2023 CVEs (page 193)
Page 193 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22428 | High | 7.6 | 2023-07-24 | Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. This issue affects Command Centre: vEL8.80… |
CVE-2023-3872 | Medium | 6.3 | 2023-07-24 | A vulnerability classified as critical was found in Campcodes Beauty Salon Management System 1.0. This vulnerability affects unknown code of the file /admin/ed… |
CVE-2023-3871 | Medium | 6.3 | 2023-07-24 | A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit_cat… |
CVE-2023-26045 | Critical | 10.0 | 2023-07-24 | NodeBB is Node.js based forum software. Starting in version 2.5.0 and prior to version 2.8.7, due to the use of the object destructuring assignment syntax in t… |
CVE-2023-20593 | Medium | 5.5 | 2023-07-24 | An issue in “Zen 2” CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information. |
CVE-2023-37613 | Medium | 6.1 | 2023-07-24 | A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary web scripts or HTML via injecting a craf… |
CVE-2023-34478 | Critical | 9.8 | 2023-07-24 | Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with AP… |
CVE-2023-3324 | Medium | 6.3 | 2023-07-24 | A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit… |
CVE-2023-3323 | Medium | 5.9 | 2023-07-24 | A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit… |
CVE-2023-3322 | High | 7.0 | 2023-07-24 | A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit… |
CVE-2023-3321 | High | 7.0 | 2023-07-24 | A vulnerability exists by allowing low-privileged users to read and update the data in various directories used by the Zenon system. An attacker could exploit… |
CVE-2023-26077 | High | 7.8 | 2023-07-24 | Atera Agent through 1.8.3.6 on Windows Creates a Temporary File in a Directory with Insecure Permissions. |
CVE-2023-3812 | High | 7.8 | 2023-07-24 | An out-of-bounds memory access flaw was found in the Linux kernel’s TUN/TAP device driver functionality in how a user generates a malicious (too big) networkin… |
CVE-2023-3750 | Medium | 6.5 | 2023-07-24 | A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of se… |
CVE-2023-3748 | Low | 3.5 | 2023-07-24 | A flaw was found in FRRouting when parsing certain babeld unicast hello messages that are intended to be ignored. This issue may allow an attacker to send spec… |
CVE-2023-3745 | Medium | 5.5 | 2023-07-24 | A heap-based buffer overflow issue was found in ImageMagick's PushCharPixel() function in quantum-private.h. This issue may allow a local attacker to trick the… |
CVE-2023-3640 | High | 7.0 | 2023-07-24 | A possible unauthorized memory access flaw was found in the Linux kernel's cpu_entry_area mapping of X86 CPU data to memory, where a user may guess the locatio… |
CVE-2023-3567 | High | 7.1 | 2023-07-24 | A use-after-free flaw was found in vcs_read in drivers/tty/vt/vc_screen.c in vc_screen in the Linux Kernel. This issue may allow an attacker with local user ac… |
CVE-2023-3384 | Medium | 5.4 | 2023-07-24 | A flaw was found in the Quay registry. While the image labels created through Quay undergo validation both in the UI and backend by applying a regex (validatio… |
CVE-2023-3019 | Medium | 6.0 | 2023-07-24 | A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to… |
CVE-2023-38200 | High | 7.5 | 2023-07-24 | A flaw was found in Keylime. Due to their blocking nature, the Keylime registrar is subject to a remote denial of service against its SSL connections. This fla… |
CVE-2023-33952 | Medium | 6.7 | 2023-07-24 | A double-free vulnerability was found in handling vmw_buffer_object objects in the vmwgfx driver in the Linux kernel. This issue occurs due to the lack of vali… |
CVE-2023-33951 | Medium | 6.7 | 2023-07-24 | A race condition vulnerability was found in the vmwgfx driver in the Linux kernel. The flaw exists within the handling of GEM objects. The issue results from i… |
CVE-2023-32258 | High | 8.1 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_LOGOFF and SMB2_C… |
CVE-2023-32257 | High | 8.1 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the processing of SMB2_SESSION_SETUP and… |
CVE-2023-32252 | High | 7.5 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_LOGOFF commands. Th… |
CVE-2023-32248 | High | 7.5 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_TREE_CONNECT and SM… |
CVE-2023-32247 | High | 7.5 | 2023-07-24 | A flaw was found in the Linux kernel's ksmbd, a high-performance in-kernel SMB server. The specific flaw exists within the handling of SMB2_SESSION_SETUP comma… |
