2023 CVEs (page 263)
Page 263 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27520 | Medium | 6.5 | 2023-04-11 | Cross-site request forgery (CSRF) vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote unauthenticated attacker to hijack the aut… |
CVE-2023-27389 | High | 7.2 | 2023-04-11 | Inadequate encryption strength vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker with an administrative privilege to apply… |
CVE-2023-26593 | High | 7.8 | 2023-04-11 | CENTUM series provided by Yokogawa Electric Corporation are vulnerable to cleartext storage of sensitive information. If an attacker who can login or access th… |
CVE-2023-26588 | High | 7.5 | 2023-04-11 | Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products an… |
CVE-2023-25955 | Medium | 5.5 | 2023-04-11 | National land numerical information data conversion tool all versions improperly restricts XML external entity references (XXE). By processing a specially craf… |
CVE-2023-25950 | High | 7.3 | 2023-04-11 | HTTP request/response smuggling vulnerability in HAProxy version 2.7.0, and 2.6.1 to 2.6.7 allows a remote attacker to alter a legitimate user's request. As a… |
CVE-2023-25755 | High | 7.8 | 2023-04-11 | Screen Creator Advance 2 Ver.0.1.1.4 Build01A and earlier is vulnerable to improper restriction of operations within the bounds of a memory buffer (CWE-119) du… |
CVE-2023-24544 | High | 8.1 | 2023-04-11 | Improper access control vulnerability in Buffalo network devices allows a network-adjacent attacker to obtain specific files of the product. As a result, the p… |
CVE-2023-24464 | Medium | 5.4 | 2023-04-11 | Stored-cross-site scripting vulnerability in Buffalo network devices allows an attacker with access to the web management console of the product to execute arb… |
CVE-2023-23575 | Medium | 4.3 | 2023-04-11 | Improper access control vulnerability in CONPROSYS IoT Gateway products allows a remote authenticated attacker to bypass access restriction and access Network… |
CVE-2023-23572 | Medium | 4.8 | 2023-04-11 | Cross-site scripting vulnerability in SEIKO EPSON printers/network interface Web Config allows a remote authenticated attacker with an administrative privilege… |
CVE-2023-22429 | High | 7.8 | 2023-04-11 | Android App 'Wolt Delivery: Food and more' version 4.27.2 and earlier uses hard-coded credentials (API key for an external service), which may allow a local at… |
CVE-2023-22282 | High | 7.3 | 2023-04-11 | WAB-MAT Ver.5.0.0.8 and earlier starts another program with an unquoted file path. Since a registered Windows service path contains spaces and are unquoted, if… |
CVE-2023-29492 | Critical | 9.8 | 2023-04-11 | Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide acces… |
CVE-2023-26122 | High | 8.8 | 2023-04-11 | All versions of the package safe-eval are vulnerable to Sandbox Bypass due to improper input sanitization. The vulnerability is derived from prototype pollutio… |
CVE-2023-26121 | High | 7.5 | 2023-04-11 | All versions of the package safe-eval are vulnerable to Prototype Pollution via the safeEval function, due to improper sanitization of its parameter content. |
CVE-2023-29189 | Medium | 5.4 | 2023-04-11 | SAP CRM (WebClient UI) - versions S4FND 102, 103, 104, 105, 106, 107, WEBCUIF, 700, 701, 731, 730, 746, 747, 748, 800, 801, allows an authenticated attacker to… |
CVE-2023-29187 | Medium | 6.7 | 2023-04-11 | A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Program) - version 9.0, resulting in a privi… |
CVE-2023-29186 | High | 8.7 | 2023-04-11 | In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on… |
CVE-2023-29185 | Medium | 5.3 | 2023-04-11 | SAP NetWeaver AS for ABAP (Business Server Pages) - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, allows an attacker authenticated… |
CVE-2023-29112 | Low | 3.7 | 2023-04-11 | The SAP Application Interface (Message Monitoring) - versions 600, 700, allows an authorized attacker to input links or headings with custom CSS classes into a… |
CVE-2023-29111 | Low | 3.1 | 2023-04-11 | The SAP AIF (ODATA service) - versions 755, 756, discloses more detailed information than is required. An authorized attacker can use the collected information… |
CVE-2023-29110 | Low | 3.7 | 2023-04-11 | The SAP Application Interface (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 100, 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application allows… |
