2023 CVEs (page 185)
Page 185 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-38934 | Critical | 9.8 | 2023-08-07 | Tenda F1203 V2.0.1.6, FH1203 V2.0.1.6 and FH1205 V2.0.0.7(775) was discovered to contain a stack overflow via the deviceId parameter in the formSetDeviceName f… |
CVE-2023-38933 | Critical | 9.8 | 2023-08-07 | Tenda AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, FH1203 V2.0.1.6 and AC9 V3.0 V15.03.06.42_multi, and FH1205 V2.0.0.7… |
CVE-2023-38932 | Critical | 9.8 | 2023-08-07 | Tenda F1202 V1.2.0.9, PA202 V1.1.2.5, PW201A V1.1.2.5 and FH1202 V1.2.0.9 were discovered to contain a stack overflow via the page parameter in the SafeEmailFi… |
CVE-2023-38931 | Critical | 9.8 | 2023-08-07 | Tenda AC10 V1.0 V15.03.06.23, AC1206 V15.03.06.23, AC8 v4 V16.03.34.06, AC6 V2.0 V15.03.06.23, AC7 V1.0 V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0 V15.03.06.28, AC… |
CVE-2023-38930 | Critical | 9.8 | 2023-08-07 | Tenda AC7 V1.0,V15.03.06.44, F1203 V2.0.1.6, AC5 V1.0,V15.03.06.28, AC9 V3.0,V15.03.06.42_multi and FH1205 V2.0.0.7(775) were discovered to contain a stack ove… |
CVE-2023-38929 | Critical | 9.8 | 2023-08-07 | Tenda 4G300 v1.01.42 was discovered to contain a stack overflow via the page parameter at /VirtualSer. |
CVE-2023-38928 | Critical | 9.8 | 2023-08-07 | Netgear R7100LG 1.0.0.78 was discovered to contain a command injection vulnerability via the password parameter at usb_remote_invite.cgi. |
CVE-2023-38926 | High | 8.8 | 2023-08-07 | Netgear EX6200 v1.0.3.94 was discovered to contain a buffer overflow via the wla_temp_ssid parameter at acosNvramConfig_set. |
CVE-2023-38925 | High | 8.8 | 2023-08-07 | Netgear DC112A 1.0.0.64, EX6200 1.0.3.94 and R6300v2 1.0.4.8 were discovered to contain a buffer overflow via the http_passwd parameter in password.cgi. |
CVE-2023-38924 | Medium | 6.5 | 2023-08-07 | Netgear DGN3500 1.1.00.37 was discovered to contain a buffer overflow via the http_password parameter at setup.cgi. |
CVE-2023-38922 | High | 8.8 | 2023-08-07 | Netgear JWNR2000v2 v1.0.0.11, XWN5001 v0.4.1.1, and XAVN2001v2 v0.4.0.7 were discovered to contain multiple buffer overflows via the http_passwd and http_usern… |
CVE-2023-38921 | High | 8.8 | 2023-08-07 | Netgear WG302v2 v5.2.9 and WAG302v2 v5.1.19 were discovered to contain multiple command injection vulnerabilities in the upgrade_handler function via the firmw… |
CVE-2023-38591 | High | 8.8 | 2023-08-07 | Netgear DG834Gv5 1.6.01.34 was discovered to contain multiple buffer overflows via the wla_ssid and wla_temp_ssid parameters at bsw_ssid.cgi. |
CVE-2023-38412 | High | 8.8 | 2023-08-07 | Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi. |
CVE-2023-36499 | High | 8.8 | 2023-08-07 | Netgear XR300 v1.0.3.78 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at genie_ap_wifi_change.cgi. |
CVE-2023-36054 | Medium | 6.5 | 2023-08-07 | lib/kadm5/kadm_rpc_xdr.c in MIT Kerberos 5 (aka krb5) before 1.20.2 and 1.21.x before 1.21.1 frees an uninitialized pointer. A remote authenticated user can tr… |
CVE-2023-4199 | Medium | 6.3 | 2023-08-07 | A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file catago… |
CVE-2023-4012 | High | 7.5 | 2023-08-07 | ntpd will crash if the server is not NTS-enabled (no certificate) and it receives an NTS-enabled client request (mode 3). |
CVE-2023-38157 | Medium | 6.5 | 2023-08-07 | Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability |
CVE-2023-38045 | Medium | 6.1 | 2023-08-07 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS… |
CVE-2023-38044 | Critical | 9.8 | 2023-08-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. |
CVE-2023-34477 | Critical | 9.8 | 2023-08-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. |
CVE-2023-34476 | Critical | 9.8 | 2023-08-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. |
CVE-2023-32783 | High | 7.5 | 2023-08-07 | The event analysis component in Zoho ManageEngine ADAudit Plus 7.1.1 allows an attacker to bypass audit detection by creating or renaming user accounts with a… |
CVE-2023-23758 | Critical | 9.8 | 2023-08-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. |
CVE-2023-23757 | Critical | 9.8 | 2023-08-07 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection. |
CVE-2023-3671 | Medium | 6.1 | 2023-08-07 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.15.4 does not sanitise and escape various parameters before outputting it back in the page… |
CVE-2023-3650 | Medium | 4.8 | 2023-08-07 | The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perfor… |
CVE-2023-3575 | Medium | 5.4 | 2023-08-07 | The Quiz And Survey Master WordPress plugin before 8.1.11 does not properly sanitize and escape question titles, which could allow users with the Contributor r… |
