
CVE-2023-28565 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while handling command streams through WMI interfaces. |
CVE-2023-28564 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. |
CVE-2023-28562 | Critical | 9.8 | 2023-09-05 | Memory corruption while handling payloads from remote ESL. |
CVE-2023-28560 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing devIndex from untrusted WMI payload. |
CVE-2023-28559 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN FW while processing command parameters from untrusted WMI payload. |
CVE-2023-28558 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN handler while processing PhyID in Tx status handler. |
CVE-2023-28557 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing command parameters from untrusted WMI payload. |
CVE-2023-28549 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while parsing Rx buffer in processing TLV payload. |
CVE-2023-28548 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN HAL while processing Tx/Rx commands from QDART. |
CVE-2023-28544 | High | 7.8 | 2023-09-05 | Memory corruption in WLAN while sending transmit command from HLOS to UTF handlers. |
CVE-2023-28543 | High | 8.1 | 2023-09-05 | A malformed DLC can trigger Memory Corruption in SNPE library due to out of bounds read, such as by loading an untrusted model (e.g. from a remote source). |
CVE-2023-28538 | High | 8.4 | 2023-09-05 | Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region. |
CVE-2023-21667 | Medium | 6.5 | 2023-09-05 | Transient DOS in Bluetooth HOST while passing descriptor to validate the blacklisted BT keyboard. |
CVE-2023-21664 | High | 7.8 | 2023-09-05 | Memory Corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21663 | Medium | 6.7 | 2023-09-05 | Memory Corruption while accessing metadata in Display. |
CVE-2023-21662 | High | 7.8 | 2023-09-05 | Memory corruption in Core Platform while printing the response buffer in log. |
CVE-2023-21655 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio while validating and mapping metadata. |
CVE-2023-21654 | Medium | 6.7 | 2023-09-05 | Memory corruption in Audio during playback session with audio effects enabled. |
CVE-2023-21653 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing RRC reconfiguration message. |
CVE-2023-21646 | High | 7.5 | 2023-09-05 | Transient DOS in Modem while processing invalid System Information Block 1. |
CVE-2023-21644 | Medium | 6.7 | 2023-09-05 | Memory corruption in RIL due to Integer Overflow while triggering qcril_uim_request_apdu request. |
CVE-2023-21636 | Medium | 6.7 | 2023-09-05 | Memory Corruption due to improper validation of array index in Linux while updating adn record. |
CVE-2023-4748 | Medium | 6.3 | 2023-09-05 | A vulnerability, which was classified as critical, has been found in Yongyou UFIDA-NC up to 20230807. This issue affects some unknown processing of the file Pr… |
CVE-2023-36307 | Medium | 5.5 | 2023-09-05 | ZPLGFA 1.1.1 allows attackers to cause a panic (because of an integer index out of range during a ConvertToGraphicField call) via an image of zero width. NOTE… |
CVE-2023-36308 | Medium | 5.5 | 2023-09-05 | disintegration Imaging 1.6.2 allows attackers to cause a panic (because of an integer index out of range during a Grayscale call) via a crafted TIFF file to th… |
CVE-2023-4636 | Medium | 4.4 | 2023-09-05 | The WordPress File Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.0.3… |
CVE-2023-35906 | Medium | 5.3 | 2023-09-05 | IBM Aspera Faspex 5.0.5 could allow a remote attacked to bypass IP restrictions due to improper access controls. IBM X-Force ID: 259649. |
CVE-2023-29261 | Medium | 5.1 | 2023-09-05 | IBM Sterling Secure Proxy 6.0.3 and 6.1.0 could allow a local user with specific information about the system to obtain privileged information due to inadequat… |
CVE-2023-22870 | Medium | 5.9 | 2023-09-05 | IBM Aspera Faspex 5.0.5 transmits sensitive information in cleartext which could be obtained by an attacker using man in the middle techniques. IBM X-Force ID… |
CVE-2023-35892 | High | 7.1 | 2023-09-05 | IBM Financial Transaction Manager for SWIFT Services 3.2.4 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote at… |
CVE-2023-32338 | Medium | 5.1 | 2023-09-05 | IBM Sterling Secure Proxy and IBM Sterling External Authentication Server 6.0.3 and 6.1.0 stores user credentials in plain clear text which can be read by a lo… |
CVE-2023-41058 | High | 7.5 | 2023-09-04 | Parse Server is an open source backend server. In affected versions the Parse Cloud trigger `beforeFind` is not invoked in certain conditions of `Parse.Query`… |
