2023 CVEs (page 262)
Page 262 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-28238 | High | 7.5 | 2023-04-11 | Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution Vulnerability |
CVE-2023-28237 | High | 7.8 | 2023-04-11 | Windows Kernel Remote Code Execution Vulnerability |
CVE-2023-28236 | High | 7.8 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28235 | Medium | 6.8 | 2023-04-11 | Windows Lock Screen Security Feature Bypass Vulnerability |
CVE-2023-28234 | High | 7.5 | 2023-04-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-28233 | High | 7.5 | 2023-04-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-28232 | High | 7.5 | 2023-04-11 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-28231 | High | 8.8 | 2023-04-11 | DHCP Server Service Remote Code Execution Vulnerability |
CVE-2023-28229 | High | 7.0 | 2023-04-11 | Windows CNG Key Isolation Service Elevation of Privilege Vulnerability |
CVE-2023-28228 | Medium | 5.5 | 2023-04-11 | Windows Spoofing Vulnerability |
CVE-2023-28227 | High | 7.5 | 2023-04-11 | Windows Bluetooth Driver Remote Code Execution Vulnerability |
CVE-2023-28226 | Medium | 5.3 | 2023-04-11 | Windows Enroll Engine Security Feature Bypass Vulnerability |
CVE-2023-28225 | High | 7.8 | 2023-04-11 | Windows NTLM Elevation of Privilege Vulnerability |
CVE-2023-28224 | High | 7.1 | 2023-04-11 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-28223 | Medium | 6.6 | 2023-04-11 | Windows Domain Name Service Remote Code Execution Vulnerability |
CVE-2023-28222 | High | 7.1 | 2023-04-11 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-28221 | High | 7.0 | 2023-04-11 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-28220 | High | 8.1 | 2023-04-11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-28219 | High | 8.1 | 2023-04-11 | Layer 2 Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-28218 | High | 7.0 | 2023-04-11 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2023-28217 | High | 7.5 | 2023-04-11 | Windows Network Address Translation (NAT) Denial of Service Vulnerability |
CVE-2023-28216 | High | 7.0 | 2023-04-11 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2023-26555 | Medium | 6.4 | 2023-04-11 | praecis_parse in ntpd/refclock_palisade.c in NTP 4.2.8p15 has an out-of-bounds write. Any attack method would be complex, e.g., with a manipulated GPS receiver. |
CVE-2023-26554 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a '\0' character. An adversary may be able to attack a client ntpq process… |
CVE-2023-26553 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when copying the trailing number. An adversary may be able to attack a client ntpq proce… |
CVE-2023-26552 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write when adding a decimal point. An adversary may be able to attack a client ntpq process, b… |
CVE-2023-26551 | Medium | 5.6 | 2023-04-11 | mstolfp in libntp/mstolfp.c in NTP 4.2.8p15 has an out-of-bounds write in the cp<cpdec while loop. An adversary may be able to attack a client ntpq process, bu… |
CVE-2023-26260 | Medium | 5.4 | 2023-04-11 | OXID eShop 6.2.x before 6.4.4 and 6.5.x before 6.5.2 allows session hijacking, leading to partial access of a customer's account by an attacker, due to an impr… |
CVE-2023-25415 | Medium | 5.3 | 2023-04-11 | Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Event Notification configuration. |
CVE-2023-25414 | Medium | 5.3 | 2023-04-11 | Aten PE8108 2.4.232 is vulnerable to denial of service (DOS). |
CVE-2023-25413 | High | 7.5 | 2023-04-11 | Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. The device allows unauthenticated access to Telnet and SNMP credentials. |
CVE-2023-25411 | Medium | 4.3 | 2023-04-11 | Aten PE8108 2.4.232 is vulnerable to Cross Site Request Forgery (CSRF). |
CVE-2023-25409 | High | 8.1 | 2023-04-11 | Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have access to other users outlets. |
CVE-2023-25407 | High | 7.2 | 2023-04-11 | Aten PE8108 2.4.232 is vulnerable to Incorrect Access Control. Restricted users have read access to administrator credentials. |
CVE-2023-24935 | Medium | 6.1 | 2023-04-11 | Microsoft Edge (Chromium-based) Spoofing Vulnerability |
CVE-2023-24931 | High | 7.5 | 2023-04-11 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-24929 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24928 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24927 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24926 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24925 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24924 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24914 | High | 7.0 | 2023-04-11 | Win32k Elevation of Privilege Vulnerability |
