2023 CVEs (page 227)
Page 227 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20750 | Medium | 4.1 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a race condition. This could lead to local information disclosure with System execution privileges need… |
CVE-2023-20749 | Medium | 6.7 | 2023-06-06 | In swpm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20747 | Medium | 4.4 | 2023-06-06 | In vcu, there is a possible memory corruption due to type confusion. This could lead to local denial of service with System execution privileges needed. User i… |
CVE-2023-20746 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20745 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20744 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. User… |
CVE-2023-20743 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to improper locking. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20742 | Medium | 4.4 | 2023-06-06 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20741 | Medium | 4.4 | 2023-06-06 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20740 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20739 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible memory corruption due to a logic error. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20738 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20737 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20736 | Medium | 6.4 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20735 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20734 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20733 | Medium | 6.7 | 2023-06-06 | In vcu, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution privileges needed. U… |
CVE-2023-20732 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20731 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20730 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20729 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20728 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20725 | Medium | 6.7 | 2023-06-06 | In preloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pri… |
CVE-2023-20724 | Medium | 6.7 | 2023-06-06 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20723 | Medium | 6.7 | 2023-06-06 | In Bluetooth, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution priv… |
CVE-2023-20716 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20715 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20712 | Medium | 6.7 | 2023-06-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-33659 | High | 7.5 | 2023-06-06 | A heap buffer overflow vulnerability exists in NanoMQ 0.17.2. The vulnerability can be triggered by calling the function nmq_subinfo_decode() in the file mqtt_… |
CVE-2023-33460 | Medium | 6.5 | 2023-06-06 | There's a memory leak in yajl 2.1.0 with use of yajl_tree_parse function. which will cause out-of-memory in server and cause crash. |
CVE-2023-33381 | High | 7.2 | 2023-06-06 | A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0b7_2). The vulnerab… |
CVE-2023-3121 | Low | 3.5 | 2023-06-06 | A vulnerability has been found in Dahua Smart Parking Management up to 20230528 and classified as problematic. This vulnerability affects unknown code of the f… |
CVE-2023-3120 | Medium | 6.3 | 2023-06-06 | A vulnerability, which was classified as critical, was found in SourceCodester Service Provider Management System 1.0. This affects an unknown part of the file… |
CVE-2023-3119 | Medium | 6.3 | 2023-06-06 | A vulnerability, which was classified as critical, has been found in SourceCodester Service Provider Management System 1.0. Affected by this issue is some unkn… |
CVE-2023-1779 | Medium | 4.3 | 2023-06-06 | Exposure of Sensitive Information to an unauthorized actor vulnerability in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtu… |
CVE-2023-0985 | High | 8.8 | 2023-06-06 | An Authorization Bypass vulnerability was found in MB Connect Lines mbCONNECT24, mymbCONNECT24 and Helmholz' myREX24 and myREX24.virtual version <= 2.13.3. An… |
CVE-2023-2833 | High | 8.8 | 2023-06-06 | The ReviewX plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.13 due to insufficient restriction on the 'rx_set_… |
CVE-2023-20727 | Medium | 4.4 | 2023-06-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-21670 | High | 7.8 | 2023-06-06 | Memory Corruption in GPU Subsystem due to arbitrary command execution from GPU in privileged mode. |
CVE-2023-21669 | High | 8.2 | 2023-06-06 | Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address. |
CVE-2023-21661 | High | 7.5 | 2023-06-06 | Transient DOS while parsing WLAN beacon or probe-response frame. |
