2023 CVEs (page 273)
Page 273 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27096 | Medium | 6.5 | 2023-03-27 | Insecure Permissions vulnerability found in OpenGoofy Hippo4j v.1.4.3 allows attacker to obtain sensitive information via the ConfigVerifyController function o… |
CVE-2023-26959 | Critical | 9.8 | 2023-03-27 | Phpgurukul Park Ticketing Management System 1.0 is vulnerable to SQL Injection via the User Name parameter. |
CVE-2023-26958 | Medium | 4.8 | 2023-03-27 | Phpgurukul Park Ticketing Management System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Admin Name parameter. |
CVE-2023-24094 | High | 7.5 | 2023-03-27 | An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets. |
CVE-2023-28885 | Medium | 6.8 | 2023-03-27 | The MyLink infotainment system (build 2021.3.26) in General Motors Chevrolet Equinox 2021 vehicles allows attackers to cause a denial of service (temporary fai… |
CVE-2023-25909 | Critical | 9.8 | 2023-03-27 | HGiga OAKlouds file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability… |
CVE-2023-25018 | Medium | 5.4 | 2023-03-27 | RIFARTEK IOT Wall transportation function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can inject Ja… |
CVE-2023-25017 | High | 8.1 | 2023-03-27 | RIFARTEK IOT Wall has a vulnerability of incorrect authorization. An authenticated remote attacker with general user privilege is allowed to perform specific p… |
CVE-2023-24842 | Medium | 5.3 | 2023-03-27 | HGiga MailSherlock has vulnerability of insufficient access control. An unauthenticated remote user can exploit this vulnerability to access partial content of… |
CVE-2023-24841 | High | 7.2 | 2023-03-27 | HGiga MailSherlock query function for connection log has a vulnerability of insufficient filtering for user input. An authenticated remote attacker with admini… |
CVE-2023-24840 | High | 7.2 | 2023-03-27 | HGiga MailSherlock mail query function has vulnerability of insufficient validation for user input. An authenticated remote attacker with administrator privile… |
CVE-2023-24839 | Medium | 6.1 | 2023-03-27 | HGiga MailSherlock’s specific function has insufficient filtering for user input. An unauthenticated remote attacker can exploit this vulnerability to inject J… |
CVE-2023-24838 | Critical | 9.8 | 2023-03-27 | HGiga PowerStation has a vulnerability of Information Leakage. An unauthenticated remote attacker can exploit this vulnerability to obtain the administrator's… |
CVE-2023-24837 | High | 8.8 | 2023-03-27 | HGiga PowerStation remote management function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can explo… |
CVE-2023-24835 | High | 7.2 | 2023-03-27 | Softnext Technologies Corp.’s SPAM SQR has a vulnerability of Code Injection within its specific function. An authenticated remote attacker with administrator… |
CVE-2023-24834 | Medium | 6.5 | 2023-03-27 | WisdomGarden Tronclass has improper access control when uploading file. An authenticated remote attacker with general user privilege can exploit this vulnerabi… |
CVE-2023-22902 | Medium | 5.4 | 2023-03-27 | Openfind Mail2000 file uploading function has insufficient filtering for user input. An authenticated remote attacker with general user privilege can exploit t… |
CVE-2023-28884 | Medium | 6.1 | 2023-03-27 | In MISP 2.4.169, app/Lib/Tools/CustomPaginationTool.php allows XSS in the community index. |
CVE-2023-28883 | Critical | 9.8 | 2023-03-27 | In Cerebrate 1.13, a blind SQL injection exists in the searchAll API endpoint. |
CVE-2023-28867 | High | 7.5 | 2023-03-27 | In GraphQL Java (aka graphql-java) before 20.1, an attacker can send a crafted GraphQL query that causes stack consumption. The fixed versions are 20.1, 19.4… |
CVE-2023-28866 | Medium | 5.3 | 2023-03-27 | In the Linux kernel through 6.2.8, net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentional… |
CVE-2023-1647 | High | 8.8 | 2023-03-27 | Improper Access Control in GitHub repository calcom/cal.com prior to 2.7. |
CVE-2023-1646 | Medium | 5.3 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been declared as critical. This vulnerability affects the function 0x8018E000/0x8018E004 i… |
CVE-2023-1645 | Medium | 5.5 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been classified as problematic. This affects the function 0x8018E008 in the library IMFCam… |
