2023 CVEs (page 276)
Page 276 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1594 | High | 7.3 | 2023-03-23 | A vulnerability, which was classified as critical, was found in novel-plus 3.6.2. Affected is the function MenuService of the file sys/menu/list. The manipulat… |
CVE-2023-1593 | Low | 3.5 | 2023-03-23 | A vulnerability, which was classified as problematic, has been found in SourceCodester Automatic Question Paper Generator System 1.0. This issue affects some u… |
CVE-2023-1592 | Medium | 6.3 | 2023-03-23 | A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of th… |
CVE-2023-1591 | Medium | 6.3 | 2023-03-23 | A vulnerability classified as critical has been found in SourceCodester Automatic Question Paper Generator System 1.0. This affects an unknown part of the file… |
CVE-2023-1590 | Medium | 6.3 | 2023-03-23 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This issue affects the function exec of th… |
CVE-2023-1589 | Medium | 6.3 | 2023-03-23 | A vulnerability has been found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. This vulnerability affects the functi… |
CVE-2023-1410 | Medium | 6.2 | 2023-03-23 | Grafana is an open-source platform for monitoring and observability. Grafana had a stored XSS vulnerability in the Graphite FunctionDescription tooltip. Th… |
CVE-2023-1051 | Medium | 6.1 | 2023-03-23 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in As Koc Energy Web Report System allows Reflected XSS. Th… |
CVE-2023-1050 | Critical | 9.8 | 2023-03-23 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in As Koc Energy Web Report System allows SQL Injection. Th… |
CVE-2023-26114 | High | 8.2 | 2023-03-23 | Versions of the package code-server before 4.10.1 are vulnerable to Missing Origin Validation in WebSockets handshakes. Exploiting this vulnerability can allow… |
CVE-2023-28759 | High | 7.8 | 2023-03-23 | An issue was discovered in Veritas NetBackup before 10.0 on Windows. A vulnerability in the way the client validates the path to a DLL prior to loading may all… |
CVE-2023-28758 | High | 7.1 | 2023-03-23 | An issue was discovered in Veritas NetBackup before 8.3.0.2. BPCD allows an unprivileged user to specify a log file path when executing a NetBackup command. Th… |
CVE-2023-27249 | Medium | 5.5 | 2023-03-23 | swfdump v0.9.2 was discovered to contain a heap buffer overflow in the function swf_GetPlaceObject at swfobject.c. |
CVE-2023-26496 | High | 8.6 | 2023-03-23 | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T5124. Memory corr… |
CVE-2023-23192 | High | 7.2 | 2023-03-23 | IS Decisions UserLock MFA 11.01 is vulnerable to authentication bypass using scheduled task. |
CVE-2023-28470 | Medium | 5.3 | 2023-03-23 | In Couchbase Server 5 through 7 before 7.1.4, the nsstats endpoint is accessible without authentication. |
CVE-2023-26498 | High | 8.6 | 2023-03-23 | An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T5126. Memory corrupti… |
CVE-2023-26088 | High | 7.8 | 2023-03-23 | In Malwarebytes before 4.5.23, a symbolic link may be used delete any arbitrary file on the system by exploiting the local quarantine system. It can also lead… |
CVE-2023-24655 | Critical | 9.8 | 2023-03-23 | Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update fun… |
CVE-2023-27100 | Critical | 9.8 | 2023-03-22 | Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 al… |
CVE-2023-27060 | Critical | 9.8 | 2023-03-22 | LightCMS v1.3.7 was discovered to contain a remote code execution (RCE) vulnerability via the image:make function. |
CVE-2023-27054 | Medium | 6.1 | 2023-03-22 | A cross-site scripting (XSS) vulnerability in MiroTalk P2P before commit f535b35 allows attackers to execute arbitrary web scripts or HTML via a crafted payloa… |
CVE-2023-28667 | Critical | 9.8 | 2023-03-22 | The Lead Generated WordPress Plugin, version <= 1.23, was affected by an unauthenticated insecure deserialization issue. The tve_labels parameter of the tve_ap… |
