2023 CVEs (page 200)
Page 200 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-3642 | Medium | 4.3 | 2023-07-12 | A vulnerability was found in GZ Scripts Vacation Rental Website 1.8 and classified as problematic. Affected by this issue is some unknown functionality of the… |
CVE-2023-3641 | Medium | 4.3 | 2023-07-12 | A vulnerability has been found in khodakhah NodCMS 3.4.1 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file… |
CVE-2023-38046 | Medium | 5.5 | 2023-07-12 | A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created co… |
CVE-2023-37630 | Medium | 6.1 | 2023-07-12 | Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaScript code to "manage-breed.php" result… |
CVE-2023-37629 | Critical | 9.8 | 2023-07-12 | Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php." |
CVE-2023-37628 | Critical | 9.8 | 2023-07-12 | Online Piggery Management System 1.0 is vulnerable to SQL Injection. |
CVE-2023-37965 | High | 7.1 | 2023-07-12 | A missing permission check in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified… |
CVE-2023-37964 | High | 8.8 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins ElasticBox CI Plugin 5.0.1 and earlier allows attackers to connect to an attacker-specified URL us… |
CVE-2023-37963 | Medium | 5.4 | 2023-07-12 | A missing permission check in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-spec… |
CVE-2023-37962 | High | 8.8 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Benchmark Evaluator Plugin 1.0.1 and earlier allows attackers to connect to an attacker-specified… |
CVE-2023-37961 | High | 8.8 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Assembla Auth Plugin 1.14 and earlier allows attackers to trick users into logging in to the attac… |
CVE-2023-37960 | Medium | 6.5 | 2023-07-12 | Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins contr… |
CVE-2023-37959 | Medium | 6.5 | 2023-07-12 | A missing permission check in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-spec… |
CVE-2023-37958 | High | 8.8 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Sumologic Publisher Plugin 2.2.1 and earlier allows attackers to connect to an attacker-specified… |
CVE-2023-37957 | High | 8.8 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Pipeline restFul API Plugin 0.11 and earlier allows attackers to connect to an attacker-specified… |
CVE-2023-37956 | Medium | 6.5 | 2023-07-12 | A missing permission check in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers with Overall/Read permission to connect to an attacker… |
CVE-2023-37955 | Medium | 6.5 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Test Results Aggregator Plugin 1.2.13 and earlier allows attackers to connect to an attacker-speci… |
CVE-2023-37954 | Medium | 4.3 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins Rebuilder Plugin 320.v5a_0933a_e7d61 and earlier allows attackers to rebuild a previous build. |
CVE-2023-37953 | Medium | 6.5 | 2023-07-12 | A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL usin… |
CVE-2023-37952 | Medium | 6.5 | 2023-07-12 | A cross-site request forgery (CSRF) vulnerability in Jenkins mabl Plugin 0.0.46 and earlier allows attackers to connect to an attacker-specified URL using atta… |
CVE-2023-37951 | Medium | 6.5 | 2023-07-12 | Jenkins mabl Plugin 0.0.46 and earlier does not set the appropriate context for credentials lookup, allowing attackers with Item/Configure permission to access… |
CVE-2023-37950 | Medium | 4.3 | 2023-07-12 | A missing permission check in Jenkins mabl Plugin 0.0.46 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials… |
CVE-2023-37949 | High | 7.1 | 2023-07-12 | A missing permission check in Jenkins Orka by MacStadium Plugin 1.33 and earlier allows attackers with Overall/Read permission to connect to an attacker-specif… |
CVE-2023-37948 | Low | 3.7 | 2023-07-12 | Jenkins Oracle Cloud Infrastructure Compute Plugin 1.0.16 and earlier does not validate SSH host keys when connecting OCI clouds, enabling man-in-the-middle at… |
CVE-2023-37947 | Medium | 6.1 | 2023-07-12 | Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins… |
CVE-2023-37946 | High | 8.8 | 2023-07-12 | Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login. |
CVE-2023-37945 | Medium | 4.3 | 2023-07-12 | A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to dow… |
CVE-2023-37944 | Medium | 6.5 | 2023-07-12 | A missing permission check in Jenkins Datadog Plugin 5.4.1 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL us… |
