2023 CVEs (page 255)
Page 255 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2177 | Medium | 5.5 | 2023-04-20 | A null pointer dereference issue was found in the sctp network protocol in net/sctp/stream_sched.c in Linux Kernel. If stream_in allocation is failed, stream_o… |
CVE-2023-2176 | High | 7.8 | 2023-04-20 | A vulnerability was found in compare_netdev_and_ip in drivers/infiniband/core/cma.c in RDMA in the Linux Kernel. The improper cleanup results in out-of-boundar… |
CVE-2023-2131 | Critical | 10.0 | 2023-04-20 | Versions of INEA ME RTU firmware prior to 3.36 are vulnerable to OS command injection, which could allow an attacker to remotely execute arbitrary code. |
CVE-2023-28459 | Medium | 6.5 | 2023-04-20 | pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload crafted HTML documents that trigger the read… |
CVE-2023-28458 | Medium | 4.3 | 2023-04-20 | pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Organizers can trigger the overwriting (with the standard pretalx 404… |
CVE-2023-20873 | Critical | 9.8 | 2023-04-20 | In Spring Boot versions 3.0.0 - 3.0.5, 2.7.0 - 2.7.10, and older unsupported versions, an application that is deployed to Cloud Foundry could be susceptible to… |
CVE-2023-20865 | High | 7.2 | 2023-04-20 | VMware Aria Operations for Logs contains a command injection vulnerability. A malicious actor with administrative privileges in VMware Aria Operations for Logs… |
CVE-2023-20864 | Critical | 9.8 | 2023-04-20 | VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria Operations for… |
CVE-2023-27090 | Medium | 5.4 | 2023-04-20 | Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter. |
CVE-2023-30076 | Critical | 9.8 | 2023-04-20 | Sourcecodester Judging Management System v1.0 is vulnerable to SQL Injection via /php-jms/print_judges.php?print_judges.php=&se_name=&sub_event_id=. |
CVE-2023-23579 | High | 7.8 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds write past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This c… |
CVE-2023-22846 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vuln… |
CVE-2023-22354 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulner… |
CVE-2023-22321 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out-of-bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerab… |
CVE-2023-22295 | Low | 3.3 | 2023-04-20 | Datakit CrossCadWare_x64.dll contains an out of bounds read past the end of an allocated buffer while parsing a specially crafted SLDPRT file. This vulnerabili… |
CVE-2023-30616 | Medium | 6.5 | 2023-04-20 | Form block is a wordpress plugin designed to make form creation easier. Versions prior to 1.0.2 are subject to a Cross-Site Request Forgery due to a missing no… |
CVE-2023-29528 | Critical | 9.0 | 2023-04-20 | XWiki Commons are technical libraries common to several other top level XWiki projects. The "restricted" mode of the HTML cleaner in XWiki, introduced in versi… |
CVE-2023-27495 | Medium | 5.3 | 2023-04-20 | @fastify/csrf-protection is a plugin which helps protect Fastify servers against CSRF attacks. The CSRF protection enforced by the @fastify/csrf-protection lib… |
CVE-2023-23938 | Medium | 5.9 | 2023-04-20 | Tuleap is a Free & Source tool for end to end traceability of application and system developments. Affected versions are subject to a cross site scripting atta… |
CVE-2023-1255 | Medium | 5.9 | 2023-04-20 | Issue summary: The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading t… |
CVE-2023-27351 | High | 7.5 | 2023-04-20 | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not requir… |
CVE-2023-27350 | Critical | 9.8 | 2023-04-20 | This vulnerability allows remote attackers to bypass authentication on affected installations of PaperCut NG 22.0.5 (Build 63914). Authentication is not requir… |
CVE-2023-25601 | Medium | 4.3 | 2023-04-20 | On version 3.0.0 through 3.1.1, Apache DolphinScheduler's python gateway suffered from improper authentication: an attacker could use a socket bytes attack wit… |
CVE-2023-29926 | Critical | 9.8 | 2023-04-20 | PowerJob V4.3.2 has unauthorized interface that causes remote code execution. |
CVE-2023-27652 | Medium | 5.5 | 2023-04-20 | An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges cause a denial of service via the update_info field of the _d… |
