2023 CVEs (page 25)
Page 25 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-20004 | Medium | 4.4 | 2024-11-15 | Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local fil… |
CVE-2023-20154 | Critical | 9.1 | 2024-11-15 | A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface wit… |
CVE-2023-20125 | High | 8.6 | 2024-11-15 | A vulnerability in the local interface of Cisco BroadWorks Network Server could allow an unauthenticated, remote attacker to exhaust system resources, causing… |
CVE-2023-4679 | Medium | 5.5 | 2024-11-15 | A use after free vulnerability exists in GPAC version 2.3-DEV-revrelease, specifically in the gf_filterpacket_del function in filter_core/filter.c at line 38… |
CVE-2023-2332 | Medium | 4.8 | 2024-11-15 | A stored Cross-site Scripting (XSS) vulnerability exists in the Conditions tab of Pricing Rules in pimcore/pimcore versions 10.5.19. The vulnerability is prese… |
CVE-2023-0737 | Medium | 6.5 | 2024-11-15 | wallabag version 2.5.2 contains a Cross-Site Request Forgery (CSRF) vulnerability that allows attackers to arbitrarily delete user accounts via the /account/de… |
CVE-2023-0109 | Medium | 5.4 | 2024-11-15 | A stored cross-site scripting (XSS) vulnerability was discovered in usememos/memos version 0.9.1. This vulnerability allows an attacker to upload a JavaScript… |
CVE-2023-4458 | Medium | 4.0 | 2024-11-14 | A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation of user-supplied da… |
CVE-2023-4134 | Medium | 5.5 | 2024-11-14 | A use-after-free vulnerability was found in the cyttsp4_core driver in the Linux kernel. This issue occurs in the device cleanup routine due to a possible rear… |
CVE-2023-34049 | Medium | 6.7 | 2024-11-14 | The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an att… |
CVE-2023-38920 | Medium | 4.8 | 2024-11-13 | Cross Site Scripting vulnerability in Cyber Cafe Management System v.1.0 allows a local attacker to execute arbitrary code via a crafted script to the adminnam… |
CVE-2023-35686 | High | 7.8 | 2024-11-13 | In PVRSRVRGXKickTA3DKM of rgxta3d.c, there is a possible arbitrary code execution due to improper input validation. This could lead to local escalation of priv… |
CVE-2023-35659 | High | 7.8 | 2024-11-13 | In DevmemIntChangeSparse of devicemem_server.c, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalat… |
CVE-2023-52268 | Critical | 9.1 | 2024-11-12 | The End-User Portal module before 1.0.65 for FreeScout sometimes allows an attacker to authenticate as an arbitrary user because a session token can be sent to… |
CVE-2023-50176 | Medium | 4.2 | 2024-11-12 | A session fixation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.3, FortiOS 7.2.0 through 7.2.7, FortiOS 7.0.0 through 7.0.13 allows attacker to execute… |
CVE-2023-47543 | Medium | 5.4 | 2024-11-12 | An authorization bypass through user-controlled key vulnerability [CWE-639] in Fortinet FortiPortal version 7.0.0 through 7.0.3 allows an authenticated attacke… |
CVE-2023-44255 | Medium | 4.1 | 2024-11-12 | An exposure of sensitive information to an unauthorized actor [CWE-200] in Fortinet FortiManager before 7.4.2, FortiAnalyzer before 7.4.2 and FortiAnalyzer-Big… |
CVE-2023-32736 | High | 7.3 | 2024-11-12 | A vulnerability has been identified in SIMATIC S7-PLCSIM V16 (All versions), SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 Safety V16 (All versions), SI… |
CVE-2023-40457 | | 2024-11-11 | The BGP daemon in Extreme Networks ExtremeXOS (aka EXOS) 30.7.1.1 allows an attacker (who is not on a directly connected network) to cause a denial of service… | |
CVE-2023-27195 | Critical | 9.8 | 2024-11-08 | Trimble TM4Web 22.2.0 allows unauthenticated attackers to access /inc/tm_ajax.msw?func=UserfromUUID&uuid= to retrieve the last registration access code and use… |
CVE-2023-1973 | High | 7.5 | 2024-11-07 | A flaw was found in Undertow package. Using the FormAuthenticationMechanism, a malicious user could trigger a Denial of Service by sending crafted requests, le… |
CVE-2023-1932 | Medium | 6.1 | 2024-11-07 | A flaw was found in hibernate-validator's 'isValid' method in the org.hibernate.validator.internal.constraintvalidators.hv.SafeHtmlValidator class, which can b… |
CVE-2023-29126 | Medium | 4.2 | 2024-11-05 | The Waybox Enel X web management application contains a PHP-type juggling vulnerability that may allow a brute force process and under certain conditions bypas… |
CVE-2023-29125 | Critical | 9.0 | 2024-11-05 | A heap buffer overflow could be triggered by sending a specific packet to TCP port 7700. |