CVE-2023-29109 | Medium | 4.4 | 2023-04-11 | The SAP Application Interface Framework (Message Dashboard) - versions AIF 703, AIFX 702, S4CORE 101, SAP_BASIS 755, 756, SAP_ABA 75C, 75D, 75E, application al… |
CVE-2023-29108 | Medium | 5.0 | 2023-04-11 | The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handlin… |
CVE-2023-28765 | Critical | 9.8 | 2023-04-11 | An attacker with basic privileges in SAP BusinessObjects Business Intelligence Platform (Promotion Management) - versions 420, 430, can get access to lcmbiar f… |
CVE-2023-28763 | Medium | 6.5 | 2023-04-11 | SAP NetWeaver AS for ABAP and ABAP Platform - versions 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker authenticated as a non-administrati… |
CVE-2023-28761 | Medium | 6.5 | 2023-04-11 | In SAP NetWeaver Enterprise Portal - version 7.50, an unauthenticated attacker can attach to an open interface and make use of an open API to access a service… |
CVE-2023-27897 | Medium | 6.0 | 2023-04-11 | In SAP CRM - versions 700, 701, 702, 712, 713, an attacker who is authenticated with a non-administrative role and a common remote execution authorization can… |
CVE-2023-27499 | Medium | 6.1 | 2023-04-11 | SAP GUI for HTML - versions KERNEL 7.22, 7.53, 7.54, 7.77, 7.81, 7.85, 7.89, 7.91, KRNL64UC, 7.22, 7.22EXT, KRNL64UC 7.22, 7.22EXT does not sufficiently encode… |
CVE-2023-27497 | Critical | 10.0 | 2023-04-11 | Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute… |
CVE-2023-27267 | Critical | 9.0 | 2023-04-11 | Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep know… |
CVE-2023-26458 | Medium | 6.8 | 2023-04-11 | An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Manageme… |
CVE-2023-24527 | Medium | 5.3 | 2023-04-11 | SAP NetWeaver AS Java for Deploy Service - version 7.5, does not perform any access control checks for functionalities that require user identity enabling an u… |
CVE-2023-1903 | Medium | 4.3 | 2023-04-11 | SAP HCM Fiori App My Forms (Fiori 2.0) - version 605, does not perform necessary authorization checks for an authenticated user exposing the restricted header… |
CVE-2023-28341 | Medium | 6.1 | 2023-04-11 | Stored Cross site scripting (XSS) vulnerability in Zoho ManageEngine Applications Manager through 16340 allows an unauthenticated user to inject malicious java… |
CVE-2023-28340 | Medium | 6.5 | 2023-04-11 | Zoho ManageEngine Applications Manager through 16320 allows the admin user to conduct an XXE attack. |
CVE-2023-27191 | High | 7.5 | 2023-04-11 | An issue found in DUALSPACE Super Secuirty v.2.3.7 allows an attacker to cause a denial of service via the SharedPreference files. |
CVE-2023-24182 | Medium | 5.4 | 2023-04-11 | LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the component /system/sshkey… |
CVE-2023-29192 | Low | 2.7 | 2023-04-10 | SilverwareGames.io versions before 1.2.19 allow users with access to the game upload panel to edit download links for games uploaded by other developers. This… |
CVE-2023-26467 | Medium | 5.4 | 2023-04-10 | A man in the middle can redirect traffic to a malicious server in a compromised configuration. |
CVE-2023-24721 | Medium | 5.4 | 2023-04-10 | A cross-site scripting (XSS) vulnerability in LiveAction LiveSP v21.1.2 allows attackers to execute arbitrary web scripts or HTML. |
CVE-2023-1916 | Medium | 6.1 | 2023-04-10 | A flaw was found in tiffcrop, a program distributed by the libtiff package. A specially crafted tiff file can lead to an out-of-bounds read in the extractImage… |
CVE-2023-1668 | High | 8.2 | 2023-04-10 | A flaw was found in openvswitch (OVS). When processing an IP packet with protocol 0, OVS will install the datapath flow without the action modifying the IP hea… |
CVE-2023-29005 | High | 7.5 | 2023-04-10 | Flask-AppBuilder versions before 4.3.0 lack rate limiting which can allow an attacker to brute-force user credentials. Version 4.3.0 includes the ability to en… |
CVE-2023-28093 | Medium | 6.5 | 2023-04-10 | A user with a compromised configuration can start an unsigned binary as a service. |
CVE-2023-27178 | Critical | 9.8 | 2023-04-10 | An arbitrary file upload vulnerability in the upload function of GDidees CMS 3.9.1 allows attackers to execute arbitrary code via a crafted file. |
