2023 CVEs (page 278)
Page 278 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22680 | Medium | 5.9 | 2023-03-20 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Altanic No API Amazon Affiliate plugin <= 4.2.2 versions. |
CVE-2023-22679 | Medium | 5.9 | 2023-03-20 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nicolas Lemoine WP Better Emails plugin <= 0.4 versions. |
CVE-2023-22678 | Medium | 5.4 | 2023-03-20 | Cross-Site Request Forgery (CSRF) vulnerability in Rafael Dery Superior FAQ plugin <= 1.0.2 versions. |
CVE-2023-25795 | Medium | 5.9 | 2023-03-20 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in WP-master.Ir Feed Changer & Remover plugin <= 0.2 versions. |
CVE-2023-25794 | Medium | 5.9 | 2023-03-20 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mighty Digital Nooz plugin <= 1.6.0 versions. |
CVE-2023-25064 | Medium | 5.9 | 2023-03-20 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Matteo Candura WP htpasswd plugin <= 1.7 versions. |
CVE-2023-24381 | Medium | 5.9 | 2023-03-20 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in NsThemes Advanced Social Pixel plugin <= 2.1.1 versions. |
CVE-2023-22681 | Medium | 4.3 | 2023-03-20 | Cross-Site Request Forgery (CSRF) vulnerability in Aarvanshinfotech Online Exam Software: eExamhall plugin <= 4.0 versions. |
CVE-2023-25782 | Medium | 5.9 | 2023-03-20 | Auth. (admin+) vulnerability in Second2none Service Area Postcode Checker plugin <= 2.0.8 versions. |
CVE-2023-1507 | Low | 3.5 | 2023-03-20 | A vulnerability has been found in SourceCodester E-Commerce System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionalit… |
CVE-2023-1506 | Medium | 5.6 | 2023-03-20 | A vulnerability, which was classified as critical, was found in SourceCodester E-Commerce System 1.0. Affected is an unknown function of the file login.php. Th… |
CVE-2023-1505 | Medium | 5.0 | 2023-03-20 | A vulnerability, which was classified as critical, has been found in SourceCodester E-Commerce System 1.0. This issue affects some unknown processing of the fi… |
CVE-2023-1504 | Medium | 5.6 | 2023-03-20 | A vulnerability classified as critical was found in SourceCodester Alphaware Simple E-Commerce System 1.0. This vulnerability affects unknown code. The manipul… |
CVE-2023-1503 | Medium | 5.6 | 2023-03-20 | A vulnerability classified as critical has been found in SourceCodester Alphaware Simple E-Commerce System 1.0. This affects an unknown part of the file admin/… |
CVE-2023-1502 | Medium | 5.6 | 2023-03-20 | A vulnerability was found in SourceCodester Alphaware Simple E-Commerce System 1.0. It has been rated as critical. Affected by this issue is some unknown funct… |
CVE-2023-1250 | High | 7.4 | 2023-03-20 | Improper Input Validation vulnerability in OTRS AG OTRS (ACL modules), OTRS AG ((OTRS)) Community Edition (ACL modules) allows Local Execution of Code. When cr… |
CVE-2023-1248 | Medium | 6.1 | 2023-03-20 | Improper Input Validation vulnerability in OTRS AG OTRS (Ticket Actions modules), OTRS AG ((OTRS)) Community Edition (Ticket Actions modules) allows Cross-Site… |
CVE-2023-1501 | Medium | 6.3 | 2023-03-19 | A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The mani… |
CVE-2023-1500 | Low | 3.5 | 2023-03-19 | A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functional… |
CVE-2023-1499 | Medium | 6.3 | 2023-03-19 | A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the fil… |
CVE-2023-1498 | Medium | 6.3 | 2023-03-19 | A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of t… |
CVE-2023-1497 | Medium | 6.3 | 2023-03-19 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing… |
CVE-2023-1496 | Medium | 5.4 | 2023-03-19 | Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. |
CVE-2023-28617 | High | 7.8 | 2023-03-19 | org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name… |
CVE-2023-26905 | Critical | 9.8 | 2023-03-19 | An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database… |
CVE-2023-26806 | Critical | 9.8 | 2023-03-19 | Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime, |
CVE-2023-26805 | Critical | 9.8 | 2023-03-19 | Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify. |