CVE-2023-1644 | Medium | 5.5 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this issue is the function 0x8018E010 in the library IM… |
CVE-2023-1643 | Medium | 5.5 | 2023-03-26 | A vulnerability has been found in IObit Malware Fighter 9.4.0.776 and classified as problematic. Affected by this vulnerability is the function 0x8001E000/0x80… |
CVE-2023-1642 | Medium | 5.5 | 2023-03-26 | A vulnerability, which was classified as problematic, was found in IObit Malware Fighter 9.4.0.776. Affected is the function 0x222034/0x222038/0x22203C/0x22204… |
CVE-2023-1641 | Medium | 5.5 | 2023-03-26 | A vulnerability, which was classified as problematic, has been found in IObit Malware Fighter 9.4.0.776. This issue affects the function 0x222018 in the librar… |
CVE-2023-1640 | Medium | 5.5 | 2023-03-26 | A vulnerability classified as problematic was found in IObit Malware Fighter 9.4.0.776. This vulnerability affects the function 0x222010 in the library ObCallb… |
CVE-2023-27796 | High | 8.8 | 2023-03-26 | RG-EW1200G PRO Wireless Routers EW_3.0(1)B11P204, RG-EW1800GX PRO Wireless Routers EW_3.0(1)B11P204, and RG-EW3200GX PRO Wireless Routers EW_3.0(1)B11P204 were… |
CVE-2023-26802 | Critical | 9.8 | 2023-03-26 | An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execu… |
CVE-2023-26801 | Critical | 9.8 | 2023-03-26 | LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection vuln… |
CVE-2023-26800 | Critical | 9.8 | 2023-03-26 | Ruijie Networks RG-EW1200 Wireless Routers EW_3.0(1)B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upg… |
CVE-2023-1639 | Medium | 5.5 | 2023-03-26 | A vulnerability classified as problematic has been found in IObit Malware Fighter 9.4.0.776. This affects the function 0x8001E04C in the library ImfRegistryFil… |
CVE-2023-1638 | Medium | 5.5 | 2023-03-26 | A vulnerability was found in IObit Malware Fighter 9.4.0.776. It has been rated as problematic. Affected by this issue is the function 0x8001E024/0x8001E040 in… |
CVE-2023-28859 | Medium | 6.5 | 2023-03-26 | redis-py before 4.4.4 and 4.5.x before 4.5.4 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data… |
CVE-2023-28858 | Low | 3.7 | 2023-03-26 | redis-py before 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time, and can send response data to the client of an un… |
CVE-2023-1458 | High | 7.2 | 2023-03-25 | A vulnerability has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6 and classified as critical. Affected by this vulnerability is an unknown functionality o… |
CVE-2023-1457 | High | 7.2 | 2023-03-25 | A vulnerability, which was classified as critical, was found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. Affected is an unknown function of the component Static R… |
CVE-2023-1456 | High | 7.2 | 2023-03-25 | A vulnerability, which was classified as critical, has been found in Ubiquiti EdgeRouter X 2.0.9-hotfix.6. This issue affects some unknown processing of the co… |
CVE-2023-1635 | Low | 3.5 | 2023-03-25 | A vulnerability was found in OTCMS 6.72. It has been declared as problematic. Affected by this vulnerability is the function AutoRun of the file apiRun.php. Th… |
CVE-2023-1634 | Medium | 6.3 | 2023-03-25 | A vulnerability was found in OTCMS 6.72. It has been classified as critical. Affected is the function UseCurl of the file /admin/info_deal.php of the component… |
CVE-2023-1631 | Medium | 5.5 | 2023-03-25 | A vulnerability, which was classified as problematic, was found in JiangMin Antivirus 16.2.2022.418. This affects the function 0x222010 in the library kvcore.s… |
CVE-2023-1630 | Medium | 5.5 | 2023-03-25 | A vulnerability, which was classified as problematic, has been found in JiangMin Antivirus 16.2.2022.418. Affected by this issue is the function 0x222000 in th… |
CVE-2023-1628 | Medium | 5.5 | 2023-03-25 | A vulnerability classified as problematic has been found in Jianming Antivirus 16.2.2022.418. Affected is an unknown function in the library kvcore.sys of the… |
CVE-2023-1627 | Medium | 5.5 | 2023-03-25 | A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been rated as problematic. This issue affects some unknown processing in the library kvco… |
CVE-2023-1626 | Medium | 5.3 | 2023-03-25 | A vulnerability was found in Jianming Antivirus 16.2.2022.418. It has been declared as critical. This vulnerability affects unknown code in the library kvcore… |
