2023 CVEs (page 242)
Page 242 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-29282 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2023-29281 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29280 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29279 | Medium | 5.5 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2023-29278 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an Access of Uninitialized Pointer vulnerability that could result in arbitrary code exe… |
CVE-2023-29277 | Medium | 5.5 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. A… |
CVE-2023-29276 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in th… |
CVE-2023-29275 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29274 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-29273 | High | 7.8 | 2023-05-11 | Adobe Substance 3D Painter versions 8.3.0 (and earlier) is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a… |
CVE-2023-28361 | Medium | 6.5 | 2023-05-11 | A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by… |
CVE-2023-28360 | Medium | 4.3 | 2023-05-11 | An omission of security-relevant information vulnerability exists in Brave desktop prior to version 1.48.171 when a user was saving a file there was no downloa… |
CVE-2023-28359 | Medium | 5.3 | 2023-05-11 | A NoSQL injection vulnerability has been identified in the listEmojiCustom method call within Rocket.Chat. This can be exploited by unauthenticated users when… |
CVE-2023-28358 | Medium | 6.1 | 2023-05-11 | A vulnerability has been discovered in Rocket.Chat where a markdown parsing issue in the "Search Messages" feature allows the insertion of malicious tags. This… |
CVE-2023-28357 | Medium | 4.3 | 2023-05-11 | A vulnerability has been identified in Rocket.Chat, where the ACL checks in the Slash Command /mute occur after checking whether a user is a member of a given… |
CVE-2023-28356 | High | 7.5 | 2023-05-11 | A vulnerability has been identified where a maliciously crafted message containing a specific chain of characters can cause the chat to enter a hot loop on one… |
CVE-2023-28325 | Medium | 6.5 | 2023-05-11 | An improper authorization vulnerability exists in Rocket.Chat <6.0 that could allow a hacker to manipulate the rid parameter and change the updateMessage metho… |
CVE-2023-32058 | High | 7.5 | 2023-05-11 | Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assi… |
CVE-2023-31497 | High | 7.8 | 2023-05-11 | Incorrect access control in Quick Heal Technologies Limited Seqrite Endpoint Security (EPS) all versions prior to v8.0 allows attackers to escalate privileges… |
CVE-2023-31146 | High | 7.5 | 2023-05-11 | Vyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, during codegen, the length word of a dynarray is written… |
CVE-2023-2664 | Low | 2.9 | 2023-05-11 | In Xpdf 4.04 (and earlier), a PDF object loop in the embedded file tree leads to infinite recursion and a stack overflow. |
CVE-2023-2663 | Low | 2.9 | 2023-05-11 | In Xpdf 4.04 (and earlier), a PDF object loop in the page label tree leads to infinite recursion and a stack overflow. |
CVE-2023-2662 | Low | 2.9 | 2023-05-11 | In Xpdf 4.04 (and earlier), a bad color space object in the input PDF file can cause a divide-by-zero. |
CVE-2023-29791 | Medium | 6.1 | 2023-05-11 | kodbox <= 1.37 is vulnerable to Cross Site Scripting (XSS) via the debug information. |
CVE-2023-32082 | Low | 3.1 | 2023-05-11 | etcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key na… |
CVE-2023-29195 | Medium | 4.1 | 2023-05-11 | Vitess is a database clustering system for horizontal scaling of MySQL through generalized sharding. Prior to version 16.0.2, users can either intentionally or… |
CVE-2023-27870 | Medium | 5.9 | 2023-05-11 | IBM Spectrum Virtualize 8.5, under certain circumstances, could disclose sensitive credential information while a download from Fix Central is in progress. IB… |
CVE-2023-27554 | Medium | 6.3 | 2023-05-11 | IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could… |
CVE-2023-30394 | Medium | 6.1 | 2023-05-11 | The MoveIt framework 1.1.11 for ROS allows cross-site scripting (XSS) via the API authentication function. NOTE: this issue is disputed by the original reporte… |
CVE-2023-2444 | High | 7.1 | 2023-05-11 | A cross site request forgery vulnerability exists in Rockwell Automation's FactoryTalk Vantagepoint. This vulnerability can be exploited in two ways. If an at… |
CVE-2023-2443 | High | 7.5 | 2023-05-11 | Rockwell Automation ThinManager product allows the use of medium strength ciphers. If the client requests an insecure cipher, a malicious actor could potenti… |
CVE-2023-1834 | Critical | 9.4 | 2023-05-11 | Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running v7.13 may have the telnet and FTP… |
CVE-2023-29031 | High | 7.0 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and m… |
CVE-2023-29030 | High | 7.0 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and m… |
CVE-2023-29029 | Medium | 4.7 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin… |
