2023 CVEs (page 184)
Page 184 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27416 | Medium | 5.9 | 2023-08-08 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Decon Digital Decon WP SMS plugin <= 1.1 versions. |
CVE-2023-27412 | High | 7.1 | 2023-08-08 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Everest themes Mocho Blog theme <= 1.0.4 versions. |
CVE-2023-39549 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 2). The affected application contains a use-after-free vulnerability tha… |
CVE-2023-39419 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds write past the en… |
CVE-2023-39269 | High | 7.5 | 2023-08-08 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RU… |
CVE-2023-39188 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end… |
CVE-2023-39187 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end… |
CVE-2023-39186 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end… |
CVE-2023-39185 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end… |
CVE-2023-39184 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end… |
CVE-2023-39183 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end… |
CVE-2023-39182 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected applications contain an out of bounds read past the end… |
CVE-2023-39181 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 7). The affected application contains an out of bounds write past the en… |
CVE-2023-38683 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V… |
CVE-2023-38682 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Teamcenter Visualization V13.2 (All versions < V13.2.0.14), Teamcenter Visualization V… |
CVE-2023-38681 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38680 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38679 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-38641 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in SICAM TOOLBOX II (All versions < V07.10). The affected application's database service is executed as `NT AUTHORITY\SYSTE… |
CVE-2023-38532 | Low | 3.3 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-38531 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-38530 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-38529 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-38528 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-38527 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Teamcenter Visualization V14.1 (… |
CVE-2023-38526 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-38525 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-38524 | Low | 3.3 | 2023-08-08 | A vulnerability has been identified in Parasolid V34.1 (All versions < V34.1.258), Parasolid V35.0 (All versions < V35.0.254), Parasolid V35.1 (All versions <… |
CVE-2023-37373 | Medium | 5.3 | 2023-08-08 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications accept unauthenticated file write messages. An unaut… |
CVE-2023-37372 | Critical | 9.8 | 2023-08-08 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an… |
CVE-2023-30796 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4). The affected applications contain an out of bounds… |
CVE-2023-30795 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT Open (All versions < V11.4), JT Utilities (All versions < V13.4), Parasolid V34.0 (All versions < V34.0.253), Parasol… |
CVE-2023-28830 | High | 7.8 | 2023-08-08 | A vulnerability has been identified in JT2Go (All versions < V14.2.0.5), Solid Edge SE2022 (All versions < V222.0 Update 13), Solid Edge SE2023 (All versions <… |
CVE-2023-28577 | Medium | 6.7 | 2023-08-08 | In the function call related to CAM_REQ_MGR_RELEASE_BUF there is no check if the buffer is being used. So when a function called cam_mem_get_cpu_buf to get the… |
CVE-2023-28576 | Medium | 6.4 | 2023-08-08 | The buffer obtained from kernel APIs such as cam_mem_get_cpu_buf() may be readable/writable in userspace after kernel accesses it. In other words, user mode ma… |
CVE-2023-28575 | Medium | 6.7 | 2023-08-08 | The cam_get_device_priv function does not check the type of handle being returned (device/session/link). This would lead to invalid type usage if a wrong handl… |
CVE-2023-28561 | Critical | 9.8 | 2023-08-08 | Memory corruption in QESL while processing payload from external ESL device to firmware. |
CVE-2023-28555 | High | 7.5 | 2023-08-08 | Transient DOS in Audio while remapping channel buffer in media codec decoding. |
CVE-2023-28537 | High | 8.4 | 2023-08-08 | Memory corruption while allocating memory in COmxApeDec module in Audio. |
CVE-2023-27411 | High | 8.8 | 2023-08-08 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.4). The affected applications is vulnerable to SQL injection. This could allow an… |
CVE-2023-24845 | Critical | 9.1 | 2023-08-08 | A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RU… |
