2023 CVEs (page 203)
Page 203 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-32052 | Medium | 5.4 | 2023-07-11 | Microsoft Power Apps (online) Spoofing Vulnerability |
CVE-2023-32051 | High | 7.8 | 2023-07-11 | Raw Image Extension Remote Code Execution Vulnerability |
CVE-2023-32050 | High | 7.0 | 2023-07-11 | Windows Installer Elevation of Privilege Vulnerability |
CVE-2023-32049 | High | 8.8 | 2023-07-11 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2023-32047 | High | 7.8 | 2023-07-11 | Paint 3D Remote Code Execution Vulnerability |
CVE-2023-32046 | High | 7.8 | 2023-07-11 | Windows MSHTML Platform Elevation of Privilege Vulnerability |
CVE-2023-32045 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32044 | High | 7.5 | 2023-07-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-32043 | Medium | 6.8 | 2023-07-11 | Windows Remote Desktop Security Feature Bypass Vulnerability |
CVE-2023-32042 | Medium | 6.5 | 2023-07-11 | OLE Automation Information Disclosure Vulnerability |
CVE-2023-32041 | Medium | 5.5 | 2023-07-11 | Windows Update Orchestrator Service Information Disclosure Vulnerability |
CVE-2023-32040 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-32039 | Medium | 5.5 | 2023-07-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-32038 | High | 8.8 | 2023-07-11 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-32037 | Medium | 6.5 | 2023-07-11 | Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability |
CVE-2023-32035 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32034 | Medium | 6.5 | 2023-07-11 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-32033 | Medium | 6.6 | 2023-07-11 | Microsoft Failover Cluster Remote Code Execution Vulnerability |
CVE-2023-29347 | High | 8.7 | 2023-07-11 | Windows Admin Center Spoofing Vulnerability |
CVE-2023-21756 | High | 7.8 | 2023-07-11 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2023-21526 | High | 7.4 | 2023-07-11 | Windows Netlogon Information Disclosure Vulnerability |
CVE-2023-3627 | High | 8.8 | 2023-07-11 | Cross-Site Request Forgery (CSRF) in GitHub repository salesagility/suitecrm-core prior to 8.3.1. |
CVE-2023-3624 | Medium | 6.3 | 2023-07-11 | A vulnerability classified as critical has been found in Nesote Inout Blockchain FiatExchanger 3.0. This affects an unknown part of the file /index.php/coins/u… |
CVE-2023-3623 | Medium | 6.3 | 2023-07-11 | A vulnerability was found in Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System up to 20230704. It has been rated as critical. Af… |
CVE-2023-3354 | High | 7.5 | 2023-07-11 | A flaw was found in the QEMU built-in VNC server. When a client connects to the VNC server, QEMU checks whether the current number of connections crosses a cer… |
CVE-2023-37597 | High | 8.1 | 2023-07-11 | Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delete user grouplist fu… |
CVE-2023-37596 | High | 8.1 | 2023-07-11 | Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted script to the dele… |
CVE-2023-36824 | High | 7.4 | 2023-07-11 | Redis is an in-memory database that persists on disk. In Redit 7.0 prior to 7.0.12, extracting key names from a command and a list of arguments may, in some ca… |
CVE-2023-34117 | Low | 3.3 | 2023-07-11 | Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access. |
CVE-2023-34116 | High | 8.2 | 2023-07-11 | Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalation of privilege via… |
CVE-2023-28001 | Medium | 4.1 | 2023-07-11 | An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via reusing… |
CVE-2023-26861 | Critical | 9.8 | 2023-07-11 | SQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before allows a remote attacker to gain privileges via the vivawallet() module. |
CVE-2023-25606 | Medium | 6.5 | 2023-07-11 | An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager management interface… |
CVE-2023-24881 | Medium | 6.5 | 2023-07-11 | Microsoft Teams Information Disclosure Vulnerability |
CVE-2023-3621 | Medium | 6.3 | 2023-07-11 | A vulnerability was found in IBOS OA 4.5.5. It has been classified as critical. Affected is the function createDeleteCommand of the file ?r=article/default/del… |
CVE-2023-3619 | Medium | 6.3 | 2023-07-11 | A vulnerability was found in SourceCodester AC Repair and Services System 1.0 and classified as critical. This issue affects some unknown processing of the fil… |
CVE-2023-3108 | Medium | 6.2 | 2023-07-11 | A flaw was found in the subsequent get_user_pages_fast in the Linux kernel’s interface for symmetric key cipher algorithms in the skcipher_recvmsg of crypto/al… |
CVE-2023-3620 | Medium | 5.4 | 2023-07-11 | Cross-site Scripting (XSS) - Stored in GitHub repository amauric/tarteaucitron.js prior to v1.13.1. |
CVE-2023-3617 | High | 7.3 | 2023-07-11 | A vulnerability was found in SourceCodester Best POS Management System 1.0. It has been classified as critical. This affects an unknown part of the file admin_… |
CVE-2023-37659 | Critical | 9.8 | 2023-07-11 | xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). |
CVE-2023-37658 | Medium | 5.4 | 2023-07-11 | fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File upload check binary of img, but without strictly check file suffix at /server/fast.py ->… |
CVE-2023-37657 | Medium | 5.4 | 2023-07-11 | TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS). |
CVE-2023-36293 | High | 7.5 | 2023-07-11 | SQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain sensitive information via a crafted script to the company.php com… |
CVE-2023-31818 | High | 7.5 | 2023-07-11 | An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function. |
CVE-2023-37656 | Critical | 9.8 | 2023-07-11 | WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload. |
CVE-2023-36163 | Medium | 6.1 | 2023-07-11 | Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted script to the mc paramet… |
CVE-2023-2746 | Critical | 9.6 | 2023-07-11 | The Rockwell Automation Enhanced HIM software contains an API that the application uses that is not protected sufficiently and uses incorrect Cross-Origin Re… |
CVE-2023-2072 | High | 8.8 | 2023-07-11 | The Rockwell Automation PowerMonitor 1000 contains stored cross-site scripting vulnerabilities within the web page of the product. The vulnerable pages do not… |
