2023 CVEs (page 257)
Page 257 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21946 | Medium | 6.5 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily ex… |
CVE-2023-21945 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily ex… |
CVE-2023-21944 | Medium | 5.3 | 2023-04-18 | Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability al… |
CVE-2023-21943 | Medium | 5.3 | 2023-04-18 | Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability al… |
CVE-2023-21942 | Medium | 5.3 | 2023-04-18 | Vulnerability in Oracle Essbase (component: Security and Provisioning). The supported version that is affected is 21.4. Difficult to exploit vulnerability al… |
CVE-2023-21941 | Medium | 4.3 | 2023-04-18 | Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Server). Supported versions that are affected are 6.4.0.0.0 and 12.2.1.4… |
CVE-2023-21940 | Medium | 4.4 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior… |
CVE-2023-21939 | Medium | 5.3 | 2023-04-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are… |
CVE-2023-21938 | Low | 3.7 | 2023-04-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected… |
CVE-2023-21937 | Low | 3.7 | 2023-04-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected… |
CVE-2023-21936 | Medium | 5.4 | 2023-04-18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supported versions that are affected are Prior… |
CVE-2023-21935 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily ex… |
CVE-2023-21934 | Medium | 6.8 | 2023-04-18 | Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability al… |
CVE-2023-21933 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploita… |
CVE-2023-21932 | High | 7.2 | 2023-04-18 | Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI). The supported version that is… |
CVE-2023-21931 | High | 7.5 | 2023-04-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2023-21930 | High | 7.4 | 2023-04-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are O… |
CVE-2023-21929 | Medium | 5.5 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploita… |
CVE-2023-21928 | Low | 1.8 | 2023-04-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: IPS repository daemon). The supported version that is affected is 11. Difficult to… |
CVE-2023-21927 | Medium | 4.3 | 2023-04-18 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Interoperability SEC). Supported versions that are affected are P… |
CVE-2023-21926 | Medium | 5.5 | 2023-04-18 | Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are… |
CVE-2023-21925 | Medium | 5.3 | 2023-04-18 | Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are… |
CVE-2023-21924 | Medium | 5.9 | 2023-04-18 | Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are… |
CVE-2023-21923 | High | 8.3 | 2023-04-18 | Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are… |
CVE-2023-21922 | Medium | 6.8 | 2023-04-18 | Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are… |
CVE-2023-21921 | Medium | 5.4 | 2023-04-18 | Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications (component: Core). Supported versions that are affected are… |
CVE-2023-21920 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily ex… |
CVE-2023-21919 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploita… |
CVE-2023-21918 | Medium | 6.8 | 2023-04-18 | Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily explo… |
CVE-2023-21917 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily ex… |
CVE-2023-21916 | Medium | 5.3 | 2023-04-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Web Server). Supported versions that are affected are 8.58, 8… |
CVE-2023-21915 | Medium | 4.6 | 2023-04-18 | Vulnerability in the Oracle Banking Payments product of Oracle Financial Services Applications (component: Book/Internal Transfer). Supported versions that ar… |
CVE-2023-21913 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21912 | High | 7.5 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.41 and prior… |
CVE-2023-21911 | Medium | 4.9 | 2023-04-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable v… |
CVE-2023-21910 | Medium | 6.5 | 2023-04-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web General). Supported versions that a… |
CVE-2023-21909 | Medium | 6.5 | 2023-04-18 | Vulnerability in the Siebel CRM product of Oracle Siebel CRM (component: UI Framework). Supported versions that are affected are 23.3 and prior. Easily exploi… |
CVE-2023-21908 | Medium | 6.0 | 2023-04-18 | Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Suppor… |
CVE-2023-21907 | Medium | 6.0 | 2023-04-18 | Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Suppor… |
CVE-2023-21906 | Medium | 6.1 | 2023-04-18 | Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: SMS Module). Supported versions t… |
CVE-2023-21905 | Medium | 6.1 | 2023-04-18 | Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: Routing Hub). Supported versions… |
CVE-2023-21904 | Medium | 5.3 | 2023-04-18 | Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Trn Journal Domain). Suppor… |
