2023 CVEs (page 211)
Page 211 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34734 | Medium | 4.8 | 2023-06-29 | Annet AC Centralized Management Platform 1.02.040 is vulnerable to Stored Cross-Site Scripting (XSS) . |
CVE-2023-34648 | Medium | 6.1 | 2023-06-29 | A Cross Site Scripting vulnerability in PHPgurukl User Registration Login and User Management System with admin panel v.1.0 allows a local attacker to execute… |
CVE-2023-37237 | Medium | 6.5 | 2023-06-29 | In Veritas NetBackup Appliance before 4.1.0.1 MR3, insecure permissions may allow an authenticated Admin to bypass shell restrictions and execute arbitrary ope… |
CVE-2023-2982 | Critical | 9.8 | 2023-06-29 | The WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) plugin for WordPress is vulnerable to authentication bypass in versions up to, and… |
CVE-2023-1602 | Medium | 4.4 | 2023-06-29 | The Short URL plugin for WordPress is vulnerable to stored Cross-Site Scripting via the 'comment' parameter due to insufficient input sanitization and output e… |
CVE-2023-36476 | High | 7.9 | 2023-06-29 | calamares-nixos-extensions provides Calamares branding and modules for NixOS, a distribution of GNU/Linux. Users of calamares-nixos-extensions version 0.3.12 a… |
CVE-2023-32610 | High | 7.5 | 2023-06-29 | Mailform Pro CGI 4.3.1.2 and earlier allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition. |
CVE-2023-34843 | High | 7.5 | 2023-06-29 | Traggo Server 0.3.0 is vulnerable to directory traversal via a crafted GET request. |
CVE-2023-34738 | Critical | 9.8 | 2023-06-29 | Chemex through 3.7.1 is vulnerable to arbitrary file upload. |
CVE-2023-33661 | Medium | 6.1 | 2023-06-29 | Multiple cross-site scripting (XSS) vulnerabilities were discovered in Church CRM v4.5.3 in GroupReports.php via GroupRole, ReportModel, and OnlyCart parameter… |
CVE-2023-36475 | Critical | 9.8 | 2023-06-28 | Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 5.5.2 and 6.2.1, an attacker can use… |
CVE-2023-3359 | Medium | 5.5 | 2023-06-28 | An issue was discovered in the Linux kernel brcm_nvram_parse in drivers/nvmem/brcm_nvram.c. Lacks for the check of the return value of kzalloc() can cause the… |
CVE-2023-3358 | Medium | 5.5 | 2023-06-28 | A null pointer dereference was found in the Linux kernel's Integrated Sensor Hub (ISH) driver. This issue could allow a local user to crash the system. |
CVE-2023-3357 | Medium | 5.5 | 2023-06-28 | A NULL pointer dereference flaw was found in the Linux kernel AMD Sensor Fusion Hub driver. This flaw allows a local user to crash the system. |
CVE-2023-36474 | High | 8.2 | 2023-06-28 | Interactsh is an open-source tool for detecting out-of-band interactions. Domains configured with interactsh server prior to version 1.0.0 were vulnerable to s… |
CVE-2023-34736 | High | 7.2 | 2023-06-28 | Guantang Equipment Management System version 4.12 is vulnerable to Arbitrary File Upload. |
CVE-2023-34647 | Medium | 6.1 | 2023-06-28 | PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). |
CVE-2023-3439 | Medium | 4.7 | 2023-06-28 | A flaw was found in the MCTP protocol in the Linux kernel. The function mctp_unregister() reclaims the device's relevant resource when a netcard detaches. Howe… |
CVE-2023-3390 | High | 7.8 | 2023-06-28 | A use-after-free vulnerability was found in the Linux kernel's netfilter subsystem in net/netfilter/nf_tables_api.c. Mishandled error handling with NFT_MSG_NE… |
CVE-2023-3355 | Medium | 4.7 | 2023-06-28 | A NULL pointer dereference flaw was found in the Linux kernel's drivers/gpu/drm/msm/msm_gem_submit.c code in the submit_lookup_cmds function, which fails becau… |
CVE-2023-3243 | High | 8.3 | 2023-06-28 | ** UNSUPPORTED WHEN ASSIGNED ** [An attacker can capture an authenticating hash and utilize it to create new sessions. The hash is also a poorly salted MD5 ha… |
CVE-2023-3138 | High | 7.5 | 2023-06-28 | A vulnerability was found in libX11. The security flaw occurs because the functions in src/InitExt.c in libX11 do not check that the values provided for the Re… |
CVE-2023-34652 | Medium | 6.1 | 2023-06-28 | PHPgurukl Hostel Management System v.1.0 is vulnerable to Cross Site Scripting (XSS) via Add New Course. |
CVE-2023-34651 | Medium | 6.1 | 2023-06-28 | PHPgurukl Hospital Management System v.1.0 is vulnerable to Cross Site Scripting (XSS). |