CVE-2023-2860 | Medium | 4.4 | 2023-07-24 | An out-of-bounds read vulnerability was found in the SR-IPv6 implementation in the Linux kernel. The flaw exists within the processing of seg6 attributes. The… |
CVE-2023-26078 | High | 7.8 | 2023-07-24 | Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and prior on Windows due to mishandling of privileged APIs. |
CVE-2023-1386 | Low | 3.3 | 2023-07-24 | A flaw was found in the 9p passthrough filesystem (9pfs) implementation in QEMU. When a local user in the guest writes an executable file with SUID or SGID, no… |
CVE-2023-3863 | Medium | 6.4 | 2023-07-24 | A use-after-free flaw was found in nfc_llcp_find_local in net/nfc/llcp_core.c in NFC in the Linux kernel. This flaw allows a local user with special privileges… |
CVE-2023-3417 | High | 7.5 | 2023-07-24 | Thunderbird allowed the Text Direction Override Unicode Character in filenames. An email attachment could be incorrectly shown as being a document file, while… |
CVE-2023-3344 | Medium | 4.8 | 2023-07-24 | The Auto Location for WP Job Manager via Google WordPress plugin before 1.1 does not sanitise and escape some of its settings, which could allow high privilege… |
CVE-2023-3248 | Medium | 4.8 | 2023-07-24 | The All-in-one Floating Contact Form WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, which could allow high privilege users su… |
CVE-2023-2761 | High | 7.2 | 2023-07-24 | The User Activity Log WordPress plugin before 1.6.3 does not properly sanitise and escape the `txtsearch` parameter before using it in a SQL statement in some… |
CVE-2023-2309 | Medium | 6.1 | 2023-07-24 | The wpForo Forum WordPress plugin before 2.1.9 does not escape some request parameters while in debug mode, leading to a Reflected Cross-Site Scripting vulnera… |
CVE-2023-38060 | Medium | 6.3 | 2023-07-24 | Improper Input Validation vulnerability in the ContentType parameter for attachments on TicketCreate or TicketUpdate operations of the OTRS Generic Interface m… |
CVE-2023-38058 | Medium | 4.1 | 2023-07-24 | An improper privilege check in the OTRS ticket move action in the agent interface allows any as agent authenticated attacker to to perform a move of an tick… |
CVE-2023-38057 | Medium | 4.1 | 2023-07-24 | An improper input validation vulnerability in OTRS Survey modules allows any attacker with a link to a valid and unanswered survey request to inject javascript… |
CVE-2023-38056 | High | 7.2 | 2023-07-24 | Improper Neutralization of commands allowed to be executed via OTRS System Configuration e.g. SchedulerCronTaskModule using UnitTests modules allows any authen… |
CVE-2023-3862 | Low | 3.1 | 2023-07-24 | A vulnerability was found in Travelmate Travelable Trek Management Solution 1.0. It has been rated as problematic. Affected by this issue is some unknown funct… |
CVE-2023-3861 | Low | 3.5 | 2023-07-24 | A vulnerability was found in phpscriptpoint Insurance 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of t… |
CVE-2023-3860 | Low | 3.5 | 2023-07-24 | A vulnerability was found in phpscriptpoint Insurance 1.2. It has been classified as problematic. Affected is an unknown function of the file /page.php. The ma… |
CVE-2023-3859 | Medium | 6.3 | 2023-07-24 | A vulnerability was found in phpscriptpoint Car Listing 1.6 and classified as critical. This issue affects some unknown processing of the file /search.php of t… |
CVE-2023-3858 | Low | 3.5 | 2023-07-24 | A vulnerability has been found in phpscriptpoint Car Listing 1.6 and classified as problematic. This vulnerability affects unknown code of the file /search.php… |
CVE-2023-3857 | Low | 3.5 | 2023-07-24 | A vulnerability, which was classified as problematic, was found in phpscriptpoint Ecommerce 1.15. This affects an unknown part of the file /product.php. The ma… |
CVE-2023-3856 | Low | 3.5 | 2023-07-24 | A vulnerability, which was classified as problematic, has been found in phpscriptpoint Ecommerce 1.15. Affected by this issue is some unknown functionality of… |
CVE-2023-3855 | Low | 3.5 | 2023-07-24 | A vulnerability classified as problematic was found in phpscriptpoint JobSeeker 1.5. Affected by this vulnerability is an unknown functionality of the file /se… |
CVE-2023-3854 | Medium | 6.3 | 2023-07-23 | A vulnerability classified as critical has been found in phpscriptpoint BloodBank 1.1. Affected is an unknown function of the file /search of the component POS… |
CVE-2023-3853 | Low | 3.5 | 2023-07-23 | A vulnerability was found in phpscriptpoint BloodBank 1.1. It has been rated as problematic. This issue affects some unknown processing of the file page.php. T… |