CVE-2023-37943 | Medium | 5.9 | 2023-07-12 | Jenkins Active Directory Plugin 2.30 and earlier ignores the "Require TLS" and "StartTls" options and always performs the connection test to Active directory u… |
CVE-2023-37942 | Medium | 6.5 | 2023-07-12 | Jenkins External Monitor Job Type Plugin 206.v9a_94ff0b_4a_10 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
CVE-2023-36266 | Medium | 5.5 | 2023-07-12 | An issue was discovered in Keeper Password Manager for Desktop version 16.10.2 (fixed in 17.2), and the KeeperFill Browser Extensions version 16.5.4 (fixed in… |
CVE-2023-29319 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29318 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29317 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29316 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29315 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29314 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29313 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29312 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29311 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29310 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29309 | Medium | 5.5 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of se… |
CVE-2023-29308 | High | 7.8 | 2023-07-12 | Adobe InDesign versions ID18.3 (and earlier) and ID17.4.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary cod… |
CVE-2023-29301 | High | 7.5 | 2023-07-12 | Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Restriction of Excessive Au… |
CVE-2023-29300 | Critical | 9.8 | 2023-07-12 | Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vul… |
CVE-2023-29298 | High | 7.5 | 2023-07-12 | Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerabilit… |
CVE-2023-3618 | Medium | 6.5 | 2023-07-12 | A flaw was found in libtiff. A specially crafted tiff file can lead to a segmentation fault due to a buffer overflow in the Fax3Encode function in libtiff/tif_… |
CVE-2023-37627 | Critical | 9.8 | 2023-07-12 | Code-projects Online Restaurant Management System 1.0 is vulnerable to SQL Injection. Through SQL injection, an attacker can bypass the admin panel and view or… |
CVE-2023-3600 | High | 8.8 | 2023-07-12 | During the worker lifecycle, a use-after-free condition could have occurred, which could have led to a potentially exploitable crash. This vulnerability affect… |
CVE-2023-37456 | Medium | 6.5 | 2023-07-12 | The session restore helper crashed whenever there was no parameter sent to the message handler. This vulnerability affects Firefox for iOS < 115. |
CVE-2023-37455 | Medium | 5.4 | 2023-07-12 | The permission request prompt from the site in the background tab was overlaid on top of the site in the foreground tab. This vulnerability affects Firefox for… |
CVE-2023-20210 | Medium | 6.0 | 2023-07-12 | A vulnerability in Cisco BroadWorks could allow an authenticated, local attacker to elevate privileges to the root user on an affected device. The vulnerabi… |
CVE-2023-20207 | Medium | 4.9 | 2023-07-12 | A vulnerability in the logging component of Cisco Duo Authentication Proxy could allow an authenticated, remote attacker to view sensitive information in clear… |
CVE-2023-20185 | High | 7.4 | 2023-07-12 | A vulnerability in the Cisco ACI Multi-Site CloudSec encryption feature of Cisco Nexus 9000 Series Fabric Switches in ACI mode could allow an unauthenticated… |
CVE-2023-3596 | High | 7.5 | 2023-07-12 | Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of… |
CVE-2023-3595 | Critical | 9.8 | 2023-07-12 | Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* ControlLogix communication products, it could allow a malicious user to per… |
CVE-2023-38069 | Low | 3.3 | 2023-07-12 | In JetBrains IntelliJ IDEA before 2023.1.4 license dialog could be suppressed in certain cases |
CVE-2023-38068 | Medium | 6.5 | 2023-07-12 | In JetBrains YouTrack before 2023.1.16597 captcha was not properly validated for Helpdesk forms |
CVE-2023-38067 | Medium | 4.3 | 2023-07-12 | In JetBrains TeamCity before 2023.05.1 build parameters of the "password" type could be written to the agent log |
CVE-2023-38066 | Medium | 4.6 | 2023-07-12 | In JetBrains TeamCity before 2023.05.1 reflected XSS via the Referer header was possible during artifact downloads |
CVE-2023-38065 | Medium | 4.6 | 2023-07-12 | In JetBrains TeamCity before 2023.05.1 stored XSS while viewing the build log was possible |