CVE-2023-27076 | Critical | 9.8 | 2023-04-10 | Command injection vulnerability found in Tenda G103 v.1.0.0.5 allows attacker to execute arbitrary code via a the language parameter. |
CVE-2023-26773 | Medium | 6.1 | 2023-04-10 | Cross Site Scripting vulnerability found in Sales Tracker Management System v.1.0 allows a remote attacker to gain privileges via the product list function in… |
CVE-2023-26466 | High | 7.8 | 2023-04-10 | A user with non-Admin access can change a configuration file on the client to modify the Server URL. |
CVE-2023-26495 | High | 7.8 | 2023-04-10 | An issue was discovered in Open Design Alliance Drawings SDK before 2024.1. A crafted DWG file can force the SDK to reuse an object that has been freed. An att… |
CVE-2023-26070 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 4 of 4). |
CVE-2023-26069 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 3 of 4). |
CVE-2023-26068 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 2 of 4). |
CVE-2023-26067 | High | 8.1 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 mishandle Input Validation (issue 1 of 4). |
CVE-2023-26066 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 have Improper Validation of an Array Index. |
CVE-2023-26065 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 have an Integer Overflow. |
CVE-2023-26064 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 have an Out-of-bounds Write. |
CVE-2023-26063 | Critical | 9.8 | 2023-04-10 | Certain Lexmark devices through 2023-02-19 access a Resource By Using an Incompatible Type. |
CVE-2023-28206 | High | 8.6 | 2023-04-10 | An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ve… |
CVE-2023-28205 | High | 8.8 | 2023-04-10 | A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS… |
CVE-2023-27650 | Critical | 9.8 | 2023-04-10 | An issue found in APUS Group Launcher v.3.10.73 and v.3.10.88 allows a remote attacker to execute arbitrary code via the FONT_FILE parameter. |
CVE-2023-1971 | Medium | 6.3 | 2023-04-10 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in yuan1994 tpAdmin 1.3.12. Affected is the function remote of the… |
CVE-2023-26986 | High | 7.8 | 2023-04-10 | An issue in China Mobile OA Mailbox PC v2.9.23 allows remote attackers to execute arbitrary commands on a victim host via user interaction with a crafted EML f… |
CVE-2023-26919 | High | 7.2 | 2023-04-10 | delight-nashorn-sandbox 0.2.4 and 0.2.5 is vulnerable to sandbox escape. When allowExitFunctions is set to false, the loadWithNewGlobal function can be used to… |
CVE-2023-1970 | Medium | 6.3 | 2023-04-10 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, has been found in yuan1994 tpAdmin 1.3.12. This issue affects the functio… |
CVE-2023-1969 | Medium | 6.3 | 2023-04-10 | A vulnerability classified as critical was found in SourceCodester Online Eyewear Shop 1.0. This vulnerability affects unknown code of the file /admin/inventor… |
CVE-2023-29376 | Medium | 5.4 | 2023-04-10 | An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3… |
CVE-2023-29375 | Critical | 9.8 | 2023-04-10 | An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3… |
CVE-2023-1381 | High | 8.8 | 2023-04-10 | The WP Meta SEO WordPress plugin before 4.5.5 does not validate image file paths before attempting to manipulate the image files, leading to a PHAR deserializa… |
CVE-2023-25392 | Medium | 5.9 | 2023-04-10 | Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation. |
CVE-2023-24181 | Medium | 5.4 | 2023-04-10 | LuCI openwrt-22.03 branch git-22.361.69894-438c598 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /openvpn/pa… |
CVE-2023-1478 | Critical | 9.8 | 2023-04-10 | The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writing them, leading to a path traversal v… |
CVE-2023-1426 | Medium | 6.5 | 2023-04-10 | The WP Tiles WordPress plugin through 1.1.2 does not ensure that posts to be displayed are not draft/private, allowing any authenticated users, such as subscri… |
CVE-2023-1425 | High | 7.2 | 2023-04-10 | The WordPress CRM, Email & Marketing Automation for WordPress | Award Winner — Groundhogg WordPress plugin before 2.7.9.4 does not properly sanitise and escape… |
CVE-2023-1406 | High | 8.8 | 2023-04-10 | The JetEngine WordPress plugin before 3.1.3.1 includes uploaded files without adequately ensuring that they are not executable, leading to a remote code execut… |