CVE-2023-36690 | High | 8.1 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in VibeThemes WPLMS theme <= 4.900 versions. |
CVE-2023-36522 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in WePupil Quiz Expert plugin <= 1.5.0 versions. |
CVE-2023-35773 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Danny Hearnah - ChubbyNinjaa Template Debugger plugin <= 3.1.2 versions. |
CVE-2023-35091 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in StoreApps Stock Manager for WooCommerce plugin <= 2.10.0 versions. |
CVE-2023-35044 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Drew Phillips Securimage-WP plugin <= 3.6.16 versions. |
CVE-2023-34561 | Critical | 9.8 | 2023-07-11 | A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering a Geometry Dash lev… |
CVE-2023-34029 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Prem Tiwari Disable WordPress Update Notifications and auto-update Email Notifications plugin <= 2.3.3 versi… |
CVE-2023-32104 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Mark Tilly MyCurator Content Curation plugin <= 3.74 versions. |
CVE-2023-25706 | Medium | 5.4 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Pagup WordPress Robots.Txt optimization plugin <= 1.4.5 versions. |
CVE-2023-25443 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Button Generator – easily Button Builder plugin <= 2.3.5 versions. |
CVE-2023-24417 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in tiggersWelt.Net Worthy plugin <= 1.6.5-6497609 versions. |
CVE-2023-3269 | High | 7.8 | 2023-07-11 | A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is inco… |
CVE-2023-35780 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Andy Whalen Galleria plugin <= 1.0.3 versions. |
CVE-2023-35778 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Neha Goel Recent Posts Slider plugin <= 1.1 versions. |
CVE-2023-35047 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in AREOI All Bootstrap Blocks plugin <= 1.3.6 versions. |
CVE-2023-34185 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in John Brien WordPress NextGen GalleryView plugin <= 0.5.5 versions. |
CVE-2023-23671 | High | 7.1 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Muneeb Layer Slider plugin <= 1.1.9.7 versions. |
CVE-2023-1672 | Medium | 5.3 | 2023-07-11 | A race condition exists in the Tang server functionality for key generation and key rotation. This flaw results in a small time window where Tang private keys… |
CVE-2023-36687 | Medium | 5.4 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Andrea Tarantini Menubar plugin <= 5.8.2 versions. |
CVE-2023-37391 | Medium | 5.4 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in WPMobilePack.Com WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps plugin… |
CVE-2023-37376 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-37375 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-37374 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-37248 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-37247 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-37246 | High | 7.8 | 2023-07-11 | A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (All versions < V2302.0… |
CVE-2023-36755 | Critical | 9.1 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36754 | Critical | 9.1 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36753 | Critical | 9.1 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36752 | Critical | 9.1 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36751 | Critical | 9.1 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36750 | Critical | 9.1 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36749 | High | 7.4 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36748 | Medium | 5.9 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36693 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez WP RSS Images plugin <= 1.1 versions. |
CVE-2023-36521 | High | 8.6 | 2023-07-11 | A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4… |
CVE-2023-36390 | High | 8.8 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36389 | High | 8.8 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-36386 | High | 8.8 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGEDCOM ROX RX1400 (Al… |
CVE-2023-35921 | High | 7.5 | 2023-07-11 | A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4… |
CVE-2023-35920 | High | 7.5 | 2023-07-11 | A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4… |
CVE-2023-29131 | High | 7.4 | 2023-07-11 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of an incorrect default value in the SSH configuration… |
CVE-2023-29130 | Critical | 9.9 | 2023-07-11 | A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5). Affected device consists of improper access controls in the configuration files t… |
CVE-2023-36517 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions. |
CVE-2023-35913 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in OOPSpam OOPSpam Anti-Spam plugin <= 1.1.44 versions. |
CVE-2023-35774 | Medium | 5.4 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in LWS LWS Tools plugin <= 2.4.1 versions. |
CVE-2023-34015 | Medium | 5.4 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in PI Websolution Conditional shipping & Advanced Flat rate shipping rates / Flexible shipping for WooCommerce… |
CVE-2023-31191 | Critical | 9.3 | 2023-07-11 | DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can expl… |
CVE-2023-31190 | High | 8.1 | 2023-07-11 | DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an Improper Authentication vulnerability during the firmware update procedure. Sp… |
CVE-2023-29156 | Medium | 4.7 | 2023-07-11 | DroneScout ds230 Remote ID receiver from BlueMark Innovations is affected by an information loss vulnerability through traffic injection. An attacker can explo… |
CVE-2023-23777 | High | 7.2 | 2023-07-11 | An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0.1 and below, 6.4 a… |
CVE-2023-35781 | Medium | 5.4 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in LWS Cleaner plugin <= 2.3.0 versions. |