CVE-2023-1629 | Medium | 5.3 | 2023-03-25 | A vulnerability classified as critical was found in JiangMin Antivirus 16.2.2022.418. Affected by this vulnerability is the function 0x222010 in the library kv… |
CVE-2023-28437 | Critical | 9.8 | 2023-03-25 | Dataease is an open source data visualization and analysis tool. The blacklist for SQL injection protection is missing entries. This vulnerability has been fix… |
CVE-2023-27579 | High | 7.5 | 2023-03-25 | TensorFlow is an end-to-end open source platform for machine learning. Constructing a tflite model with a paramater `filter_input_channel` of less than 1 gives… |
CVE-2023-25801 | High | 8.0 | 2023-03-25 | TensorFlow is an open source machine learning platform. Prior to versions 2.12.0 and 2.11.1, `nn_ops.fractional_avg_pool_v2` and `nn_ops.fractional_max_pool_v2… |
CVE-2023-25676 | High | 7.5 | 2023-03-25 | TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.ParallelConcat` segfaults with a… |
CVE-2023-25675 | High | 7.5 | 2023-03-25 | TensorFlow is an open source machine learning platform. When running versions prior to 2.12.0 and 2.11.1 with XLA, `tf.raw_ops.Bincount` segfaults when given a… |
CVE-2023-25674 | High | 7.5 | 2023-03-25 | TensorFlow is an open source machine learning platform. Versions prior to 2.12.0 and 2.11.1 have a null pointer error in RandomShuffle with XLA enabled. A fix… |
CVE-2023-25673 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a Floating Point Exception in TensorListSplit with XLA. A… |
CVE-2023-25672 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. The function `tf.raw_ops.LookupTableImportV2` cannot handle scalars in the `values` parameter and g… |
CVE-2023-25671 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. There is out-of-bounds access due to mismatched integer type sizes. A fix is included in TensorFlow… |
CVE-2023-25670 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 have a null point error in QuantizedMatMulWithBiasAndDequantize… |
CVE-2023-25669 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the stride and window size are not positive for `tf.raw_ops… |
CVE-2023-25668 | Critical | 9.8 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Attackers using Tensorflow prior to 2.12.0 or 2.11.1 can access heap memory which is not in the con… |
CVE-2023-25667 | Medium | 6.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, integer overflow occurs when `2^31 <= num_frames * height * wi… |
CVE-2023-25666 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a floating point exception in AudioSpectrogram. A fix… |
CVE-2023-25665 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `SparseSparseMaximum` is given invalid sparse tensors as… |
CVE-2023-25664 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, there is a heap buffer overflow in TAvgPoolGrad. A fix is incl… |
CVE-2023-25663 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when `ctx->step_containter()` is a null ptr, the Lookup functi… |
CVE-2023-25662 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Versions prior to 2.12.0 and 2.11.1 are vulnerable to integer overflow in EditDistance. A fix is in… |
CVE-2023-25660 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, when the parameter `summarize` of `tf.raw_ops.Print` is zero… |
CVE-2023-25659 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, if the parameter `indices` for `DynamicStitch` does not match… |
CVE-2023-25658 | High | 7.5 | 2023-03-25 | TensorFlow is an open source platform for machine learning. Prior to versions 2.12.0 and 2.11.1, an out of bounds read is in GRUBlockCellGrad. A fix is include… |
CVE-2023-27042 | High | 8.8 | 2023-03-24 | Tenda AX3 V16.03.12.11 is vulnerable to Buffer Overflow via /goform/SetFirewallCfg. |
CVE-2023-23149 | Critical | 9.8 | 2023-03-24 | DEK-1705 <=Firmware:34.23.1 device was discovered to have a command execution vulnerability. |
CVE-2023-28150 | Medium | 5.3 | 2023-03-24 | An issue was discovered in Independentsoft JODF before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file. |
CVE-2023-27055 | High | 7.5 | 2023-03-24 | Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request. |
