2023 CVEs (page 280)
Page 280 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-22876 | Medium | 4.3 | 2023-03-15 | IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.7 and 6.1.0.0 through 6.1.2.1 could allow a privileged user to obtain sensitive information… |
CVE-2023-26284 | High | 7.5 | 2023-03-15 | IBM MQ Certified Container 9.3.0.1 through 9.3.0.3 and 9.3.1.0 through 9.3.1.1 could allow authenticated users with the cluster to be granted administration ac… |
CVE-2023-25804 | High | 7.5 | 2023-03-15 | Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulnerability… |
CVE-2023-24229 | High | 7.8 | 2023-03-15 | DrayTek Vigor2960 v1.5.1.4 allows an authenticated attacker with network access to the web management interface to inject operating system commands via the mai… |
CVE-2023-1418 | Low | 3.5 | 2023-03-15 | A vulnerability classified as problematic was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this vulnerability is… |
CVE-2023-1416 | Medium | 6.3 | 2023-03-15 | A vulnerability classified as critical has been found in Simple Art Gallery 1.0. Affected is an unknown function of the file adminHome.php. The manipulation of… |
CVE-2023-1415 | Medium | 6.3 | 2023-03-15 | A vulnerability was found in Simple Art Gallery 1.0. It has been declared as critical. This vulnerability affects the function sliderPicSubmit of the file admi… |
CVE-2023-1379 | Medium | 6.3 | 2023-03-15 | A vulnerability was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. It has been rated as critical. This issue affects some unkno… |
CVE-2023-27781 | High | 7.8 | 2023-03-15 | jpegoptim v1.5.2 was discovered to contain a heap overflow in the optimize function at jpegoptim.c. |
CVE-2023-27103 | High | 8.8 | 2023-03-15 | Libde265 v1.0.11 was discovered to contain a heap buffer overflow via the function derive_collocated_motion_vectors at motion.cc. |
CVE-2023-27102 | Medium | 6.5 | 2023-03-15 | Libde265 v1.0.11 was discovered to contain a segmentation violation via the function decoder_context::process_slice_segment_header at decctx.cc. |
CVE-2023-0100 | High | 8.8 | 2023-03-15 | In Eclipse BIRT, starting from version 2.6.2, the default configuration allowed to retrieve a report from the same host using an absolute HTTP path for the rep… |
CVE-2023-26084 | Low | 3.7 | 2023-03-15 | The armv8_dec_aes_gcm_full() API of Arm AArch64cryptolib before 86065c6 fails to the verify the authentication tag of AES-GCM protected data, leading to a man-… |
CVE-2023-24732 | High | 8.8 | 2023-03-15 | Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update… |
CVE-2023-24731 | High | 8.8 | 2023-03-15 | Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update f… |
CVE-2023-24730 | High | 8.8 | 2023-03-15 | Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update… |
CVE-2023-24729 | High | 8.8 | 2023-03-15 | Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update… |
CVE-2023-24728 | High | 8.8 | 2023-03-15 | Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update… |
CVE-2023-24726 | Critical | 9.8 | 2023-03-15 | Art Gallery Management System v1.0 was discovered to contain a SQL injection vulnerability via the viewid parameter on the enquiry page. |
CVE-2023-0322 | Medium | 6.1 | 2023-03-15 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Talent Software UNIS allows Reflected XSS. This issue af… |
CVE-2023-25968 | Medium | 4.3 | 2023-03-15 | Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs, Madalin Ungureanu, Antohe Cristian Client Portal – Private user pages and login plugin <= 1.1.8… |
CVE-2023-25709 | Medium | 5.4 | 2023-03-15 | Cross-Site Request Forgery (CSRF) vulnerability in Plainware Locatoraid Store Locator plugin <= 3.9.11 versions. |
CVE-2023-25708 | Medium | 4.3 | 2023-03-15 | Cross-Site Request Forgery (CSRF) vulnerability in Rextheme WP VR – 360 Panorama and Virtual Tour Builder For WordPress plugin <= 8.2.7 versions. |
CVE-2023-25695 | Medium | 5.3 | 2023-03-15 | Generation of Error Message Containing Sensitive Information vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: befo… |
CVE-2023-1407 | Medium | 4.7 | 2023-03-15 | A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknow… |
CVE-2023-27240 | Critical | 9.8 | 2023-03-15 | Tenda AX3 V16.03.12.11 was discovered to contain a command injection vulnerability via the lanip parameter at /goform/AdvSetLanip. |
CVE-2023-27239 | Critical | 9.8 | 2023-03-15 | Tenda AX3 V16.03.12.11 was discovered to contain a stack overflow via the shareSpeed parameter at /goform/WifiGuestSet. |
CVE-2023-27235 | High | 7.2 | 2023-03-15 | An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a craft… |
CVE-2023-27234 | Medium | 6.5 | 2023-03-15 | A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application. |
CVE-2023-28371 | Critical | 9.8 | 2023-03-15 | In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. |
CVE-2023-27757 | Critical | 9.8 | 2023-03-15 | An arbitrary file upload vulnerability in the /admin/user/uploadImg component of PerfreeBlog v3.1.1 allows attackers to execute arbitrary code via a crafted JP… |
CVE-2023-1327 | Critical | 9.8 | 2023-03-14 | Netgear RAX30 (AX2400), prior to version 1.0.6.74, was affected by an authentication bypass vulnerability, allowing an unauthenticated attacker to gain adminis… |
CVE-2023-27590 | High | 7.8 | 2023-03-14 | Rizin is a UNIX-like reverse engineering framework and command-line toolset. In version 0.5.1 and prior, converting a GDB registers profile file into a Rizin r… |
CVE-2023-26511 | Critical | 9.8 | 2023-03-14 | A Hard Coded Admin Credentials issue in the Web-UI Admin Panel in Propius MachineSelector 6.6.0 and 6.6.1 allows remote attackers to gain access to the admin p… |
CVE-2023-26262 | High | 7.2 | 2023-03-14 | An issue was discovered in Sitecore XP/XM 10.3. As an authenticated Sitecore user, a unrestricted language file upload vulnerability exists the can lead to dir… |
CVE-2023-28343 | Critical | 9.8 | 2023-03-14 | OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timezone parameter, beca… |
