2023 CVEs (page 179)
Page 179 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-3263 | High | 7.5 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass in the REST API due to the mishandling of spec… |
CVE-2023-40296 | High | 7.5 | 2023-08-14 | async-sockets-cpp through 0.3.1 has a stack-based buffer overflow in ReceiveFrom and Receive in udpsocket.hpp when processing malformed UDP packets. |
CVE-2023-40295 | High | 8.8 | 2023-08-14 | libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_strInitUtf8 at string.c. |
CVE-2023-40294 | Medium | 6.5 | 2023-08-14 | libboron in Boron 2.0.8 has a heap-based buffer overflow in ur_parseBlockI at i_parse_blk.c. |
CVE-2023-40293 | Medium | 6.8 | 2023-08-14 | Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object. |
CVE-2023-40292 | Medium | 4.3 | 2023-08-14 | Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets. |
CVE-2023-40291 | Medium | 6.8 | 2023-08-14 | Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name. |
CVE-2023-3262 | Medium | 6.7 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier uses hard-coded credentials for all interactions with the internal Postgres database… |
CVE-2023-3261 | High | 7.5 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier contains a buffer overflow vulnerability in the librta.so.0.0.0 library.Successful ex… |
CVE-2023-3260 | High | 7.2 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to command injection via the `user-name` URL parameter. An authenticate… |
CVE-2023-3259 | Critical | 9.8 | 2023-08-14 | The Dataprobe iBoot PDU running firmware version 1.43.03312023 or earlier is vulnerable to authentication bypass. By manipulating the IP address field in the "… |
CVE-2023-40283 | High | 7.8 | 2023-08-14 | An issue was discovered in l2cap_sock_release in net/bluetooth/l2cap_sock.c in the Linux kernel before 6.4.10. There is a use-after-free because the children o… |
CVE-2023-40274 | High | 7.5 | 2023-08-14 | An issue was discovered in zola 0.13.0 through 0.17.2. The custom implementation of a web server, available via the "zola serve" command, allows directory trav… |
CVE-2023-23208 | Medium | 6.1 | 2023-08-13 | Genesys Administrator Extension (GAX) before 9.0.105.15 is vulnerable to Cross Site Scripting (XSS) via the Business Structure page of the iWD plugin, aka GAX-… |
CVE-2023-39406 | High | 7.5 | 2023-08-13 | Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. |
CVE-2023-39404 | High | 7.5 | 2023-08-13 | Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the devi… |
CVE-2023-39403 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39402 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39401 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39400 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39399 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39398 | Critical | 9.1 | 2023-08-13 | Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written witho… |
CVE-2023-39397 | High | 7.5 | 2023-08-13 | Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-39395 | High | 7.5 | 2023-08-13 | Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-39394 | High | 7.5 | 2023-08-13 | Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified. |
CVE-2023-39391 | High | 7.5 | 2023-08-13 | Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality. |
CVE-2023-39390 | High | 7.5 | 2023-08-13 | Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the devi… |
CVE-2023-39387 | Medium | 5.3 | 2023-08-13 | Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. |
CVE-2023-39386 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps t… |
CVE-2023-39385 | Critical | 9.1 | 2023-08-13 | Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access. |
CVE-2023-39405 | Critical | 9.8 | 2023-08-13 | Vulnerability of out-of-bounds parameter read/write in the Wi-Fi module. Successful exploitation of this vulnerability may cause other apps to be executed with… |
CVE-2023-39396 | High | 7.5 | 2023-08-13 | Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability. |
CVE-2023-39393 | High | 7.5 | 2023-08-13 | Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be mal… |
CVE-2023-39392 | High | 7.5 | 2023-08-13 | Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and ov… |
CVE-2023-39389 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailabi… |
CVE-2023-39388 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailabi… |
CVE-2023-39384 | High | 7.5 | 2023-08-13 | Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abn… |
CVE-2023-39383 | High | 7.5 | 2023-08-13 | Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data securi… |
CVE-2023-39382 | High | 7.5 | 2023-08-13 | Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to restart. |
CVE-2023-39381 | High | 7.5 | 2023-08-13 | Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart. |
CVE-2023-39380 | High | 7.5 | 2023-08-13 | Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. |