CVE-2023-1495 | Medium | 6.3 | 2023-03-19 | A vulnerability classified as critical was found in Rebuild up to 3.2.3. Affected by this vulnerability is the function queryListOfConfig of the file /admin/ro… |
CVE-2023-1494 | Medium | 6.3 | 2023-03-18 | A vulnerability classified as critical has been found in IBOS 4.5.5. Affected is an unknown function of the file ApiController.php. The manipulation of the arg… |
CVE-2023-1493 | Medium | 5.5 | 2023-03-18 | A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been rated as problematic. This issue affects the function 0x220019 in the library Max… |
CVE-2023-1492 | Medium | 5.5 | 2023-03-18 | A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been declared as problematic. This vulnerability affects the function 0x220019 in the… |
CVE-2023-1491 | Medium | 4.4 | 2023-03-18 | A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects the function 0x220020 in the library MaxCryp… |
CVE-2023-1490 | Medium | 4.4 | 2023-03-18 | A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1 and classified as critical. Affected by this issue is the function 0x220020 in the library SDA… |
CVE-2023-1489 | High | 7.8 | 2023-03-18 | A vulnerability has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54 and classified as critical. Affected by this vulnerability is the function 0… |
CVE-2023-28609 | Critical | 9.8 | 2023-03-18 | api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication. |
CVE-2023-1488 | Low | 3.3 | 2023-03-18 | A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is the function 0x9C40A0D8/0x9C40… |
CVE-2023-1487 | Medium | 5.5 | 2023-03-18 | A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects the function 0x9C4… |
CVE-2023-1486 | Medium | 4.4 | 2023-03-18 | A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects the function 0x220004 in the… |
CVE-2023-1485 | Low | 3.5 | 2023-03-18 | A vulnerability classified as problematic has been found in SourceCodester Young Entrepreneur E-Negosyo System 1.0. This affects an unknown part of the file /b… |
CVE-2023-28607 | Medium | 6.1 | 2023-03-18 | js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip. |
CVE-2023-28606 | Medium | 6.1 | 2023-03-18 | js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips. |
CVE-2023-1484 | Medium | 6.3 | 2023-03-18 | A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipula… |
CVE-2023-1483 | Medium | 6.3 | 2023-03-18 | A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallar… |
CVE-2023-1482 | Medium | 4.7 | 2023-03-18 | A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html… |
CVE-2023-1481 | Low | 3.5 | 2023-03-18 | A vulnerability, which was classified as problematic, has been found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this issue… |
CVE-2023-1480 | Medium | 6.3 | 2023-03-18 | A vulnerability classified as critical was found in SourceCodester Monitoring of Students Cyber Accounts System 1.0. Affected by this vulnerability is an unkno… |
CVE-2023-1479 | Medium | 6.3 | 2023-03-18 | A vulnerability classified as critical has been found in SourceCodester Simple Music Player 1.0. Affected is an unknown function of the file save_music.php. Th… |
CVE-2023-26113 | High | 7.5 | 2023-03-18 | Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js… |
CVE-2023-24278 | Medium | 6.1 | 2023-03-18 | Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability. |
CVE-2023-28116 | High | 8.1 | 2023-03-17 | Contiki-NG is an open-source, cross-platform operating system for internet of things (IoT) devices. In versions 4.8 and prior, an out-of-bounds write can occur… |
CVE-2023-28115 | Critical | 9.8 | 2023-03-17 | Snappy is a PHP library allowing thumbnail, snapshot or PDF generation from a url or a html page. Prior to version 1.4.2, Snappy is vulnerable to PHAR deserial… |
CVE-2023-27595 | Medium | 6.5 | 2023-03-17 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In version 1.13.0, when Cilium is started, there is a short period w… |
CVE-2023-27253 | High | 8.8 | 2023-03-17 | A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via… |