CVE-2023-24912 | High | 7.8 | 2023-04-11 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-24893 | High | 7.8 | 2023-04-11 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2023-24887 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24886 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24885 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24884 | High | 8.8 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24883 | Medium | 6.5 | 2023-04-11 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24860 | High | 7.5 | 2023-04-11 | Microsoft Defender Denial of Service Vulnerability |
CVE-2023-23384 | High | 7.3 | 2023-04-11 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-23375 | High | 7.8 | 2023-04-11 | Microsoft ODBC and OLE DB Remote Code Execution Vulnerability |
CVE-2023-22808 | Low | 3.3 | 2023-04-11 | An issue was discovered in the Arm Android Gralloc Module. A non-privileged user can read a small portion of the allocator process memory. This affects Bifrost… |
CVE-2023-22615 | High | 8.4 | 2023-04-11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. IHISI subfunction execution may corrupt SMRAM. An attacker can pass an add… |
CVE-2023-22614 | High | 8.8 | 2023-04-11 | An issue was discovered in ChipsetSvcSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. There is insufficient input validation in BIOS Guard updates. An atta… |
CVE-2023-22612 | High | 8.8 | 2023-04-11 | An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. A malicious host OS can invoke an Insyde SMI handler with malformed argume… |
CVE-2023-21769 | High | 7.5 | 2023-04-11 | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
CVE-2023-21729 | Medium | 4.3 | 2023-04-11 | Remote Procedure Call Runtime Information Disclosure Vulnerability |
CVE-2023-21727 | High | 8.8 | 2023-04-11 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-21554 | Critical | 9.8 | 2023-04-11 | Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2023-1989 | High | 7.0 | 2023-04-11 | A use-after-free flaw was found in btsdio_remove in drivers\bluetooth\btsdio.c in the Linux Kernel. In this flaw, a call to btsdio_remove with an unfinished jo… |
CVE-2023-1988 | Low | 3.5 | 2023-04-11 | A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as problematic. Affected by this issue is some unknown function… |
CVE-2023-1987 | Medium | 6.3 | 2023-04-11 | A vulnerability has been found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. Affected by this vulnerability is the functio… |
CVE-2023-1986 | Medium | 6.3 | 2023-04-11 | A vulnerability, which was classified as critical, was found in SourceCodester Online Computer and Laptop Store 1.0. Affected is the function delete_order of t… |
CVE-2023-1985 | Medium | 6.3 | 2023-04-11 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Computer and Laptop Store 1.0. This issue affects the function save_… |
CVE-2023-1984 | Medium | 6.3 | 2023-04-11 | A vulnerability classified as critical was found in SourceCodester Complaint Management System 1.0. This vulnerability affects unknown code of the file /users/… |
CVE-2023-1980 | Medium | 6.5 | 2023-04-11 | Two factor authentication bypass on login in Devolutions Remote Desktop Manager 2022.3.35 and earlier allow user to cancel the two factor authentication via… |
CVE-2023-1939 | Medium | 4.3 | 2023-04-11 | No access control for the OTP key on OTP entries in Devolutions Remote Desktop Manager Windows 2022.3.33.0 and prior versions and Remote Desktop Manager L… |
CVE-2023-27995 | High | 7.2 | 2023-04-11 | A improper neutralization of special elements used in a template engine vulnerability in Fortinet FortiSOAR 7.3.0 through 7.3.1 allows an authenticated, remote… |
CVE-2023-22642 | High | 7.5 | 2023-04-11 | An improper certificate validation vulnerability [CWE-295] in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may… |
CVE-2023-22641 | Medium | 4.1 | 2023-04-11 | A url redirection to untrusted site ('open redirect') in Fortinet FortiOS version 7.2.0 through 7.2.3, FortiOS version 7.0.0 through 7.0.9, FortiOS versions 6… |
CVE-2023-22635 | High | 7.3 | 2023-04-11 | A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all… |
CVE-2023-1983 | Medium | 6.3 | 2023-04-11 | A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as critical. Affected by this issue is some unknown function… |
CVE-2023-30465 | Medium | 5.3 | 2023-04-11 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Software Foundation Apache InLong.This issue affec… |
