2023 CVEs (page 195)
Page 195 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34394 | High | 7.8 | 2023-07-19 | In Keysight Geolocation Server v2.4.2 and prior, an attacker could upload a specially crafted malicious file or delete any file or directory with SYSTEM… |
CVE-2023-32657 | Medium | 5.3 | 2023-07-19 | Weintek Weincloud v0.13.6 could allow an attacker to efficiently develop a brute force attack on credentials with authentication hints from error messag… |
CVE-2023-3782 | Medium | 5.9 | 2023-07-19 | DoS of the OkHttp client when using a BrotliInterceptor and surfing to a malicious web server, or when an attacker can perform MitM to inject a Brotli zip-bomb… |
CVE-2023-26217 | High | 8.8 | 2023-07-19 | The Data Exchange Add-on component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains an easily exploitable vulnerability that allows a low privileged user wi… |
CVE-2023-3722 | High | 8.6 | 2023-07-19 | An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server use… |
CVE-2023-37899 | High | 7.5 | 2023-07-19 | Feathersjs is a framework for creating web APIs and real-time applications with TypeScript or JavaScript. Feathers socket handler did not catch invalid string… |
CVE-2023-37276 | Medium | 5.3 | 2023-07-19 | aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. aiohttp v3.8.4 and earlier are bundled with llhttp v6.0.6. Vulnerable code is u… |
CVE-2023-3674 | Low | 2.3 | 2023-07-19 | A flaw was found in the keylime attestation verifier, which fails to flag a device's submitted TPM quote as faulty when the quote's signature does not validate… |
CVE-2023-3467 | High | 8.0 | 2023-07-19 | Privilege Escalation to root administrator (nsroot) |
CVE-2023-3466 | High | 8.3 | 2023-07-19 | Reflected Cross-Site Scripting (XSS) |
CVE-2023-37733 | Medium | 6.1 | 2023-07-19 | An arbitrary file upload vulnerability in tduck-platform v4.0 allows attackers to execute arbitrary code via a crafted HTML file. |
CVE-2023-3519 | Critical | 9.8 | 2023-07-19 | Unauthenticated remote code execution |
CVE-2023-37748 | Medium | 5.5 | 2023-07-19 | ngiflib commit 5e7292 was discovered to contain an infinite loop via the function DecodeGifImg at ngiflib.c. |
CVE-2023-32263 | Low | 2.6 | 2023-07-19 | A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability could be exploited to retrieve a login ce… |
CVE-2023-32262 | Medium | 4.3 | 2023-07-19 | A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Item/Configure perm… |
CVE-2023-32261 | Medium | 4.2 | 2023-07-19 | A potential vulnerability has been identified in the Micro Focus Dimensions CM Plugin for Jenkins. The vulnerability allows attackers with Overall/Read permis… |
CVE-2023-25839 | High | 7.0 | 2023-07-19 | There is SQL injection vulnerability in Esri ArcGIS Insights Desktop for Mac and Windows version 2022.1 that may allow a local, authorized attacker to execut… |
CVE-2023-25838 | High | 7.5 | 2023-07-19 | There is SQL injection vulnerability in Esri ArcGIS Insights 2022.1 for ArcGIS Enterprise and that may allow a remote, authorized attacker to execute arbitrar… |
CVE-2023-3638 | Critical | 9.8 | 2023-07-19 | In GeoVision GV-ADR2701 cameras, an attacker could edit the login response to access the web application. |
CVE-2023-34034 | Critical | 9.1 | 2023-07-19 | Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and t… |
CVE-2023-30799 | Critical | 9.1 | 2023-07-19 | MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can esc… |
CVE-2023-3463 | Medium | 6.6 | 2023-07-19 | All versions of GE Digital CIMPLICITY that are not adhering to SDG guidance and accepting documents from untrusted sources are vulnerable to memory corruption… |
CVE-2023-33876 | High | 8.8 | 2023-07-19 | A use-after-free vulnerability exists in the way Foxit Reader 12.1.2.15332 handles destroying annotations. Specially crafted Javascript code inside a malicious… |
CVE-2023-33866 | High | 8.8 | 2023-07-19 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated… |
CVE-2023-32664 | High | 8.8 | 2023-07-19 | A type confusion vulnerability exists in the Javascript checkThisBox method as implemented in Foxit Reader 12.1.2.15332. Specially crafted Javascript code insi… |
CVE-2023-28744 | High | 8.8 | 2023-07-19 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.1.1.15289. A specially crafted PDF document can trigg… |
CVE-2023-27379 | High | 8.8 | 2023-07-19 | A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.1.2.15332. By prematurely deleting objects associated… |
CVE-2023-3446 | Medium | 5.3 | 2023-07-19 | Issue summary: Checking excessively long DH keys or parameters may be very slow. Impact summary: Applications that use the functions DH_check(), DH_check_ex()… |
CVE-2023-28754 | High | 8.8 | 2023-07-19 | Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attackers to execute arbitrary code by constructing a special YAML… |
CVE-2023-3763 | Low | 3.7 | 2023-07-19 | A vulnerability was found in Intergard SGS 8.7.0. It has been declared as problematic. This vulnerability affects unknown code of the component SQL Query Handl… |
CVE-2023-3762 | Medium | 4.3 | 2023-07-19 | A vulnerability was found in Intergard SGS 8.7.0. It has been classified as problematic. This affects an unknown part. The manipulation leads to cleartext stor… |
