2023 CVEs (page 221)
Page 221 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34617 | High | 7.5 | 2023-06-14 | An issue was discovered genson thru 1.6 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependen… |
CVE-2023-34616 | High | 7.5 | 2023-06-14 | An issue was discovered pbjson thru 0.4.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depend… |
CVE-2023-34615 | High | 7.5 | 2023-06-14 | An issue was discovered JSONUtil thru 5.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depend… |
CVE-2023-34614 | High | 7.5 | 2023-06-14 | An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cycl… |
CVE-2023-34613 | High | 7.5 | 2023-06-14 | An issue was discovered sojo thru 1.1.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependen… |
CVE-2023-34612 | High | 7.5 | 2023-06-14 | An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depen… |
CVE-2023-34611 | High | 7.5 | 2023-06-14 | An issue was discovered mjson thru 1.4.1 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depende… |
CVE-2023-34610 | High | 7.5 | 2023-06-14 | An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depe… |
CVE-2023-34609 | High | 7.5 | 2023-06-14 | An issue was discovered flexjson thru 3.3 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic depend… |
CVE-2023-32465 | High | 8.8 | 2023-06-14 | Dell Power Protect Cyber Recovery, contains an Authentication Bypass vulnerability. An attacker could potentially exploit this vulnerability, leading to unaut… |
CVE-2023-35149 | Medium | 6.5 | 2023-06-14 | A missing permission check in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers with Overall/Read permission to connect to an… |
CVE-2023-35148 | Medium | 6.5 | 2023-06-14 | A cross-site request forgery (CSRF) vulnerability in Jenkins Digital.ai App Management Publisher Plugin 2.6 and earlier allows attackers to connect to an attac… |
CVE-2023-35147 | Medium | 6.5 | 2023-06-14 | Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier does not restrict the AWS SQS queue name path parameter in an HTTP endpoint, allowing attackers with I… |
CVE-2023-35146 | Medium | 5.4 | 2023-06-14 | Jenkins Template Workflows Plugin 41.v32d86a_313b_4a and earlier does not escape names of jobs used as buildings blocks for Template Workflow Job, resulting in… |
CVE-2023-35145 | Medium | 5.4 | 2023-06-14 | Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in… |
CVE-2023-35144 | Medium | 5.4 | 2023-06-14 | Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape project and build display names on the Build Artifacts As Maven Repository page, result… |
CVE-2023-35143 | Medium | 5.4 | 2023-06-14 | Jenkins Maven Repository Server Plugin 1.10 and earlier does not escape the versions of build artifacts on the Build Artifacts As Maven Repository page, result… |
CVE-2023-35142 | High | 8.1 | 2023-06-14 | Jenkins Checkmarx Plugin 2022.4.3 and earlier disables SSL/TLS validation for connections to the Checkmarx server by default. |
CVE-2023-35141 | High | 8.0 | 2023-06-14 | In Jenkins 2.399 and earlier, LTS 2.387.3 and earlier, POST requests are sent in order to load the list of context actions. If part of the URL includes insuffi… |
CVE-2023-3040 | Low | 3.7 | 2023-06-14 | A debug function in the lua-resty-json package, up to commit id 3ef9492bd3a44d9e51301d6adc3cd1789c8f534a (merged in PR #14) contained an out of bounds access b… |
CVE-2023-3036 | High | 8.6 | 2023-06-14 | An unchecked read in NTP server in github.com/cloudflare/cfnts prior to commit 783490b https://github.com/cloudflare/cfnts/commit/783490b913f05e508a492cd7b02e… |
CVE-2023-3241 | Low | 3.5 | 2023-06-14 | A vulnerability was found in OTCMS up to 6.62 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/read.php?m… |
CVE-2023-3240 | Low | 3.5 | 2023-06-14 | A vulnerability has been found in OTCMS up to 6.62 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file usersN… |
CVE-2023-3239 | Low | 3.5 | 2023-06-14 | A vulnerability, which was classified as problematic, was found in OTCMS up to 6.62. Affected is an unknown function of the file admin/readDeal.php?mudi=readQr… |
CVE-2023-3238 | Medium | 6.3 | 2023-06-14 | A vulnerability, which was classified as critical, has been found in OTCMS up to 6.62. This issue affects some unknown processing of the file /admin/read.php?m… |
CVE-2023-3237 | Medium | 6.3 | 2023-06-14 | A vulnerability classified as critical was found in OTCMS up to 6.62. This vulnerability affects unknown code. The manipulation of the argument username/passwo… |