CVE-2023-27192 | Critical | 9.8 | 2023-04-11 | An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the key_wifi_safe_net_check_url, KEY_Cirus_scan_whitelis… |
CVE-2023-26847 | Medium | 5.4 | 2023-04-11 | A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected i… |
CVE-2023-26846 | Medium | 5.4 | 2023-04-11 | A stored cross-site scripting (XSS) vulnerability in OpenCATS v0.9.7 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected i… |
CVE-2023-26845 | Medium | 4.3 | 2023-04-11 | A Cross-Site Request Forgery (CSRF) in OpenCATS 0.9.7 allows attackers to force users into submitting web requests via unspecified vectors. |
CVE-2023-23277 | Medium | 6.1 | 2023-04-11 | Snippet-box 1.0.0 is vulnerable to Cross Site Scripting (XSS). Remote attackers can render arbitrary web script or HTML from the "Snippet code" form field. |
CVE-2023-1552 | Medium | 6.4 | 2023-04-11 | ToolboxST prior to version 7.10 is affected by a deserialization vulnerability. An attacker with local access to an HMI or who has conducted a social engineeri… |
CVE-2023-28062 | High | 8.8 | 2023-04-11 | Dell PPDM versions 19.12, 19.11 and 19.10, contain an improper access control vulnerability. A remote authenticated malicious user with low privileges could p… |
CVE-2023-26964 | High | 7.5 | 2023-04-11 | An issue was discovered in hyper v0.13.7. h2-0.2.4 Stream stacking occurs when the H2 component processes HTTP2 RST_STREAM frames. As a result, the memory and… |
CVE-2023-0645 | Medium | 5.3 | 2023-04-11 | An out of bounds read exists in libjxl. An attacker using a specifically crafted file could cause an out of bounds read in the exif handler. We recommend upgra… |
CVE-2023-27645 | Critical | 9.8 | 2023-04-11 | An issue found in POWERAMP audioplayer build 925 bundle play and build 954 allows a remote attacker to gain privileges via the reverb and EQ preset parameters. |
CVE-2023-27179 | High | 7.5 | 2023-04-11 | GDidees CMS v3.9.1 and lower was discovered to contain an arbitrary file download vulenrability via the filename parameter at /_admin/imgdownload.php. |
CVE-2023-26917 | High | 7.5 | 2023-04-11 | libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lysp_stmt_validate_value at lys_parse_mem.c. |
CVE-2023-1976 | High | 8.8 | 2023-04-11 | Password Aging with Long Expiration in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-29054 | Medium | 6.7 | 2023-04-11 | A vulnerability has been identified in SCALANCE X200-4P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT (All versions < V5.5.2), SCALANCE X201-3P IRT PRO (Al… |
CVE-2023-29053 | High | 7.8 | 2023-04-11 | A vulnerability has been identified in JT Open (All versions < V11.3.2.0), JT Utilities (All versions < V13.3.0.0). The affected applications contain an out of… |
CVE-2023-28828 | Medium | 5.9 | 2023-04-11 | A vulnerability has been identified in Polarion ALM (All versions < V22R2). The application contains a XML External Entity Injection (XXE) vulnerability. This… |
CVE-2023-28766 | High | 7.5 | 2023-04-11 | A vulnerability has been identified in SIPROTEC 5 6MD85 (CP300) (All versions >= V7.80 < V9.40), SIPROTEC 5 6MD86 (CP300) (All versions >= V7.80 < V9.40), SIPR… |
CVE-2023-28489 | Critical | 9.8 | 2023-04-11 | A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05). Affected devices a… |
CVE-2023-27464 | Medium | 5.3 | 2023-04-11 | A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix Forgot Password (Mendix 8 compatible) (All… |
CVE-2023-26293 | High | 7.3 | 2023-04-11 | A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All versions), Totally Integrated Automation Portal (TIA Portal)… |
CVE-2023-23588 | Medium | 6.2 | 2023-04-11 | A vulnerability has been identified in SIMATIC IPC1047 (All versions), SIMATIC IPC1047E (All versions with maxView Storage Manager < 4.09.00.25611 on Windows)… |
CVE-2023-1975 | Medium | 6.5 | 2023-04-11 | Insertion of Sensitive Information Into Sent Data in GitHub repository answerdev/answer prior to 1.0.8. |
CVE-2023-1974 | Medium | 6.5 | 2023-04-11 | Exposure of Sensitive Information Through Metadata in GitHub repository answerdev/answer prior to 1.0.8. |
CVE-2023-28368 | Medium | 5.7 | 2023-04-11 | TP-Link L2 switch T2600G-28SQ firmware versions prior to 'T2600G-28SQ(UN)_V1_1.0.6 Build 20230227' uses vulnerable SSH host keys. A fake device may be prepared… |
CVE-2023-27917 | High | 8.8 | 2023-04-11 | OS command injection vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker who can access Network Maintenance page to execute… |