2023 CVEs (page 249)
Page 249 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-25787 | Medium | 5.9 | 2023-05-03 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wbolt team WP资源下载管理 plugin <= 1.3.9 versions. |
CVE-2023-25786 | Medium | 5.9 | 2023-05-03 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Thom Stark Eyes Only: User Access Shortcode plugin <= 1.8.2 versions. |
CVE-2023-25784 | Medium | 5.9 | 2023-05-03 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bon Plan Gratos Sticky Ad Bar plugin <= 1.3.1 versions. |
CVE-2023-25783 | Medium | 5.9 | 2023-05-03 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Moss FireCask Like & Share Button plugin <= 1.1.5 versions. |
CVE-2023-23790 | High | 7.1 | 2023-05-03 | Cross-Site Request Forgery (CSRF) vulnerability in Pods Framework Team Pods – Custom Content Types and Fields plugin <= 2.9.10.2 versions. |
CVE-2023-28070 | Medium | 6.7 | 2023-05-03 | Alienware Command Center Application, versions 5.5.43.0 and prior, contain an improper access control vulnerability. A local malicious user could potentially… |
CVE-2023-22691 | Medium | 4.3 | 2023-05-03 | Cross-Site Request Forgery (CSRF) vulnerability in Tips and Tricks HQ, Ruhul Amin Category Specific RSS feed Subscription plugin <= v2.1 versions. |
CVE-2023-29839 | Medium | 5.4 | 2023-05-03 | A Stored Cross Site Scripting (XSS) vulnerability exists in multiple pages of Hotel Druid version 3.0.4, which allows arbitrary execution of commands. The vuln… |
CVE-2023-2468 | Medium | 4.3 | 2023-05-03 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who had compromised the renderer process to… |
CVE-2023-2467 | Medium | 4.3 | 2023-05-03 | Inappropriate implementation in Prompts in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to bypass permissions restrictions via a c… |
CVE-2023-2466 | Medium | 4.3 | 2023-05-03 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to spoof the contents of the security UI via a crafte… |
CVE-2023-2465 | Medium | 4.3 | 2023-05-03 | Inappropriate implementation in CORS in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chro… |
CVE-2023-2464 | Medium | 4.3 | 2023-05-03 | Inappropriate implementation in PictureInPicture in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a malicious extens… |
CVE-2023-2463 | Medium | 4.3 | 2023-05-03 | Inappropriate implementation in Full Screen Mode in Google Chrome on Android prior to 113.0.5672.63 allowed a remote attacker to hide the contents of the Omnib… |
CVE-2023-2462 | Medium | 4.3 | 2023-05-03 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to obfuscate main origin data via a crafted HTML page… |
CVE-2023-2461 | High | 8.8 | 2023-05-03 | Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interact… |
CVE-2023-2460 | High | 7.1 | 2023-05-03 | Insufficient validation of untrusted input in Extensions in Google Chrome prior to 113.0.5672.63 allowed an attacker who convinced a user to install a maliciou… |
CVE-2023-2459 | Medium | 6.5 | 2023-05-03 | Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML… |
CVE-2023-27892 | Low | 3.8 | 2023-05-02 | Insufficient length checks in the ShapeShift KeepKey hardware wallet firmware before 7.7.0 allow a global buffer overflow via crafted messages. Flaws in cf_con… |
CVE-2023-26268 | Medium | 4.4 | 2023-05-02 | Design documents with matching document IDs, from databases on the same cluster, may share a mutable Javascript environment when using these design document fu… |
CVE-2023-31435 | High | 8.1 | 2023-05-02 | Multiple components (such as Onlinetemplate-Verwaltung, Liste aller Teilbereiche, Umfragen anzeigen, and questionnaire previews) in evasys before 8.2 Build 228… |
CVE-2023-31434 | Medium | 5.4 | 2023-05-02 | The parameters nutzer_titel, nutzer_vn, and nutzer_nn in the user profile, and langID and ONLINEID in direct links, in evasys before 8.2 Build 2286 and 9.x bef… |
CVE-2023-31433 | High | 8.8 | 2023-05-02 | A SQL injection issue in Logbuch in evasys before 8.2 Build 2286 and 9.x before 9.0 Build 2401 allows authenticated attackers to execute SQL statements via the… |
