2023 CVEs (page 212)
Page 212 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21158 | Medium | 4.4 | 2023-06-28 | In encode of miscdata.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with System ex… |
CVE-2023-21157 | Medium | 6.7 | 2023-06-28 | In encode of wlandata.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System… |
CVE-2023-21156 | Medium | 4.4 | 2023-06-28 | In BuildGetRadioNode of protocolmiscbulider.cpp, there is a possible out of bounds read due to improper input validation. This could lead to local information… |
CVE-2023-21155 | Medium | 5.5 | 2023-06-28 | In BuildSetRadioNode of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information discl… |
CVE-2023-21154 | Medium | 4.4 | 2023-06-28 | In StoreAdbSerialNumber of protocolmiscbuilder.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information… |
CVE-2023-21153 | Medium | 6.7 | 2023-06-28 | In Do_AIMS_SET_CALL_WAITING of imsservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of pri… |
CVE-2023-21152 | Medium | 5.5 | 2023-06-28 | In FaceStatsAnalyzer::InterpolateWeightList of face_stats_analyzer.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to… |
CVE-2023-21151 | Medium | 6.7 | 2023-06-28 | In the Google BMS kernel module, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with S… |
CVE-2023-21150 | Medium | 4.4 | 2023-06-28 | In handle_set_parameters_ctrl of hal_socket.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information di… |
CVE-2023-21149 | High | 7.8 | 2023-06-28 | In registerGsmaServiceIntentReceiver of ShannonRcsService.java, there is a possible way to activate/deactivate RCS service due to a missing permission check. T… |
CVE-2023-21148 | Medium | 4.4 | 2023-06-28 | In BuildSetConfig of protocolimsbuilder.cpp, there is a possible out of bounds read due to a missing null check. This could lead to local information disclosur… |
CVE-2023-21147 | High | 7.8 | 2023-06-28 | In lwis_i2c_device_disable of lwis_device_i2c.c, there is a possible UAF due to a logic error in the code. This could lead to local escalation of privilege wit… |
CVE-2023-21146 | Medium | 6.7 | 2023-06-28 | there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. Us… |
CVE-2023-21066 | Critical | 9.8 | 2023-06-28 | In cd_CodeMsg of cd_codec.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional… |
CVE-2023-2625 | Critical | 9.0 | 2023-06-28 | A vulnerability exists that can be exploited by an authenticated client that is connected to the same network segment as the CoreTec 4, having any level of acc… |
CVE-2023-27866 | Medium | 6.3 | 2023-06-28 | IBM Informix JDBC Driver 4.10 and 4.50 is susceptible to remote code execution attack via JNDI injection when driver code or the application using the driver d… |
CVE-2023-34937 | High | 7.5 | 2023-06-28 | A stack overflow in the UpdateSnat function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34936 | High | 7.5 | 2023-06-28 | A stack overflow in the UpdateMacClone function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34935 | High | 7.5 | 2023-06-28 | A stack overflow in the AddWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34934 | High | 7.5 | 2023-06-28 | A stack overflow in the Edit_BasicSSID_5G function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34933 | High | 7.5 | 2023-06-28 | A stack overflow in the UpdateWanParams function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-26615 | High | 7.5 | 2023-06-28 | D-Link DIR-823G firmware version 1.02B05 has a password reset vulnerability, which originates from the SetMultipleActions API, allowing unauthorized attackers… |
CVE-2023-20199 | Medium | 6.2 | 2023-06-28 | A vulnerability in Cisco Duo Two-Factor Authentication for macOS could allow an authenticated, physical attacker to bypass secondary authentication and access… |
CVE-2023-20192 | Critical | 9.6 | 2023-06-28 | Multiple vulnerabilities in Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenticated attacker with Administ… |
CVE-2023-20188 | Medium | 4.8 | 2023-06-28 | A vulnerability in the web-based management interface of Cisco Small Business 200 Series Smart Switches, Cisco Small Business 300 Series Managed Switches, and… |
