2023 CVEs (page 183)
Page 183 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-36540 | High | 7.3 | 2023-08-08 | Untrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege v… |
CVE-2023-36535 | High | 7.1 | 2023-08-08 | Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network acc… |
CVE-2023-36534 | Critical | 9.3 | 2023-08-08 | Path traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access. |
CVE-2023-36533 | High | 7.1 | 2023-08-08 | Uncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access. |
CVE-2023-36532 | Medium | 5.9 | 2023-08-08 | Buffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access. |
CVE-2023-35394 | Medium | 4.6 | 2023-08-08 | Azure HDInsight Jupyter Notebook Spoofing Vulnerability |
CVE-2023-35393 | Medium | 4.5 | 2023-08-08 | Azure Apache Hive Spoofing Vulnerability |
CVE-2023-35390 | High | 7.8 | 2023-08-08 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-35389 | Medium | 6.5 | 2023-08-08 | Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability |
CVE-2023-35388 | High | 8.0 | 2023-08-08 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-35387 | High | 8.8 | 2023-08-08 | Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability |
CVE-2023-35386 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35385 | Critical | 9.8 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-35384 | Medium | 5.4 | 2023-08-08 | Windows HTML Platforms Security Feature Bypass Vulnerability |
CVE-2023-35383 | High | 7.5 | 2023-08-08 | Microsoft Message Queuing Information Disclosure Vulnerability |
CVE-2023-35382 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35381 | High | 8.8 | 2023-08-08 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2023-35380 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35379 | High | 7.8 | 2023-08-08 | Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability |
CVE-2023-35378 | High | 7.0 | 2023-08-08 | Windows Projected File System Elevation of Privilege Vulnerability |
CVE-2023-35377 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-35376 | Medium | 6.5 | 2023-08-08 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-35372 | High | 7.8 | 2023-08-08 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-35371 | High | 7.8 | 2023-08-08 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-35368 | High | 8.8 | 2023-08-08 | Microsoft Exchange Remote Code Execution Vulnerability |
CVE-2023-35359 | High | 7.8 | 2023-08-08 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-29330 | High | 8.8 | 2023-08-08 | Microsoft Teams Remote Code Execution Vulnerability |
CVE-2023-29328 | High | 8.8 | 2023-08-08 | Microsoft Teams Remote Code Execution Vulnerability |
CVE-2023-21709 | Critical | 9.8 | 2023-08-08 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-20589 | Medium | 6.8 | 2023-08-08 | An attacker with specialized hardware and physical access to an impacted device may be able to perform a voltage fault injection attack resulting in compromis… |
CVE-2023-20588 | Medium | 5.5 | 2023-08-08 | A division-by-zero error on some AMD processors can potentially return speculative data resulting in loss of confidentiality. |
CVE-2023-20586 | Critical | 9.8 | 2023-08-08 | A potential vulnerability was reported in Radeon™ Software Crimson ReLive Edition which may allow escalation of privilege. Radeon™ Software Crimson ReLive Edi… |
CVE-2023-20569 | Medium | 4.7 | 2023-08-08 | A side channel vulnerability on some of the AMD CPUs may allow an attacker to influence the return address prediction. This may result in speculative execut… |
CVE-2023-20562 | High | 7.8 | 2023-08-08 | Insufficient validation in the IOCTL (Input Output Control) input buffer in AMD uProf may allow an authenticated user to load an unsigned driver potentially… |
CVE-2023-20561 | Medium | 5.5 | 2023-08-08 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary address poten… |
CVE-2023-20556 | Medium | 5.5 | 2023-08-08 | Insufficient validation of the IOCTL (Input Output Control) input buffer in AMD μProf may allow an authenticated user to send an arbitrary buffer potentia… |
CVE-2023-20555 | High | 7.8 | 2023-08-08 | Insufficient input validation in CpmDisplayFeatureSmm may allow an attacker to corrupt SMM memory by overwriting an arbitrary bit in an attacker-controlled poi… |
CVE-2023-39532 | Critical | 9.8 | 2023-08-08 | SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments. In version 0.18.0 prior to 0.18.7, 0.17.0 prior to 0.17.1, 0… |