CVE-2023-22309 | Medium | 6.1 | 2023-04-20 | Reflective Cross-Site-Scripting in Webconf in Tribe29 Checkmk Appliance before 1.6.4. |
CVE-2023-1767 | Medium | 4.3 | 2023-04-20 | The Snyk Advisor website (https://snyk.io/advisor/) was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the conten… |
CVE-2023-2193 | Medium | 6.5 | 2023-04-20 | Mattermost fails to invalidate existing authorization codes when deauthorizing an OAuth2 app, allowing an attacker possessing an authorization code to generate… |
CVE-2023-2112 | Low | 3.6 | 2023-04-20 | Desktop component service allows lateral movement between sessions in M-Files before 23.4.12455.0. |
CVE-2023-0384 | Medium | 6.5 | 2023-04-20 | User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption for a scheduled… |
CVE-2023-0383 | High | 7.5 | 2023-04-20 | User-controlled operations could have allowed Denial of Service in M-Files Server before 23.4.12528.1 due to uncontrolled memory consumption. |
CVE-2023-28047 | High | 7.3 | 2023-04-20 | Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation. A local low privilege attacke… |
CVE-2023-2191 | Medium | 4.8 | 2023-04-20 | Cross-site Scripting (XSS) - Stored in GitHub repository azuracast/azuracast prior to 0.18. |
CVE-2023-2166 | Medium | 5.5 | 2023-04-19 | A null pointer dereference issue was found in can protocol in net/can/af_can.c in the Linux before Linux. ml_priv may not be initialized in the receive path of… |
CVE-2023-28328 | Medium | 5.5 | 2023-04-19 | A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not ch… |
CVE-2023-28327 | Medium | 5.5 | 2023-04-19 | A NULL pointer dereference flaw was found in the UNIX protocol in net/unix/diag.c In unix_diag_get_exact in the Linux Kernel. The newly allocated skb does not… |
CVE-2023-23451 | Critical | 9.8 | 2023-04-19 | The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERN… |
CVE-2023-1382 | Medium | 4.7 | 2023-04-19 | A data race flaw was found in the Linux kernel, between where con is allocated and con->sock is set. This issue leads to a NULL pointer dereference when access… |
CVE-2023-30797 | High | 7.5 | 2023-04-19 | Netflix Lemur before version 1.3.2 used insufficiently random values when generating default credentials. The insufficiently random values may allow an attacke… |
CVE-2023-2162 | Medium | 5.5 | 2023-04-19 | A use-after-free vulnerability was found in iscsi_sw_tcp_session_create in drivers/scsi/iscsi_tcp.c in SCSI sub-component in the Linux Kernel. In this flaw an… |
CVE-2023-28124 | Medium | 5.5 | 2023-04-19 | Improper usage of symmetric encryption in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow users with access to UI Desktop configuration file… |
CVE-2023-28123 | Medium | 5.5 | 2023-04-19 | A permission misconfiguration in UI Desktop for Windows (Version 0.59.1.71 and earlier) could allow an user to hijack VPN credentials while UID VPN is starting… |
CVE-2023-28122 | High | 7.8 | 2023-04-19 | A local privilege escalation (LPE) vulnerability in UI Desktop for Windows (Version 0.59.1.71 and earlier) allows a malicious actor with local access to a Wind… |
CVE-2023-21100 | High | 7.8 | 2023-04-19 | In inflate of inflate.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with no additi… |
CVE-2023-21099 | High | 7.8 | 2023-04-19 | In multiple methods of PackageInstallerSession.java, there is a possible way to start foreground services from the background due to a logic error in the code… |
CVE-2023-21098 | High | 7.8 | 2023-04-19 | In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This… |
CVE-2023-21097 | High | 7.8 | 2023-04-19 | In toUriInner of Intent.java, there is a possible way to launch an arbitrary activity due to a confused deputy. This could lead to local escalation of privileg… |
CVE-2023-21096 | Critical | 9.8 | 2023-04-19 | In OnWakelockReleased of attribution_processor.cc, there is a use after free that could lead to remote code execution with no additional execution privileges n… |
CVE-2023-21094 | High | 7.8 | 2023-04-19 | In sanitize of LayerState.cpp, there is a possible way to take over the screen display and swap the display content due to a missing permission check. This cou… |