CVE-2023-30944 | Medium | 5.6 | 2023-05-02 | The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote atta… |
CVE-2023-30943 | Medium | 6.5 | 2023-05-02 | The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user… |
CVE-2023-30403 | High | 7.5 | 2023-05-02 | An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater Mini_Router v0.131229 allows attackers to bypass login by connecting… |
CVE-2023-29778 | Critical | 9.8 | 2023-05-02 | GL.iNET MT3000 4.1.0 Release 2 is vulnerable to OS Command Injection via /usr/lib/oui-httpd/rpc/logread. |
CVE-2023-26546 | High | 8.8 | 2023-05-02 | European Chemicals Agency IUCLID before 6.27.6 allows remote authenticated users to execute arbitrary code via Server Side Template Injection (SSTI) with a cra… |
CVE-2023-26089 | Critical | 9.8 | 2023-05-02 | European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing. The affected versions… |
CVE-2023-30861 | High | 7.5 | 2023-05-02 | Flask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be… |
CVE-2023-29918 | Medium | 5.4 | 2023-05-02 | RosarioSIS 10.8.4 is vulnerable to CSV injection via the Periods Module. |
CVE-2023-29868 | Medium | 6.5 | 2023-05-02 | Zammad 5.3.x (Fixed in 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker with agent and customer roles could perform unauthorized cha… |
CVE-2023-29867 | Medium | 6.5 | 2023-05-02 | Zammad 5.3.x (Fixed 5.4.0) is vulnerable to Incorrect Access Control. An authenticated attacker could gain information about linked accounts of users involved… |
CVE-2023-2479 | Critical | 9.8 | 2023-05-02 | OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4. |
CVE-2023-29856 | Critical | 9.8 | 2023-05-02 | D-Link DIR-868L Hardware version A1, firmware version 1.12 is vulnerable to Buffer Overflow. The vulnerability is in scandir.sgi binary. |
CVE-2023-2477 | Low | 3.5 | 2023-05-02 | A vulnerability was found in Funadmin up to 3.2.3. It has been declared as problematic. Affected by this vulnerability is the function tagLoad of the file Cx.p… |
CVE-2023-2476 | Low | 3.5 | 2023-05-02 | A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement… |
CVE-2023-2445 | Medium | 4.9 | 2023-05-02 | Improper access control in Subscriptions Folder path filter in Devolutions Server 2023.1.1 and earlier allows attackers with administrator privileges to retrie… |
CVE-2023-2475 | Low | 3.5 | 2023-05-02 | A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Mes… |
CVE-2023-2474 | Medium | 4.3 | 2023-05-02 | A vulnerability has been found in Rebuild 3.2 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site requ… |
CVE-2023-2473 | Medium | 4.3 | 2023-05-02 | A vulnerability was found in Dreamer CMS up to 4.1.3. It has been declared as problematic. This vulnerability affects the function updatePwd of the file UserCo… |
CVE-2023-29772 | Medium | 5.2 | 2023-05-02 | A Cross-site scripting (XSS) vulnerability in the System Log/General Log page of the administrator web UI in ASUS RT-AC51U wireless router firmware version up… |
CVE-2023-23723 | Medium | 5.9 | 2023-05-02 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions. |
CVE-2023-30869 | Critical | 9.8 | 2023-05-02 | Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1… |
CVE-2023-32007 | High | 8.8 | 2023-05-02 | ** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authenticatio… |
CVE-2023-31207 | Medium | 4.4 | 2023-05-02 | Transmission of credentials within query parameters in Checkmk <= 2.1.0p26, <= 2.0.0p35, and <= 2.2.0b6 (beta) may cause the automation user's secret to be wri… |
CVE-2023-2000 | Medium | 5.4 | 2023-05-02 | Mattermost Desktop App fails to validate a mattermost server redirection and navigates to an arbitrary website |
CVE-2023-1196 | High | 8.8 | 2023-05-02 | The Advanced Custom Fields (ACF) Free and Pro WordPress plugins 6.x before 6.1.0 and 5.x before 5.12.5 unserialize user controllable data, which could allow us… |
CVE-2023-1911 | Medium | 4.3 | 2023-05-02 | The Blocksy Companion WordPress plugin before 1.8.82 does not ensure that posts to be accessed via a shortcode are already public and can be viewed, allowing a… |