CVE-2023-24678 | High | 7.5 | 2023-03-17 | A vulnerability in Centralite Pearl Thermostat 0x04075010 allows attackers to cause a Denial of Service (DoS) via a crafted Zigbee message. |
CVE-2023-27594 | Medium | 4.2 | 2023-03-17 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific condit… |
CVE-2023-27593 | Medium | 4.4 | 2023-03-17 | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with acce… |
CVE-2023-27592 | Medium | 4.8 | 2023-03-17 | Miniflux is a feed reader. Since v2.0.25, Miniflux will automatically proxy images served over HTTP to prevent mixed content errors. When an outbound request… |
CVE-2023-27591 | High | 7.5 | 2023-03-17 | Miniflux is a feed reader. Prior to version 2.0.43, an unauthenticated user can retrieve Prometheus metrics from a publicly reachable Miniflux instance where t… |
CVE-2023-28112 | Medium | 5.9 | 2023-03-17 | Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, some user provided URLs were being pas… |
CVE-2023-28111 | Medium | 5.7 | 2023-03-17 | Discourse is an open-source discussion platform. Prior to version 3.1.0.beta3 of the `beta` and `tests-passed` branches, attackers are able to bypass Discourse… |
CVE-2023-28107 | Medium | 4.5 | 2023-03-17 | Discourse is an open-source discussion platform. Prior to version 3.0.2 of the `stable` branch and version 3.1.0.beta3 of the `beta` and `tests-passed` branche… |
CVE-2023-25172 | Medium | 4.4 | 2023-03-17 | Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branche… |
CVE-2023-0027 | Medium | 5.3 | 2023-03-17 | Rockwell Automation Modbus TCP Server AOI prior to 2.04.00 is vulnerable to an unauthorized user sending a malformed message that could cause the controller to… |
CVE-2023-26040 | Medium | 6.5 | 2023-03-17 | Discourse is an open-source discussion platform. Between versions 3.1.0.beta2 and 3.1.0.beta3 of the `tests-passed` branch, editing or responding to a chat mes… |
CVE-2023-23622 | Medium | 4.3 | 2023-03-17 | Discourse is an open-source discussion platform. Prior to version 3.0.1 of the `stable` branch and version 3.1.0.beta2 of the `beta` and `tests-passed` branche… |
CVE-2023-1475 | Medium | 6.3 | 2023-03-17 | A vulnerability, which was classified as critical, has been found in SourceCodester Canteen Management System 1.0. This issue affects the function query of the… |
CVE-2023-1474 | Medium | 6.3 | 2023-03-17 | A vulnerability classified as critical was found in SourceCodester Automatic Question Paper Generator System 1.0. This vulnerability affects unknown code of th… |
CVE-2023-1472 | Medium | 6.3 | 2023-03-17 | The RapidLoad Power-Up for Autoptimize plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.7.1. This is due to… |
CVE-2023-1471 | High | 8.8 | 2023-03-17 | The WP Popup Banners plugin for WordPress is vulnerable to SQL Injection via the 'banner_id' parameter in versions up to, and including, 1.2.5 due to insuffici… |
CVE-2023-1470 | Medium | 4.4 | 2023-03-17 | The eCommerce Product Catalog plugin for WordPress is vulnerable to Stored Cross-Site Scripting via some of its settings parameters in versions up to, and incl… |
CVE-2023-1469 | Medium | 4.4 | 2023-03-17 | The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including… |
CVE-2023-1172 | High | 7.2 | 2023-03-17 | The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient… |
CVE-2023-1468 | Medium | 6.3 | 2023-03-17 | A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknow… |
CVE-2023-1467 | Medium | 6.5 | 2023-03-17 | A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the… |
CVE-2023-1466 | Medium | 6.3 | 2023-03-17 | A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function vie… |
CVE-2023-1464 | High | 7.3 | 2023-03-17 | A vulnerability, which was classified as critical, was found in SourceCodester Medicine Tracker System 1.0. This affects an unknown part of the file Users.php?… |
CVE-2023-1463 | Medium | 5.4 | 2023-03-17 | Authorization Bypass Through User-Controlled Key in GitHub repository nilsteampassnet/teampass prior to 3.0.0.23. |
CVE-2023-1461 | Medium | 6.3 | 2023-03-17 | A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects the function query of t… |