CVE-2023-21093 | High | 7.8 | 2023-04-19 | In extractRelativePath of FileUtils.java, there is a possible way to access files in a directory belonging to other applications due to a path traversal error… |
CVE-2023-21092 | High | 7.8 | 2023-04-19 | In retrieveServiceLocked of ActiveServices.java, there is a possible way to dynamically register a BroadcastReceiver using permissions of System App due to imp… |
CVE-2023-21091 | Medium | 5.5 | 2023-04-19 | In canDisplayLocalUi of AppLocalePickerActivity.java, there is a possible way to change system app locales due to a missing permission check. This could lead t… |
CVE-2023-21090 | Medium | 5.0 | 2023-04-19 | In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with n… |
CVE-2023-21089 | High | 7.8 | 2023-04-19 | In startInstrumentation of ActivityManagerService.java, there is a possible way to keep the foreground service alive while the app is in the background. This c… |
CVE-2023-21088 | High | 7.8 | 2023-04-19 | In deliverOnFlushComplete of LocationProviderManager.java, there is a possible way to bypass background activity launch restrictions due to a logic error in th… |
CVE-2023-21087 | Medium | 5.5 | 2023-04-19 | In PreferencesHelper.java, an uncaught exception may cause the device to get stuck in a boot loop. This could lead to local persistent denial of service with n… |
CVE-2023-21086 | High | 7.8 | 2023-04-19 | In isToggleable of SecureNfcEnabler.java and SecureNfcPreferenceController.java, there is a possible way to enable NFC from a secondary account due to a permis… |
CVE-2023-21085 | High | 8.8 | 2023-04-19 | In nci_snd_set_routing_cmd of nci_hmsgs.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to remote (proximal/adjacent… |
CVE-2023-21084 | Medium | 6.7 | 2023-04-19 | In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with Sy… |
CVE-2023-21083 | High | 7.8 | 2023-04-19 | In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. T… |
CVE-2023-21082 | Medium | 5.5 | 2023-04-19 | In getNumberFromCallIntent of NewOutgoingCallIntentBroadcaster.java, there is a possible way to enumerate other user's contact phone number due to a confused d… |
CVE-2023-21081 | High | 7.8 | 2023-04-19 | In multiple functions of PackageInstallerService.java and related files, there is a possible way to bypass background activity launch restrictions due to a log… |
CVE-2023-21080 | Medium | 5.5 | 2023-04-19 | In register_notification_rsp of btif_rc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosu… |
CVE-2023-20967 | High | 7.8 | 2023-04-19 | In avdt_scb_hdl_pkt_no_frag of avdt_scb_act.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation o… |
CVE-2023-20950 | High | 7.8 | 2023-04-19 | In AlarmManagerActivity of AlarmManagerActivity.java, there is a possible way to bypass background activity launch restrictions via a pendingIntent. This could… |
CVE-2023-20941 | Medium | 6.6 | 2023-04-19 | In acc_ctrlrequest_composite of f_accessory.c, there is a possible out of bounds write due to a missing bounds check. This could lead to physical escalation of… |
CVE-2023-20935 | Medium | 5.5 | 2023-04-19 | In deserialize of multiple files, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no… |
CVE-2023-20909 | Medium | 5.5 | 2023-04-19 | In multiple functions of RunningTasks.java, there is a possible privilege escalation due to a missing privilege check. This could lead to local information dis… |
CVE-2023-20862 | Medium | 6.3 | 2023-04-19 | In Spring Security, versions 5.7.x prior to 5.7.8, versions 5.8.x prior to 5.8.3, and versions 6.0.x prior to 6.0.3, the logout support does not properly clean… |
CVE-2023-29922 | Medium | 5.3 | 2023-04-19 | PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create user/save interface. |
CVE-2023-1900 | High | 7.8 | 2023-04-19 | A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data o… |
CVE-2023-1587 | Medium | 5.8 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus ve… |
CVE-2023-1586 | Medium | 6.5 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file cr… |
CVE-2023-1585 | Medium | 6.5 | 2023-04-19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary fil… |
