2023 CVEs (page 182)
Page 182 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-38212 | High | 7.8 | 2023-08-09 | Adobe Dimension version 3.4.9 is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cur… |
CVE-2023-38211 | High | 7.8 | 2023-08-09 | Adobe Dimension version 3.4.9 is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. E… |
CVE-2023-24471 | Medium | 6.5 | 2023-08-09 | An access control vulnerability was found, due to the restrictions that are applied on actual assertions not being enforced in their debug functionality. An a… |
CVE-2023-23574 | High | 8.8 | 2023-08-09 | A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alerts_count component, allows an authenticate… |
CVE-2023-22843 | Medium | 6.4 | 2023-08-09 | An authenticated attacker with administrative access to the web management interface can inject malicious JavaScript code inside the definition of a Threat Int… |
CVE-2023-22378 | High | 8.8 | 2023-08-09 | A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated att… |
CVE-2023-38209 | Medium | 6.5 | 2023-08-09 | Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Incorrect Authorization vulnerability that… |
CVE-2023-38208 | Critical | 9.1 | 2023-08-09 | Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by an Improper Neutralization of Special Element… |
CVE-2023-38207 | High | 7.5 | 2023-08-09 | Adobe Commerce versions 2.4.6-p1 (and earlier), 2.4.5-p3 (and earlier) and 2.4.4-p4 (and earlier) are affected by a XML Injection (aka Blind XPath Injection) v… |
CVE-2023-24477 | High | 7.0 | 2023-08-09 | In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the… |
CVE-2023-37864 | High | 7.2 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to g… |
CVE-2023-37863 | High | 7.2 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with SNMPv2 write privileges may use an a special SNMP request to g… |
CVE-2023-37862 | High | 8.2 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an unauthenticated remote attacker can access upload-functions of the HTTP API. This… |
CVE-2023-37861 | High | 8.8 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated remote attacker can execute code with root permissions with a specia… |
CVE-2023-37860 | High | 7.5 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote unauthenticated attacker can obtain the r/w community string of the SNMPv2 d… |
CVE-2023-37859 | High | 7.2 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 the SNMP daemon is running with root privileges allowing a remote attacker with knowl… |
CVE-2023-37858 | Medium | 4.9 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cry… |
CVE-2023-37857 | Low | 3.8 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 an authenticated, remote attacker with admin privileges is able to read hardcoded cry… |
CVE-2023-37856 | Medium | 4.3 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the devi… |
CVE-2023-37855 | Medium | 4.3 | 2023-08-09 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges is able to gain limited read-access to the devi… |
CVE-2023-33934 | Critical | 9.1 | 2023-08-09 | Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Server: through 9.2.1. |
CVE-2023-26310 | High | 7.4 | 2023-08-09 | There is a command injection problem in the old version of the mobile phone backup app. |
CVE-2023-2905 | High | 8.8 | 2023-08-09 | Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddable web serv… |
CVE-2023-4243 | High | 8.8 | 2023-08-09 | The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due… |
CVE-2023-4242 | Medium | 4.3 | 2023-08-09 | The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to impr… |
CVE-2023-38752 | Medium | 4.3 | 2023-08-09 | Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view… |
CVE-2023-38751 | Medium | 4.3 | 2023-08-09 | Improper authorization vulnerability in Special Interest Group Network for Analysis and Liaison versions 4.4.0 to 4.7.7 allows the authorized API users to view… |
CVE-2023-4239 | High | 8.8 | 2023-08-09 | The Real Estate Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.2 due to insufficient restriction on the… |
CVE-2023-39910 | High | 7.5 | 2023-08-09 | The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mers… |
