2023 CVEs (page 218)
Page 218 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34415 | Medium | 6.1 | 2023-06-19 | When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same pr… |
CVE-2023-34414 | Low | 3.1 | 2023-06-19 | The error page for sites with invalid TLS certificates was missing the activation-delay Firefox uses to protect prompts and permission dialogs from attacks tha… |
CVE-2023-2899 | Medium | 5.4 | 2023-06-19 | The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page… |
CVE-2023-2812 | Medium | 4.8 | 2023-06-19 | The Ultimate Dashboard WordPress plugin before 3.7.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2023-2811 | Medium | 4.8 | 2023-06-19 | The AI ChatBot WordPress plugin before 4.5.6 does not sanitise and escape numerous of its settings, which could allow high privilege users such as admin to per… |
CVE-2023-2805 | High | 7.2 | 2023-06-19 | The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the set_add_agent_leaves AJAX function before us… |
CVE-2023-2779 | Medium | 6.1 | 2023-06-19 | The Social Share, Social Login and Social Comments WordPress plugin before 7.13.52 does not sanitise and escape a parameter before outputting it back in the pa… |
CVE-2023-2751 | Medium | 5.3 | 2023-06-19 | The Upload Resume WordPress plugin through 1.2.0 does not validate the captcha parameter when uploading a resume via the resume_upload_form shortcode, allowing… |
CVE-2023-2742 | Medium | 4.8 | 2023-06-19 | The AI ChatBot WordPress plugin before 4.5.5 does not sanitize and escape its settings, allowing high-privilege users such as admin to perform Cross-Site Scrip… |
CVE-2023-2719 | High | 8.8 | 2023-06-19 | The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the `id` parameter for an Agent in the REST API before using it in an SQL… |
CVE-2023-2684 | Medium | 4.8 | 2023-06-19 | The File Renaming on Upload WordPress plugin before 2.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as adm… |
CVE-2023-2654 | Medium | 6.1 | 2023-06-19 | The Conditional Menus WordPress plugin before 1.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Sc… |
CVE-2023-2600 | Medium | 4.8 | 2023-06-19 | The Custom Base Terms WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to… |
CVE-2023-2527 | Medium | 4.8 | 2023-06-19 | The Integration for Contact Form 7 and Zoho CRM, Bigin WordPress plugin before 1.2.4 does not properly sanitise and escape a parameter before using it in a SQL… |
CVE-2023-2492 | High | 7.2 | 2023-06-19 | The QueryWall: Plug'n Play Firewall WordPress plugin through 1.1.1 does not properly sanitise and escape a parameter before using it in a SQL statement, leadin… |
CVE-2023-2401 | Medium | 4.8 | 2023-06-19 | The QuBot WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stor… |
CVE-2023-2399 | Medium | 6.1 | 2023-06-19 | The QuBot WordPress plugin before 1.1.6 doesn't filter user input on chat, leading to bad code inserted on it be reflected on the user dashboard. |
CVE-2023-2359 | High | 8.8 | 2023-06-19 | The Slider Revolution WordPress plugin through 6.6.12 does not check for valid image files upon import, leading to an arbitrary file upload which may be escala… |
CVE-2023-2221 | High | 7.2 | 2023-06-19 | The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL inject… |
CVE-2023-29546 | Medium | 6.5 | 2023-06-19 | When recording the screen while in Private Browsing on Firefox for Android the address bar and keyboard were not hidden, potentially leaking sensitive informat… |
CVE-2023-29545 | Medium | 6.5 | 2023-06-19 | Similar to CVE-2023-28163, this time when choosing 'Save Link As', suggested filenames containing environment variable names would have resolved those in the c… |
CVE-2023-29542 | Critical | 9.8 | 2023-06-19 | A newline in a filename could have been used to bypass the file extension security mechanisms that replace malicious file extensions such as .lnk with .downlo… |
CVE-2023-29534 | Critical | 9.1 | 2023-06-19 | Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential user confusion and spo… |