CVE-2023-3001 | High | 7.8 | 2023-06-14 | A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious payload data, potent… |
CVE-2023-34396 | Medium | 4.3 | 2023-06-14 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30… |
CVE-2023-34149 | Medium | 4.3 | 2023-06-14 | Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30… |
CVE-2023-34000 | High | 7.5 | 2023-06-14 | Unauth. IDOR vulnerability leading to PII Disclosure in WooCommerce Stripe Payment Gateway plugin <= 7.4.0 versions. |
CVE-2023-33933 | High | 7.5 | 2023-06-14 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic… |
CVE-2023-30631 | High | 7.5 | 2023-06-14 | Improper Input Validation vulnerability in Apache Software Foundation Apache Traffic Server. The configuration option proxy.config.http.push_method_enabled di… |
CVE-2023-2570 | High | 7.0 | 2023-06-14 | A CWE-129: Improper Validation of Array Index vulnerability exists that could cause local denial-of-service, and potentially kernel execution when a malicio… |
CVE-2023-2569 | High | 7.8 | 2023-06-14 | A CWE-787: Out-of-Bounds Write vulnerability exists that could cause local denial-of-service, elevation of privilege, and potentially kernel execution when a… |
CVE-2023-1049 | High | 7.8 | 2023-06-14 | A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause execution of malicious code when an unsuspicious use… |
CVE-2023-0837 | Medium | 6.6 | 2023-06-14 | An improper authorization check of local device settings in TeamViewer Remote between version 15.41 and 15.42.7 for Windows and macOS allows an unprivileged u… |
CVE-2023-3236 | Medium | 6.3 | 2023-06-14 | A vulnerability classified as critical has been found in mccms up to 2.6.5. This affects the function pic_save of the file sys/apps/controllers/admin/Comic.php… |
CVE-2023-3235 | Medium | 6.3 | 2023-06-14 | A vulnerability was found in mccms up to 2.6.5. It has been rated as critical. Affected by this issue is the function pic_api of the file sys/apps/controllers/… |
CVE-2023-3234 | Medium | 4.3 | 2023-06-14 | A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been declared as problematic. Affected by this vulnerability is the function put_image of the… |
CVE-2023-3233 | Medium | 6.3 | 2023-06-14 | A vulnerability was found in Zhong Bang CRMEB up to 4.6.0. It has been classified as critical. Affected is the function get_image_base64 of the file api/contro… |
CVE-2023-3232 | Medium | 6.3 | 2023-06-14 | A vulnerability was found in Zhong Bang CRMEB up to 4.6.0 and classified as critical. This issue affects some unknown processing of the file /api/wechat/app_au… |
CVE-2023-3231 | Low | 3.1 | 2023-06-14 | A vulnerability has been found in UJCMS up to 6.0.2 and classified as problematic. This vulnerability affects unknown code of the component ZIP Package Handler… |
CVE-2023-3230 | High | 7.5 | 2023-06-14 | Missing Authorization in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3229 | Medium | 6.5 | 2023-06-14 | Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3228 | Medium | 5.7 | 2023-06-14 | Business Logic Errors in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3227 | Medium | 5.7 | 2023-06-14 | Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0. |
CVE-2023-3189 | Low | 3.5 | 2023-06-14 | A vulnerability, which was classified as problematic, was found in SourceCodester Online School Fees System 1.0. This affects an unknown part of the file /pays… |
CVE-2023-24937 | Medium | 6.5 | 2023-06-14 | Windows CryptoAPI Denial of Service Vulnerability |
CVE-2023-3203 | Medium | 4.3 | 2023-06-14 | The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_limit_product function. Th… |
CVE-2023-3201 | Medium | 4.3 | 2023-06-14 | The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_title function… |
CVE-2023-3200 | Medium | 4.3 | 2023-06-14 | The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_new_order_message function… |
CVE-2023-3198 | Medium | 4.3 | 2023-06-14 | The MStore API plugin for WordPress is vulnerable to Cross-Site Request Forgery due to missing nonce validation on the mstore_update_status_order_message funct… |
CVE-2023-33146 | High | 7.8 | 2023-06-14 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-33145 | Medium | 6.5 | 2023-06-14 | Microsoft Edge (Chromium-based) Information Disclosure Vulnerability |