CVE-2023-28666 | Medium | 5.4 | 2023-03-22 | The InPost Gallery WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'imgurl' parameter to the add_in… |
CVE-2023-28665 | Medium | 5.4 | 2023-03-22 | The Woo Bulk Price Update WordPress plugin, in versions < 2.2.2, is affected by a reflected cross-site scripting vulnerability in the 'page' parameter to the t… |
CVE-2023-28664 | Medium | 5.4 | 2023-03-22 | The Meta Data and Taxonomies Filter WordPress plugin, in versions < 1.3.1, is affected by a reflected cross-site scripting vulnerability in the 'tax_name' para… |
CVE-2023-28663 | High | 8.8 | 2023-03-22 | The Formidable PRO2PDF WordPress Plugin, version < 3.11, is affected by an authenticated SQL injection vulnerability in the ‘fieldmap’ parameter in the fpropdf… |
CVE-2023-28662 | Critical | 9.8 | 2023-03-22 | The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerability in the template p… |
CVE-2023-28661 | High | 8.8 | 2023-03-22 | The WP Popup Banners WordPress Plugin, version <= 1.2.5, is affected by an authenticated SQL injection vulnerability in the 'value' parameter in the get_popup_… |
CVE-2023-28660 | High | 8.8 | 2023-03-22 | The Events Made Easy WordPress Plugin, version <= 2.3.14 is affected by an authenticated SQL injection vulnerability in the 'search_name' parameter in the eme_… |
CVE-2023-28659 | High | 8.8 | 2023-03-22 | The Waiting: One-click Countdowns WordPress Plugin, version <= 0.6.2, is affected by an authenticated SQL injection vulnerability in the pbc_down[meta][id] par… |
CVE-2023-28439 | Medium | 4.7 | 2023-03-22 | CKEditor4 is an open source what-you-see-is-what-you-get HTML editor. A cross-site scripting vulnerability has been discovered affecting Iframe Dialog and Medi… |
CVE-2023-28438 | Medium | 6.2 | 2023-03-22 | Pimcore is an open source data and experience management platform. Prior to version 10.5.19, since a user with 'report' permission can already write arbitrary… |
CVE-2023-28434 | High | 8.8 | 2023-03-22 | Minio is a Multi-Cloud Object Storage framework. Prior to RELEASE.2023-03-20T20-16-18Z, an attacker can use crafted requests to bypass metadata bucket name che… |
CVE-2023-28433 | High | 8.8 | 2023-03-22 | Minio is a Multi-Cloud Object Storage framework. All users on Windows prior to version RELEASE.2023-03-20T20-16-18Z are impacted. MinIO fails to filter the `\`… |
CVE-2023-28432 | High | 7.5 | 2023-03-22 | Minio is a Multi-Cloud Object Storage framework. In a cluster deployment starting with RELEASE.2019-12-17T23-16-33Z and prior to RELEASE.2023-03-20T20-16-18Z… |
CVE-2023-28431 | High | 7.5 | 2023-03-22 | Frontier is an Ethereum compatibility layer for Substrate. Frontier's `modexp` precompile uses `num-bigint` crate under the hood. In the implementation prior t… |
CVE-2023-0386 | High | 7.8 | 2023-03-22 | A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS… |
CVE-2023-28119 | High | 7.5 | 2023-03-22 | The crewjam/saml go library contains a partial implementation of the SAML standard in golang. Prior to version 0.4.13, the package's use of `flate.NewReader` d… |
CVE-2023-28117 | High | 7.6 | 2023-03-22 | Sentry SDK is the official Python SDK for Sentry, real-time crash reporting software. When using the Django integration of versions prior to 1.14.0 of the Sent… |
CVE-2023-27224 | Critical | 9.8 | 2023-03-22 | An issue found in NginxProxyManager v.2.9.19 allows an attacker to execute arbitrary code via a lua script to the configuration file. |
CVE-2023-28114 | Medium | 4.8 | 2023-03-22 | `cilium-cli` is the command line interface to install, manage, and troubleshoot Kubernetes clusters running Cilium. Prior to version 0.13.2,`cilium-cli`, when… |
CVE-2023-25820 | Medium | 4.2 | 2023-03-22 | Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform, and Nextcloud Enterprise Server is the enterprise version of t… |
CVE-2023-0870 | High | 8.1 | 2023-03-22 | A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow an attacker to gain… |