CVE-2023-1152 | Critical | 9.8 | 2023-03-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Utarit Information Technologies Persolus allows SQL Injec… |
CVE-2023-1460 | Medium | 6.5 | 2023-03-17 | A vulnerability was found in SourceCodester Online Pizza Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file admi… |
CVE-2023-1459 | Medium | 6.3 | 2023-03-17 | A vulnerability was found in SourceCodester Canteen Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of t… |
CVE-2023-1455 | Medium | 5.6 | 2023-03-17 | A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. This vulnerability affects unknown code of the file admin/… |
CVE-2023-1454 | Medium | 6.3 | 2023-03-17 | A vulnerability classified as critical has been found in jeecg-boot 3.5.0. This affects an unknown part of the file jmreport/qurestSql. The manipulation of the… |
CVE-2023-1453 | Medium | 4.4 | 2023-03-17 | A vulnerability was found in Watchdog Anti-Virus 1.4.214.0. It has been rated as critical. Affected by this issue is the function 0x80002008 in the library wsd… |
CVE-2023-1452 | Medium | 5.3 | 2023-03-17 | A vulnerability was found in GPAC 2.3-DEV-rev35-gbbca86917-master. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2023-1451 | Low | 3.3 | 2023-03-17 | A vulnerability was found in MP4v2 2.1.2. It has been classified as problematic. Affected is the function mp4v2::impl::MP4Track::GetSampleFileOffset of the fil… |
CVE-2023-1450 | Low | 3.3 | 2023-03-17 | A vulnerability was found in MP4v2 2.1.2 and classified as problematic. This issue affects the function DumpTrack of the file mp4trackdump.cpp. The manipulatio… |
CVE-2023-1449 | Medium | 5.3 | 2023-03-17 | A vulnerability has been found in GPAC 2.3-DEV-rev35-gbbca86917-master and classified as problematic. This vulnerability affects the function gf_av1_reset_stat… |
CVE-2023-1448 | Medium | 5.3 | 2023-03-17 | A vulnerability, which was classified as problematic, was found in GPAC 2.3-DEV-rev35-gbbca86917-master. This affects the function gf_m2ts_process_sdt of the f… |
CVE-2023-1447 | Low | 3.5 | 2023-03-17 | A vulnerability, which was classified as problematic, has been found in SourceCodester Medicine Tracker System 1.0. Affected by this issue is some unknown func… |
CVE-2023-1446 | Medium | 5.5 | 2023-03-17 | A vulnerability classified as problematic was found in Watchdog Anti-Virus 1.4.214.0. Affected by this vulnerability is the function 0x80002004/0x80002008 in t… |
CVE-2023-1445 | Low | 3.3 | 2023-03-17 | A vulnerability classified as problematic has been found in Filseclab Twister Antivirus 8. Affected is the function 0x80112053 in the library fildds.sys of the… |
CVE-2023-1444 | High | 7.5 | 2023-03-17 | A vulnerability was found in Filseclab Twister Antivirus 8. It has been rated as critical. This issue affects the function 0x8011206B in the library fildds.sys… |
CVE-2023-1443 | Medium | 6.5 | 2023-03-17 | A vulnerability was found in Filseclab Twister Antivirus 8. It has been declared as problematic. This vulnerability affects the function 0x80112053 in the libr… |
CVE-2023-1442 | Medium | 4.7 | 2023-03-17 | A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /admin_system/api… |
CVE-2023-1441 | Medium | 6.3 | 2023-03-17 | A vulnerability has been found in SourceCodester Automatic Question Paper Generator System 1.0 and classified as critical. Affected by this vulnerability is an… |
CVE-2023-1440 | Medium | 6.3 | 2023-03-17 | A vulnerability, which was classified as critical, was found in SourceCodester Automatic Question Paper Generator System 1.0. Affected is an unknown function o… |
CVE-2023-1439 | Medium | 6.3 | 2023-03-17 | A vulnerability, which was classified as critical, has been found in SourceCodester Medicine Tracker System 1.0. This issue affects some unknown processing of… |
CVE-2023-28531 | Critical | 9.8 | 2023-03-17 | ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9. |
CVE-2023-27059 | Medium | 5.4 | 2023-03-16 | A cross-site scripting (XSS) vulnerability in the Edit Group function of ChurchCRM v4.5.3 allows attackers to execute arbitrary web scripts or HTML via a craft… |