CVE-2023-21903 | Medium | 5.3 | 2023-04-18 | Vulnerability in the Oracle Banking Virtual Account Management product of Oracle Financial Services Applications (component: OBVAM Internal Tfr Domain). Suppo… |
CVE-2023-21902 | Medium | 4.3 | 2023-04-18 | Vulnerability in the Oracle Financial Services Behavior Detection Platform product of Oracle Financial Services Applications (component: Application). The su… |
CVE-2023-21896 | High | 7.0 | 2023-04-18 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported versions that are affected are 10 and 11. Difficult to exploit… |
CVE-2023-22307 | Medium | 5.5 | 2023-04-18 | Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files. |
CVE-2023-22294 | High | 8.8 | 2023-04-18 | Privilege escalation in Tribe29 Checkmk Appliance before 1.6.4 allows authenticated site users to escalate privileges via incorrectly set permissions. |
CVE-2023-29855 | High | 7.2 | 2023-04-18 | WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php. |
CVE-2023-29854 | Medium | 6.1 | 2023-04-18 | DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability in the foreground. |
CVE-2023-25556 | High | 8.3 | 2023-04-18 | A CWE-287: Improper Authentication vulnerability exists that could allow a device to be compromised when a key of less than seven digits is entered and the at… |
CVE-2023-27976 | High | 8.8 | 2023-04-18 | A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided… |
CVE-2023-1548 | Medium | 5.5 | 2023-04-18 | A CWE-269: Improper Privilege Management vulnerability exists that could cause a local user to perform a denial of service through the console server service… |
CVE-2023-2160 | Medium | 6.3 | 2023-04-18 | Weak Password Requirements in GitHub repository modoboa/modoboa prior to 2.1.0. |
CVE-2023-28143 | Medium | 6.7 | 2023-04-18 | Qualys Cloud Agent for macOS (versions 2.5.1-75 before 3.7) installer allows a local escalation of privilege bounded only to the time of installation and only… |
CVE-2023-28142 | Medium | 6.7 | 2023-04-18 | A Race Condition exists in the Qualys Cloud Agent for Windows platform in versions from 3.1.3.34 and before 4.5.3.1. This allows attackers to escalate privile… |
CVE-2023-28141 | Medium | 6.7 | 2023-04-18 | An NTFS Junction condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.8.0.31. Attackers may write files to arbitrary locations… |
CVE-2023-28140 | Medium | 6.7 | 2023-04-18 | An Executable Hijacking condition exists in the Qualys Cloud Agent for Windows platform in versions before 4.5.3.1. Attackers may load a malicious copy of a D… |
CVE-2023-2155 | Low | 2.4 | 2023-04-18 | A vulnerability was found in SourceCodester Air Cargo Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of th… |
CVE-2023-2154 | Medium | 4.7 | 2023-04-18 | A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/?page… |
CVE-2023-29774 | Medium | 5.4 | 2023-04-18 | Dreamer CMS 3.0.1 is vulnerable to stored Cross Site Scripting (XSS). |
CVE-2023-2153 | Low | 3.5 | 2023-04-18 | A vulnerability was found in SourceCodester Complaint Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality… |
CVE-2023-2152 | Medium | 5.3 | 2023-04-18 | A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is… |
CVE-2023-28863 | Critical | 9.1 | 2023-04-18 | AMI MegaRAC SPx12 and SPx13 devices have Insufficient Verification of Data Authenticity. |
CVE-2023-2151 | Medium | 6.3 | 2023-04-18 | A vulnerability, which was classified as critical, was found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function… |
CVE-2023-2150 | Medium | 4.7 | 2023-04-18 | A vulnerability, which was classified as critical, has been found in SourceCodester Task Reminder System 1.0. This issue affects some unknown processing of the… |
CVE-2023-2149 | Medium | 6.3 | 2023-04-18 | A vulnerability classified as critical was found in Campcodes Online Thesis Archiving System 1.0. This vulnerability affects unknown code of the file /admin/us… |
CVE-2023-2148 | Medium | 6.3 | 2023-04-18 | A vulnerability classified as critical has been found in Campcodes Online Thesis Archiving System 1.0. This affects an unknown part of the file /admin/curricul… |
CVE-2023-2147 | Medium | 6.3 | 2023-04-18 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality… |
CVE-2023-2146 | Medium | 6.3 | 2023-04-18 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2023-2020 | Medium | 4.3 | 2023-04-18 | Insufficient permission checks in the REST API in Tribe29 Checkmk <= 2.1.0p27 and <= 2.2.0b4 (beta) allow unauthorized users to schedule downtimes for any host. |
CVE-2023-27092 | Medium | 6.1 | 2023-04-18 | Cross Site Scripting vulnerability found in Jbootfly allows attackers to obtain sensitive information via the username parameter. |
CVE-2023-2145 | Medium | 6.3 | 2023-04-18 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been classified as critical. Affected is an unknown function of the file proj… |