CVE-2023-20178 | High | 7.8 | 2023-06-28 | A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could… |
CVE-2023-20136 | Medium | 4.3 | 2023-06-28 | A vulnerability in the OpenAPI of Cisco Secure Workload could allow an authenticated, remote attacker with the privileges of a read-only user to execute operat… |
CVE-2023-20120 | Medium | 5.4 | 2023-06-28 | Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, fo… |
CVE-2023-20119 | Medium | 6.1 | 2023-06-28 | A vulnerability in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager, formerly known as Content Security Mana… |
CVE-2023-20116 | Medium | 6.8 | 2023-06-28 | A vulnerability in the Administrative XML Web Service (AXL) API of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager S… |
CVE-2023-20108 | High | 7.5 | 2023-06-28 | A vulnerability in the XCP Authentication Service of the Cisco Unified Communications Manager IM & Presence Service (Unified CM IM&P) could allow an un… |
CVE-2023-20105 | Critical | 9.6 | 2023-06-28 | A vulnerability in the change password functionality of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) could allow an authenti… |
CVE-2023-20028 | Medium | 5.4 | 2023-06-28 | Multiple vulnerabilities in the web-based management interface of Cisco AsyncOS Software for Cisco Secure Email and Web Manager; Cisco Secure Email Gateway, fo… |
CVE-2023-20006 | High | 8.6 | 2023-06-28 | A vulnerability in the hardware-based SSL/TLS cryptography functionality of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense… |
CVE-2023-3445 | Medium | 4.8 | 2023-06-28 | Cross-site Scripting (XSS) - Stored in GitHub repository spinacms/spina prior to 2.15.1. |
CVE-2023-36467 | High | 8.0 | 2023-06-28 | AWS data.all is an open source development framework to help users build a data marketplace on Amazon Web Services. data.all versions 1.2.0 through 1.5.1 do no… |
CVE-2023-34932 | High | 7.5 | 2023-06-28 | A stack overflow in the UpdateWanMode function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34931 | High | 7.5 | 2023-06-28 | A stack overflow in the EditWlanMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34930 | High | 7.5 | 2023-06-28 | A stack overflow in the EditMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34929 | High | 7.5 | 2023-06-28 | A stack overflow in the AddMacList function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-34928 | High | 7.5 | 2023-06-28 | A stack overflow in the Edit_BasicSSID function of H3C Magic B1STV100R012 allows attackers to cause a Denial of Service (DoS) via a crafted POST request. |
CVE-2023-30259 | Medium | 5.5 | 2023-06-28 | A Buffer Overflow vulnerability in importshp plugin in LibreCAD 2.2.0 allows attackers to obtain sensitive information via a crafted DBF file. |
CVE-2023-1295 | High | 7.8 | 2023-06-28 | A time-of-check to time-of-use issue exists in io_uring subsystem's IORING_OP_CLOSE operation in the Linux kernel's versions 5.6 - 5.11 (inclusive), which allo… |
CVE-2023-3034 | Medium | 4.7 | 2023-06-28 | Reflected XSS affects the ‘mode’ parameter in the /admin functionality of the web application in versions <=2.0.44 |
CVE-2023-32623 | Critical | 9.1 | 2023-06-28 | Directory traversal vulnerability in Snow Monkey Forms v5.1.1 and earlier allows a remote unauthenticated attacker to delete arbitrary files on the server. |
CVE-2023-26134 | Critical | 9.8 | 2023-06-28 | Versions of the package git-commit-info before 2.0.2 are vulnerable to Command Injection such that the package-exported method gitCommitInfo () fails to saniti… |
CVE-2023-3407 | Medium | 4.3 | 2023-06-28 | The Subscribe2 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 10.40. This is due to missing or incorrect no… |
CVE-2023-1844 | Medium | 4.3 | 2023-06-28 | The Subscribe2 plugin for WordPress is vulnerable to unauthorized access to email functionality due to a missing capability check when sending test emails in v… |
CVE-2023-3427 | Medium | 5.4 | 2023-06-28 | The Salon Booking System plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.6. This is due to missing or in… |
CVE-2023-3333 | High | 7.2 | 2023-06-28 | Improper Neutralization of Special Elements used in an OS Command vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG… |