CVE-2023-37646 | High | 7.8 | 2023-08-08 | An issue in the CAB file extraction function of Bitberry File Opener v23.0 allows attackers to execute a directory traversal. |
CVE-2023-3522 | Critical | 9.8 | 2023-08-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 License Portal System allows SQL Injection. This issu… |
CVE-2023-3386 | Critical | 9.8 | 2023-08-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in a2 Camera Trap Tracking System allows SQL Injection. Thi… |
CVE-2023-38773 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp1 and volopp2 parameters within the /Qu… |
CVE-2023-38771 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the volopp parameter within the /QueryView.php. |
CVE-2023-38770 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the group parameter within the /QueryView.php. |
CVE-2023-38769 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the searchstring and searchwhat parameters within… |
CVE-2023-38768 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the PropertyID parameter within the /QueryView.ph… |
CVE-2023-38767 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the 'value' and 'custom' parameters within the /Q… |
CVE-2023-38766 | Medium | 5.4 | 2023-08-08 | Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to the PersonView.php co… |
CVE-2023-38765 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the membermonth parameter within the /QueryView.p… |
CVE-2023-38764 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the birthmonth and percls parameters within the /… |
CVE-2023-38763 | Medium | 6.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the FundRaiserID parameter within the /FundRaiser… |
CVE-2023-38762 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the friendmonths parameter within the /QueryView… |
CVE-2023-38761 | Medium | 6.1 | 2023-08-08 | Cross Site Scripting (XSS) vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted payload to the systemSettings.ph… |
CVE-2023-38760 | High | 7.5 | 2023-08-08 | SQL injection vulnerability in ChurchCRM v.5.0.0 allows a remote attacker to obtain sensitive information via the role and gender parameters within the /QueryV… |
CVE-2023-38759 | High | 8.8 | 2023-08-08 | Cross Site Request Forgery (CSRF) vulnerability in wger Project wger Workout Manager 2.2.0a3 allows a remote attacker to gain privileges via the user-managemen… |
CVE-2023-38758 | Medium | 5.4 | 2023-08-08 | Cross Site Scripting vulnerability in wger Project wger Workout Manager v.2.2.0a3 allows a remote attacker to gain privileges via the license_author field in t… |
CVE-2023-3653 | Medium | 5.4 | 2023-08-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Stored XSS. This… |
CVE-2023-3652 | Medium | 6.1 | 2023-08-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Digital Ant E-Commerce Software allows Reflected XSS. Th… |
CVE-2023-3651 | Critical | 9.8 | 2023-08-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Digital Ant E-Commerce Software allows SQL Injection. Th… |
CVE-2023-36306 | Medium | 6.1 | 2023-08-08 | A Cross Site Scripting (XSS) vulnerability in Adiscon Aiscon LogAnalyzer through 4.1.13 allows a remote attacker to execute arbitrary code via the asktheoracle… |
CVE-2023-36136 | Medium | 6.5 | 2023-08-08 | PHPJabbers Class Scheduling System 1.0 lacks encryption on the password when editing a user account (update user page) allowing an attacker to capture all user… |
CVE-2023-33756 | High | 7.5 | 2023-08-08 | An issue in the SpreadSheetPlugin component of Foswiki v2.1.7 and below allows attackers to execute a directory traversal. |
CVE-2023-2423 | High | 8.6 | 2023-08-08 | A vulnerability was discovered in the Rockwell Automation Armor PowerFlex device when the product sends communications to the local event log. Threat actors c… |
CVE-2023-24698 | High | 7.5 | 2023-08-08 | Insufficient parameter validation in the Foswiki::Sandbox component of Foswiki v2.1.7 and below allows attackers to perform a directory traversal via supplying… |
CVE-2023-4219 | High | 7.3 | 2023-08-08 | A vulnerability was found in SourceCodester Doctors Appointment System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2023-38384 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Syntactics, Inc. EaSYNC plugin <= 1.3.7 versions. |