CVE-2023-38064 | Medium | 4.3 | 2023-07-12 | In JetBrains TeamCity before 2023.05.1 build chain parameters of the "password" type could be written to the agent log |
CVE-2023-38063 | Medium | 4.6 | 2023-07-12 | In JetBrains TeamCity before 2023.05.1 stored XSS while running custom builds was possible |
CVE-2023-38062 | Medium | 4.3 | 2023-07-12 | In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations |
CVE-2023-38061 | Medium | 4.6 | 2023-07-12 | In JetBrains TeamCity before 2023.05.1 stored XSS when using a custom theme was possible |
CVE-2023-33668 | Critical | 9.8 | 2023-07-12 | DigiExam up to v14.0.2 lacks integrity checks for native modules, allowing attackers to access PII and takeover accounts on shared computers. |
CVE-2023-37582 | Critical | 9.8 | 2023-07-12 | The RocketMQ NameServer component still has a remote command execution vulnerability as the CVE-2023-33246 issue was not completely fixed in version 5.1.1. W… |
CVE-2023-37579 | High | 8.2 | 2023-07-12 | Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Function Worker. This issue affects Apache Pulsar: before 2.10.4, and 2.11.0… |
CVE-2023-36543 | Medium | 6.5 | 2023-07-12 | Apache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommende… |
CVE-2023-35908 | Medium | 6.5 | 2023-07-12 | Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows unauthorized read access to a DAG through the URL. It is recommended to upgra… |
CVE-2023-31007 | Unrated | | 2023-07-12 | Improper Authentication vulnerability in Apache Software Foundation Apache Pulsar Broker allows a client to stay connected to a broker after authentication dat… |
CVE-2023-30429 | Critical | 9.6 | 2023-07-12 | Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar. This issue affects Apache Pulsar: before 2.10.4, and 2.11.0. When a client… |
CVE-2023-30428 | High | 8.2 | 2023-07-12 | Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar Broker's Rest Producer allows authenticated user with a custom HTTP header to… |
CVE-2023-22888 | Medium | 6.5 | 2023-07-12 | Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to cause a service disruption by manipulating the run_id paramete… |
CVE-2023-22887 | Medium | 6.5 | 2023-07-12 | Apache Airflow, versions before 2.6.3, is affected by a vulnerability that allows an attacker to perform unauthorized file access outside the intended director… |
CVE-2023-3106 | Medium | 6.6 | 2023-07-12 | A NULL pointer dereference vulnerability was found in netlink_dump. This issue can occur when the Netlink socket receives the message(sendmsg) for the XFRM_MSG… |
CVE-2023-33905 | Medium | 4.4 | 2023-07-12 | In iwnpi server, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privi… |
CVE-2023-33904 | Medium | 4.4 | 2023-07-12 | In hci_server, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileg… |
CVE-2023-33903 | Medium | 4.4 | 2023-07-12 | In FM service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed. |
CVE-2023-33902 | Medium | 5.5 | 2023-07-12 | In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33901 | Medium | 5.5 | 2023-07-12 | In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33900 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33899 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33898 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33897 | Medium | 4.4 | 2023-07-12 | In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-33896 | Medium | 4.4 | 2023-07-12 | In libimpl-ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privile… |
CVE-2023-33895 | Medium | 5.5 | 2023-07-12 | In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33894 | Medium | 5.5 | 2023-07-12 | In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33893 | Medium | 5.5 | 2023-07-12 | In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33892 | Medium | 5.5 | 2023-07-12 | In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33891 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33890 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33889 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33888 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33887 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33886 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33885 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33884 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33883 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33882 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |