2023 CVEs (page 201)
Page 201 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-33881 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33880 | Low | 3.3 | 2023-07-12 | In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-33879 | Low | 3.3 | 2023-07-12 | In music service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-32789 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-32788 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30942 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30941 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30940 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30939 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30938 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30937 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30936 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30935 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30934 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30933 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30932 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30931 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30930 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30929 | High | 7.8 | 2023-07-12 | In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-30928 | High | 7.8 | 2023-07-12 | In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-30927 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30926 | Medium | 5.5 | 2023-07-12 | In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30925 | Medium | 5.5 | 2023-07-12 | In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30924 | Medium | 5.5 | 2023-07-12 | In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30923 | Medium | 5.5 | 2023-07-12 | In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30922 | Medium | 5.5 | 2023-07-12 | In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30921 | Medium | 5.5 | 2023-07-12 | In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30920 | Medium | 5.5 | 2023-07-12 | In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30919 | Medium | 5.5 | 2023-07-12 | In messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30918 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30917 | High | 7.8 | 2023-07-12 | In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-30916 | High | 7.8 | 2023-07-12 | In DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-30913 | Medium | 5.5 | 2023-07-12 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-29414 | High | 7.8 | 2023-07-12 | A CWE-120: Buffer Copy without Checking Size of Input (Classic Buffer Overflow) vulnerability exists that could cause user privilege escalation if a local use… |
CVE-2023-37200 | Medium | 5.5 | 2023-07-12 | A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause loss of confidentiality when replacing a project file o… |
CVE-2023-37199 | Medium | 6.8 | 2023-07-12 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE tamp… |
CVE-2023-32200 | High | 8.8 | 2023-07-12 | There is insufficient restrictions of called script functions in Apache Jena versions 4.8.0 and earlier. It allows a remote user to execute javascript via a… |
CVE-2023-2763 | High | 7.8 | 2023-07-12 | Use-After-Free, Out-of-bounds Write and Heap-based Buffer Overflow vulnerabilities exist in the DWG and DXF file reading procedure in SOLIDWORKS Desktop from R… |
CVE-2023-2762 | High | 7.8 | 2023-07-12 | A Use-After-Free vulnerability in SLDPRT file reading procedure exists in SOLIDWORKS Desktop from Release SOLIDWORKS 2021 through Release SOLIDWORKS 2023. This… |
CVE-2023-37198 | Medium | 6.8 | 2023-07-12 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote code execution when an admin user on DCE… |
CVE-2023-37197 | High | 8.8 | 2023-07-12 | A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user al… |
CVE-2023-37196 | High | 8.8 | 2023-07-12 | A CWE-89: Improper Neutralization of Special Elements vulnerability used in an SQL Command ('SQL Injection') vulnerability exists that could allow a user alre… |
CVE-2023-3525 | High | 7.5 | 2023-07-12 | The Getnet Argentina para Woocommerce plugin for WordPress is vulnerable to authorization bypass due to missing validation on the 'webhook' function in version… |
CVE-2023-3369 | Medium | 4.4 | 2023-07-12 | The About Me 3000 widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.2.6 due to in… |
CVE-2023-3202 | Medium | 4.3 | 2023-07-12 | The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_firebase_server_key functi… |
CVE-2023-3199 | Medium | 4.3 | 2023-07-12 | The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_title functio… |
CVE-2023-3168 | High | 7.2 | 2023-07-12 | The WP Reroute Email plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.4.9 due to insu… |
CVE-2023-3167 | High | 7.2 | 2023-07-12 | The Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.1 due to insufficient… |
CVE-2023-3166 | High | 7.2 | 2023-07-12 | The Lana Email Logger plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, Lana Email Logge… |
CVE-2023-3158 | High | 7.2 | 2023-07-12 | The Mail Control plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 0.2.8 due to insuffic… |
CVE-2023-3135 | High | 7.2 | 2023-07-12 | The Mailtree Log Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.0.0 due to ins… |
CVE-2023-3122 | High | 7.2 | 2023-07-12 | The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insuffici… |
CVE-2023-3105 | High | 8.8 | 2023-07-12 | The LearnDash LMS plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 4.6.0. This is due to the plugin pr… |
CVE-2023-3093 | High | 7.2 | 2023-07-12 | The YaySMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.4.5 due to insufficient in… |
CVE-2023-3092 | High | 7.2 | 2023-07-12 | The SMTP Mail plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 1.3.46 due to insufficie… |