CVE-2023-3852 | Medium | 4.7 | 2023-07-23 | A vulnerability was found in OpenRapid RapidCMS up to 1.3.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/uploa… |
CVE-2023-3850 | Medium | 6.3 | 2023-07-23 | A vulnerability has been found in SourceCodester Lost and Found Information System 1.0 and classified as critical. Affected by this vulnerability is an unknown… |
CVE-2023-28133 | High | 7.8 | 2023-07-23 | Local privilege escalation in Check Point Endpoint Security Client (version E87.30) via crafted OpenSSL configuration file |
CVE-2023-3849 | Low | 3.5 | 2023-07-23 | A vulnerability, which was classified as problematic, was found in mooSocial mooDating 1.2. Affected is an unknown function of the file /find-a-match of the co… |
CVE-2023-3848 | Low | 3.5 | 2023-07-23 | A vulnerability, which was classified as problematic, has been found in mooSocial mooDating 1.2. This issue affects some unknown processing of the file /users/… |
CVE-2023-3847 | Low | 3.5 | 2023-07-23 | A vulnerability classified as problematic was found in mooSocial mooDating 1.2. This vulnerability affects unknown code of the file /users of the component URL… |
CVE-2023-3846 | Low | 3.5 | 2023-07-23 | A vulnerability classified as problematic has been found in mooSocial mooDating 1.2. This affects an unknown part of the file /pages of the component URL Handl… |
CVE-2023-3845 | Low | 3.5 | 2023-07-23 | A vulnerability was found in mooSocial mooDating 1.2. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /frien… |
CVE-2023-3844 | Low | 3.5 | 2023-07-23 | A vulnerability was found in mooSocial mooDating 1.2. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the fi… |
CVE-2023-3843 | Low | 3.5 | 2023-07-23 | A vulnerability was found in mooSocial mooDating 1.2. It has been classified as problematic. Affected is an unknown function of the file /matchmakings/question… |
CVE-2023-3842 | High | 7.8 | 2023-07-23 | A vulnerability was found in Pointware EasyInventory 1.0.12.0 and classified as critical. This issue affects some unknown processing of the file C:\Program Fil… |
CVE-2023-3841 | Medium | 4.3 | 2023-07-23 | A vulnerability has been found in NxFilter 4.3.2.5 and classified as problematic. This vulnerability affects unknown code of the file user.jsp. The manipulatio… |
CVE-2023-3840 | Low | 3.5 | 2023-07-23 | A vulnerability, which was classified as problematic, was found in NxFilter 4.3.2.5. This affects an unknown part of the file /report,daily.jsp?stime=2023%2F07… |
CVE-2023-3839 | Medium | 4.1 | 2023-07-23 | A vulnerability, which was classified as problematic, has been found in DedeBIZ 6.2.10. Affected by this issue is some unknown functionality of the file /admin… |
CVE-2023-3838 | Low | 2.4 | 2023-07-23 | A vulnerability classified as problematic was found in DedeBIZ 6.2.10. Affected by this vulnerability is an unknown functionality of the file /admin/vote_edit… |
CVE-2023-2430 | Medium | 5.5 | 2023-07-23 | A vulnerability was found due to missing lock for IOPOLL flaw in io_cqring_event_overflow() in io_uring.c in Linux Kernel. This flaw allows a local attacker wi… |
CVE-2023-3837 | Low | 2.4 | 2023-07-22 | A vulnerability classified as problematic has been found in DedeBIZ 6.2.10. Affected is an unknown function of the file /admin/sys_sql_query.php. The manipulat… |
CVE-2023-3836 | Medium | 6.3 | 2023-07-22 | A vulnerability classified as critical was found in Dahua Smart Park Management up to 20230713. This vulnerability affects unknown code of the file /emap/devic… |
CVE-2023-3835 | Low | 3.5 | 2023-07-22 | A vulnerability classified as problematic has been found in Bug Finder MineStack 1.0. This affects an unknown part of the file /user/ticket/create of the compo… |
CVE-2023-3834 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder EX-RATE 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /user/t… |
CVE-2023-38633 | Medium | 5.5 | 2023-07-22 | A directory traversal problem in the URL decoder of librsvg before 2.56.3 could be used by local or remote attackers to disclose files (on the local filesystem… |
CVE-2023-38195 | Medium | 4.9 | 2023-07-22 | Datalust Seq before 2023.2.9489 allows insertion of sensitive information into an externally accessible file or directory. This is exploitable only when extern… |
CVE-2023-3833 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder Montage 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2023-3832 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder Wedding Wonders 1.0. It has been classified as problematic. Affected is an unknown function of the file /user/ticket/cr… |