CVE-2023-26864 | Critical | 9.8 | 2023-03-24 | SQL injection vulnerability found in PrestaShop smplredirectionsmanager v.1.1.19 and before allow a remote attacker to gain privileges via the SmplTools::getMa… |
CVE-2023-1583 | Medium | 5.5 | 2023-03-24 | A NULL pointer dereference was found in io_file_bitmap_get in io_uring/filetable.c in the io_uring sub-component in the Linux Kernel. When fixed files are unre… |
CVE-2023-28435 | Medium | 6.5 | 2023-03-24 | Dataease is an open source data visualization and analysis tool. The permissions for the file upload interface is not checked so users who are not logged in ca… |
CVE-2023-28448 | Medium | 5.7 | 2023-03-24 | Versionize is a framework for version tolerant serializion/deserialization of Rust data structures, designed for usecases that need fast deserialization times… |
CVE-2023-28446 | High | 8.8 | 2023-03-24 | Deno is a simple, modern and secure runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Arbitrary program names without any ANSI filtering… |
CVE-2023-28444 | Critical | 9.9 | 2023-03-24 | angular-server-side-configuration helps configure an angular application at runtime on the server or in a docker container via environment variables. angular-s… |
CVE-2023-28151 | Medium | 5.3 | 2023-03-24 | An issue was discovered in Independentsoft JSpreadsheet before 1.1.110. The API is prone to XML external entity (XXE) injection via a remote DTD in a DOCX file. |
CVE-2023-25350 | High | 8.8 | 2023-03-24 | Faveo Helpdesk 1.0-1.11.1 is vulnerable to SQL Injection. When the user logs in through the login box, he has no judgment on the validity of the user's input d… |
CVE-2023-22812 | High | 7.4 | 2023-03-24 | SanDisk PrivateAccess versions prior to 6.4.9 support insecure TLS 1.0 and TLS 1.1 protocols which are susceptible to man-in-the-middle attacks thereby comprom… |
CVE-2023-21079 | Medium | 6.7 | 2023-03-24 | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege w… |
CVE-2023-21078 | Medium | 6.7 | 2023-03-24 | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with S… |
CVE-2023-21077 | Medium | 6.7 | 2023-03-24 | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with S… |
CVE-2023-21076 | Medium | 6.7 | 2023-03-24 | In createTransmitFollowupRequest of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of priv… |
CVE-2023-21075 | Medium | 6.7 | 2023-03-24 | In get_svc_hash of nan.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to local escalation of privilege with System… |
CVE-2023-21073 | Medium | 6.7 | 2023-03-24 | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with S… |
CVE-2023-21072 | Medium | 6.7 | 2023-03-24 | In rtt_unpack_xtlv_cbfn of dhd_rtt.c, there is a possible out of bounds write due to a buffer overflow. This could lead to local escalation of privilege with S… |
CVE-2023-21071 | Medium | 6.7 | 2023-03-24 | In dhd_prot_ioctcmplt_process of dhd_msgbuf.c, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of… |
CVE-2023-21070 | Medium | 6.7 | 2023-03-24 | In add_roam_cache_list of wl_roam.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege wi… |
CVE-2023-21069 | Medium | 6.7 | 2023-03-24 | In wl_update_hidden_ap_ie of wl_cfgscan.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privil… |
CVE-2023-21068 | High | 7.8 | 2023-03-24 | In (TBD) of (TBD), there is a possible way to boot with a hidden debug policy due to a missing warning to the user. This could lead to local escalation of priv… |
CVE-2023-21067 | High | 7.5 | 2023-03-24 | Product: AndroidVersions: Android kernelAndroid ID: A-254114726References: N/A |
CVE-2023-21065 | Medium | 6.7 | 2023-03-24 | In fdt_next_tag of fdt.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System exec… |
CVE-2023-21064 | Medium | 6.7 | 2023-03-24 | In DoSetPinControl of miscservice.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege w… |
CVE-2023-21063 | Medium | 6.7 | 2023-03-24 | In ParseWithAuthType of simdata.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege… |
CVE-2023-21062 | Medium | 6.7 | 2023-03-24 | In DoSetTempEcc of imsservice.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local escalation of privilege wi… |
CVE-2023-21061 | High | 7.5 | 2023-03-24 | Product: AndroidVersions: Android kernelAndroid ID: A-229255400References: N/A |
CVE-2023-21060 | High | 7.5 | 2023-03-24 | In sms_GetTpPiIe of sms_PduCodec.c, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with… |