CVE-2023-25747 | High | 7.5 | 2023-06-19 | A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30. *This bug only affects Firefox f… |
CVE-2023-25736 | Critical | 9.8 | 2023-06-19 | An invalid downcast from `nsHTMLDocument` to `nsIContent` could have lead to undefined behavior. This vulnerability affects Firefox < 110. |
CVE-2023-25733 | High | 7.5 | 2023-06-19 | The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability… |
CVE-2023-0489 | Medium | 5.4 | 2023-06-19 | The SlideOnline WordPress plugin through 1.2.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where t… |
CVE-2023-0368 | Medium | 5.4 | 2023-06-19 | The Responsive Tabs For WPBakery Page Builder (formerly Visual Composer) WordPress plugin through 1.1 does not validate and escape some of its shortcode attrib… |
CVE-2023-32216 | Critical | 9.8 | 2023-06-19 | Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla Fuzzing Team reported memory safety bugs present in Fire… |
CVE-2023-32214 | High | 7.5 | 2023-06-19 | Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service. *Note: This attack only affects Windows. Other operating… |
CVE-2023-32210 | Medium | 6.5 | 2023-06-19 | Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an appropriately privileged principal. In certain circumstan… |
CVE-2023-32209 | High | 7.5 | 2023-06-19 | A maliciously crafted favicon could have led to an out of memory crash. This vulnerability affects Firefox < 113. |
CVE-2023-32208 | Medium | 5.3 | 2023-06-19 | Service workers could reveal script base URL due to dynamic `import()`. This vulnerability affects Firefox < 113. |
CVE-2023-29532 | Medium | 5.5 | 2023-06-19 | A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file on a malicious SMB s… |
CVE-2023-29531 | Critical | 9.8 | 2023-06-19 | An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crash. *This bug onl… |
CVE-2023-35005 | Medium | 6.5 | 2023-06-19 | In Apache Airflow, some potentially sensitive values were being shown to the user in certain situations. This vulnerability is mitigated by the fact configura… |
CVE-2023-35866 | Medium | 5.5 | 2023-06-19 | In KeePassXC through 2.7.5, a local attacker can make changes to the Database security settings, including master password and second-factor authentication, wi… |
CVE-2023-34603 | High | 7.5 | 2023-06-19 | JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller… |
CVE-2023-34602 | High | 7.5 | 2023-06-19 | JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller… |
CVE-2023-35862 | Medium | 6.5 | 2023-06-19 | libcoap 4.3.1 contains a buffer over-read via the function coap_parse_oscore_conf_mem at coap_oscore.c. |
CVE-2023-34642 | High | 7.8 | 2023-06-19 | KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attacke… |
CVE-2023-34641 | High | 7.8 | 2023-06-19 | KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attacke… |
CVE-2023-32542 | High | 7.8 | 2023-06-19 | Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure a… |
CVE-2023-32538 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information d… |
CVE-2023-32288 | High | 7.8 | 2023-06-19 | Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM file may lead to information disclosure… |
CVE-2023-32276 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information dis… |
CVE-2023-32273 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information d… |
CVE-2023-32270 | High | 7.8 | 2023-06-19 | Access of memory location after end of buffer issue exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to infor… |
CVE-2023-32201 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information d… |
CVE-2023-31239 | High | 7.8 | 2023-06-19 | Stack-based buffer overflow vulnerability in V-Server v4.0.15.0 and V-Server Lite v4.0.15.0 and earlier allows an attacker to execute arbitrary code by having… |
CVE-2023-30759 | High | 7.8 | 2023-06-19 | The driver installation package created by Printer Driver Packager NX v1.0.02 to v1.1.25 fails to detect its modification and may spawn an unexpected process w… |