CVE-2023-41057 | Medium | 5.5 | 2023-09-04 | hyper-bump-it is a command line tool for updating the version in project files.`hyper-bump-it` reads a file glob pattern from the configuration file. That is c… |
CVE-2023-41055 | High | 7.5 | 2023-09-04 | LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery (SSR… |
CVE-2023-41054 | High | 8.2 | 2023-09-04 | LibreY is a fork of LibreX, a framework-less and javascript-free privacy respecting meta search engine. LibreY is subject to a Server-Side Request Forgery (SSR… |
CVE-2023-41052 | Low | 3.7 | 2023-09-04 | Vyper is a Pythonic Smart Contract Language. In affected versions the order of evaluation of the arguments of the builtin functions `uint256_addmod`, `uint256_… |
CVE-2023-40015 | Low | 3.7 | 2023-09-04 | Vyper is a Pythonic Smart Contract Language. For the following (probably non-exhaustive) list of expressions, the compiler evaluates the arguments from right t… |
CVE-2023-4758 | Medium | 5.5 | 2023-09-04 | Buffer Over-read in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-28072 | High | 7.8 | 2023-09-04 | Dell Alienware Command Center, versions prior to 5.5.51.0, contain a deserialization of untrusted data vulnerability. A local malicious user could potentially… |
CVE-2023-4755 | Medium | 5.5 | 2023-09-04 | Use After Free in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4752 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1858. |
CVE-2023-4750 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1857. |
CVE-2023-4733 | High | 7.8 | 2023-09-04 | Use After Free in GitHub repository vim/vim prior to 9.0.1840. |
CVE-2023-3222 | High | 7.5 | 2023-09-04 | Vulnerability in the password recovery mechanism of Password Recovery plugin for Roundcube, in its 1.2 version, which could allow a remote attacker to change a… |
CVE-2023-3221 | Medium | 5.3 | 2023-09-04 | User enumeration vulnerability in Password Recovery plugin 1.2 version for Roundcube, which could allow a remote attacker to create a test script against the p… |
CVE-2023-4587 | High | 8.3 | 2023-09-04 | An IDOR vulnerability has been found in ZKTeco ZEM800 product affecting version 6.60. This vulnerability allows a local attacker to obtain registered user back… |
CVE-2023-4298 | Medium | 4.8 | 2023-09-04 | The 123.chat WordPress plugin before 1.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform S… |
CVE-2023-4284 | Medium | 6.1 | 2023-09-04 | The Post Timeline WordPress plugin before 2.2.6 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Refle… |
CVE-2023-4279 | High | 7.5 | 2023-09-04 | This User Activity Log WordPress plugin before 1.6.7 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its v… |
CVE-2023-4269 | Medium | 4.3 | 2023-09-04 | The User Activity Log WordPress plugin before 1.6.6 lacks proper authorisation when exporting its activity logs, allowing any authenticated users, such as subs… |
CVE-2023-4254 | Medium | 4.8 | 2023-09-04 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-4253 | Medium | 4.8 | 2023-09-04 | The AI ChatBot WordPress plugin before 4.7.8 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-4216 | Low | 2.7 | 2023-09-04 | The Orders Tracking for WooCommerce WordPress plugin before 1.2.6 doesn't validate the file_url parameter when importing a CSV file, allowing high privilege us… |
CVE-2023-4151 | Medium | 6.1 | 2023-09-04 | The Store Locator WordPress plugin before 1.4.13 does not sanitise and escape an invalid nonce before outputting it back in an AJAX response, leading to a Refl… |
CVE-2023-4059 | Medium | 4.3 | 2023-09-04 | The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allows unauthenticated users to create the r… |
CVE-2023-4019 | High | 8.8 | 2023-09-04 | The Media from FTP WordPress plugin before 11.17 does not properly limit who can use the plugin, which may allow users with author+ privileges to move files ar… |
CVE-2023-40214 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Vathemes Business Pro theme <= 1.10.4 versions. |
CVE-2023-40205 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Pixelgrade PixTypes plugin <= 1.4.15 versions. |
CVE-2023-40197 | Medium | 6.5 | 2023-09-04 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Devaldi Ltd flowpaper plugin <= 1.9.9 versions. |
CVE-2023-40196 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <= 3.1.11 versions. |