CVE-2023-1861 | Medium | 5.4 | 2023-05-02 | The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back in the logs dashboard, which could all… |
CVE-2023-1809 | High | 7.5 | 2023-05-02 | The Download Manager WordPress plugin before 6.3.0 leaks master key information without the need for a password, allowing attackers to download arbitrary passw… |
CVE-2023-1805 | Medium | 6.1 | 2023-05-02 | The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribu… |
CVE-2023-1804 | Medium | 6.1 | 2023-05-02 | The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter before outputting it back in an attribu… |
CVE-2023-1730 | Critical | 9.8 | 2023-05-02 | The SupportCandy WordPress plugin before 3.1.5 does not validate and escape user input before using it in an SQL statement, which could allow unauthenticated a… |
CVE-2023-1669 | High | 7.2 | 2023-05-02 | The SEOPress WordPress plugin before 6.5.0.3 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform… |
CVE-2023-1614 | Medium | 4.8 | 2023-05-02 | The WP Custom Author URL WordPress plugin before 1.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin… |
CVE-2023-1554 | Medium | 4.8 | 2023-05-02 | The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as ad… |
CVE-2023-1546 | Medium | 6.1 | 2023-05-02 | The MyCryptoCheckout WordPress plugin before 2.124 does not escape some URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting |
CVE-2023-1525 | Medium | 4.8 | 2023-05-02 | The Site Reviews WordPress plugin before 6.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2023-1125 | Medium | 6.5 | 2023-05-02 | The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to… |
CVE-2023-1090 | Medium | 4.8 | 2023-05-02 | The SMTP Mailing Queue WordPress plugin before 2.0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2023-1021 | Medium | 4.8 | 2023-05-02 | The amr ical events lists WordPress plugin through 6.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin… |
CVE-2023-0924 | High | 7.2 | 2023-05-02 | The ZYREX POPUP WordPress plugin through 1.0 does not validate the type of files uploaded when creating a popup, allowing a high privileged user (such as an Ad… |
CVE-2023-0891 | Medium | 5.4 | 2023-05-02 | The StagTools WordPress plugin before 2.3.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the… |
CVE-2023-21666 | High | 8.4 | 2023-05-02 | Memory Corruption in Graphics while accessing a buffer allocated through the graphics pool. |
CVE-2023-21665 | High | 8.4 | 2023-05-02 | Memory corruption in Graphics while importing a file. |
CVE-2023-21642 | High | 8.4 | 2023-05-02 | Memory corruption in HAB Memory management due to broad system privileges via physical address. |
CVE-2023-2247 | Medium | 5.3 | 2023-05-02 | In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview function |
CVE-2023-30639 | High | 7.1 | 2023-05-01 | Archer Platform 6.8 before 6.12 P6 HF1 (6.12.0.6.1) contains a stored XSS vulnerability. A remote authenticated malicious Archer user could potentially exploit… |
CVE-2023-29681 | Medium | 5.7 | 2023-05-01 | Cleartext Transmission in cookie:ecos_pw: in Tenda N301 v6.0, firmware v12.03.01.06_pt allows an authenticated attacker on the LAN or WLAN to intercept communi… |
CVE-2023-29680 | Medium | 5.7 | 2023-05-01 | Cleartext Transmission in set-cookie:ecos_pw: Tenda N301 v6.0, Firmware v12.02.01.61_multi allows an authenticated attacker on the LAN or WLAN to intercept com… |
CVE-2023-27108 | Medium | 5.3 | 2023-05-01 | An issue was discovered in KaiOS 3.0. The pre-installed Communications application exposes a Web Activity that returns the user's call log without origin or pe… |
CVE-2023-27035 | Medium | 6.5 | 2023-05-01 | An issue discovered in Obsidian Canvas 1.1.9 allows remote attackers to send desktop notifications, record user audio and other unspecified impacts via embedde… |
CVE-2023-26987 | Medium | 6.5 | 2023-05-01 | An issue discovered in Konga 0.14.9 allows remote attackers to manipulate user accounts regardless of privilege via crafted POST request. |
CVE-2023-2197 | Low | 2.5 | 2023-05-01 | HashiCorp Vault Enterprise 1.13.0 up to 1.13.1 is vulnerable to a padding oracle attack when using an HSM in conjunction with the CKM_AES_CBC_PAD or CKM_AES_CB… |