CVE-2023-34650 | Medium | 6.1 | 2023-06-28 | PHPgurukl Small CRM v.1.0 is vulnerable to Cross Site Scripting (XSS). |
CVE-2023-32224 | Critical | 9.8 | 2023-06-28 | D-Link DSL-224 firmware version 3.0.10 CWE-307: Improper Restriction of Excessive Authentication Attempts |
CVE-2023-32223 | High | 8.8 | 2023-06-28 | D-Link DSL-224 firmware version 3.0.10 allows post authentication command execution via an unspecified method. |
CVE-2023-32222 | Critical | 9.8 | 2023-06-28 | D-Link DSL-G256DG version vBZ_1.00.27 web management interface allows authentication bypass via an unspecified method. |
CVE-2023-2232 | Medium | 6.5 | 2023-06-28 | An issue has been discovered in GitLab affecting all versions starting from 15.10 before 16.1, leading to a ReDoS vulnerability in the Jira prefix |
CVE-2023-21518 | Medium | 4.4 | 2023-06-28 | Improper access control vulnerability in SearchWidget prior to version 3.3 in China models allows untrusted applications to start arbitrary activity. |
CVE-2023-21517 | High | 8.8 | 2023-06-28 | Heap out-of-bound write vulnerability in Exynos baseband prior to SMR Jun-2023 Release 1 allows remote attacker to execute arbitrary code. |
CVE-2023-21513 | Medium | 6.1 | 2023-06-28 | Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that re… |
CVE-2023-21512 | Low | 2.4 | 2023-06-28 | Improper Knox ID validation logic in notification framework prior to SMR Jun-2023 Release 1 allows local attackers to read work profile notifications without p… |
CVE-2023-3389 | High | 7.8 | 2023-06-28 | A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Racing a io_uring cancel poll re… |
CVE-2023-3090 | High | 7.8 | 2023-06-28 | A heap out-of-bounds write vulnerability in the Linux Kernel ipvlan network driver can be exploited to achieve local privilege escalation. The out-of-bounds w… |
CVE-2023-34761 | Medium | 6.5 | 2023-06-28 | An unauthenticated attacker within BLE proximity can remotely connect to a 7-Eleven LED Message Cup, Hello Cup 1.3.1 for Android, and bypass the application's… |
CVE-2023-33592 | Critical | 9.8 | 2023-06-28 | Lost and Found Information System v1.0 was discovered to contain a SQL injection vulnerability via the component /php-lfis/admin/?page=system_info/contact_info… |
CVE-2023-33570 | High | 8.8 | 2023-06-28 | Bagisto v1.5.1 is vulnerable to Server-Side Template Injection (SSTI). |
CVE-2023-3450 | Medium | 4.7 | 2023-06-28 | A vulnerability was found in Ruijie RG-BCR860 2.5.13 and classified as critical. This issue affects some unknown processing of the component Network Diagnostic… |
CVE-2023-3449 | Medium | 5.5 | 2023-06-28 | A vulnerability has been found in IBOS OA 4.5.5 and classified as critical. This vulnerability affects the function actionExport of the file ?r=recruit/intervi… |
CVE-2023-21237 | Medium | 5.5 | 2023-06-28 | In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. T… |
CVE-2023-21236 | Medium | 6.7 | 2023-06-28 | In aoc_service_set_read_blocked of aoc.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privile… |
CVE-2023-21226 | High | 7.5 | 2023-06-28 | In SAEMM_RetrieveTaiList of SAEMM_ContextManagement.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote infor… |
CVE-2023-21225 | High | 7.8 | 2023-06-28 | there is a possible way to bypass the protected confirmation screen due to Failure to lock display power. This could lead to local escalation of privilege with… |
CVE-2023-21224 | High | 7.5 | 2023-06-28 | In ss_ProcessReturnResultComponent of ss_MmConManagement.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote inf… |
CVE-2023-21223 | High | 7.5 | 2023-06-28 | In LPP_ConvertGNSS_DataBitAssistance of LPP_CommonUtil.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote infor… |
CVE-2023-21222 | Medium | 6.7 | 2023-06-28 | In load_dt_data of storage.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with Syst… |
CVE-2023-21220 | High | 7.5 | 2023-06-28 | there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with… |
CVE-2023-21219 | High | 7.5 | 2023-06-28 | there is a possible use of unencrypted transport over cellular networks due to an insecure default value. This could lead to remote information disclosure with… |