CVE-2023-21660 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while parsing FT Information Elements. |
CVE-2023-21659 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing frames with missing header fields. |
CVE-2023-21658 | High | 7.5 | 2023-06-06 | Transient DOS in WLAN Firmware while processing the received beacon or probe response frame. |
CVE-2023-21657 | High | 7.8 | 2023-06-06 | Memoru corruption in Audio when ADSP sends input during record use case. |
CVE-2023-21656 | High | 7.8 | 2023-06-06 | Memory corruption in WLAN HOST while receiving an WMI event from firmware. |
CVE-2023-21632 | High | 8.4 | 2023-06-06 | Memory corruption in Automotive GPU while querying a gsl memory node. |
CVE-2023-21628 | High | 8.4 | 2023-06-06 | Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command. |
CVE-2023-30915 | Medium | 5.5 | 2023-06-06 | In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30914 | Medium | 5.5 | 2023-06-06 | In email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30866 | Medium | 5.5 | 2023-06-06 | In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30865 | Medium | 5.5 | 2023-06-06 | In dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. |
CVE-2023-30864 | High | 7.8 | 2023-06-06 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-30863 | High | 7.8 | 2023-06-06 | In Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges. |
CVE-2023-2546 | High | 8.8 | 2023-06-06 | The WP User Switch plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.0.2. This is due to incorrect authentication… |
CVE-2023-32628 | High | 7.2 | 2023-06-06 | In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to modify the file extension of… |
CVE-2023-32540 | High | 7.2 | 2023-06-06 | In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file overwrite vulnerability, which could allow an attacker to overwrite any file in the o… |
CVE-2023-22450 | High | 7.2 | 2023-06-06 | In Advantech WebAccss/SCADA v9.1.3 and prior, there is an arbitrary file upload vulnerability that could allow an attacker to upload an ASP script file to a… |
CVE-2023-34103 | High | 7.3 | 2023-06-05 | Avo is an open source ruby on rails admin panel creation framework. In affected versions some avo fields are vulnerable to Cross Site Scripting (XSS) when rend… |
CVE-2023-34102 | High | 8.3 | 2023-06-05 | Avo is an open source ruby on rails admin panel creation framework. The polymorphic field type stores the classes to operate on when updating a record with use… |
CVE-2023-3079 | High | 8.8 | 2023-06-05 | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-3027 | High | 7.8 | 2023-06-05 | The grc-policy-propagator allows security escalation within the cluster. The propagator allows policies which contain some dynamically obtained values (instead… |
CVE-2023-24510 | High | 7.5 | 2023-06-05 | On the affected platforms running EOS, a malformed DHCP packet might cause the DHCP relay agent to restart. |
CVE-2023-3111 | High | 7.8 | 2023-06-05 | A use after free vulnerability was found in prepare_to_relocate in fs/btrfs/relocation.c in btrfs in the Linux Kernel. This possible flaw can be triggered by c… |
CVE-2023-34097 | High | 7.8 | 2023-06-05 | hoppscotch is an open source API development ecosystem. In versions prior to 2023.4.5 the database password is exposed in the logs when showing the database co… |
CVE-2023-33410 | High | 8.8 | 2023-06-05 | Minical 1.0.0 and earlier contains a CSV injection vulnerability which allows an attacker to execute remote code. The vulnerability exists due to insufficient… |
CVE-2023-33409 | Medium | 6.5 | 2023-06-05 | Minical 1.0.0 is vulnerable to Cross Site Request Forgery (CSRF) via minical/public/application/controllers/settings/company.php. |
CVE-2023-33408 | Medium | 5.4 | 2023-06-05 | Minical 1.0.0 is vulnerable to Cross Site Scripting (XSS). The vulnerability exists due to insufficient input validation in the application's user input handli… |
CVE-2023-31893 | High | 7.5 | 2023-06-05 | Telefnica Brasil Vivo Play (IPTV) Firmware: 2023.04.04.01.06.15 is vulnerable to Denial of Service (DoS) via DNS Recursion. |
CVE-2023-29631 | Critical | 9.8 | 2023-06-05 | PrestaShop jmsslider 1.6.0 is vulnerable to Incorrect Access Control via ajax_jmsslider.php. |
CVE-2023-29630 | Critical | 9.8 | 2023-06-05 | PrestaShop jmsmegamenu 1.1.x and 2.0.x is vulnerable to SQL Injection via ajax_jmsmegamenu.php. |
CVE-2023-29629 | Critical | 9.8 | 2023-06-05 | PrestaShop jmsthemelayout 2.5.5 is vulnerable to SQL Injection via ajax_jmsvermegamenu.php. |