CVE-2023-39341 | Low | 3.3 | 2023-08-09 | "FFRI yarai", "FFRI yarai Home and Business Edition" and their OEM products handle exceptional conditions improperly, which may lead to denial-of-service (DoS)… |
CVE-2023-39951 | Medium | 6.5 | 2023-08-08 | OpenTelemetry Java Instrumentation provides OpenTelemetry auto-instrumentation and instrumentation libraries for Java. OpenTelemetry Java Instrumentation prior… |
CVE-2023-39214 | High | 7.6 | 2023-08-08 | Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access. |
CVE-2023-39213 | Critical | 9.6 | 2023-08-08 | Improper neutralization of special elements in Zoom Desktop Client for Windows and Zoom VDI Client before 5.15.2 may allow an unauthenticated user to enable an… |
CVE-2023-39212 | High | 7.9 | 2023-08-08 | Untrusted search path in Zoom Rooms for Windows before version 5.15.5 may allow an authenticated user to enable a denial of service via local access. |
CVE-2023-39211 | High | 8.8 | 2023-08-08 | Improper privilege management in Zoom Desktop Client for Windows and Zoom Rooms for Windows before 5.15.5 may allow an authenticated user to enable an informat… |
CVE-2023-39210 | Medium | 5.5 | 2023-08-08 | Cleartext storage of sensitive information in Zoom Client SDK for Windows before 5.15.0 may allow an authenticated user to enable an information disclosure via… |
CVE-2023-39209 | Medium | 5.9 | 2023-08-08 | Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via network acce… |
CVE-2023-39086 | High | 7.5 | 2023-08-08 | ASUS RT-AC66U B1 3.0.0.4.286_51665 was discovered to transmit sensitive information in cleartext. |
CVE-2023-36482 | Medium | 4.3 | 2023-08-08 | An issue was discovered in Samsung NFC S3NRN4V, S3NSN4V, S3NSEN4, SEN82AB, and S3NRN82. A buffer copy without checking its input size can cause an NFC service… |
CVE-2023-36344 | High | 7.8 | 2023-08-08 | An issue in Diebold Nixdorf Vynamic View Console v.5.3.1 and before allows a local attacker to execute arbitrary code via not restricting the search path for r… |
CVE-2023-26961 | Medium | 4.8 | 2023-08-08 | Alteryx Server 2022.1.1.42590 does not employ file type verification for uploaded files. This vulnerability allows attackers to upload arbitrary files (e.g., J… |
CVE-2023-40042 | Critical | 9.8 | 2023-08-08 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setStaticDhcpConfig in /lib/cste_modules/lan.so. Attackers can send crafted data in an… |
CVE-2023-40041 | Critical | 9.8 | 2023-08-08 | TOTOLINK T10_v2 5.9c.5061_B20200511 has a stack-based buffer overflow in setWiFiWpsConfig in /lib/cste_modules/wps.so. Attackers can send crafted data in an MQ… |
CVE-2023-39533 | High | 7.5 | 2023-08-08 | go-libp2p is the Go implementation of the libp2p Networking Stack. Prior to versions 0.27.8, 0.28.2, and 0.29.1 malicious peer can use large RSA keys to run a… |
CVE-2023-39518 | Medium | 5.4 | 2023-08-08 | social-media-skeleton is an uncompleted social media project implemented using PHP, MySQL, CSS, JavaScript, and HTML. Versions 1.0.0 until 1.0.3 have a stored… |
CVE-2023-38180 | High | 7.5 | 2023-08-08 | .NET and Visual Studio Denial of Service Vulnerability |
CVE-2023-36899 | High | 8.8 | 2023-08-08 | ASP.NET Elevation of Privilege Vulnerability |
CVE-2023-36873 | High | 7.4 | 2023-08-08 | .NET Framework Spoofing Vulnerability |
CVE-2023-35391 | Medium | 6.2 | 2023-08-08 | ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability |
CVE-2023-3894 | Medium | 5.8 | 2023-08-08 | Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input… |
CVE-2023-39342 | Low | 3.6 | 2023-08-08 | Dangerzone is software for converting potentially dangerous PDFs, office documents, or images to safe PDFs. The Dangerzone CLI (`dangerzone-cli` command) logs… |
CVE-2023-39218 | Medium | 6.1 | 2023-08-08 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow a privileged user to enable information disclosure via network access. |
CVE-2023-39217 | Medium | 5.3 | 2023-08-08 | Improper input validation in Zoom SDK’s before 5.14.10 may allow an unauthenticated user to enable a denial of service via network access. |
CVE-2023-39216 | Critical | 9.6 | 2023-08-08 | Improper input validation in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network a… |