CVE-2023-2144 | Medium | 6.3 | 2023-04-18 | A vulnerability was found in Campcodes Online Thesis Archiving System 1.0 and classified as critical. This issue affects some unknown processing of the file /a… |
CVE-2023-2120 | Medium | 6.1 | 2023-04-18 | The Thumbnail carousel slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and includi… |
CVE-2023-2119 | Medium | 6.1 | 2023-04-18 | The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and i… |
CVE-2023-2138 | Critical | 9.8 | 2023-04-18 | Use of Hard-coded Credentials in GitHub repository nuxtlabs/github-module prior to 1.6.2. |
CVE-2023-30547 | Critical | 9.8 | 2023-04-17 | vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. There exists a vulnerability in exception sanitization of vm2 for versio… |
CVE-2023-30543 | Medium | 5.2 | 2023-04-17 | @web3-react is a framework for building Ethereum Apps . In affected versions the `chainId` may be outdated if the user changes chains as part of the connection… |
CVE-2023-30541 | Medium | 5.3 | 2023-04-17 | OpenZeppelin Contracts is a library for secure smart contract development. A function in the implementation contract may be inaccessible if its selector clashe… |
CVE-2023-30540 | Low | 3.5 | 2023-04-17 | Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this informati… |
CVE-2023-30539 | Medium | 6.5 | 2023-04-17 | Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or being able to… |
CVE-2023-30536 | Medium | 6.5 | 2023-04-17 | slim/psr7 is a PSR-7 implementation for use with Slim 4. In versions prior to 1.6.1 an attacker could sneak in a newline (\n) into both the header names and va… |
CVE-2023-29213 | Critical | 9.0 | 2023-04-17 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions of `org.xwiki.platform:xwiki-plat… |
CVE-2023-29197 | Medium | 5.3 | 2023-04-17 | guzzlehttp/psr7 is a PSR-7 HTTP message library implementation in PHP. Affected versions are subject to improper header parsing. An attacker could sneak in a n… |
CVE-2023-28984 | Medium | 5.3 | 2023-04-17 | A Use After Free vulnerability in the Layer 2 Address Learning Manager (l2alm) of Juniper Networks Junos OS on QFX Series allows an adjacent attacker to cause… |
CVE-2023-28983 | High | 8.8 | 2023-04-17 | An OS Command Injection vulnerability in gRPC Network Operations Interface (gNOI) server module of Juniper Networks Junos OS Evolved allows an authenticated, l… |
CVE-2023-28982 | High | 7.5 | 2023-04-17 | A Missing Release of Memory after Effective Lifetime vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows an u… |
CVE-2023-28981 | Medium | 6.5 | 2023-04-17 | An Improper Input Validation vulnerability in the kernel of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to caus… |
CVE-2023-28980 | Medium | 5.5 | 2023-04-17 | A Use After Free vulnerability in the routing protocol daemon of Juniper Networks Junos OS and Junos OS Evolved allows a locally authenticated attacker with lo… |
CVE-2023-28979 | Medium | 4.7 | 2023-04-17 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the kernel of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to… |
CVE-2023-28978 | Medium | 5.3 | 2023-04-17 | An Insecure Default Initialization of Resource vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network based attacker to read cer… |
CVE-2023-28976 | High | 7.5 | 2023-04-17 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on MX Series allows an… |
CVE-2023-28975 | Medium | 4.6 | 2023-04-17 | An Unexpected Status Code or Return Value vulnerability in the kernel of Juniper Networks Junos OS allows an unauthenticated attacker with physical access to t… |
CVE-2023-28974 | High | 7.4 | 2023-04-17 | An Improper Check for Unusual or Exceptional Conditions vulnerability in the bbe-smgd of Juniper Networks Junos OS allows an unauthenticated, adjacent attacker… |
CVE-2023-28973 | High | 7.1 | 2023-04-17 | An Improper Authorization vulnerability in the 'sysmanctl' shell command of Juniper Networks Junos OS Evolved allows a local, authenticated attacker to execute… |
CVE-2023-28972 | Medium | 6.8 | 2023-04-17 | An Improper Link Resolution Before File Access vulnerability in console port access of Juniper Networks Junos OS on NFX Series allows an attacker to bypass con… |
CVE-2023-28971 | High | 7.2 | 2023-04-17 | An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the timescaledb feature of Juniper Networks Paragon Active Assurance (P… |
CVE-2023-28970 | Medium | 6.5 | 2023-04-17 | An Improper Check or Handling of Exceptional Conditions vulnerability in packet processing on the network interfaces of Juniper Networks Junos OS on JRR200 rou… |
CVE-2023-28968 | Medium | 5.3 | 2023-04-17 | An Improperly Controlled Sequential Memory Allocation vulnerability in the Juniper Networks Deep Packet Inspection-Decoder (JDPI-Decoder) Application Signature… |
CVE-2023-28967 | High | 7.5 | 2023-04-17 | A Use of Uninitialized Resource vulnerability in the Border Gateway Protocol (BGP) software of Juniper Networks Junos OS and Junos OS Evolved allows an unauthe… |