CVE-2023-3831 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder Finounce 1.0 and classified as problematic. This issue affects some unknown processing of the file /user/ticket/create… |
CVE-2023-3830 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder SASS BILLER 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /company/stor… |
CVE-2023-3829 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder ICOGenie 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /user/ticket/cre… |
CVE-2023-3828 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0. It has been classified as problematic. This affects an unknown part of the fi… |
CVE-2023-3827 | Low | 3.5 | 2023-07-22 | A vulnerability was found in Bug Finder Listplace Directory Listing Platform 3.0 and classified as problematic. Affected by this issue is some unknown function… |
CVE-2023-3826 | Medium | 6.3 | 2023-07-22 | A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /?r=recruit/… |
CVE-2023-3247 | Low | 2.6 | 2023-07-22 | In PHP versions 8.0.* before 8.0.29, 8.1.* before 8.1.20, 8.2.* before 8.2.7 when using SOAP HTTP Digest Authentication, random value generator was not checked… |
CVE-2023-28530 | Medium | 5.4 | 2023-07-22 | IBM Cognos Analytics 11.1 and 11.2 is vulnerable to stored cross-site scripting, caused by improper validation of SVG Files in Custom Visualizations. A remote… |
CVE-2023-25929 | Medium | 4.6 | 2023-07-22 | IBM Cognos Analytics 11.1 and 11.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus… |
CVE-2023-3776 | High | 7.8 | 2023-07-21 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_fw component can be exploited to achieve local privilege escalation. If tcf_change_indev()… |
CVE-2023-3611 | High | 7.8 | 2023-07-21 | An out-of-bounds write vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. The qfq_change… |
CVE-2023-3610 | High | 7.8 | 2023-07-21 | A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. Flaw in the error… |
CVE-2023-3609 | High | 7.8 | 2023-07-21 | A use-after-free vulnerability in the Linux kernel's net/sched: cls_u32 component can be exploited to achieve local privilege escalation. If tcf_change_inde… |
CVE-2023-37918 | Medium | 6.8 | 2023-07-21 | Dapr is a portable, event-driven, runtime for building distributed applications across cloud and edge. A vulnerability has been found in Dapr that allows bypas… |
CVE-2023-37917 | Critical | 9.1 | 2023-07-21 | KubePi is an opensource kubernetes management panel. A normal user has permission to create/update users, they can become admin by editing the `isadmin` value… |
CVE-2023-37916 | Medium | 6.5 | 2023-07-21 | KubePi is an opensource kubernetes management panel. The endpoint /kubepi/api/v1/users/search?pageNum=1&&pageSize=10 leak password hash of any user (including… |
CVE-2023-37915 | High | 7.5 | 2023-07-21 | OpenDDS is an open source C++ implementation of the Object Management Group (OMG) Data Distribution Service (DDS). OpenDDS crashes while parsing a malformed `P… |
CVE-2023-35077 | High | 7.5 | 2023-07-21 | An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 o… |
CVE-2023-3603 | Low | 3.1 | 2023-07-21 | A missing allocation check in sftp server processing read requests may cause a NULL dereference on low-memory conditions. The malicious client can request up t… |
CVE-2023-37905 | Medium | 6.1 | 2023-07-21 | ckeditor-wordcount-plugin is an open source WordCount Plugin for CKEditor. It has been discovered that the `ckeditor-wordcount-plugin` plugin for CKEditor4 is… |
CVE-2023-37903 | Critical | 9.8 | 2023-07-21 | vm2 is an open source vm/sandbox for Node.js. In vm2 for versions up to and including 3.9.19, Node.js custom inspect function allows attackers to escape the sa… |
CVE-2023-36339 | High | 7.5 | 2023-07-21 | An access control issue in WebBoss.io CMS v3.7.0.1 allows attackers to access the Website Backup Tool via a crafted GET request. |
CVE-2023-37901 | Medium | 5.4 | 2023-07-21 | Indico is an open source a general-purpose, web based event management tool. There is a Cross-Site-Scripting vulnerability in confirmation prompts commonly use… |
CVE-2023-25841 | Medium | 6.1 | 2023-07-21 | There is a stored Cross-site Scripting vulnerability in Esri ArcGIS Server versions 11.0 and below on Windows and Linux platforms that may allow a remote, unau… |
CVE-2023-25840 | Low | 3.4 | 2023-07-21 | There is a Cross-site Scripting vulnerability in ArcGIS Server in versions 11.1 and below that may allow a remote, authenticated attacker to create a crafted l… |