CVE-2023-29122 | Medium | 6.7 | 2024-11-05 | Under certain conditions, access to service libraries is granted to account they should not have access to. |
CVE-2023-29121 | Critical | 9.6 | 2024-11-05 | Waybox Enel TCF Agent service could be used to get administrator’s privileges over the Waybox system. |
CVE-2023-29120 | Critical | 9.6 | 2024-11-05 | Waybox Enel X web management application could be used to execute arbitrary OS commands and provide administrator’s privileges over the Waybox system. |
CVE-2023-29119 | Critical | 9.6 | 2024-11-05 | Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/dbstore.php. |
CVE-2023-29118 | Critical | 9.6 | 2024-11-05 | Waybox Enel X web management application could execute arbitrary requests on the internal database via /admin/versions.php. |
CVE-2023-29117 | High | 8.8 | 2024-11-05 | Waybox Enel X web management API authentication could be bypassed and provide administrator’s privileges over the Waybox system. |
CVE-2023-29116 | Medium | 4.3 | 2024-11-05 | Under certain conditions, through a request directed to the Waybox Enel X web management application, information like Waybox OS version or service configurati… |
CVE-2023-29115 | Medium | 6.5 | 2024-11-05 | In certain conditions a request directed to the Waybox Enel X Web management application could cause a denial-of-service (e.g. reboot). |
CVE-2023-29114 | Medium | 5.7 | 2024-11-05 | System logs could be accessed through web management application due to a lack of access control. An attacker can obtain the following sensitive information… |
CVE-2023-52920 | High | 7.8 | 2024-11-05 | In the Linux kernel, the following vulnerability has been resolved: bpf: support non-r10 register spill/fill to/from stack in precision tracking Use instruct… |
CVE-2023-34445 | High | 8.8 | 2024-11-05 | Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.render.php XSS are possible for scripts outside of script tags. This… |
CVE-2023-34444 | High | 8.8 | 2024-11-05 | Combodo iTop is a simple, web based IT Service Management tool. When displaying pages/ajax.searchform.php XSS are possible for scripts outside of script tags… |
CVE-2023-34443 | High | 8.8 | 2024-11-05 | Combodo iTop is a simple, web based IT Service Management tool. When displaying page Run queries Cross-site Scripting (XSS) are possible for scripts outside of… |
CVE-2023-52045 | Medium | 6.1 | 2024-10-31 | Studio-42 eLfinder 2.1.62 contains a filename restriction bypass leading to a persistent Cross-site Scripting (XSS) vulnerability. |
CVE-2023-52044 | Critical | 9.8 | 2024-10-31 | Studio-42 eLfinder 2.1.62 is vulnerable to Remote Code Execution (RCE) as there is no restriction for uploading files with the .php8 extension. |
CVE-2023-52066 | High | 7.2 | 2024-10-30 | http.zig commit 76cf5 was discovered to contain a CRLF injection vulnerability via the url parameter. |
CVE-2023-5816 | Medium | 4.9 | 2024-10-30 | The Code Explorer plugin for WordPress is vulnerable to arbitrary external file reading in all versions up to, and including, 1.4.5. This is due to the fact th… |
CVE-2023-26248 | Medium | 5.3 | 2024-10-25 | The Kademlia DHT (go-libp2p-kad-dht 0.20.0 and earlier) used in IPFS (0.18.1 and earlier) assigns routing information for content (i.e., information about who… |
CVE-2023-50355 | Low | 3.6 | 2024-10-23 | HCL Sametime is impacted by the error messages containing sensitive information. An attacker can use this information to launch another, more focused attack. |
CVE-2023-50310 | Medium | 4.9 | 2024-10-23 | IBM CICS Transaction Gateway for Multiplatforms 9.2 and 9.3 transmits or stores authentication credentials, but it uses an insecure method that is susceptible… |
CVE-2023-52919 | Medium | 5.5 | 2024-10-22 | In the Linux kernel, the following vulnerability has been resolved: nfc: nci: fix possible NULL pointer dereference in send_acknowledge() Handle memory alloc… |
CVE-2023-52918 | Medium | 5.5 | 2024-10-22 | In the Linux kernel, the following vulnerability has been resolved: media: pci: cx23885: check cx23885_vdev_init() return cx23885_vdev_init() can return a NU… |
CVE-2023-6243 | Medium | 4.3 | 2024-10-19 | The EventON PRO - WordPress Virtual Event Calendar Plugin plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including… |
CVE-2023-6080 | High | 7.8 | 2024-10-18 | Lakeside Software’s SysTrack LsiAgent Installer version 10.7.8 for Windows contains a local privilege escalation vulnerability which allows attackers SYSTEM le… |
CVE-2023-49570 | High | 7.4 | 2024-10-18 | A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software trusts a certificate issued by an entity that… |