CVE-2023-38254 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-38188 | Medium | 4.5 | 2023-08-08 | Azure Apache Hadoop Spoofing Vulnerability |
CVE-2023-38186 | High | 8.8 | 2023-08-08 | Windows Mobile Device Management Elevation of Privilege Vulnerability |
CVE-2023-38185 | High | 8.8 | 2023-08-08 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-38184 | High | 7.5 | 2023-08-08 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2023-38182 | High | 8.0 | 2023-08-08 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-38181 | High | 8.8 | 2023-08-08 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-38178 | High | 7.5 | 2023-08-08 | .NET Core and Visual Studio Denial of Service Vulnerability |
CVE-2023-38176 | High | 7.0 | 2023-08-08 | Azure Arc-Enabled Servers Elevation of Privilege Vulnerability |
CVE-2023-38175 | High | 7.8 | 2023-08-08 | Microsoft Windows Defender Elevation of Privilege Vulnerability |
CVE-2023-38172 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-38170 | High | 7.8 | 2023-08-08 | HEVC Video Extensions Remote Code Execution Vulnerability |
CVE-2023-38169 | High | 8.8 | 2023-08-08 | Microsoft SQL OLE DB Remote Code Execution Vulnerability |
CVE-2023-38167 | High | 7.2 | 2023-08-08 | Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability |
CVE-2023-38154 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-36914 | Medium | 5.5 | 2023-08-08 | Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability |
CVE-2023-36913 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2023-36912 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36911 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36910 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-36909 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-36908 | Medium | 6.5 | 2023-08-08 | Windows Hyper-V Information Disclosure Vulnerability |
CVE-2023-36907 | Medium | 5.5 | 2023-08-08 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2023-36906 | Medium | 5.5 | 2023-08-08 | Windows Cryptographic Services Information Disclosure Vulnerability |
CVE-2023-36905 | Medium | 5.5 | 2023-08-08 | Windows Wireless Wide Area Network Service (WwanSvc) Information Disclosure Vulnerability |
CVE-2023-36904 | High | 7.8 | 2023-08-08 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-36903 | High | 7.8 | 2023-08-08 | Windows System Assessment Tool Elevation of Privilege Vulnerability |
CVE-2023-36900 | High | 7.8 | 2023-08-08 | Windows Common Log File System Driver Elevation of Privilege Vulnerability |
CVE-2023-36898 | High | 7.8 | 2023-08-08 | Tablet Windows User Interface Application Core Remote Code Execution Vulnerability |
CVE-2023-36897 | High | 8.1 | 2023-08-08 | Visual Studio Tools for Office Runtime Spoofing Vulnerability |
CVE-2023-36896 | High | 7.8 | 2023-08-08 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-36895 | High | 7.8 | 2023-08-08 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-36894 | Medium | 6.5 | 2023-08-08 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2023-36893 | Medium | 6.5 | 2023-08-08 | Microsoft Outlook Spoofing Vulnerability |
CVE-2023-36892 | High | 8.0 | 2023-08-08 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-36891 | High | 8.0 | 2023-08-08 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-36890 | Medium | 6.5 | 2023-08-08 | Microsoft SharePoint Server Information Disclosure Vulnerability |
CVE-2023-36889 | Medium | 5.5 | 2023-08-08 | Windows Group Policy Security Feature Bypass Vulnerability |
CVE-2023-36882 | High | 8.8 | 2023-08-08 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-36881 | Medium | 4.5 | 2023-08-08 | Azure Apache Ambari Spoofing Vulnerability |
CVE-2023-36877 | Medium | 4.5 | 2023-08-08 | Azure Apache Oozie Spoofing Vulnerability |
CVE-2023-36876 | High | 7.1 | 2023-08-08 | Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability |
CVE-2023-36869 | Medium | 6.3 | 2023-08-08 | Azure DevOps Server Spoofing Vulnerability |
CVE-2023-36866 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-36865 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-36541 | High | 8.0 | 2023-08-08 | Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of priv… |