CVE-2023-33144 | Medium | 6.6 | 2023-06-14 | Visual Studio Code Spoofing Vulnerability |
CVE-2023-33142 | Medium | 6.5 | 2023-06-14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
CVE-2023-33140 | Medium | 6.5 | 2023-06-14 | Microsoft OneNote Spoofing Vulnerability |
CVE-2023-33139 | Medium | 5.5 | 2023-06-14 | Visual Studio Information Disclosure Vulnerability |
CVE-2023-33137 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-33135 | High | 7.3 | 2023-06-14 | .NET and Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-33133 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-33132 | Medium | 6.3 | 2023-06-14 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-33131 | High | 8.8 | 2023-06-14 | Microsoft Outlook Remote Code Execution Vulnerability |
CVE-2023-33130 | High | 7.3 | 2023-06-14 | Microsoft SharePoint Server Spoofing Vulnerability |
CVE-2023-33129 | Medium | 6.5 | 2023-06-14 | Microsoft SharePoint Server Denial of Service Vulnerability |
CVE-2023-33128 | High | 7.3 | 2023-06-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-33126 | High | 7.3 | 2023-06-14 | .NET and Visual Studio Remote Code Execution Vulnerability |
CVE-2023-32032 | Medium | 6.5 | 2023-06-14 | .NET and Visual Studio Elevation of Privilege Vulnerability |
CVE-2023-32029 | High | 7.8 | 2023-06-14 | Microsoft Excel Remote Code Execution Vulnerability |
CVE-2023-32022 | High | 7.6 | 2023-06-14 | Windows Server Service Security Feature Bypass Vulnerability |
CVE-2023-32021 | High | 7.1 | 2023-06-14 | Windows SMB Witness Service Security Feature Bypass Vulnerability |
CVE-2023-32020 | Medium | 5.6 | 2023-06-14 | Windows DNS Spoofing Vulnerability |
CVE-2023-32019 | Medium | 4.7 | 2023-06-14 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-32018 | High | 7.8 | 2023-06-14 | Windows Hello Remote Code Execution Vulnerability |
CVE-2023-32017 | High | 7.8 | 2023-06-14 | Microsoft PostScript Printer Driver Remote Code Execution Vulnerability |
CVE-2023-32016 | Medium | 5.5 | 2023-06-14 | Windows Installer Information Disclosure Vulnerability |
CVE-2023-32015 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-32014 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-32013 | Medium | 5.3 | 2023-06-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2023-32012 | High | 7.8 | 2023-06-14 | Windows Container Manager Service Elevation of Privilege Vulnerability |
CVE-2023-32011 | High | 7.5 | 2023-06-14 | Windows iSCSI Discovery Service Denial of Service Vulnerability |
CVE-2023-32010 | High | 7.0 | 2023-06-14 | Windows Bus Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-32009 | High | 8.8 | 2023-06-14 | Windows Collaborative Translation Framework Elevation of Privilege Vulnerability |
CVE-2023-32008 | High | 7.8 | 2023-06-14 | Windows Resilient File System (ReFS) Remote Code Execution Vulnerability |
CVE-2023-29373 | High | 8.8 | 2023-06-14 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-29372 | High | 8.8 | 2023-06-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-29371 | High | 7.8 | 2023-06-14 | Windows GDI Elevation of Privilege Vulnerability |
CVE-2023-29370 | High | 7.8 | 2023-06-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-29369 | Medium | 6.5 | 2023-06-14 | Remote Procedure Call Runtime Denial of Service Vulnerability |
CVE-2023-29368 | High | 7.0 | 2023-06-14 | Windows Filtering Platform Elevation of Privilege Vulnerability |
CVE-2023-29367 | High | 7.8 | 2023-06-14 | iSCSI Target WMI Provider Remote Code Execution Vulnerability |
CVE-2023-29366 | High | 7.8 | 2023-06-14 | Windows Geolocation Service Remote Code Execution Vulnerability |
CVE-2023-29365 | High | 7.8 | 2023-06-14 | Windows Media Remote Code Execution Vulnerability |
CVE-2023-29364 | High | 7.0 | 2023-06-14 | Windows Authentication Elevation of Privilege Vulnerability |
CVE-2023-29363 | Critical | 9.8 | 2023-06-14 | Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability |
CVE-2023-29362 | High | 8.8 | 2023-06-14 | Remote Desktop Client Remote Code Execution Vulnerability |
CVE-2023-29361 | High | 7.0 | 2023-06-14 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-29360 | High | 8.4 | 2023-06-14 | Microsoft Streaming Service Elevation of Privilege Vulnerability |
CVE-2023-29359 | High | 7.8 | 2023-06-14 | GDI Elevation of Privilege Vulnerability |
CVE-2023-29358 | High | 7.8 | 2023-06-14 | Windows GDI Elevation of Privilege Vulnerability |