CVE-2023-4265 | Medium | 6.4 | 2023-08-12 | Potential buffer overflow vulnerabilities in the following locations: https://github.com/zephyrproject-rtos/zephyr/blob/main/drivers/usb/device/usb_dc_native_… |
CVE-2023-4293 | High | 8.8 | 2023-08-12 | The Premium Packages - Sell Digital Products Securely plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 5.7.4 due to… |
CVE-2023-3452 | Critical | 9.8 | 2023-08-12 | The Canto plugin for WordPress is vulnerable to Remote File Inclusion in versions up to, and including, 3.0.4 via the 'wp_abspath' parameter. This allows unaut… |
CVE-2023-22957 | High | 7.5 | 2023-08-11 | An issue was discovered in libac_des3.so on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of hard-coded cryptographic key, an attacker with ac… |
CVE-2023-22956 | High | 7.5 | 2023-08-11 | An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. Due to the use of a hard-coded cryptographic key, an attacker is able to decrypt enc… |
CVE-2023-22955 | High | 7.8 | 2023-08-11 | An issue was discovered on AudioCodes VoIP desk phones through 3.4.4.1000. The validation of firmware images only consists of simple checksum checks for differ… |
CVE-2023-0871 | Medium | 5.4 | 2023-08-11 | XXE injection in /rtc/post/ endpoint in OpenMNS Horizon 31.0.8 and versions earlier than 32.0.2 on multiple platforms is vulnerable to XML external entity (XXE… |
CVE-2023-39949 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.9.1 and 2.6.5, improper… |
CVE-2023-39948 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0 and 2.6.5, the `Ba… |
CVE-2023-39947 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-39946 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.1, 2.10.2, 2.9.2, an… |
CVE-2023-39945 | High | 8.2 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.11.0, 2.10.2, 2.9.2, an… |
CVE-2023-39534 | High | 7.5 | 2023-08-11 | eprosima Fast DDS is a C++ implementation of the Data Distribution Service standard of the Object Management Group. Prior to versions 2.10.0, 2.9.2, and 2.6.5… |
CVE-2023-32267 | Medium | 6.4 | 2023-08-11 | A potential vulnerability has been identified in OpenText / Micro Focus ArcSight Management Center. The vulnerability could be remotely exploited. |
CVE-2023-39418 | Low | 3.1 | 2023-08-11 | A vulnerability was found in PostgreSQL with the use of the MERGE command, which fails to test new rows against row security policies defined for UPDATE and SE… |
CVE-2023-39417 | High | 7.5 | 2023-08-11 | IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construc… |
CVE-2023-3937 | Medium | 4.8 | 2023-08-11 | Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authentica… |
CVE-2023-3864 | High | 7.2 | 2023-08-11 | Blind SQL injection in a service running in Snow Software license manager from version 8.0.0 up to and including 9.30.1 on Windows allows a logged in user with… |
CVE-2023-39553 | High | 7.5 | 2023-08-11 | Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Drill Provider is affected by a vulnerabil… |
CVE-2023-4108 | Medium | 4.5 | 2023-08-11 | Mattermost fails to sanitize post metadata during audit logging resulting in permalinks contents being logged |
CVE-2023-4107 | Medium | 6.7 | 2023-08-11 | Mattermost fails to properly validate the requesting user permissions when updating a system admin, allowing a user manager to update a system admin's details… |
CVE-2023-4106 | Medium | 6.3 | 2023-08-11 | Mattermost fails to check if the requesting user is a guest before performing different actions to public playbooks, resulting a guest being able to view, join… |
CVE-2023-4105 | Low | 3.1 | 2023-08-11 | Mattermost fails to delete the attachments when deleting a message in a thread allowing a simple user to still be able to access and download the attachment of… |
CVE-2023-40267 | Critical | 9.8 | 2023-08-11 | GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from. NOTE: this issue exists because of an incomplete fix for CVE-2022-24… |
CVE-2023-40254 | High | 7.5 | 2023-08-11 | Download of Code Without Integrity Check vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA… |
CVE-2023-40260 | Critical | 9.1 | 2023-08-11 | EmpowerID before 7.205.0.1 allows an attacker to bypass an MFA (multi factor authentication) requirement if the first factor (username and password) is known… |
CVE-2023-40253 | Medium | 6.0 | 2023-08-11 | Improper Authentication vulnerability in Genians Genian NAC V4.0, Genians Genian NAC V5.0, Genians Genian NAC Suite V5.0, Genians Genian ZTNA allows Authentica… |
CVE-2023-3824 | Critical | 9.4 | 2023-08-11 | In PHP version 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8, when loading phar file, while reading PHAR directory entries, insufficient le… |
CVE-2023-3823 | High | 8.6 | 2023-08-11 | In PHP versions 8.0.* before 8.0.30, 8.1.* before 8.1.22, and 8.2.* before 8.2.8 various XML functions rely on libxml global state to track configuration varia… |
