2023 CVEs (page 265)
Page 265 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27013 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the get_parentControl_list_Info function. This vulnerability allows att… |
CVE-2023-27012 | Critical | 9.8 | 2023-04-07 | Tenda AC10 US_AC10V4.0si_V16.03.10.13_cn was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause… |
CVE-2023-25220 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the add_white_node function. This vulnerability allows attackers to cause a… |
CVE-2023-25219 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromDhcpListClient function. This vulnerability allows attackers to cau… |
CVE-2023-25218 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the form_fast_setting_wifi_set function. This vulnerability allows attacker… |
CVE-2023-25217 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formWifiBasicSet function. This vulnerability allows attackers to cause… |
CVE-2023-25216 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the formSetFirewallCfg function. This vulnerability allows attackers to cau… |
CVE-2023-25215 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the saveParentControlInfo function. This vulnerability allows attackers to… |
CVE-2023-25214 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the setSchedWifi function. This vulnerability allows attackers to cause a D… |
CVE-2023-25213 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the check_param_changed function. This vulnerability allows attackers to ca… |
CVE-2023-25212 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetWirelessRepeat function. This vulnerability allows attackers to… |
CVE-2023-25211 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the R7WebsSecurityHandler function. This vulnerability allows attackers to… |
CVE-2023-25210 | Critical | 9.8 | 2023-04-07 | Tenda AC5 US_AC5V1.0RTL_V15.03.06.28 was discovered to contain a stack overflow via the fromSetSysTime function. This vulnerability allows attackers to cause a… |
CVE-2023-24800 | Critical | 9.8 | 2023-04-07 | D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_495220 function. This vulnerability allows attackers to cause a Denial of… |
CVE-2023-24799 | Critical | 9.8 | 2023-04-07 | D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_48AF78 function. This vulnerability allows attackers to cause a Denial of… |
CVE-2023-24798 | Critical | 9.8 | 2023-04-07 | D-Link DIR878 DIR_878_FW120B05 was discovered to contain a stack overflow in the sub_475FB0 function. This vulnerability allows attackers to cause a Denial of… |
CVE-2023-24797 | Critical | 9.8 | 2023-04-07 | D-Link DIR882 DIR882A1_FW110B02 was discovered to contain a stack overflow in the sub_48AC20 function. This vulnerability allows attackers to cause a Denial of… |
CVE-2023-29475 | Critical | 9.8 | 2023-04-06 | inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary… |
CVE-2023-29474 | Critical | 9.8 | 2023-04-06 | inventory in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrary… |
CVE-2023-29473 | Critical | 9.8 | 2023-04-06 | webservice in Atos Unify OpenScape 4000 Platform and OpenScape 4000 Manager Platform 10 R1 before 10 R1.34.4 allows an unauthenticated attacker to run arbitrar… |
CVE-2023-28500 | Critical | 9.8 | 2023-04-06 | A Java insecure deserialization vulnerability in Adobe LiveCycle ES4 version 11.0 and earlier allows unauthenticated remote attackers to gain operating system… |
CVE-2023-1931 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function… |
CVE-2023-1930 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the wpfc_clear_cache_of_allsites_cal… |
CVE-2023-1929 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_purgecache_varnish_call… |
CVE-2023-1928 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data modification due to a missing capability check on the wpfc_preload_single_callback… |
CVE-2023-1927 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-29465 | Medium | 5.5 | 2023-04-06 | SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privilege… |
CVE-2023-29017 | Critical | 10.0 | 2023-04-06 | vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Prior to version 3.9.15, vm2 was not properly handling host objects pass… |
CVE-2023-29016 | Medium | 6.1 | 2023-04-06 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified… |
CVE-2023-29015 | Medium | 6.1 | 2023-04-06 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A cross-site scripting vulnerability has been identified… |
CVE-2023-29014 | Medium | 6.1 | 2023-04-06 | The Goobi viewer is a web application that allows digitised material to be displayed in a web browser. A reflected cross-site scripting vulnerability has been… |
CVE-2023-1926 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1925 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1924 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1923 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1922 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1921 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1920 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1919 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-1918 | Medium | 4.3 | 2023-04-06 | The WP Fastest Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.1.2. This is due to missing or incorr… |
CVE-2023-20688 | Medium | 4.4 | 2023-04-06 | In power, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privilege… |
CVE-2023-20687 | Medium | 6.4 | 2023-04-06 | In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20686 | Medium | 6.4 | 2023-04-06 | In display drm, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges need… |
CVE-2023-20685 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20684 | Medium | 6.4 | 2023-04-06 | In vdec, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed… |
CVE-2023-20682 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20681 | Medium | 6.7 | 2023-04-06 | In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20680 | Medium | 6.7 | 2023-04-06 | In adsp, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20679 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20677 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20676 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20675 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20674 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20670 | Medium | 6.7 | 2023-04-06 | In audio, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privile… |