CVE-2023-22666 | High | 8.4 | 2023-08-08 | Memory Corruption in Audio while playing amrwbplus clips with modified content. |
CVE-2023-21652 | High | 7.7 | 2023-08-08 | Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use. |
CVE-2023-21651 | Critical | 9.3 | 2023-08-08 | Memory Corruption in Core due to incorrect type conversion or cast in secure_io_read/write function in TEE. |
CVE-2023-21650 | Medium | 6.7 | 2023-08-08 | Memory Corruption in GPS HLOS Driver when injectFdclData receives data with invalid data length. |
CVE-2023-21649 | Medium | 6.7 | 2023-08-08 | Memory corruption in WLAN while running doDriverCmd for an unspecific command. |
CVE-2023-21648 | Medium | 6.7 | 2023-08-08 | Memory corruption in RIL while trying to send apdu packet. |
CVE-2023-21647 | Medium | 6.5 | 2023-08-08 | Information disclosure in Bluetooth when an GATT packet is received due to improper input validation. |
CVE-2023-21643 | Critical | 9.1 | 2023-08-08 | Memory corruption due to untrusted pointer dereference in automotive during system call. |
CVE-2023-21627 | Medium | 6.7 | 2023-08-08 | Memory corruption in Trusted Execution Environment while calling service API with invalid address. |
CVE-2023-21626 | High | 7.1 | 2023-08-08 | Cryptographic issue in HLOS due to improper authentication while performing key velocity checks using more than one key. |
CVE-2023-21625 | High | 8.2 | 2023-08-08 | Information disclosure in Network Services due to buffer over-read while the device receives DNS response. |
CVE-2023-4009 | High | 7.2 | 2023-08-08 | In MongoDB Ops Manager v5.0 prior to 5.0.22 and v6.0 prior to 6.0.17 it is possible for an authenticated user with project owner or project user admin access t… |
CVE-2023-3898 | Critical | 9.8 | 2023-08-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in mAyaNet E-Commerce Software allows SQL Injection. This i… |
CVE-2023-37570 | High | 7.2 | 2023-08-08 | This vulnerability exists in ESDS Emagic Data Center Management Suit due to non-expiry of session cookie. By reusing the stolen cookie, a remote attacker coul… |
CVE-2023-37569 | High | 8.8 | 2023-08-08 | This vulnerability exists in ESDS Emagic Data Center Management Suit due to lack of input sanitization in its Ping component. A remote authenticated attacker c… |
CVE-2023-3573 | High | 8.8 | 2023-08-08 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a command injection in a HTTP POST requ… |
CVE-2023-3572 | Critical | 10.0 | 2023-08-08 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote, unauthenticated attacker may use an attribute of a specific HTTP POST reque… |
CVE-2023-3571 | High | 8.8 | 2023-08-08 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP POST releated to certif… |
CVE-2023-3570 | High | 8.8 | 2023-08-08 | In PHOENIX CONTACTs WP 6xxx series web panels in versions prior to 4.0.10 a remote attacker with low privileges may use a specific HTTP DELETE request to gain… |
CVE-2023-3569 | Medium | 4.9 | 2023-08-08 | In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an authenticated remote att… |
CVE-2023-3526 | Critical | 9.6 | 2023-08-08 | In PHOENIX CONTACTs TC ROUTER and TC CLOUD CLIENT in versions prior to 2.07.2 as well as CLOUD CLIENT 1101T-TX/TX prior to 2.06.10 an unauthenticated remote at… |
CVE-2023-39978 | Low | 3.3 | 2023-08-08 | ImageMagick before 6.9.12-91 allows attackers to cause a denial of service (memory consumption) in Magick::Draw. |
CVE-2023-39976 | Critical | 9.8 | 2023-08-08 | log_blackbox.c in libqb before 2.0.8 allows a buffer overflow via long log messages because the header size is not considered. |
CVE-2023-39440 | Medium | 4.4 | 2023-08-08 | In SAP BusinessObjects Business Intelligence - version 420, If a user logs in to a particular program, under certain specific conditions memory might not be c… |
CVE-2023-39439 | High | 8.8 | 2023-08-08 | SAP Commerce Cloud may accept an empty passphrase for user ID and passphrase authentication, allowing users to log into the system without a passphrase. |
CVE-2023-39437 | High | 7.6 | 2023-08-08 | SAP business One allows - version 10.0, allows an attacker to insert malicious code into the content of a web page or application and gets it delivered to the… |
CVE-2023-39436 | Medium | 5.8 | 2023-08-08 | SAP Supplier Relationship Management -versions 600, 602, 603, 604, 605, 606, 616, 617, allows an unauthorized attacker to discover information relating to SRM… |
CVE-2023-37492 | Medium | 4.9 | 2023-08-08 | SAP NetWeaver Application Server ABAP and ABAP Platform - versions SAP_BASIS 700, SAP_BASIS 701, SAP_BASIS 702, SAP_BASIS 731, SAP_BASIS 740, SAP_BASIS 750, SA… |
CVE-2023-37491 | High | 7.5 | 2023-08-08 | The ACL (Access Control List) of SAP Message Server - versions KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.22EXT, RNL64UC 7.53… |