CVE-2023-27396 | Critical | 9.8 | 2023-06-19 | FINS (Factory Interface Network Service) is a message communication protocol, which is designed to be used in closed FA (Factory Automation) networks, and is u… |
CVE-2023-35857 | Critical | 9.8 | 2023-06-19 | In Siren Investigate before 13.2.2, session keys remain active even after logging out. |
CVE-2023-35856 | Critical | 9.8 | 2023-06-19 | A buffer overflow in Nintendo Mario Kart Wii RMCP01, RMCE01, RMCJ01, and RMCK01 can be exploited by a game client to execute arbitrary code on a client's machi… |
CVE-2023-35855 | Critical | 9.8 | 2023-06-19 | A buffer overflow in Counter-Strike through 8684 allows a game server to execute arbitrary code on a remote client's machine by modifying the lservercfgfile co… |
CVE-2023-35853 | Critical | 9.8 | 2023-06-19 | In Suricata before 6.0.13, an adversary who controls an external source of Lua rules may be able to execute Lua code. This is addressed in 6.0.13 by disabling… |
CVE-2023-35852 | High | 7.5 | 2023-06-19 | In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolu… |
CVE-2023-34657 | Medium | 4.8 | 2023-06-19 | A stored cross-site scripting (XSS) vulnerability in Eyoucms v1.6.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected in… |
CVE-2023-35849 | High | 7.5 | 2023-06-19 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not properly check whether header sizes would result in accessing data outside of a packet. |
CVE-2023-35848 | High | 7.5 | 2023-06-19 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 lacks certain size calculations before attempting to set a value of an mss structure member. |
CVE-2023-35847 | High | 7.5 | 2023-06-19 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not have an MSS lower bound (e.g., it could be zero). |
CVE-2023-35846 | High | 7.5 | 2023-06-19 | VirtualSquare picoTCP (aka PicoTCP-NG) through 2.1 does not check the transport layer length in a frame before performing port filtering. |
CVE-2023-35844 | High | 7.5 | 2023-06-19 | packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intende… |
CVE-2023-35840 | Medium | 6.5 | 2023-06-19 | _joinPath in elFinderVolumeLocalFileSystem.class.php in elFinder before 2.1.62 allows path traversal in the PHP LocalVolumeDriver connector. |
CVE-2023-35839 | Critical | 9.8 | 2023-06-19 | A bypass in the component sofa-hessian of Solon before v2.3.3 allows attackers to execute arbitrary code via providing crafted payload. |
CVE-2023-35829 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in rkvdec_remove in drivers/staging/media/rkvdec/rkvdec.c. |
CVE-2023-35828 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in renesas_usb3_remove in drivers/usb/gadget/udc/renesas_usb3.c. |
CVE-2023-35827 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c. |
CVE-2023-35826 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in cedrus_remove in drivers/staging/media/sunxi/cedrus/cedrus.c. |
CVE-2023-35824 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in dm1105_remove in drivers/media/pci/dm1105/dm1105.c. |
CVE-2023-35823 | High | 7.0 | 2023-06-18 | An issue was discovered in the Linux kernel before 6.3.2. A use-after-free was found in saa7134_finidev in drivers/media/pci/saa7134/saa7134-core.c. |
CVE-2023-3311 | Low | 2.4 | 2023-06-18 | A vulnerability, which was classified as problematic, was found in PuneethReddyHC online-shopping-system-advanced 1.0. This affects an unknown part of the file… |
CVE-2023-3310 | Medium | 6.3 | 2023-06-18 | A vulnerability, which was classified as critical, has been found in code-projects Agro-School Management System 1.0. Affected by this issue is some unknown fu… |
CVE-2023-3309 | Low | 3.5 | 2023-06-18 | A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality… |
CVE-2023-3308 | Medium | 5.5 | 2023-06-18 | A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. Th… |
CVE-2023-3307 | Medium | 6.3 | 2023-06-18 | A vulnerability was found in miniCal 1.0.0. It has been rated as critical. This issue affects some unknown processing of the file /booking/show_bookings/. The… |