CVE-2023-40256 | Critical | 9.8 | 2023-08-11 | A vulnerability was discovered in Veritas NetBackup Snapshot Manager before 10.2.0.1 that allowed untrusted clients to interact with the RabbitMQ service. This… |
CVE-2023-34438 | High | 7.5 | 2023-08-11 | Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-34427 | Medium | 5.3 | 2023-08-11 | Protection mechanism failure in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to… |
CVE-2023-34355 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path element for some Intel(R) Server Board M10JNP2SB integrated BMC video drivers before version 3.0 for Microsoft Windows and before vers… |
CVE-2023-34349 | Medium | 4.6 | 2023-08-11 | Race condition in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-34086 | High | 8.2 | 2023-08-11 | Improper input validation in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-33877 | Low | 3.3 | 2023-08-11 | Out-of-bounds write in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potential… |
CVE-2023-33867 | Medium | 4.4 | 2023-08-11 | Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to… |
CVE-2023-32663 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in some Intel(R) RealSense(TM) SDKs in version 2.53.1 may allow an authenticated user to potentially enable escalation of privile… |
CVE-2023-32656 | Medium | 5.3 | 2023-08-11 | Improper buffer restrictions in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to… |
CVE-2023-32617 | High | 8.2 | 2023-08-11 | Improper input validation in some Intel(R) NUC Rugged Kit, Intel(R) NUC Kit and Intel(R) Compute Element BIOS firmware may allow a privileged user to potential… |
CVE-2023-32609 | Medium | 5.0 | 2023-08-11 | Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated user to potentially enable information dis… |
CVE-2023-32547 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in the MAVinci Desktop Software for Intel(R) Falcon 8+ before version 6.2 may allow authenticated user to potentially enable esca… |
CVE-2023-32543 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in the Intel(R) ITS sofware before version 3.1 may allow authenticated user to potentially enable escalation of privilege via loc… |
CVE-2023-32285 | Medium | 6.0 | 2023-08-11 | Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access. |
CVE-2023-31246 | Medium | 6.7 | 2023-08-11 | Incorrect default permissions in some Intel(R) SDP Tool software before version 1.4 build 5 may allow an authenticated user to potentially enable escalation of… |
CVE-2023-30760 | Low | 3.3 | 2023-08-11 | Out-of-bounds read in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow an authenticated user to potentiall… |
CVE-2023-29500 | Medium | 5.3 | 2023-08-11 | Exposure of sensitive information to an unauthorized actor in BIOS firmware for some Intel(R) NUCs may allow a privilege user to potentially enable information… |
CVE-2023-29494 | High | 7.5 | 2023-08-11 | Improper input validation in BIOS firmware for some Intel(R) NUCs may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-29243 | Medium | 4.4 | 2023-08-11 | Unchecked return value in some Intel(R) RealSense(TM) ID software for Intel(R) RealSense(TM) 450 FA in version 0.25.0 may allow a priviledged user to potential… |
CVE-2023-29151 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path element in some Intel(R) PSR SDK before version 1.0.0.20 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-28938 | Low | 3.4 | 2023-08-11 | Uncontrolled resource consumption in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a priviledged user to potentially enable denial of… |
CVE-2023-28823 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow an authenticated user to potentia… |
CVE-2023-28736 | Medium | 5.7 | 2023-08-11 | Buffer overflow in some Intel(R) SSD Tools software before version mdadm-4.2-rc2 may allow a privileged user to potentially enable escalation of privilege via… |
CVE-2023-28714 | High | 8.2 | 2023-08-11 | Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user… |
CVE-2023-28711 | Medium | 5.5 | 2023-08-11 | Insufficient control flow management in the Hyperscan Library maintained by Intel(R) before version 5.4.1 may allow an authenticated user to potentially enable… |
CVE-2023-28658 | Medium | 6.7 | 2023-08-11 | Insecure inherited permissions in some Intel(R) oneMKL software before version 2022.0 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2023-28405 | Medium | 6.7 | 2023-08-11 | Uncontrolled search path in the Intel(R) Distribution of OpenVINO(TM) Toolkit before version 2022.3.0 may allow an authenticated user to potentially enable esc… |
CVE-2023-28385 | High | 8.2 | 2023-08-11 | Improper authorization in the Intel(R) NUC Pro Software Suite for Windows before version 2.0.0.9 may allow a privileged user to potentially enable escalation o… |
CVE-2023-28380 | High | 8.8 | 2023-08-11 | Uncontrolled search path for the Intel(R) AI Hackathon software before version 2.0.0 may allow an unauthenticated user to potentially enable escalation of priv… |