CVE-2023-3332 | Medium | 4.8 | 2023-06-28 | Improper Neutralization of Input During Web Page Generation vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG… |
CVE-2023-3331 | Medium | 5.4 | 2023-06-28 | Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG… |
CVE-2023-3330 | Medium | 4.3 | 2023-06-28 | Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP… |
CVE-2023-25002 | High | 7.8 | 2023-06-27 | A maliciously crafted SKP file in Autodesk products is used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lead to code execut… |
CVE-2023-25001 | High | 7.8 | 2023-06-27 | A maliciously crafted SKP file in Autodesk Navisworks 2023 and 2022 be used to trigger use-after-free vulnerability. Exploitation of this vulnerability may lea… |
CVE-2023-36464 | Medium | 6.2 | 2023-06-27 | pypdf is an open source, pure-python PDF library. In affected versions an attacker may craft a PDF which leads to an infinite loop if `__parse_content_stream`… |
CVE-2023-3436 | Low | 3.3 | 2023-06-27 | Xpdf 4.04 will deadlock on a PDF object stream whose "Length" field is itself in another object stream. |
CVE-2023-36463 | Medium | 5.3 | 2023-06-27 | Meldekarten generator is an open source project to create a program, running locally in the browser without the need for an internet-connection, to create, sto… |
CVE-2023-30993 | Medium | 6.8 | 2023-06-27 | IBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to access data from another tenant's acco… |
CVE-2023-29068 | High | 7.8 | 2023-06-27 | A maliciously crafted file consumed through pskernel.dll file could lead to memory corruption vulnerabilities. These vulnerabilities in conjunction with other… |
CVE-2023-25004 | High | 7.8 | 2023-06-27 | A maliciously crafted pskernel.dll file in Autodesk products is used to trigger integer overflow vulnerabilities. Exploitation of these vulnerabilities may lea… |
CVE-2023-23468 | Medium | 5.1 | 2023-06-27 | IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to insufficient security configuration which may a… |
CVE-2023-22593 | Medium | 4.0 | 2023-06-27 | IBM Robotic Process Automation for Cloud Pak 21.0.1 through 21.0.7.3 and 23.0.0 through 23.0.3 is vulnerable to security misconfiguration of the Redis contain… |
CVE-2023-34839 | Medium | 6.8 | 2023-06-27 | A Cross Site Request Forgery (CSRF) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows a remote attacker to gain privileges via a Custom CSRF exploit to cre… |
CVE-2023-34838 | Medium | 5.4 | 2023-06-27 | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code vi… |
CVE-2023-34837 | Medium | 5.4 | 2023-06-27 | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code vi… |
CVE-2023-34836 | Medium | 5.4 | 2023-06-27 | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary code vi… |
CVE-2023-34835 | Medium | 5.4 | 2023-06-27 | A Cross Site Scripting vulnerability in Microworld Technologies eScan Management console v.14.0.1400.2281 allows a remote attacker to execute arbitrary JavaScr… |
CVE-2023-28857 | Medium | 4.0 | 2023-06-27 | Apereo CAS is an open source multilingual single sign-on solution for the web. Apereo CAS can be configured to use authentication based on client X509 certific… |
CVE-2023-26276 | Medium | 5.9 | 2023-06-27 | IBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID… |
CVE-2023-26274 | Medium | 4.6 | 2023-06-27 | IBM QRadar SIEM 7.5.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering th… |
CVE-2023-26273 | Medium | 4.3 | 2023-06-27 | IBM QRadar SIEM 7.5.0 could allow an authenticated user to perform unauthorized actions due to hazardous input validation. IBM X-Force ID: 248134. |
CVE-2023-35800 | Medium | 4.3 | 2023-06-27 | Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent… |
CVE-2023-35799 | Medium | 5.5 | 2023-06-27 | Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary f… |
CVE-2023-34830 | Medium | 5.4 | 2023-06-27 | i-doit Open v24 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the timeout parameter on the login page. |
CVE-2023-34240 | Medium | 6.5 | 2023-06-27 | Cloudexplorer-lite is an open source cloud software stack. Weak passwords can be easily guessed and are an easy target for brute force attacks. This can lead t… |