CVE-2023-28339 | High | 8.8 | 2023-03-14 | OpenDoas through 6.8.2, when TIOCSTI is available, allows privilege escalation because of sharing a terminal with the original session. NOTE: TIOCSTI is unavai… |
CVE-2023-28144 | High | 7.0 | 2023-03-14 | KDAB Hotspot 1.3.x and 1.4.x through 1.4.1, in a non-default configuration, allows privilege escalation because of race conditions involving symlinks and eleva… |
CVE-2023-27589 | Medium | 6.5 | 2023-03-14 | Minio is a Multi-Cloud Object Storage framework. Starting with RELEASE.2020-12-23T02-24-12Z and prior to RELEASE.2023-03-13T19-46-17Z, a user with `consoleAdmi… |
CVE-2023-27588 | High | 7.5 | 2023-03-14 | Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura GraphQL Engine prio… |
CVE-2023-27585 | High | 7.5 | 2023-03-14 | PJSIP is a free and open source multimedia communication library written in C. A buffer overflow vulnerability in versions 2.13 and prior affects applications… |
CVE-2023-25206 | High | 8.8 | 2023-03-14 | PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection. |
CVE-2023-24930 | High | 7.8 | 2023-03-14 | Microsoft OneDrive for MacOS Elevation of Privilege Vulnerability |
CVE-2023-24923 | Medium | 5.5 | 2023-03-14 | Microsoft OneDrive for Android Information Disclosure Vulnerability |
CVE-2023-24922 | Medium | 6.5 | 2023-03-14 | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
CVE-2023-24921 | Medium | 5.4 | 2023-03-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-24920 | Medium | 5.4 | 2023-03-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-24919 | Medium | 5.4 | 2023-03-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-24913 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24911 | Medium | 4.3 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24910 | High | 7.8 | 2023-03-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-24909 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24908 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-24907 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24906 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24892 | High | 8.2 | 2023-03-14 | Microsoft Edge (Chromium-based) Webview2 Spoofing Vulnerability |
CVE-2023-24891 | Medium | 5.4 | 2023-03-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-24890 | Medium | 6.5 | 2023-03-14 | Microsoft OneDrive for iOS Security Feature Bypass Vulnerability |
CVE-2023-24882 | Medium | 5.5 | 2023-03-14 | Microsoft OneDrive for Android Information Disclosure Vulnerability |
CVE-2023-24880 | Medium | 4.4 | 2023-03-14 | Windows SmartScreen Security Feature Bypass Vulnerability |
CVE-2023-24879 | Medium | 5.4 | 2023-03-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-24876 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24872 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24871 | High | 8.8 | 2023-03-14 | Windows Bluetooth Service Remote Code Execution Vulnerability |
CVE-2023-24870 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24869 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-24868 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24867 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-24866 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24865 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24864 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability |
CVE-2023-24863 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24862 | Medium | 5.5 | 2023-03-14 | Windows Secure Channel Denial of Service Vulnerability |
CVE-2023-24861 | High | 7.0 | 2023-03-14 | Windows Graphics Component Elevation of Privilege Vulnerability |
CVE-2023-24859 | High | 7.5 | 2023-03-14 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-24858 | High | 7.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24857 | Medium | 6.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-24856 | High | 7.5 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-23423 | High | 7.8 | 2023-03-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-23422 | High | 7.8 | 2023-03-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-23421 | High | 7.8 | 2023-03-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-23420 | High | 7.8 | 2023-03-14 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-23419 | High | 7.8 | 2023-03-14 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2023-23418 | High | 7.8 | 2023-03-14 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability |
CVE-2023-23417 | High | 7.8 | 2023-03-14 | Windows Partition Management Driver Elevation of Privilege Vulnerability |
CVE-2023-23416 | High | 7.8 | 2023-03-14 | Windows Cryptographic Services Remote Code Execution Vulnerability |
CVE-2023-23415 | Critical | 9.8 | 2023-03-14 | Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability |
CVE-2023-23414 | High | 7.1 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-23413 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23412 | High | 7.8 | 2023-03-14 | Windows Accounts Picture Elevation of Privilege Vulnerability |
CVE-2023-23411 | Medium | 6.5 | 2023-03-14 | Windows Hyper-V Denial of Service Vulnerability |
CVE-2023-23410 | High | 7.8 | 2023-03-14 | Windows HTTP.sys Elevation of Privilege Vulnerability |
CVE-2023-23409 | Medium | 5.5 | 2023-03-14 | Client Server Run-Time Subsystem (CSRSS) Information Disclosure Vulnerability |
CVE-2023-23408 | Medium | 4.5 | 2023-03-14 | Azure Apache Ambari Spoofing Vulnerability |
CVE-2023-23407 | High | 7.1 | 2023-03-14 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability |
CVE-2023-23406 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23405 | High | 8.1 | 2023-03-14 | Remote Procedure Call Runtime Remote Code Execution Vulnerability |
CVE-2023-23404 | High | 8.1 | 2023-03-14 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability |
CVE-2023-23403 | High | 8.8 | 2023-03-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-23402 | High | 7.8 | 2023-03-14 | Windows Media Remote Code Execution Vulnerability |