CVE-2023-32292 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in GetButton Chat Button by GetButton.Io plugin <= 1.8.9.4 versions. |
CVE-2023-31221 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ransom Christofferson PDQ CSV plugin <= 1.0.0 versions. |
CVE-2023-30482 | Medium | 6.5 | 2023-08-08 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in VillaTheme WPBulky plugin <= 1.0.10 versions. |
CVE-2023-28934 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions. |
CVE-2023-28931 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Never5 Post Connector plugin <= 1.0.9 versions. |
CVE-2023-28773 | Medium | 6.5 | 2023-08-08 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kolja Nolte Secondary Title plugin <= 2.0.9.1 versions. |
CVE-2023-25984 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Rigorous & Factory Pattern Dovetail plugin <= 1.2.13 versions. |
CVE-2023-3716 | Critical | 9.8 | 2023-08-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Oduyo Online Collection Software allows SQL Injection. T… |
CVE-2023-37690 | Medium | 4.8 | 2023-08-08 | Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Search Maid page. |
CVE-2023-37689 | Medium | 4.8 | 2023-08-08 | Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page. |
CVE-2023-37688 | Medium | 4.8 | 2023-08-08 | Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Admin page. |
CVE-2023-37687 | High | 7.2 | 2023-08-08 | Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the View Request of Nurse Page in the Admin portal. |
CVE-2023-37686 | Medium | 4.8 | 2023-08-08 | Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Nurse Page in the Admin portal. |
CVE-2023-37685 | Medium | 4.8 | 2023-08-08 | Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Page of the Admin portal. |
CVE-2023-37684 | Medium | 4.8 | 2023-08-08 | Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Search Report Details of the Admin portal. |
CVE-2023-37683 | Medium | 4.8 | 2023-08-08 | Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Profile Page of the Admin. |
CVE-2023-37682 | Critical | 9.8 | 2023-08-08 | Judging Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-jms/deductScores.php. |
CVE-2023-27627 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in eggemplo Woocommerce Email Report plugin <= 2.4 versions. |
CVE-2023-27415 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Themeqx LetterPress plugin <= 1.1.2 versions. |
CVE-2023-25459 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Postsnippets Post Snippets plugin <= 4.0.2 versions. |
CVE-2023-25063 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Anadnet Quick Page/Post Redirect Plugin plugin <= 5.2.3 versions. |
CVE-2023-24413 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WordPress vertical image slider plugin <= 1.2.16 versions. |
CVE-2023-24409 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution WP Responsive Tabs horizontal vertical and accordion Tabs plugin <= 1.1.1… |
CVE-2023-23880 | Medium | 6.5 | 2023-08-08 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExactMetrics plugin <= 7.14.1 versions. |
CVE-2023-23877 | Medium | 6.5 | 2023-08-08 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in bkmacdaddy designs Pinterest RSS Widget plugin <= 2.3.1 versions. |
CVE-2023-23829 | Medium | 6.5 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Pierre JEHAN Owl Carousel plugin <= 0.5.3 versions. |
CVE-2023-4203 | Critical | 9.0 | 2023-08-08 | Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticate… |
CVE-2023-4202 | Critical | 9.0 | 2023-08-08 | Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stored Cross-Site Scripting vulnerability, which can be triggered by authenticate… |
CVE-2023-3717 | Critical | 9.8 | 2023-08-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Farmakom Remote Administration Console allows SQL Injecti… |
CVE-2023-36692 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Christian Kramer & Hendrik Thole WP-Cirrus plugin <= 0.6.11 versions. |
CVE-2023-32503 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.6 versions. |
CVE-2023-29099 | Medium | 6.5 | 2023-08-08 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Elegant themes Divi theme <= 4.20.2 versions. |
CVE-2023-27422 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes NS Coupon To Become Customer plugin <= 1.2.2 versions. |
CVE-2023-27421 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Everest News theme <= 1.1.0 versions. |