CVE-2023-37490 | High | 7.6 | 2023-08-08 | SAP Business Objects Installer - versions 420, 430, allows an authenticated attacker within the network to overwrite an executable file created in a temporary… |
CVE-2023-37488 | Medium | 6.1 | 2023-08-08 | In SAP NetWeaver Process Integration - versions SAP_XIESR 7.50, SAP_XITOOL 7.50, SAP_XIAF 7.50, user-controlled inputs, if not sufficiently encoded, could resu… |
CVE-2023-37487 | Medium | 5.3 | 2023-08-08 | SAP Business One (Service Layer) - version 10.0, allows an authenticated attacker with deep knowledge perform certain operation to access unintended data over… |
CVE-2023-37486 | Medium | 5.9 | 2023-08-08 | Under certain conditions SAP Commerce (OCC API) - versions HY_COM 2105, HY_COM 2205, COM_CLOUD 2211, endpoints allow an attacker to access information which wo… |
CVE-2023-37484 | Medium | 5.3 | 2023-08-08 | SAP PowerDesigner - version 16.7, queries all password hashes in the backend database and compares it with the user provided one during login attempt, which mi… |
CVE-2023-37483 | Critical | 9.8 | 2023-08-08 | SAP PowerDesigner - version 16.7, has improper access control which might allow an unauthenticated attacker to run arbitrary queries against the back-end datab… |
CVE-2023-36926 | Low | 3.7 | 2023-08-08 | Due to missing authentication check in SAP Host Agent - version 7.22, an unauthenticated attacker can set an undocumented parameter to a particular compatibili… |
CVE-2023-36923 | High | 7.8 | 2023-08-08 | SAP SQLA for PowerDesigner 17 bundled with SAP PowerDesigner 16.7 SP06 PL03, allows an attacker with local access to the system, to place a malicious library… |
CVE-2023-33993 | High | 7.1 | 2023-08-08 | B1i module of SAP Business One - version 10.0, application allows an authenticated user with deep knowledge to send crafted queries over the network to read or… |
CVE-2023-39530 | Medium | 6.5 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessage API. Ve… |
CVE-2023-39529 | Medium | 6.7 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from the server by using the Attachments contr… |
CVE-2023-39528 | Medium | 6.8 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, the `displayAjaxEmailHTML` method can be used to read any file on the server… |
CVE-2023-39527 | High | 8.3 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCle… |
CVE-2023-39526 | Critical | 9.1 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injec… |
CVE-2023-39525 | Medium | 6.5 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traversal by replaying… |
CVE-2023-39523 | Medium | 6.8 | 2023-08-07 | ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible comm… |
CVE-2023-4201 | Medium | 6.3 | 2023-08-07 | A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2023-39524 | Medium | 6.7 | 2023-08-07 | PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Vers… |
CVE-2023-39520 | Medium | 5.5 | 2023-08-07 | Cryptomator encrypts data being stored on cloud infrastructure. The MSI installer provided on the homepage for Cryptomator version 1.9.2 allows local privilege… |
CVE-2023-38704 | High | 8.1 | 2023-08-07 | import-in-the-middle is a module loading interceptor specifically for ESM modules. The import-in-the-middle loader works by generating a wrapper module on the… |
CVE-2023-4200 | Medium | 6.3 | 2023-08-07 | A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the fil… |
CVE-2023-39550 | High | 8.8 | 2023-08-07 | Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_usern… |
CVE-2023-39363 | Medium | 5.9 | 2023-08-07 | Vyper is a Pythonic Smart Contract Language for the Ethereum Virtual Machine (EVM). In versions 0.2.15, 0.2.16 and 0.3.0, named re-entrancy locks are allocated… |
CVE-2023-39349 | High | 8.1 | 2023-08-07 | Sentry is an error tracking and performance monitoring platform. Starting in version 22.1.0 and prior to version 23.7.2, an attacker with access to a token wit… |
CVE-2023-38940 | Critical | 9.8 | 2023-08-07 | Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) were discovered to contain a stack overflow via the ssid parameter in the form_fast_setting_wifi… |
CVE-2023-38939 | Critical | 9.8 | 2023-08-07 | Tenda F1202 V1.2.0.9 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the mit_ssid parameter in the formWrlsafeset function. |
CVE-2023-38938 | Critical | 9.8 | 2023-08-07 | Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter at /L7Im. |
CVE-2023-38937 | Critical | 9.8 | 2023-08-07 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, AC9 V3.0 V15.03.06… |
CVE-2023-38936 | Critical | 9.8 | 2023-08-07 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6, AC9 V3.0 V15.03.06.42_… |
CVE-2023-38935 | Critical | 9.8 | 2023-08-07 | Tenda AC1206 V15.03.06.23, AC8 V4 V16.03.34.06, AC5 V1.0 V15.03.06.28, AC10 v4.0 V16.03.10.13 and AC9 V3.0 V15.03.06.42_multi were discovered to contain a tack… |