CVE-2023-3814 | Medium | 4.9 | 2023-09-04 | The Advanced File Manager WordPress plugin before 5.1.1 does not adequately authorize its usage on multisite installations, allowing site admin users to list a… |
CVE-2023-3499 | Medium | 4.8 | 2023-09-04 | The Photo Gallery, Images, Slider in Rbs Image Gallery WordPress plugin before 3.2.16 does not sanitise and escape some of its settings, which could allow high… |
CVE-2023-32578 | Medium | 6.5 | 2023-09-04 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Twinpictures Column-Matic plugin <= 1.3.3 versions. |
CVE-2023-32296 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Kangu para WooCommerce plugin <= 2.2.9 versions. |
CVE-2023-32102 | Medium | 6.5 | 2023-09-04 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Pexle Chris Library Viewer plugin <= 2.0.6 versions. |
CVE-2023-30485 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Solwin Infotech Responsive WordPress Slider – Avartan Slider Lite plugin <= 1.5.3 versions. |
CVE-2023-2813 | Medium | 6.1 | 2023-09-04 | All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1… |
CVE-2023-4616 | High | 7.5 | 2023-09-04 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to e… |
CVE-2023-4615 | High | 7.5 | 2023-09-04 | This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to e… |
CVE-2023-4614 | Critical | 9.8 | 2023-09-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit t… |
CVE-2023-40208 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Aleksandar Urošević Stock Ticker plugin <= 3.23.3 versions. |
CVE-2023-40206 | Medium | 5.9 | 2023-09-04 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in hwk-fr WP 404 Auto Redirect to Similar Post plugin <= 1.0.3 versions. |
CVE-2023-39992 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in vCita.Com Online Booking & Scheduling Calendar for WordPress by vcita plugin <= 4.3.2 versions. |
CVE-2023-39991 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Blindside Networks BigBlueButton plugin <= 3.0.0-beta.4 versions. |
CVE-2023-39988 | Medium | 6.5 | 2023-09-04 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in 标准云(std.Cloud) WxSync plugin <= 2.7.23 versions. |
CVE-2023-39987 | Medium | 5.9 | 2023-09-04 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay Lulia wSecure Lite plugin <= 2.5 versions. |
CVE-2023-39919 | Medium | 5.9 | 2023-09-04 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in maennchen1.De wpShopGermany – Protected Shops plugin <= 2.0 versions. |
CVE-2023-39918 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in SAASPROJECT Booking Package Booking Package plugin <= 1.6.01 versions. |
CVE-2023-37393 | High | 7.1 | 2023-09-04 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Atarim Visual Website Collaboration, Feedback & Project Management – Atarim plugin <= 3.9.3 v… |
CVE-2023-31220 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions. |
CVE-2023-30494 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in ImageRecycle ImageRecycle pdf & image compression plugin <= 3.1.10 versions. |
CVE-2023-39164 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Molongui Author Box for Authors, Co-Authors, Multiple Authors and Guest Authors – Molongui plugin… |
CVE-2023-39162 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in XLPlugins User Email Verification for WooCommerce plugin <= 3.5.0 versions. |
CVE-2023-36382 | Medium | 5.9 | 2023-09-04 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeffrey-WP Media Library Categories plugin <= 2.0.0 versions. |
CVE-2023-25465 | Medium | 5.9 | 2023-09-04 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Gopi Ramasamy wp tell a friend popup form plugin <= 7.1 versions. |
CVE-2023-4756 | Medium | 5.5 | 2023-09-04 | Stack-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4754 | Medium | 5.5 | 2023-09-04 | Out-of-bounds Write in GitHub repository gpac/gpac prior to 2.3-DEV. |
CVE-2023-4613 | Critical | 9.8 | 2023-09-04 | This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Authentication is not required to exploit t… |
CVE-2023-32817 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32816 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32815 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32814 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-32813 | Medium | 4.4 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System executio… |
CVE-2023-32812 | Medium | 6.7 | 2023-09-04 | In gnss service, there is a possible out of bounds write due to improper input validation. This could lead to local esclation of privileges with System executi… |