CVE-2023-3761 | Low | 3.7 | 2023-07-19 | A vulnerability was found in Intergard SGS 8.7.0 and classified as problematic. Affected by this issue is some unknown functionality of the component Password… |
CVE-2023-3760 | Medium | 4.3 | 2023-07-19 | A vulnerability has been found in Intergard SGS 8.7.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the componen… |
CVE-2023-32635 | Medium | 5.5 | 2023-07-19 | XBRL data create application version 7.0 and earlier improperly restricts XML external entity references (XXE). By processing a specially crafted XBRL file, ar… |
CVE-2023-3759 | Medium | 6.3 | 2023-07-19 | A vulnerability, which was classified as critical, was found in Intergard SGS 8.7.0. Affected is an unknown function. The manipulation leads to permission issu… |
CVE-2023-3757 | Low | 3.5 | 2023-07-19 | A vulnerability classified as problematic has been found in GZ Scripts Car Rental Script 1.8. Affected is an unknown function of the file /EventBookingCalendar… |
CVE-2023-3756 | Low | 3.5 | 2023-07-19 | A vulnerability was found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this issue is some unknown functiona… |
CVE-2023-3755 | Low | 3.5 | 2023-07-19 | A vulnerability has been found in Creativeitem Atlas Business Directory Listing 2.13 and classified as problematic. Affected by this vulnerability is an unknow… |
CVE-2023-3754 | Low | 3.5 | 2023-07-19 | A vulnerability, which was classified as problematic, was found in Creativeitem Ekushey Project Manager CRM 5.0. Affected is an unknown function of the file /i… |
CVE-2023-3753 | Low | 3.5 | 2023-07-19 | A vulnerability classified as problematic has been found in Creativeitem Mastery LMS 1.2. This affects an unknown part of the file /browse. The manipulation of… |
CVE-2023-3752 | Low | 3.5 | 2023-07-19 | A vulnerability was found in Creativeitem Academy LMS 5.15. It has been rated as problematic. Affected by this issue is some unknown functionality of the file… |
CVE-2023-29260 | Medium | 6.5 | 2023-07-19 | IBM Sterling Connect:Express for UNIX 1.5 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized re… |
CVE-2023-29259 | Low | 3.7 | 2023-07-19 | IBM Sterling Connect:Express for UNIX 1.5 browser UI is vulnerable to attacks that rely on the use of cookies without the SameSite attribute. IBM X-Force ID… |
CVE-2023-28513 | Medium | 5.9 | 2023-07-19 | IBM MQ 9.0 LTS, 9.1 LTS, 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.3 CD and IBM MQ Appliance 9.2 LTS, 9.3 LTS, 9.2 CD, and 9.2 LTS, under certain configurations, is vuln… |
CVE-2023-27877 | Medium | 5.3 | 2023-07-19 | IBM Planning Analytics Cartridge for Cloud Pak for Data 4.0 connects to a CouchDB server. An attacker can exploit an insecure password policy to the CouchDB se… |
CVE-2023-26026 | Medium | 5.3 | 2023-07-19 | Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to con… |
CVE-2023-26023 | Medium | 6.5 | 2023-07-19 | Planning Analytics Cartridge for Cloud Pak for Data 4.0 exposes sensitive information in logs which could lead an attacker to exploit this vulnerability to con… |
CVE-2023-3765 | Critical | 10.0 | 2023-07-19 | Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0. |
CVE-2023-35900 | Medium | 4.3 | 2023-07-19 | IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may… |
CVE-2023-35898 | Medium | 4.3 | 2023-07-19 | IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSpher… |
CVE-2023-33832 | Medium | 6.2 | 2023-07-19 | IBM Spectrum Protect 8.1.0.0 through 8.1.17.0 could allow a local user to cause a denial of service due to due to improper time-of-check to time-of-use functio… |
CVE-2023-30433 | Medium | 6.5 | 2023-07-19 | IBM Security Verify Access 10.0 could allow a remote attacker to conduct phishing attacks, using an open redirect attack. By persuading a victim to visit a spe… |
CVE-2023-3751 | Medium | 6.3 | 2023-07-19 | A vulnerability was found in Super Store Finder 3.6. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /… |
CVE-2023-22506 | High | 8.8 | 2023-07-19 | This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center. Th… |
CVE-2023-22508 | High | 8.8 | 2023-07-18 | This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of Confluence Data Center & Server. This R… |
CVE-2023-3527 | Medium | 6.8 | 2023-07-18 | A CSV injection vulnerability was found in the Avaya Call Management System (CMS) Supervisor web application which allows a user with administrative privileges… |
CVE-2023-37897 | High | 7.2 | 2023-07-18 | Grav is a file-based Web-platform built in PHP. Grav is subject to a server side template injection (SSTI) vulnerability. The fix for another SSTI vulnerabilit… |
CVE-2023-22505 | High | 8.8 | 2023-07-18 | This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22505 was introduced in version 8.0.0 of Confluence Data Center & Server. This… |
CVE-2023-22062 | High | 8.5 | 2023-07-18 | Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Repository). The supported version that is affected is 11.2.1… |
CVE-2023-22061 | Medium | 5.4 | 2023-07-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Visual Analyzer). The supported version that is… |