CVE-2023-3524 | Medium | 6.1 | 2023-08-07 | The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting |
CVE-2023-3492 | Medium | 6.8 | 2023-08-07 | The WP Shopping Pages WordPress plugin through 1.14 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow… |
CVE-2023-3365 | High | 8.1 | 2023-08-07 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.14 does not have authorisation when deleting shipment, allowing any authenticated users… |
CVE-2023-2843 | High | 8.8 | 2023-08-07 | The MultiParcels Shipping For WooCommerce WordPress plugin before 1.14.15 does not properly sanitize and escape a parameter before using it in an SQL statement… |
CVE-2023-27373 | Medium | 5.5 | 2023-08-07 | An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-accessible… |
CVE-2023-0604 | Medium | 5.4 | 2023-08-07 | The WP Food Manager WordPress plugin before 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to pe… |
CVE-2023-4194 | Medium | 5.5 | 2023-08-07 | A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to som… |
CVE-2023-4147 | High | 7.8 | 2023-08-07 | A use-after-free flaw was found in the Linux kernel’s Netfilter functionality when adding a rule with NFTA_RULE_CHAIN_ID. This flaw allows a local user to cras… |
CVE-2023-36220 | High | 7.2 | 2023-08-07 | Directory Traversal vulnerability in Textpattern CMS v4.8.8 allows a remote authenticated attacker to execute arbitrary code and gain access to sensitive infor… |
CVE-2023-3896 | High | 7.8 | 2023-08-07 | Divide By Zero in vim/vim from 9.0.1367-1 to 9.0.1367-3 |
CVE-2023-38392 | High | 7.1 | 2023-08-07 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Hiroaki Miyashita Custom Field Template plugin <= 2.5.9 versions. |
CVE-2023-32090 | Critical | 9.8 | 2023-08-07 | Pega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials |
CVE-2023-0426 | High | 8.6 | 2023-08-07 | ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product version… |
CVE-2023-0425 | High | 8.6 | 2023-08-07 | ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product version… |
CVE-2023-39903 | Medium | 5.9 | 2023-08-07 | An issue was discovered in Fujitsu Software Infrastructure Manager (ISM) before 2.8.0.061. The ismsnap component (in this specific case at /var/log/fujitsu/Ser… |
CVE-2023-20818 | Medium | 4.4 | 2023-08-07 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20817 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20816 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20815 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20814 | Medium | 6.7 | 2023-08-07 | In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System executi… |
CVE-2023-20813 | Medium | 4.4 | 2023-08-07 | In wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20812 | Medium | 4.4 | 2023-08-07 | In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local information disclosure with System execution… |
CVE-2023-20811 | Medium | 6.7 | 2023-08-07 | In IOMMU, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20810 | Medium | 4.4 | 2023-08-07 | In IOMMU, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure with System execution pr… |
CVE-2023-20809 | Medium | 6.7 | 2023-08-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20808 | Medium | 6.7 | 2023-08-07 | In OPTEE, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20807 | Medium | 6.7 | 2023-08-07 | In dpe, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20806 | Medium | 6.7 | 2023-08-07 | In hcp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20805 | Medium | 6.7 | 2023-08-07 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20804 | Medium | 6.7 | 2023-08-07 | In imgsys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20803 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20802 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible memory corruption due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20801 | Medium | 6.4 | 2023-08-07 | In imgsys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20800 | Medium | 6.5 | 2023-08-07 | In imgsys, there is a possible system crash due to a mssing ptr check. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20798 | Medium | 4.4 | 2023-08-07 | In pda, there is a possible out of bounds read due to an incorrect calculation of buffer size. This could lead to local information disclosure with System exec… |
CVE-2023-20797 | Medium | 6.7 | 2023-08-07 | In camera middleware, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execu… |
CVE-2023-20796 | Medium | 4.4 | 2023-08-07 | In power, there is a possible memory corruption due to an incorrect bounds check. This could lead to local denial of service with System execution privileges n… |