CVE-2023-29028 | Medium | 4.7 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin… |
CVE-2023-29027 | Medium | 4.7 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin… |
CVE-2023-29026 | Medium | 4.7 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin… |
CVE-2023-29025 | Medium | 4.7 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin… |
CVE-2023-29024 | Medium | 5.5 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product A cross site scripting vulnerability was discovered that… |
CVE-2023-29023 | High | 7.0 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user to view and m… |
CVE-2023-29022 | Medium | 4.7 | 2023-05-11 | A cross site scripting vulnerability was discovered in Rockwell Automation's ArmorStart ST product that could potentially allow a malicious user with admin… |
CVE-2023-25309 | Medium | 6.1 | 2023-05-11 | Cross Site Scripting (XSS) Vulnerability in Fetlife rollout-ui version 0.5, allows attackers to execute arbitrary code via a crafted url to the delete a featur… |
CVE-2023-32075 | Medium | 4.3 | 2023-05-11 | The Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/customer-management-framework-bundle` prior to… |
CVE-2023-29400 | High | 7.3 | 2023-05-11 | Templates containing actions in unquoted HTML attributes (e.g. "attr={{.}}") executed with empty input can result in output with unexpected results when parsed… |
CVE-2023-24540 | Critical | 9.8 | 2023-05-11 | Not all valid JavaScript whitespace characters are considered to be whitespace. Templates containing whitespace characters outside of the character set "\t\n\f… |
CVE-2023-24539 | High | 7.3 | 2023-05-11 | Angle brackets (<>) are not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character… |
CVE-2023-2661 | Medium | 6.3 | 2023-05-11 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the… |
CVE-2023-2660 | Medium | 6.3 | 2023-05-11 | A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This vulnerability affects unknown code of th… |
CVE-2023-2659 | Medium | 6.3 | 2023-05-11 | A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. This affects an unknown part of the file v… |
CVE-2023-22720 | Medium | 6.5 | 2023-05-11 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Robert Macchi WP Links Page plugin <= 4.9.3 versions. |
CVE-2023-2658 | Medium | 6.3 | 2023-05-11 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this issue is some unknow… |
CVE-2023-2657 | Low | 3.5 | 2023-05-11 | A vulnerability classified as problematic was found in SourceCodester Online Computer and Laptop Store 1.0. Affected by this vulnerability is an unknown functi… |
CVE-2023-2656 | Medium | 6.3 | 2023-05-11 | A vulnerability classified as critical has been found in SourceCodester AC Repair and Services System 1.0. Affected is an unknown function of the file /classes… |
CVE-2023-29863 | Critical | 9.8 | 2023-05-11 | Medical Systems Co. Medisys Weblab Products v19.4.03 was discovered to contain a SQL injection vulnerability via the tem:statement parameter in the WSDL files. |
CVE-2023-0859 | Low | 2.2 | 2023-05-11 | Arbitrary Files can be installed in the Setting Data Import function of Office / Small Office Multifunction Printers and Laser Printers(*). *:Satera LBP660C Se… |
CVE-2023-0858 | Low | 3.1 | 2023-05-11 | Improper Authentication of RemoteUI of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network segment to… |
CVE-2023-0857 | Medium | 5.9 | 2023-05-11 | Unintentional change of settings during initial registration of system administrators which uses control protocols. The affected Office / Small Office Multifun… |
CVE-2023-0856 | Critical | 9.8 | 2023-05-11 | Buffer overflow in IPP sides attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the network… |
CVE-2023-0855 | Critical | 9.8 | 2023-05-11 | Buffer overflow in IPP number-up attribute process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the net… |
CVE-2023-0854 | Critical | 9.8 | 2023-05-11 | Buffer overflow in NetBIOS QNAME registering and communication process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an… |
CVE-2023-0853 | Critical | 9.8 | 2023-05-11 | Buffer overflow in mDNS NSEC record registering process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on th… |
CVE-2023-0852 | Critical | 9.8 | 2023-05-11 | Buffer overflow in the Address Book of Mobile Device function of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker… |
CVE-2023-0851 | Critical | 9.8 | 2023-05-11 | Buffer overflow in CPCA Resource Download process of Office / Small Office Multifunction Printers and Laser Printers(*) which may allow an attacker on the netw… |
CVE-2023-31445 | Medium | 5.3 | 2023-05-11 | Cassia Access controller before 2.1.1.2203171453, was discovered to have a unprivileged -information disclosure vulnerability that allows read-only users have… |
CVE-2023-31498 | Critical | 9.8 | 2023-05-11 | A privilege escalation issue was found in PHP Gurukul Hospital Management System In v.4.0 allows a remote attacker to execute arbitrary code and access sensiti… |