CVE-2023-20666 | Medium | 6.7 | 2023-04-06 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20665 | Medium | 4.4 | 2023-04-06 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20664 | Medium | 6.7 | 2023-04-06 | In gz, there is a possible double free due to a use after free. This could lead to local escalation of privilege with System execution privileges needed. User… |
CVE-2023-20663 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20662 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20661 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges… |
CVE-2023-20660 | Medium | 4.4 | 2023-04-06 | In wlan, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execution privileges ne… |
CVE-2023-20659 | Medium | 6.7 | 2023-04-06 | In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20658 | Medium | 6.7 | 2023-04-06 | In isp, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20657 | Medium | 6.7 | 2023-04-06 | In mtee, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20656 | Medium | 6.7 | 2023-04-06 | In geniezone, there is a possible out of bounds write due to a logic error. This could lead to local escalation of privilege with System execution privileges n… |
CVE-2023-20655 | High | 7.8 | 2023-04-06 | In mmsdk, there is a possible escalation of privilege due to a parcel format mismatch. This could lead to local code execution with no additional execution pri… |
CVE-2023-20654 | Medium | 6.7 | 2023-04-06 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20653 | Medium | 6.7 | 2023-04-06 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-20652 | Medium | 6.7 | 2023-04-06 | In keyinstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-29010 | Medium | 6.5 | 2023-04-06 | Budibase is a low code platform for creating internal tools, workflows, and admin panels. Versions prior to 2.4.3 (07 March 2023) are vulnerable to Server-Side… |
CVE-2023-29008 | High | 8.8 | 2023-04-06 | The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containing endpoint handlers for… |
CVE-2023-0580 | Medium | 5.4 | 2023-04-06 | Insecure Storage of Sensitive Information vulnerability in ABB My Control System (on-premise) allows an attacker who successfully exploited this vulnerability… |
CVE-2023-26083 | Low | 3.3 | 2023-04-06 | Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from r0… |
CVE-2023-24538 | Critical | 9.8 | 2023-04-06 | Templates do not properly consider backticks (`) as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS tem… |
CVE-2023-24537 | High | 7.5 | 2023-04-06 | Calling any of the Parse functions on Go source code which contains //line directives with very large line numbers can cause an infinite loop due to integer ov… |
CVE-2023-24536 | High | 7.5 | 2023-04-06 | Multipart form parsing can consume large amounts of CPU and memory when processing form inputs containing very large numbers of parts. This stems from several… |
CVE-2023-24534 | High | 7.5 | 2023-04-06 | HTTP and MIME header parsing can allocate large amounts of memory, even when parsing small inputs, potentially leading to a denial of service. Certain unusual… |
CVE-2023-22985 | Medium | 6.1 | 2023-04-06 | Sourcecodester Simple Guestbook Management System version 1 is vulnerable to Cross Site Scripting (XSS) via Name, Referrer, Location, and Comments. |
CVE-2023-1913 | Medium | 4.4 | 2023-04-06 | The Maps Widget for Google Maps for WordPress is vulnerable to Stored Cross-Site Scripting via widget settings in versions up to, and including, 4.24 due to in… |
CVE-2023-1912 | High | 7.2 | 2023-04-06 | The Limit Login Attempts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via its lock logging feature in versions up to, and including, 1.7.1… |
CVE-2023-25062 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PINPOINT.WORLD Pinpoint Booking System plugin <= 2.9.9.2.8 versions. |
CVE-2023-24396 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.11 versions. |
CVE-2023-24378 | Medium | 6.5 | 2023-04-06 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Codeat Glossary plugin <= 2.1.27 versions. |
CVE-2023-24374 | Medium | 6.5 | 2023-04-06 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions. |
CVE-2023-23891 | Medium | 5.5 | 2023-04-06 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in OceanWP Ocean Extra plugin <= 2.1.1 versions. Needs the OceanWP theme installed and act… |
CVE-2023-0750 | Critical | 9.8 | 2023-04-06 | Yellobrik PEC-1864 implements authentication checks via javascript in the frontend interface. When the device can be accessed over the network an attacker cou… |
CVE-2023-23801 | Medium | 4.3 | 2023-04-06 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Really Simple Google Tag Manager plugin <= 1.0.6 versions. |
CVE-2023-1908 | Medium | 6.3 | 2023-04-06 | A vulnerability was found in SourceCodester Simple Mobile Comparison Website 1.0. It has been classified as critical. Affected is an unknown function of the fi… |
CVE-2023-24411 | Medium | 6.5 | 2023-04-06 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Kerry Kline BNE Testimonials plugin <= 2.0.7 versions. |
CVE-2023-24403 | Medium | 4.7 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP For The Win bbPress Voting plugin <= 2.1.11.0 versions. |
CVE-2023-24387 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Organization chart plugin <= 1.4.4 versions. |
CVE-2023-24383 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kiboko Labs Namaste! LMS plugin <= 2.5.9.1 versions. |
CVE-2023-23898 | Medium | 5.5 | 2023-04-06 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in CreativeThemes Blocksy Companion plugin <= 1.8.67 versions. |
CVE-2023-0652 | High | 7.0 | 2023-04-06 | Due to a hardlink created in the ProgramData folder during the repair process of the software, the installer (MSI) of WARP Client for Windows (<= 2022.12.582.0… |
CVE-2023-24004 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart Image and Video Lightbox, Image PopUp plugin <= 2.1.5 versions. |
CVE-2023-24003 | Medium | 6.5 | 2023-04-06 | Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Timersys WP Popups – WordPress Popup plugin <= 2.1.4.8 versions. |
CVE-2023-24002 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WPdevart YouTube Embed, Playlist and Popup by WpDevArt plugin <= 2.6.3 versions. |
CVE-2023-1802 | Medium | 5.9 | 2023-04-06 | In Docker Desktop 4.17.x the Artifactory Integration falls back to sending registry credentials over plain HTTP if the HTTPS health check has failed. A targete… |
CVE-2023-24006 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Link Software LLC WP Terms Popup plugin <= 2.6.0 versions. |
CVE-2023-24001 | Medium | 5.9 | 2023-04-06 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions. |