CVE-2023-27754 | Medium | 5.5 | 2023-03-22 | vox2mesh 1.0 has stack-overflow in main.cpp, this is stack-overflow caused by incorrect use of memcpy() funciton. The flow allows an attacker to cause a denial… |
CVE-2023-26426 | High | 7.8 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution… |
CVE-2023-26358 | High | 8.6 | 2023-03-22 | Creative Cloud version 5.9.1 (and earlier) is affected by an Untrusted Search Path vulnerability that might allow attackers to execute their own programs, acce… |
CVE-2023-25862 | Medium | 5.5 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitiv… |
CVE-2023-25861 | High | 7.8 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… |
CVE-2023-25860 | High | 7.8 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code exec… |
CVE-2023-25859 | High | 7.8 | 2023-03-22 | Illustrator version 26.5.2 (and earlier) and 27.2.0 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary cod… |
CVE-2023-22271 | Medium | 5.3 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a Weak Cryptography for Passwords vulnerability that can lead to a security feature bypass… |
CVE-2023-22269 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able t… |
CVE-2023-22266 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22265 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22264 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22263 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22262 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22261 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22260 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22259 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22258 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22257 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22256 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a URL Redirection to Untrusted Site ('Open Redirect') vulnerability. A low-privilege authent… |
CVE-2023-22254 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able t… |
CVE-2023-22253 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able t… |
CVE-2023-22252 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able t… |
CVE-2023-21616 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able t… |
CVE-2023-21615 | Medium | 5.4 | 2023-03-22 | Experience Manager versions 6.5.15.0 (and earlier) are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If a low-privileged attacker is able t… |
CVE-2023-0464 | High | 7.5 | 2023-03-22 | A security vulnerability has been identified in all supported versions of OpenSSL related to the verification of X.509 certificate chains that include policy… |
CVE-2023-1578 | High | 8.8 | 2023-03-22 | SQL Injection in GitHub repository pimcore/pimcore prior to 10.5.19. |
CVE-2023-1573 | Low | 3.5 | 2023-03-22 | A vulnerability was found in DataGear up to 1.11.1 and classified as problematic. This issue affects some unknown processing of the component Graph Dataset Han… |
CVE-2023-26913 | Medium | 6.1 | 2023-03-22 | EVOLUCARE ECSIMAGING (aka ECS Imaging) < 6.21.5 is vulnerable to Cross Site Scripting (XSS) via new_movie. php. |
CVE-2023-1571 | Medium | 6.3 | 2023-03-22 | A vulnerability, which was classified as critical, was found in DataGear up to 4.5.0. This affects an unknown part of the file /analysisProject/pagingQueryData… |
CVE-2023-1570 | Low | 3.3 | 2023-03-22 | A vulnerability, which was classified as problematic, has been found in syoyo tinydng. Affected by this issue is the function __interceptor_memcpy of the file… |
CVE-2023-1569 | Low | 3.5 | 2023-03-22 | A vulnerability classified as problematic was found in SourceCodester E-Commerce System 1.0. Affected by this vulnerability is an unknown functionality of the… |
CVE-2023-1568 | Low | 3.5 | 2023-03-22 | A vulnerability classified as problematic has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of… |
CVE-2023-1567 | Low | 3.5 | 2023-03-22 | A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as problematic. This issue affects some unknown… |