CVE-2023-6058 | Medium | 6.8 | 2024-10-18 | A vulnerability has been identified in Bitdefender Safepay's handling of HTTPS connections. The issue arises when the product blocks a connection due to an unt… |
CVE-2023-6057 | High | 7.4 | 2024-10-18 | A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of certificates issued using… |
CVE-2023-6056 | High | 7.4 | 2024-10-18 | A vulnerability has been discovered in Bitdefender Total Security HTTPS scanning functionality that results in the improper trust of self-signed certificates… |
CVE-2023-6055 | High | 7.4 | 2024-10-18 | A vulnerability has been identified in Bitdefender Total Security HTTPS scanning functionality where the software fails to properly validate website certificat… |
CVE-2023-49567 | Medium | 6.8 | 2024-10-18 | A vulnerability has been identified in the Bitdefender Total Security HTTPS scanning functionality where the product incorrectly checks the site's certificate… |
CVE-2023-39593 | Medium | 5.6 | 2024-10-17 | Insecure permissions in the sys_exec function of MariaDB v10.5 allows authenticated attackers to execute arbitrary commands with elevated privileges. NOTE: thi… |
CVE-2023-26785 | Critical | 9.8 | 2024-10-17 | MariaDB v10.5 was discovered to contain a remote code execution (RCE) vulnerability via UDF Code in a Shared Object File, followed by a "create function" state… |
CVE-2023-6729 | High | 7.3 | 2024-10-17 | Nokia SR OS routers allow read-write access to the entire file system via SFTP or SCP for users configured with "access console." Consequently, a low privilege… |
CVE-2023-6728 | Low | 3.3 | 2024-10-17 | Nokia SR OS bof.cfg file encryption is vulnerable to a brute force attack. This weakness allows an attacker in possession of the encrypted file to decrypt the… |
CVE-2023-32266 | | 2024-10-16 | Untrusted Search Path vulnerability in OpenText™ Application Lifecycle Management (ALM),Quality Center allows Code Inclusion. The vulnerability allows a user t… | |
CVE-2023-32189 | Medium | 5.9 | 2024-10-16 | Insecure handling of ssh keys used to bootstrap clients allows local attackers to potentially gain access to the keys |
CVE-2023-32196 | Medium | 6.6 | 2024-10-16 | A vulnerability has been identified whereby privilege escalation checks are not properly enforced for RoleTemplateobjects when external=true, which in specific… |
CVE-2023-32194 | High | 7.2 | 2024-10-16 | A vulnerability has been identified when granting a create or * global role for a resource type of "namespaces"; no matter the API group, the subject will rece… |
CVE-2023-32193 | High | 8.3 | 2024-10-16 | A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in Norman's public API endpoint can be exploited. This can lead to an… |
CVE-2023-32192 | High | 8.3 | 2024-10-16 | A vulnerability has been identified in which unauthenticated cross-site scripting (XSS) in the API Server's public API endpoint can be exploited, allowing an… |
CVE-2023-32191 | Critical | 9.9 | 2024-10-16 | When RKE provisions a cluster, it stores the cluster state in a configmap called `full-cluster-state` inside the `kube-system` namespace of the cluster itself… |
CVE-2023-32190 | High | 7.8 | 2024-10-16 | mlocate's %post script allows RUN_UPDATEDB_AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges. |
CVE-2023-32188 | | 2024-10-16 | A user can reverse engineer the JWT token (JSON Web Token) used in authentication for Manager and API access, forging a valid NeuVector Token to perform malici… | |
CVE-2023-22650 | High | 8.8 | 2024-10-16 | A vulnerability has been identified in which Rancher does not automatically clean up a user which has been deleted from the configured authentication provider… |
CVE-2023-7296 | Medium | 6.4 | 2024-10-16 | The BigBlueButton plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the the moderator code and viewer code fields in versions up to, and in… |
CVE-2023-7295 | Medium | 6.1 | 2024-10-16 | The Video Grid plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.21 due to… |
CVE-2023-22649 | High | 8.4 | 2024-10-16 | A vulnerability has been identified which may lead to sensitive data being leaked into Rancher's audit logs. [Rancher Audit Logging](https://ranchermanager.doc… |
CVE-2023-7294 | High | 7.1 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the cre… |
CVE-2023-7293 | Medium | 4.3 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_… |
CVE-2023-7292 | Medium | 4.3 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized notification dismissal due to a missing capability check on th… |
CVE-2023-7291 | High | 7.1 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the… |