CVE-2023-33970 | Medium | 5.4 | 2023-06-05 | Kanboard is open source project management software that focuses on the Kanban methodology. A vulnerability related to a `missing access control` was found, wh… |
CVE-2023-33969 | Medium | 6.4 | 2023-06-05 | Kanboard is open source project management software that focuses on the Kanban methodology. A stored Cross site scripting (XSS) allows an attacker to execute a… |
CVE-2023-33968 | Medium | 5.4 | 2023-06-05 | Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to a missing access control vu… |
CVE-2023-33956 | Medium | 4.3 | 2023-06-05 | Kanboard is open source project management software that focuses on the Kanban methodology. Versions prior to 1.2.30 are subject to an Insecure direct object r… |
CVE-2023-29344 | High | 7.8 | 2023-06-05 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-33524 | Medium | 5.3 | 2023-06-05 | Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses to the affected URL, one enumerates Contact information on the host wh… |
CVE-2023-3109 | Medium | 5.4 | 2023-06-05 | Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8. |
CVE-2023-33733 | High | 7.8 | 2023-06-05 | Reportlab up to v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file. |
CVE-2023-33693 | Medium | 5.5 | 2023-06-05 | A buffer overflow in EasyPlayerPro-Win v3.2.19.0106 to v3.6.19.0823 allows attackers to cause a Denial of Service (DoS) via a crafted XML file. |
CVE-2023-33690 | Medium | 6.5 | 2023-06-05 | SonicJS up to v0.7.0 allows attackers to execute an authenticated path traversal when an attacker injects special characters into the filename of a backup CMS. |
CVE-2023-33518 | Medium | 5.3 | 2023-06-05 | emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other infor… |
CVE-2023-33386 | Critical | 9.8 | 2023-06-05 | MarsCTF 1.2.1 has an arbitrary file upload vulnerability in the interface for uploading attachments in the background. |
CVE-2023-32766 | Medium | 6.1 | 2023-06-05 | Gitpod before 2022.11.3 allows XSS because redirection can occur for some protocols outside of the trusted set of three (vscode: vscode-insiders: jetbrains-gat… |
CVE-2023-2634 | Medium | 4.8 | 2023-06-05 | The Get your number WordPress plugin through 1.1.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to p… |
CVE-2023-2572 | Medium | 6.1 | 2023-06-05 | The Survey Maker WordPress plugin before 3.4.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scrip… |
CVE-2023-2571 | Medium | 6.1 | 2023-06-05 | The Quiz Maker WordPress plugin before 6.4.2.7 does not escape some parameters before outputting them back in attributes, leading to Reflected Cross-Site Scrip… |
CVE-2023-2503 | Medium | 6.1 | 2023-06-05 | The 10Web Social Post Feed WordPress plugin before 1.2.9 does not sanitise and escape some parameter before outputting it back in a page, leading to a Reflecte… |
CVE-2023-2489 | Medium | 4.8 | 2023-06-05 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape some of its settings, which could allo… |
CVE-2023-2488 | Medium | 6.1 | 2023-06-05 | The Stop Spammers Security | Block Spam Users, Comments, Forms WordPress plugin before 2023 does not sanitise and escape various parameters before outputting t… |
CVE-2023-2472 | Medium | 6.1 | 2023-06-05 | The Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue WordPress plugin before 3.1.61 does not sanitise and escape a parameter before outputti… |
CVE-2023-2337 | Medium | 6.1 | 2023-06-05 | The ConvertKit WordPress plugin before 2.2.1 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting… |
CVE-2023-2224 | Medium | 4.8 | 2023-06-05 | The SEO by 10Web WordPress plugin before 1.2.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2023-0900 | High | 7.2 | 2023-06-05 | The Pricing Table Builder WordPress plugin through 1.1.6 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL… |
CVE-2023-0545 | Medium | 4.8 | 2023-06-05 | The Hostel WordPress plugin before 1.1.5.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform S… |
CVE-2023-0152 | Medium | 5.4 | 2023-06-05 | The WP Multi Store Locator WordPress plugin through 2.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/pos… |
CVE-2023-27989 | Medium | 6.5 | 2023-06-05 | A buffer overflow vulnerability in the CGI program of the Zyxel NR7101 firmware versions prior to V1.00(ABUV.8)C0 could allow a remote authenticated attacker… |
CVE-2023-3066 | High | 8.1 | 2023-06-05 | Incorrect Authorization vulnerability in Mobatime mobile application AMXGT100 allows a low-privileged user to impersonate anyone else, including administrators… |
CVE-2023-3065 | Critical | 9.1 | 2023-06-05 | Improper Authentication vulnerability in Mobatime mobile application AMXGT100 allows Authentication Bypass.This issue affects Mobatime mobile application AMXGT… |