CVE-2023-1122 | Medium | 4.8 | 2023-04-10 | The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its Giveaways options, which could allow high privilege users such as… |
CVE-2023-1121 | Medium | 4.8 | 2023-04-10 | The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2023-1120 | Medium | 4.8 | 2023-04-10 | The Simple Giveaways WordPress plugin before 2.45.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to… |
CVE-2023-0983 | Medium | 6.1 | 2023-04-10 | The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a… |
CVE-2023-0893 | Medium | 4.8 | 2023-04-10 | The Time Sheets WordPress plugin before 1.29.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2023-0874 | Medium | 4.8 | 2023-04-10 | The Klaviyo WordPress plugin before 3.0.10 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform S… |
CVE-2023-0605 | Medium | 4.8 | 2023-04-10 | The Auto Rename Media On Upload WordPress plugin before 1.1.0 does not sanitise and escape some of its settings, which could allow high privilege users such as… |
CVE-2023-0546 | Medium | 5.4 | 2023-04-10 | The Contact Form Plugin WordPress plugin before 4.3.25 does not properly sanitize and escape the srcdoc attribute in iframes in it's custom HTML field type, al… |
CVE-2023-0423 | Medium | 4.8 | 2023-04-10 | The WordPress Amazon S3 Plugin WordPress plugin before 1.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflect… |
CVE-2023-0422 | Medium | 4.8 | 2023-04-10 | The Article Directory WordPress plugin through 1.3 does not properly sanitize the `publish_terms_text` setting before displaying it in the administration panel… |
CVE-2023-0363 | Medium | 5.4 | 2023-04-10 | The Scheduled Announcements Widget WordPress plugin before 1.0 does not validate and escape some of its shortcode attributes before outputting them back in a p… |
CVE-2023-0157 | Medium | 4.8 | 2023-04-10 | The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not escape the content of log files before outputting it to the plugin admin page, allowing a… |
CVE-2023-0156 | Medium | 4.9 | 2023-04-10 | The All-In-One Security (AIOS) WordPress plugin before 5.1.5 does not limit what log files to display in it's settings pages, allowing an authorized user (admi… |
CVE-2023-26860 | High | 8.8 | 2023-04-10 | SQL injection vulnerability found in PrestaShop Igbudget v.1.0.3 and before allow a remote attacker to gain privileges via the LgBudgetBudgetModuleFrontControl… |
CVE-2023-26788 | Medium | 6.1 | 2023-04-10 | Veritas Appliance v4.1.0.1 is affected by Host Header Injection attacks. HTTP host header can be manipulated and cause the application to behave in unexpected… |
CVE-2023-26774 | High | 7.5 | 2023-04-10 | An issue found in Sales Tracker Management System v.1.0 allows a remote attacker to access sensitive information via sales.php component of the admin/reports e… |
CVE-2023-29216 | Critical | 9.8 | 2023-04-10 | In Apache Linkis <=1.3.1, because the parameters are not effectively filtered, the attacker uses the MySQL data source and malicious parameters to configure a… |
CVE-2023-29215 | Critical | 9.8 | 2023-04-10 | In Apache Linkis <=1.3.1, due to the lack of effective filtering of parameters, an attacker configuring malicious Mysql JDBC parameters in JDBC EengineConn Mod… |
CVE-2023-27987 | Critical | 9.1 | 2023-04-10 | In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obtain the default tok… |
CVE-2023-27603 | Critical | 9.8 | 2023-04-10 | In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a Zip Slip issue, which will lead to a p… |
CVE-2023-27602 | Critical | 9.8 | 2023-04-10 | In Apache Linkis <=1.3.1, The PublicService module uploads files without restrictions on the path to the uploaded files, and file types. We recommend users u… |
CVE-2023-26120 | Medium | 5.4 | 2023-04-10 | This affects all versions of the package com.xuxueli:xxl-job. HTML uploaded payload executed successfully through /xxl-job-admin/user/add and /xxl-job-admin/us… |
CVE-2023-30456 | Medium | 6.5 | 2023-04-10 | An issue was discovered in arch/x86/kvm/vmx/nested.c in the Linux kernel before 6.2.8. nVMX on x86_64 lacks consistency checks for CR0 and CR4. |
CVE-2023-27720 | Critical | 9.8 | 2023-04-09 | D-Link DIR878 1.30B08 was discovered to contain a stack overflow in the sub_48d630 function. This vulnerability allows attackers to cause a Denial of Service (… |