CVE-2023-21214 | Medium | 4.4 | 2023-06-28 | In addGroupWithConfigInternal of p2p_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disc… |
CVE-2023-21213 | Medium | 4.4 | 2023-06-28 | In initiateTdlsTeardownInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information di… |
CVE-2023-21212 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21211 | Medium | 5.5 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional exe… |
CVE-2023-21210 | Medium | 4.4 | 2023-06-28 | In initiateHs20IconQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local informatio… |
CVE-2023-21209 | Medium | 6.7 | 2023-06-28 | In multiple functions of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local escalation of privilege… |
CVE-2023-21208 | Medium | 4.4 | 2023-06-28 | In setCountryCodeInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information discl… |
CVE-2023-21207 | Medium | 6.7 | 2023-06-28 | In initiateTdlsSetupInternal of sta_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2023-21206 | Medium | 4.4 | 2023-06-28 | In initiateVenueUrlAnqpQueryInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local informati… |
CVE-2023-21205 | Medium | 5.5 | 2023-06-28 | In startWpsPinDisplayInternal of sta_iface.cpp, there is a possible out of bounds read due to unsafe deserialization. This could lead to local information disc… |
CVE-2023-21204 | Medium | 4.4 | 2023-06-28 | In multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in the wifi server wit… |
CVE-2023-21203 | Medium | 6.7 | 2023-06-28 | In startWpsPbcInternal of sta_iface.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privil… |
CVE-2023-21202 | Medium | 4.5 | 2023-06-28 | In btm_delete_stored_link_key_complete of btm_devctl.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local informa… |
CVE-2023-21201 | High | 7.5 | 2023-06-28 | In on_create_record_event of btif_sdp_server.cc, there is a possible out of bounds read due to a missing null check. This could lead to remote denial of servic… |
CVE-2023-21200 | Medium | 5.5 | 2023-06-28 | In on_remove_iso_data_path of btm_iso_impl.h, there is a possible out of bounds read due to improper input validation. This could lead to local information dis… |
CVE-2023-21199 | Medium | 4.4 | 2023-06-28 | In btu_ble_proc_ltk_req of btu_hcif.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21198 | Medium | 5.5 | 2023-06-28 | In remove_sdp_record of btif_sdp_server.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-21197 | High | 7.5 | 2023-06-28 | In btm_acl_process_sca_cmpl_pkt of btm_acl.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information d… |
CVE-2023-21196 | Medium | 4.4 | 2023-06-28 | In btm_ble_batchscan_filter_track_adv_vse_cback of btm_ble_batchscan.cc, there is a possible out of bounds read due to a missing bounds check. This could lead… |
CVE-2023-21195 | Medium | 4.5 | 2023-06-28 | In btm_ble_periodic_adv_sync_tx_rcvd of btm_ble_gap.cc, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local infor… |
CVE-2023-21194 | Medium | 4.4 | 2023-06-28 | In gatt_dbg_op_name of gatt_utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure in… |
CVE-2023-21193 | High | 7.5 | 2023-06-28 | In VideoFrame of VideoFrame.h, there is a possible abort due to an integer overflow. This could lead to remote information disclosure with no additional execut… |
CVE-2023-21192 | High | 7.8 | 2023-06-28 | In setInputMethodWithSubtypeIdLocked of InputMethodManagerService.java, there is a possible way to setup input methods that are not enabled due to improper inp… |
CVE-2023-21191 | High | 7.8 | 2023-06-28 | In fixNotification of NotificationManagerService.java, there is a possible bypass of notification hide preference due to a logic error in the code. This could… |
CVE-2023-21190 | Medium | 5.0 | 2023-06-28 | In btm_acl_encrypt_change of btm_acl.cc, there is a possible way for a remote device to turn off encryption without resulting in a terminated connection due to… |
CVE-2023-21189 | High | 7.3 | 2023-06-28 | In startLockTaskMode of LockTaskController.java, there is a possible bypass of lock task mode due to a logic error in the code. This could lead to local escala… |