CVE-2023-22924 | Medium | 4.9 | 2023-05-01 | A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker with administr… |
CVE-2023-22923 | Medium | 6.5 | 2023-05-01 | A format string vulnerability in a binary of the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker to c… |
CVE-2023-22922 | High | 7.5 | 2023-05-01 | A buffer overflow vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote unauthenticated attacker to cause DoS… |
CVE-2023-22921 | High | 7.5 | 2023-05-01 | A cross-site scripting (XSS) vulnerability in the Zyxel NBG-418N v2 firmware versions prior to V1.00(AARP.14)C0 could allow a remote authenticated attacker wit… |
CVE-2023-22919 | High | 8.8 | 2023-05-01 | The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute… |
CVE-2023-22503 | Medium | 5.3 | 2023-05-01 | Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Conf… |
CVE-2023-2451 | Medium | 6.3 | 2023-05-01 | A vulnerability was found in SourceCodester Online DJ Management System 1.0 and classified as critical. This issue affects some unknown processing of the file… |
CVE-2023-29643 | Medium | 5.4 | 2023-05-01 | Cross Site Scripting (XSS) vulnerability in PerfreeBlog 3.1.2 allows attackers to execute arbitrary code via the Post function. |
CVE-2023-29641 | Medium | 6.1 | 2023-05-01 | Cross Site Scripting (XSS) vulnerability in pandao editor.md thru 1.5.0 allows attackers to inject arbitrary web script or HTML via crafted markdown text. |
CVE-2023-29639 | Medium | 5.4 | 2023-05-01 | Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via editing an article in the "blog art… |
CVE-2023-29638 | Medium | 5.4 | 2023-05-01 | Cross Site Scripting (XSS) vulnerability in WinterChenS my-site before commit 3f0423da6d5200c7a46e200da145c1f54ee18548, allows attackers to inject arbitrary we… |
CVE-2023-29637 | Medium | 6.1 | 2023-05-01 | Cross Site Scripting (XSS) vulnerability in Qbian61 forum-java, allows attackers to inject arbitrary web script or HTML via editing the article content in the… |
CVE-2023-29636 | Medium | 5.4 | 2023-05-01 | Cross site scripting (XSS) vulnerability in ZHENFENG13 My-Blog, allows attackers to inject arbitrary web script or HTML via the "title" field in the "blog mana… |
CVE-2023-29635 | Critical | 9.8 | 2023-05-01 | File upload vulnerability in Antabot White-Jotter v0.2.2, allows remote attackers to execute malicious code via the file parameter to function coversUpload. |
CVE-2023-28092 | Medium | 6.1 | 2023-05-01 | A potential security vulnerability has been identified in HPE ProLiant RL300 Gen11 Server. The vulnerability could result in the system being vulnerable to exp… |
CVE-2023-25492 | Medium | 6.3 | 2023-05-01 | A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other undefined behavior through a format string inject… |
CVE-2023-0683 | High | 8.3 | 2023-05-01 | A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call. |
CVE-2023-30859 | High | 7.2 | 2023-05-01 | Triton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands… |
CVE-2023-30063 | High | 7.5 | 2023-05-01 | D-Link DIR-890L FW1.10 A1 is vulnerable to Authentication bypass. |
CVE-2023-30061 | High | 7.5 | 2023-05-01 | D-Link DIR-879 v105A1 is vulnerable to Authentication Bypass via phpcgi. |
CVE-2023-0896 | High | 8.8 | 2023-05-01 | A default password was reported in Lenovo Smart Clock Essential with Alexa Built In that could allow unauthorized device access to an attacker with local netwo… |
CVE-2023-2236 | High | 7.8 | 2023-05-01 | A use-after-free vulnerability in the Linux Kernel io_uring subsystem can be exploited to achieve local privilege escalation. Both io_install_fixed_file and i… |
CVE-2023-2235 | High | 7.8 | 2023-05-01 | A use-after-free vulnerability in the Linux Kernel Performance Events system can be exploited to achieve local privilege escalation. The perf_group_detach f… |
CVE-2023-2429 | Critical | 9.8 | 2023-04-30 | Improper Access Control in GitHub repository thorsten/phpmyfaq prior to 3.1.13. |
CVE-2023-2428 | Medium | 5.4 | 2023-04-30 | Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13. |