CVE-2023-7290 | Medium | 4.3 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the check_… |
CVE-2023-7289 | Medium | 5.4 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized API key update due to a missing capability check on the paytiu… |
CVE-2023-7288 | Medium | 5.4 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the upd… |
CVE-2023-7287 | Medium | 5.4 | 2024-10-16 | The Paytium: Mollie payment forms & donations plugin for WordPress is vulnerable to unauthorized subscription cancellation due to a missing capability check on… |
CVE-2023-7286 | Medium | 6.5 | 2024-10-16 | The plugin ACF Quick Edit Fields for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.2.2. This makes it possibl… |
CVE-2023-31493 | Medium | 6.6 | 2024-10-15 | RCE (Remote Code Execution) exists in ZoneMinder through 1.36.33 as an attacker can create a new .php log file in language folder, while executing a crafted pa… |
CVE-2023-48082 | Critical | 9.1 | 2024-10-14 | Nagios XI before 2024R1 was discovered to improperly handle API keys generation (randomly-generated), allowing attackers to possibly generate the same set of A… |
CVE-2023-50780 | High | 8.8 | 2024-10-14 | Apache ActiveMQ Artemis allows access to diagnostic information and controls through MBeans, which are also exposed through the authenticated Jolokia endpoint… |
CVE-2023-42133 | Medium | 6.7 | 2024-10-11 | PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account priv… |
CVE-2023-25581 | | 2024-10-10 | pac4j is a security framework for Java. `pac4j-core` prior to version 4.0.0 is affected by a Java deserialization vulnerability. The vulnerability affects syst… | |
CVE-2023-46586 | Critical | 9.1 | 2024-10-09 | cgi.c in weborf .0.17, 0.18, 0.19, and 0.20 (before 1.0) lacks '\0' termination of the path for CGI scripts because strncpy is misused. |
CVE-2023-45872 | Medium | 6.5 | 2024-10-09 | An issue was discovered in Qt before 6.2.11 and 6.3.x through 6.6.x before 6.6.1. When a QML image refers to an image whose content is not known yet, there is… |
CVE-2023-45361 | Medium | 6.1 | 2024-10-09 | An issue was discovered in VectorComponentUserLinks.php in the Vector Skin component in MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-intro-page Mal… |
CVE-2023-45359 | Medium | 6.5 | 2024-10-09 | An issue was discovered in the Vector Skin component for MediaWiki before 1.39.5 and 1.40.x before 1.40.1. vector-toc-toggle-button-label is not escaped, but s… |
CVE-2023-37154 | High | 8.4 | 2024-10-09 | check_by_ssh in Nagios nagios-plugins 2.4.5 allows arbitrary command execution via ProxyCommand, LocalCommand, and PermitLocalCommand with \${IFS}. This has be… |
CVE-2023-36325 | Low | 3.7 | 2024-10-09 | i2p before 2.3.0 (Java) allows de-anonymizing the public IPv4 and IPv6 addresses of i2p hidden services (aka eepsites) via a correlation attack across the IPv4… |
CVE-2023-52952 | High | 8.5 | 2024-10-08 | A vulnerability has been identified in HiMed Cockpit 12 pro (J31032-K2017-H259) (All versions >= V11.5.1 < V11.6.2), HiMed Cockpit 14 pro+ (J31032-K2017-H435)… |
CVE-2023-6362 | High | 7.3 | 2024-10-07 | A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured… |
CVE-2023-6361 | High | 7.3 | 2024-10-07 | A vulnerability has been discovered in Winhex affecting version 16.1 SR-1 and 20.4. This vulnerability consists of a buffer overflow controlling the Structured… |
CVE-2023-26771 | Medium | 6.5 | 2024-10-04 | Taskcafe 0.3.2 is vulnerable to Cross Site Scripting (XSS). There is a lack of validation in the filetype when uploading a SVG profile picture with a XSS paylo… |
CVE-2023-26770 | Critical | 9.8 | 2024-10-04 | TaskCafe 0.3.2 lacks validation in the Cookie value. Any unauthenticated attacker who knows a registered UserID can change the password of that user. |
CVE-2023-37822 | High | 8.2 | 2024-10-03 | The Eufy Homebase 2 before firmware version 3.3.4.1h creates a dedicated wireless network for its ecosystem, which serves as a proxy to the end user's primary… |
CVE-2023-7273 | Medium | 6.8 | 2024-10-01 | Cross site request forgery in Kiteworks OwnCloud allows an unauthenticated attacker to forge requests. If a request has no Authorization header, it is created… |
CVE-2023-3441 | Medium | 6.6 | 2024-10-01 | An issue has been discovered in GitLab EE/CE affecting all versions starting from 8.0 before 16.4. The product did not sufficiently warn about security implica… |
CVE-2023-46175 | Medium | 4.4 | 2024-09-26 | IBM Cloud Pak for Multicloud Management 2.3 through 2.3 FP8 stores user credentials in a log file plain clear text which can be read by a privileged user. |