CVE-2023-34099 | Medium | 5.3 | 2023-06-27 | Shopware is an open source e-commerce software. The mail validation in the registration process had some flaws, so it was possible to construct different mail… |
CVE-2023-34098 | Medium | 5.3 | 2023-06-27 | Shopware is an open source e-commerce software. Due to an incorrect configuration in the `.htaccess` file, the configuration file of the Javascript could be re… |
CVE-2023-32339 | Medium | 6.1 | 2023-06-27 | IBM Business Automation Workflow is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus a… |
CVE-2023-3432 | Critical | 10.0 | 2023-06-27 | Server-Side Request Forgery (SSRF) in GitHub repository plantuml/plantuml prior to 1.2023.9. |
CVE-2023-3431 | Medium | 5.3 | 2023-06-27 | Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9. |
CVE-2023-3405 | High | 7.5 | 2023-06-27 | Unchecked parameter value in M-Files Server in versions before 23.6.12695.3 (excluding 23.2 SR2 and newer) allows anonymous user to cause denial of service |
CVE-2023-36002 | Medium | 4.3 | 2023-06-27 | A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network… |
CVE-2023-36000 | Medium | 6.5 | 2023-06-27 | A missing authorization check in the MacOS agent configuration endpoint of the Insider Threat Management Server enables an anonymous attacker on an adjacent ne… |
CVE-2023-35998 | Medium | 4.6 | 2023-06-27 | A missing authorization check in multiple SOAP endpoints of the Insider Threat Management Server enables an attacker on an adjacent network to read and write u… |
CVE-2023-2818 | Medium | 5.5 | 2023-06-27 | An insecure filesystem permission in the Insider Threat Management Agent for Windows enables local unprivileged users to disrupt agent monitoring. All versions… |
CVE-2023-2996 | High | 8.8 | 2023-06-27 | The Jetpack WordPress plugin before 12.1.1 does not validate uploaded files, allowing users with author roles or above to manipulate existing files on the site… |
CVE-2023-2877 | High | 8.8 | 2023-06-27 | The Formidable Forms WordPress plugin before 6.3.1 does not adequately authorize the user or validate the plugin URL in its functionality for installing add-on… |
CVE-2023-2842 | High | 8.1 | 2023-06-27 | The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Item… |
CVE-2023-2795 | Medium | 4.8 | 2023-06-27 | The CodeColorer WordPress plugin before 0.10.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2023-2744 | High | 7.2 | 2023-06-27 | The ERP WordPress plugin before 1.12.4 does not properly sanitise and escape the `type` parameter in the `erp/v1/accounting/v1/people` REST API endpoint before… |
CVE-2023-2743 | Medium | 6.1 | 2023-06-27 | The ERP WordPress plugin before 1.12.4 does not sanitise and escape the employee_name parameter before outputting it back in the page, leading to a Reflected C… |
CVE-2023-2711 | Medium | 4.8 | 2023-06-27 | The Ultimate Product Catalog WordPress plugin before 5.2.6 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2023-2628 | High | 8.8 | 2023-06-27 | The KiviCare WordPress plugin before 3.2.1 does not have CSRF checks (either flawed or missing completely) in various AJAX actions, which could allow attackers… |
CVE-2023-2627 | Medium | 4.3 | 2023-06-27 | The KiviCare WordPress plugin before 3.2.1 does not have proper CSRF and authorisation checks in various AJAX actions, allowing any authenticated users, such a… |
CVE-2023-2624 | Medium | 6.1 | 2023-06-27 | The KiviCare WordPress plugin before 3.2.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Sc… |
CVE-2023-2623 | Medium | 6.5 | 2023-06-27 | The KiviCare WordPress plugin before 3.2.1 does not restrict the information returned in a response and returns all user data, allowing low privilege users suc… |
CVE-2023-2605 | Medium | 6.1 | 2023-06-27 | The wpbrutalai WordPress plugin before 2.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site… |
CVE-2023-2601 | Critical | 9.8 | 2023-06-27 | The wpbrutalai WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection e… |
CVE-2023-2592 | High | 7.2 | 2023-06-27 | The FormCraft WordPress plugin before 3.9.7 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection ex… |