CVE-2023-30614 | High | 7.1 | 2023-04-19 | Pay is a payments engine for Ruby on Rails 6.0 and higher. In versions prior to 6.3.2 a payments info page of Pay is susceptible to reflected Cross-site script… |
CVE-2023-30612 | Medium | 4.0 | 2023-04-19 | Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors in the Cloud Hyperv… |
CVE-2023-30611 | Medium | 4.3 | 2023-04-19 | Discourse-reactions is a plugin that allows user to add their reactions to the post in the Discourse messaging platform. In affected versions data about what r… |
CVE-2023-30610 | Medium | 5.5 | 2023-04-19 | aws-sigv4 is a rust library for low level request signing in the aws cloud platform. The `aws_sigv4::SigningParams` struct had a derived `Debug` implementation… |
CVE-2023-22894 | Medium | 4.9 | 2023-04-19 | Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filt… |
CVE-2023-22893 | High | 7.5 | 2023-04-19 | Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A rem… |
CVE-2023-22621 | High | 7.2 | 2023-04-19 | Strapi through 4.5.5 allows authenticated Server-Side Template Injection (SSTI) that can be exploited to execute arbitrary code on the server. A remote attacke… |
CVE-2023-29586 | Medium | 5.5 | 2023-04-19 | Code Sector TeraCopy 3.9.7 does not perform proper access validation on the source folder during a copy operation. This leads to Arbitrary File Read by allowin… |
CVE-2023-29923 | Medium | 5.3 | 2023-04-19 | PowerJob V4.3.1 is vulnerable to Insecure Permissions. via the list job interface. |
CVE-2023-27777 | Medium | 5.4 | 2023-04-19 | Cross-site scripting (XSS) vulnerability was discovered in Online Jewelry Shop v1.0 that allows attackers to execute arbitrary script via a crafted URL. |
CVE-2023-30463 | High | 7.5 | 2023-04-19 | Altran picoTCP through 1.7.0 allows memory corruption (and subsequent denial of service) because of an integer overflow in pico_ipv6_alloc when processing larg… |
CVE-2023-29921 | Medium | 5.3 | 2023-04-19 | PowerJob V4.3.1 is vulnerable to Incorrect Access Control via the create app interface. |
CVE-2023-27776 | Medium | 5.4 | 2023-04-19 | A stored cross-site scripting (XSS) vulnerability in /index.php?page=category_list of Online Jewelry Shop v1.0 allows attackers to execute arbitrary web script… |
CVE-2023-26599 | Medium | 6.1 | 2023-04-19 | XSS vulnerability in TripleSign in Tripleplay Platform releases prior to Caveman 3.4.0 allows attackers to inject client-side code to run as an authenticated u… |
CVE-2023-25760 | High | 8.8 | 2023-04-19 | Incorrect Access Control in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated user to modify other users passwords via a crafted request… |
CVE-2023-25759 | Medium | 5.4 | 2023-04-19 | OS Command Injection in TripleData Reporting Engine in Tripleplay Platform releases prior to Caveman 3.4.0 allows authenticated users to run unprivileged OS le… |
CVE-2023-22645 | High | 8.0 | 2023-04-19 | An Improper Privilege Management vulnerability in SUSE kubewarden allows attackers to read arbitrary secrets if they get access to the ServiceAccount kubewarde… |
CVE-2023-0317 | Medium | 4.9 | 2023-04-19 | Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensitive information. |
CVE-2023-2170 | Medium | 5.5 | 2023-04-19 | The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due… |
CVE-2023-2169 | Medium | 5.5 | 2023-04-19 | The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Related Posts functionality in versions up to, and including, 3.6.4 due… |
CVE-2023-2168 | Medium | 5.5 | 2023-04-19 | The TaxoPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Suggest Terms Title field in versions up to, and including, 3.6.4 due t… |
CVE-2023-25620 | Medium | 6.5 | 2023-04-19 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when a malicious p… |
CVE-2023-25619 | High | 7.5 | 2023-04-19 | A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists that could cause denial of service of the controller when communicating o… |
CVE-2023-2137 | High | 8.8 | 2023-04-19 | Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML pag… |
CVE-2023-2136 | Critical | 9.6 | 2023-04-19 | Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a s… |
CVE-2023-2135 | High | 7.5 | 2023-04-19 | Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentia… |