CVE-2023-3306 | High | 7.3 | 2023-06-18 | A vulnerability was found in Ruijie RG-EW1200G EW_3.0(1)B11P204. It has been declared as critical. This vulnerability affects unknown code of the file app.09df… |
CVE-2023-3305 | High | 7.3 | 2023-06-18 | A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin… |
CVE-2023-35813 | Critical | 9.8 | 2023-06-17 | Multiple Sitecore products allow remote code execution. This affects Experience Manager, Experience Platform, and Experience Commerce through 10.3. |
CVE-2023-35811 | High | 8.8 | 2023-06-17 | An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. Two SQL Injection vectors have been identified in the REST API. By using c… |
CVE-2023-35810 | High | 7.2 | 2023-06-17 | An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Second-Order PHP Object Injection vulnerability has been identified in t… |
CVE-2023-35809 | High | 8.8 | 2023-06-17 | An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. A Bean Manipulation vulnerability has been identified in the REST API. By… |
CVE-2023-35808 | High | 8.8 | 2023-06-17 | An issue was discovered in SugarCRM Enterprise before 11.0.6 and 12.x before 12.0.3. An Unrestricted File Upload vulnerability has been identified in the Notes… |
CVE-2023-3295 | High | 8.8 | 2023-06-17 | The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validatio… |
CVE-2023-28295 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2023-28287 | High | 7.8 | 2023-06-17 | Microsoft Publisher Remote Code Execution Vulnerability |
CVE-2023-34459 | Medium | 5.3 | 2023-06-16 | OpenZeppelin Contracts is a library for smart contract development. Starting in version 4.7.0 and prior to version 4.9.2, when the `verifyMultiProof`, `verifyM… |
CVE-2023-35790 | High | 7.5 | 2023-06-16 | An issue was discovered in dec_patch_dictionary.cc in libjxl before 0.8.2. An integer underflow in patch decoding can lead to a denial of service, such as an i… |
CVE-2023-35789 | Medium | 5.5 | 2023-06-16 | An issue was discovered in the C AMQP client library (aka rabbitmq-c) through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line (e.g., f… |
CVE-2023-35788 | High | 7.8 | 2023-06-16 | An issue was discovered in fl_set_geneve_opt in net/sched/cls_flower.c in the Linux kernel before 6.3.7. It allows an out-of-bounds write in the flower classif… |
CVE-2023-33438 | Medium | 5.4 | 2023-06-16 | A stored Cross-site scripting (XSS) vulnerability in Wolters Kluwer TeamMate+ 35.0.11.0 allows remote attackers to inject arbitrary web script or HTML. |
CVE-2023-30905 | High | 7.8 | 2023-06-16 | The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege. |
CVE-2023-30904 | Medium | 5.5 | 2023-06-16 | A security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information. |
CVE-2023-30903 | Medium | 5.5 | 2023-06-16 | HP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6. |
CVE-2023-3195 | Medium | 5.5 | 2023-06-16 | A stack-based buffer overflow issue was found in ImageMagick's coders/tiff.c. This flaw allows an attacker to trick the user into opening a specially crafted m… |
CVE-2023-35784 | Critical | 9.8 | 2023-06-16 | A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x… |
CVE-2023-34475 | Medium | 5.5 | 2023-06-16 | A heap use after free issue was discovered in ImageMagick's ReplaceXmpValue() function in MagickCore/profile.c. An attacker could trick user to open a speciall… |
CVE-2023-34474 | Medium | 5.5 | 2023-06-16 | A heap-based buffer overflow issue was discovered in ImageMagick's ReadTIM2ImageData() function in coders/tim2.c. A local attacker could trick the user in open… |
CVE-2023-25187 | Medium | 6.3 | 2023-06-16 | An issue was discovered on NOKIA Airscale ASIKA Single RAN devices before 21B. Nokia Single RAN commissioning procedures do not change (factory-time installed)… |
CVE-2023-3268 | High | 7.1 | 2023-06-16 | An out of bounds (OOB) memory access flaw was found in the Linux kernel in relay_file_read_start_pos in kernel/relay.c in the relayfs. This flaw could allow a… |