CVE-2023-20795 | Medium | 6.7 | 2023-08-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20793 | Medium | 4.4 | 2023-08-07 | In apu, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges needed… |
CVE-2023-20790 | Medium | 4.4 | 2023-08-07 | In nvram, there is a possible out of bounds write due to a missing bounds check. This could lead to local information disclosure with System execution privileg… |
CVE-2023-20789 | Medium | 4.4 | 2023-08-07 | In jpeg, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privil… |
CVE-2023-20788 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20787 | Medium | 6.4 | 2023-08-07 | In thermal, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges neede… |
CVE-2023-20786 | Medium | 6.7 | 2023-08-07 | In gps, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20785 | Medium | 6.4 | 2023-08-07 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20784 | Medium | 6.7 | 2023-08-07 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20783 | Medium | 6.7 | 2023-08-07 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20782 | Medium | 4.4 | 2023-08-07 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-20781 | Medium | 4.4 | 2023-08-07 | In keyinstall, there is a possible memory corruption due to a missing bounds check. This could lead to local denial of service with System execution privileges… |
CVE-2023-20780 | Medium | 4.4 | 2023-08-07 | In keyinstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution… |
CVE-2023-33913 | High | 7.2 | 2023-08-07 | In DRM/oemcrypto, there is a possible out of bounds write due to an incorrect calculation of buffer size.This could lead to remote escalation of privilege with… |
CVE-2023-33912 | Medium | 5.5 | 2023-08-07 | In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33911 | Medium | 5.5 | 2023-08-07 | In vowifi service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33910 | Medium | 5.5 | 2023-08-07 | In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33909 | Medium | 5.5 | 2023-08-07 | In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33908 | Medium | 5.5 | 2023-08-07 | In ims service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33907 | Medium | 5.5 | 2023-08-07 | In Contacts Service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges |
CVE-2023-33906 | Medium | 5.5 | 2023-08-07 | In Contacts Service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges |
CVE-2023-4193 | Medium | 6.3 | 2023-08-07 | A vulnerability has been found in SourceCodester Resort Reservation System 1.0 and classified as critical. This vulnerability affects unknown code of the file… |
CVE-2023-4192 | Medium | 6.3 | 2023-08-07 | A vulnerability, which was classified as critical, was found in SourceCodester Resort Reservation System 1.0. This affects an unknown part of the file manage_u… |
CVE-2023-4191 | Medium | 6.3 | 2023-08-06 | A vulnerability, which was classified as critical, has been found in SourceCodester Resort Reservation System 1.0. Affected by this issue is some unknown funct… |
CVE-2023-4196 | Medium | 5.4 | 2023-08-06 | Cross-site Scripting (XSS) - Stored in GitHub repository cockpit-hq/cockpit prior to 2.6.3. |
CVE-2023-4195 | High | 8.8 | 2023-08-06 | PHP Remote File Inclusion in GitHub repository cockpit-hq/cockpit prior to 2.6.3. |
CVE-2023-4186 | Medium | 6.3 | 2023-08-06 | A vulnerability was found in SourceCodester Pharmacy Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown func… |
CVE-2023-4185 | Medium | 6.3 | 2023-08-06 | A vulnerability was found in SourceCodester Online Hospital Management System 1.0. It has been classified as critical. Affected is an unknown function of the f… |
CVE-2023-4184 | High | 7.3 | 2023-08-06 | A vulnerability was found in SourceCodester Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2023-4183 | Medium | 4.3 | 2023-08-06 | A vulnerability has been found in SourceCodester Inventory Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the… |
CVE-2023-4182 | High | 7.3 | 2023-08-06 | A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file edit_s… |
CVE-2023-4181 | Medium | 5.4 | 2023-08-06 | A vulnerability, which was classified as critical, has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this i… |
CVE-2023-4180 | High | 7.3 | 2023-08-06 | A vulnerability classified as critical was found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected by this vulnerability is a… |
CVE-2023-4179 | Medium | 6.3 | 2023-08-06 | A vulnerability classified as critical has been found in SourceCodester Free Hospital Management System for Small Practices 1.0. Affected is an unknown functio… |