CVE-2023-3088 | High | 7.2 | 2023-07-12 | The WP Mail Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.1.1 due to insufficien… |
CVE-2023-3087 | High | 7.2 | 2023-07-12 | The FluentSMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.2.4 due to insufficie… |
CVE-2023-3082 | High | 7.2 | 2023-07-12 | The Post SMTP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 2.5.7 due to insufficient… |
CVE-2023-3081 | High | 7.2 | 2023-07-12 | The WP Mail Logging plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 1.11.1 due to insuff… |
CVE-2023-3080 | High | 7.2 | 2023-07-12 | The WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.1.2 due to insuf… |
CVE-2023-3023 | High | 7.2 | 2023-07-12 | The WP EasyCart plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in versions up to, and including, 5.4.10 due to insu… |
CVE-2023-3011 | Medium | 6.5 | 2023-07-12 | The ARMember plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 4.0.5. This is due to missing or incorrect nonc… |
CVE-2023-2869 | Medium | 4.3 | 2023-07-12 | The WP-Members Membership plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the do_field_reorder f… |
CVE-2023-2562 | Medium | 4.3 | 2023-07-12 | The Gallery Metabox for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the refresh_metabox function in versions up… |
CVE-2023-2561 | Medium | 4.3 | 2023-07-12 | The Gallery Metabox for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gallery_remove function in versio… |
CVE-2023-2517 | Medium | 5.4 | 2023-07-12 | The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.3.2. This is du… |
CVE-2023-30226 | Medium | 5.5 | 2023-07-12 | An issue was discovered in function get_gnu_verneed in rizinorg Rizin prior to 0.5.0 verneed_entry allows attackers to cause a denial of service via crafted el… |
CVE-2023-37767 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/libgpac.so. |
CVE-2023-37766 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/libgpac.so. |
CVE-2023-37765 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgpac.so. |
CVE-2023-37174 | Medium | 5.5 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedump.c. |
CVE-2023-3127 | High | 7.5 | 2023-07-11 | An unauthenticated user could log into iSTAR Ultra, iSTAR Ultra LT, iSTAR Ultra G2, and iSTAR Edge G2 with administrator rights. |
CVE-2023-24492 | Critical | 9.6 | 2023-07-11 | A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely execute code if a v… |
CVE-2023-24491 | High | 7.8 | 2023-07-11 | A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with access to an endpoint… |
CVE-2023-29984 | High | 7.5 | 2023-07-11 | Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3. Processing a specially crafted… |
CVE-2023-29406 | Medium | 6.5 | 2023-07-11 | The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests… |
CVE-2023-23756 | Medium | 6.1 | 2023-07-11 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in advcomsys.com oneVote component for Joomla. It allows XSS… |
CVE-2023-37280 | Medium | 5.0 | 2023-07-11 | Pimcore Admin Classic Bundle provides a Backend UI for Pimcore based on the ExtJS framework. An admin who has not setup two factor authentication before is vul… |
CVE-2023-36884 | High | 7.5 | 2023-07-11 | Windows Search Remote Code Execution Vulnerability |
CVE-2023-20575 | Medium | 6.5 | 2023-07-11 | A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting functionality to monitor a… |
CVE-2023-3626 | Medium | 6.3 | 2023-07-11 | A vulnerability, which was classified as critical, has been found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 202… |
CVE-2023-3625 | Medium | 6.3 | 2023-07-11 | A vulnerability classified as critical was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230706. This vulne… |
CVE-2023-37271 | High | 8.4 | 2023-07-11 | RestrictedPython is a tool that helps to define a subset of the Python language which allows users to provide a program input into a trusted environment. Restr… |
CVE-2023-36874 | High | 7.8 | 2023-07-11 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-36872 | Medium | 5.5 | 2023-07-11 | VP9 Video Extensions Information Disclosure Vulnerability |
CVE-2023-36871 | Medium | 6.5 | 2023-07-11 | Azure Active Directory Security Feature Bypass Vulnerability |
CVE-2023-36868 | Medium | 6.5 | 2023-07-11 | Azure Service Fabric on Windows Information Disclosure Vulnerability |
CVE-2023-36867 | High | 7.8 | 2023-07-11 | Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution Vulnerability |
CVE-2023-36825 | Critical | 9.6 | 2023-07-11 | Orchid is a Laravel package that allows application development of back-office applications, admin/user panels, and dashboards. A vulnerability present startin… |
CVE-2023-36538 | High | 8.4 | 2023-07-11 | Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. |
CVE-2023-36537 | High | 7.3 | 2023-07-11 | Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local ac… |
CVE-2023-36536 | High | 8.2 | 2023-07-11 | Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege v… |
CVE-2023-35374 | High | 7.8 | 2023-07-11 | Paint 3D Remote Code Execution Vulnerability |
CVE-2023-35373 | Medium | 5.3 | 2023-07-11 | Mono Authenticode Validation Spoofing Vulnerability |
CVE-2023-35367 | Critical | 9.8 | 2023-07-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2023-35366 | Critical | 9.8 | 2023-07-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2023-35365 | Critical | 9.8 | 2023-07-11 | Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability |
CVE-2023-35364 | High | 8.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35363 | High | 7.8 | 2023-07-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-35362 | High | 7.8 | 2023-07-11 | Windows Clip Service Elevation of Privilege Vulnerability |