CVE-2023-21188 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2023-21187 | High | 7.8 | 2023-06-28 | In onCreate of UsbAccessoryUriActivity.java, there is a possible way to escape the Setup Wizard due to a logic error in the code. This could lead to local esca… |
CVE-2023-21186 | High | 7.5 | 2023-06-28 | In LogResponse of Dns.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of service with no additional… |
CVE-2023-21185 | High | 7.8 | 2023-06-28 | In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user wit… |
CVE-2023-21184 | High | 7.8 | 2023-06-28 | In getCurrentPrivilegedPackagesForAllUsers of CarrierPrivilegesTracker.java, there is a possible permission bypass due to a logic error in the code. This could… |
CVE-2023-21183 | High | 7.8 | 2023-06-28 | In ForegroundUtils of ForegroundUtils.java, there is a possible way to read NFC tag data while the app is still in the background due to a logic error in the c… |
CVE-2023-21182 | Medium | 4.4 | 2023-06-28 | In Exynos_parsing_user_data_registered_itu_t_t35 of VendorVideoAPI.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead t… |
CVE-2023-21181 | Medium | 4.4 | 2023-06-28 | In btm_ble_update_inq_result of btm_ble_gap.cc, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disc… |
CVE-2023-21180 | High | 7.5 | 2023-06-28 | In xmlParseTryOrFinish of parser.c, there is a possible out of bounds read due to a heap buffer overflow. This could lead to remote information disclosure with… |
CVE-2023-21179 | High | 7.8 | 2023-06-28 | In parseSecurityParamsFromXml of XmlUtil.java, there is a possible bypass of user specified wifi encryption protocol due to improperly used crypto. This could… |
CVE-2023-21178 | Medium | 4.1 | 2023-06-28 | In installKey of KeyUtil.cpp, there is a possible failure of file encryption due to a race condition. This could lead to local information disclosure with Syst… |
CVE-2023-21177 | Medium | 5.5 | 2023-06-28 | In requestAppKeyboardShortcuts of WindowManagerService.java, there is a possible way to infer the app a user is interacting with due to a missing permission ch… |
CVE-2023-21176 | Medium | 4.4 | 2023-06-28 | In list_key_entries of utils.rs, there is a possible way to disable user credentials due to resource exhaustion. This could lead to local denial of service wit… |
CVE-2023-21175 | High | 7.8 | 2023-06-28 | In onCreate of DataUsageSummary.java, there is a possible method for a guest user to enable or disable mobile data due to a permissions bypass. This could lead… |
CVE-2023-21174 | High | 7.8 | 2023-06-28 | In isPageSearchEnabled of BillingCycleSettings.java, there is a possible way for the guest user to change data limits due to a permissions bypass. This could l… |
CVE-2023-21173 | Medium | 5.5 | 2023-06-28 | In multiple methods of DataUsageList.java, there is a possible way to learn about admin user's network activities due to a missing permission check. This could… |
CVE-2023-21172 | High | 7.8 | 2023-06-28 | In multiple functions of WifiCallingSettings.java, there is a possible way to change calling preferences for the admin user due to a permissions bypass. This c… |
CVE-2023-21171 | Medium | 6.7 | 2023-06-28 | In verifyInputEvent of InputDispatcher.cpp, there is a possible way to conduct click fraud due to side channel information disclosure. This could lead to local… |
CVE-2023-21170 | Medium | 4.4 | 2023-06-28 | In executeSetClientTarget of ComposerCommandEngine.h, there is a possible out of bounds read due to a missing bounds check. This could lead to local informatio… |
CVE-2023-21169 | Medium | 4.4 | 2023-06-28 | In inviteInternal of p2p_iface.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with… |
CVE-2023-21168 | Medium | 5.5 | 2023-06-28 | In convertCbYCrY of ColorConverter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure w… |
CVE-2023-21167 | Medium | 5.5 | 2023-06-28 | In setProfileName of DevicePolicyManagerService.java, there is a possible way to crash the SystemUI menu due to a missing bounds check. This could lead to loca… |
CVE-2023-21161 | Medium | 6.7 | 2023-06-28 | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… |
CVE-2023-21160 | Medium | 5.5 | 2023-06-28 | In BuildSetTcsFci of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclo… |
CVE-2023-21159 | Medium | 6.7 | 2023-06-28 | In Parse of simdata.cpp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System ex… |