CVE-2023-31475 | Critical | 9.8 | 2023-05-11 | An issue was discovered on GL.iNet devices before 3.216. The function guci2_get() found in libglutil.so has a buffer overflow when an item is requested from a… |
CVE-2023-31473 | Medium | 4.9 | 2023-05-11 | An issue was discovered on GL.iNet devices before 3.216. There is an arbitrary file write in which an empty file can be created anywhere on the filesystem. Thi… |
CVE-2023-30256 | Medium | 6.1 | 2023-05-11 | Cross Site Scripting vulnerability found in Webkil QloApps v.1.5.2 allows a remote attacker to obtain sensitive information via the back and email_create param… |
CVE-2023-2490 | Medium | 5.9 | 2023-05-11 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Fernando Briano UserAgent-Spy plugin <= 1.3.1 versions. |
CVE-2023-2653 | Medium | 6.3 | 2023-05-11 | A vulnerability classified as critical was found in SourceCodester Lost and Found Information System 1.0. Affected by this vulnerability is an unknown function… |
CVE-2023-2652 | Medium | 6.3 | 2023-05-11 | A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. Affected is an unknown function of the file /cla… |
CVE-2023-2649 | High | 7.2 | 2023-05-11 | A vulnerability was found in Tenda AC23 16.03.07.45_cn. It has been declared as critical. This vulnerability affects unknown code of the file /bin/ate of the c… |
CVE-2023-2648 | Medium | 6.3 | 2023-05-11 | A vulnerability was found in Weaver E-Office 9.5. It has been classified as critical. This affects an unknown part of the file /inc/jquery/uploadify/uploadify… |
CVE-2023-2647 | Medium | 6.3 | 2023-05-11 | A vulnerability was found in Weaver E-Office 9.5 and classified as critical. Affected by this issue is some unknown functionality of the file /webroot/inc/util… |
CVE-2023-2646 | Medium | 4.5 | 2023-05-11 | A vulnerability has been found in TP-Link Archer C7v2 v2_en_us_180114 and classified as problematic. Affected by this vulnerability is an unknown functionality… |
CVE-2023-2645 | Critical | 9.8 | 2023-05-11 | A vulnerability, which was classified as critical, was found in USR USR-G806 1.0.41. Affected is an unknown function of the component Web Management Page. The… |
CVE-2023-2644 | Medium | 5.3 | 2023-05-11 | A vulnerability, which was classified as problematic, has been found in DigitalPersona FPSensor 1.0.0.1. This issue affects some unknown processing of the file… |
CVE-2023-2643 | Medium | 6.3 | 2023-05-11 | A vulnerability classified as critical was found in SourceCodester File Tracker Manager System 1.0. This vulnerability affects unknown code of the file registe… |
CVE-2023-32668 | Medium | 5.5 | 2023-05-11 | LuaTeX before 1.17.0 allows a document (compiled with the default settings) to make arbitrary network requests. This occurs because full access to the socket l… |
CVE-2023-2642 | Medium | 6.3 | 2023-05-11 | A vulnerability classified as critical has been found in SourceCodester Online Exam System 1.0. This affects an unknown part of the file adminpanel/admin/faceb… |
CVE-2023-2641 | High | 7.3 | 2023-05-11 | A vulnerability was found in SourceCodester Online Internship Management System 1.0. It has been rated as critical. Affected by this issue is some unknown func… |
CVE-2023-31477 | High | 7.5 | 2023-05-11 | A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible to share an arbitrary directory, such a… |
CVE-2023-31442 | High | 7.5 | 2023-05-11 | In Lightbend Akka before 2.8.1, the async-dns resolver (used by Discovery in DNS mode and transitively by Cluster Bootstrap) uses predictable DNS transaction I… |
CVE-2023-30172 | High | 7.5 | 2023-05-11 | A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server… |
CVE-2023-29986 | Medium | 5.3 | 2023-05-11 | spring-boot-actuator-logview 0.2.13 allows Directory Traversal to sibling directories via LogViewEndpoint.view. |
CVE-2023-32080 | Critical | 9.0 | 2023-05-10 | Wings is the server control plane for Pterodactyl Panel. A vulnerability affecting versions prior to 1.7.5 and versions 1.11.0 prior to 1.11.6 impacts anyone r… |
CVE-2023-31166 | Medium | 4.1 | 2023-05-10 | An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation… |
CVE-2023-31165 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31164 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31163 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31162 | Medium | 4.8 | 2023-05-10 | An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow a re… |
CVE-2023-31161 | Medium | 5.9 | 2023-05-10 | An Improper Input Validation vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface could allow an a… |
CVE-2023-31160 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31159 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31158 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31157 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31156 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31155 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |
CVE-2023-31154 | Medium | 4.3 | 2023-05-10 | An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in the Schweitzer Engineering Laboratories Real-Time Aut… |