CVE-2023-1566 | Medium | 6.3 | 2023-03-22 | A vulnerability was found in SourceCodester Medical Certificate Generator App 1.0. It has been declared as critical. This vulnerability affects unknown code of… |
CVE-2023-1281 | High | 7.8 | 2023-03-22 | Use After Free vulnerability in Linux kernel traffic control index filter (tcindex) allows Privilege Escalation. The imperfect hash area can be updated while p… |
CVE-2023-27638 | Critical | 9.8 | 2023-03-22 | An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised t… |
CVE-2023-27637 | Critical | 9.8 | 2023-03-22 | An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised p… |
CVE-2023-1572 | Low | 2.0 | 2023-03-22 | A vulnerability has been found in DataGear up to 1.11.1 and classified as problematic. This vulnerability affects unknown code of the component Plugin Handler… |
CVE-2023-1565 | Low | 3.5 | 2023-03-22 | A vulnerability was found in FeiFeiCMS 2.7.130201. It has been classified as problematic. This affects an unknown part of the file \Public\system\slide_add.htm… |
CVE-2023-1564 | Medium | 6.3 | 2023-03-22 | A vulnerability was found in SourceCodester Air Cargo Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of… |
CVE-2023-1563 | Medium | 6.3 | 2023-03-22 | A vulnerability has been found in SourceCodester Student Study Center Desk Management System 1.0 and classified as critical. Affected by this vulnerability is… |
CVE-2023-1561 | Medium | 6.3 | 2023-03-22 | A vulnerability, which was classified as critical, was found in code-projects Simple Online Hotel Reservation System 1.0. Affected is an unknown function of th… |
CVE-2023-1560 | Low | 2.8 | 2023-03-22 | A vulnerability, which was classified as problematic, has been found in TinyTIFF 3.0.0.0. This issue affects some unknown processing of the file tinytiffreader… |
CVE-2023-1559 | Medium | 4.7 | 2023-03-22 | A vulnerability classified as problematic was found in SourceCodester Storage Unit Rental Management System 1.0. This vulnerability affects unknown code of the… |
CVE-2023-28708 | Medium | 4.3 | 2023-03-22 | When using the RemoteIpFilter with requests received from a reverse proxy via HTTP that include the X-Forwarded-Proto header set to https, session cookie… |
CVE-2023-1562 | Low | 3.5 | 2023-03-22 | Mattermost fails to check the "Show Full Name" setting when rendering the result for the /plugins/focalboard/api/v2/users API call, allowing an attacker to lea… |
CVE-2023-1558 | Medium | 6.3 | 2023-03-22 | A vulnerability classified as critical has been found in Simple and Beautiful Shopping Cart System 1.0. This affects an unknown part of the file uploadera.php… |
CVE-2023-1557 | Medium | 6.3 | 2023-03-22 | A vulnerability was found in SourceCodester E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the f… |
CVE-2023-1556 | Medium | 6.3 | 2023-03-22 | A vulnerability was found in SourceCodester Judging Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown funct… |
CVE-2023-28685 | High | 7.1 | 2023-03-22 | Jenkins AbsInt a³ Plugin 1.1.0 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks. |
CVE-2023-28083 | High | 8.3 | 2023-03-22 | A remote Cross-site Scripting vulnerability was discovered in HPE Integrated Lights-Out 6 (iLO 6), Integrated Lights-Out 5 (iLO 5) and Integrated Lights-Out 4… |
CVE-2023-28005 | Medium | 6.8 | 2023-03-22 | A vulnerability in Trend Micro Endpoint Encryption Full Disk Encryption version 6.0.0.3204 and below could allow an attacker with physical access to an affecte… |
CVE-2023-25924 | Medium | 5.4 | 2023-03-22 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1 could allow an authenticated user to perform actions that they should not have acce… |
CVE-2023-25688 | Medium | 4.3 | 2023-03-22 | IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An attacker cou… |
CVE-2023-25596 | Medium | 4.5 | 2023-03-22 | A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext f… |