CVE-2023-22060 | High | 7.6 | 2023-07-18 | Vulnerability in the Oracle Hyperion Workspace product of Oracle Hyperion (component: UI and Visualization). The supported version that is affected is 11.2.1… |
CVE-2023-22058 | Medium | 4.4 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.33 and prior. Difficult to ex… |
CVE-2023-22057 | Medium | 4.9 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.33 and prior. Easily… |
CVE-2023-22056 | Medium | 4.9 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily ex… |
CVE-2023-22055 | Medium | 6.1 | 2023-07-18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior… |
CVE-2023-22054 | Medium | 4.9 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily ex… |
CVE-2023-22053 | Medium | 5.9 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Client programs). Supported versions that are affected are 5.7.42 and prior and 8.0.33… |
CVE-2023-22052 | Low | 3.1 | 2023-07-18 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and 21.3-21.10. Difficult to exploit vu… |
CVE-2023-22051 | Low | 3.7 | 2023-07-18 | Vulnerability in the Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: GraalVM Compiler). Supported versions tha… |
CVE-2023-22050 | Medium | 5.4 | 2023-07-18 | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are… |
CVE-2023-22049 | Low | 3.7 | 2023-07-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Libraries). Supported ver… |
CVE-2023-22048 | Low | 3.1 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Pluggable Auth). Supported versions that are affected are 8.0.33 and prior. Diff… |
CVE-2023-22047 | High | 7.5 | 2023-07-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59 and 8… |
CVE-2023-22046 | Medium | 4.9 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily ex… |
CVE-2023-22045 | Low | 3.7 | 2023-07-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versi… |
CVE-2023-22044 | Low | 3.7 | 2023-07-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versi… |
CVE-2023-22043 | Medium | 5.9 | 2023-07-18 | Vulnerability in Oracle Java SE (component: JavaFX). The supported version that is affected is Oracle Java SE: 8u371. Difficult to exploit vulnerability allo… |
CVE-2023-22042 | Medium | 6.1 | 2023-07-18 | Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.2… |
CVE-2023-22041 | Medium | 5.1 | 2023-07-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Hotspot). Supported versi… |
CVE-2023-22040 | Medium | 6.5 | 2023-07-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14… |
CVE-2023-22039 | Medium | 5.4 | 2023-07-18 | Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: WebClient). The supported version that is affected is 9.3.6. Easily exploita… |
CVE-2023-22038 | Low | 2.7 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.33 and prior… |
CVE-2023-22037 | Medium | 6.5 | 2023-07-18 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: MS Excel Specific). Supported versions that are… |
CVE-2023-22036 | Low | 3.7 | 2023-07-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK product of Oracle Java SE (component: Utility). Supported versi… |
CVE-2023-22035 | Medium | 6.1 | 2023-07-18 | Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module). Supported versions that are affected are 12.2.3-12.2.12… |
CVE-2023-22034 | Medium | 4.9 | 2023-07-18 | Vulnerability in the Unified Audit component of Oracle Database Server. Supported versions that are affected are 19.3-19.19 and 21.3-21.10. Easily exploitabl… |
CVE-2023-22033 | Medium | 4.4 | 2023-07-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.33 and prior. Difficult to exploit… |
CVE-2023-22031 | Medium | 4.4 | 2023-07-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0 and 12… |
CVE-2023-22027 | Medium | 4.3 | 2023-07-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is… |
CVE-2023-22023 | High | 7.8 | 2023-07-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Interface). The supported version that is affected is 11. Easily expl… |
CVE-2023-22022 | Medium | 6.5 | 2023-07-18 | Vulnerability in the Oracle Health Sciences Sciences Data Management Workbench product of Oracle Health Sciences Applications (component: Blinding Functionalit… |
CVE-2023-22021 | Medium | 4.3 | 2023-07-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are af… |
CVE-2023-22020 | Medium | 5.4 | 2023-07-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are af… |
CVE-2023-22018 | High | 8.1 | 2023-07-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.46 and Pr… |
CVE-2023-22017 | Medium | 5.5 | 2023-07-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.46 and Pr… |
CVE-2023-22016 | Medium | 4.2 | 2023-07-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.46 and Pr… |
CVE-2023-22014 | High | 8.4 | 2023-07-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.59 and 8… |
CVE-2023-22013 | Medium | 4.3 | 2023-07-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are af… |
CVE-2023-22012 | Medium | 4.3 | 2023-07-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). The supported version that is… |
CVE-2023-22011 | Medium | 5.4 | 2023-07-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Server). Supported versions that are af… |