2023 CVEs (page 283)
Page 283 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1322 | Medium | 6.3 | 2023-03-10 | A vulnerability was found in lmxcms 1.41 and classified as critical. Affected by this issue is the function reply of the file BookAction.class.php. The manipul… |
CVE-2023-1321 | Medium | 6.3 | 2023-03-10 | A vulnerability has been found in lmxcms 1.41 and classified as critical. Affected by this vulnerability is the function update of the file AcquisiAction.class… |
CVE-2023-1320 | Medium | 6.1 | 2023-03-10 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1319 | Medium | 4.8 | 2023-03-10 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1318 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Generic in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1317 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1316 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Stored in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-1315 | Medium | 5.4 | 2023-03-10 | Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to v1.16.6. |
CVE-2023-0746 | Medium | 6.3 | 2023-03-10 | The help page in GigaVUE-FM, when using GigaVUE-OS software version 5.0 202, does not require an authenticated user. An attacker could enforce a user into inse… |
CVE-2023-26464 | High | 7.5 | 2023-03-10 | ** UNSUPPORTED WHEN ASSIGNED ** When using the Chainsaw or SocketAppender components with Log4j 1.x on JRE less than 1.7, an attacker that manages to cause a… |
CVE-2023-24774 | Critical | 9.8 | 2023-03-10 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \controller\auth\Auth.php. |
CVE-2023-1313 | High | 8.8 | 2023-03-10 | Unrestricted Upload of File with Dangerous Type in GitHub repository cockpit-hq/cockpit prior to 2.4.1. |
CVE-2023-25947 | Medium | 6.2 | 2023-03-10 | The bundle management subsystem within OpenHarmony-v3.1.4 and prior versions has a null pointer reference vulnerability which local attackers can exploit this… |
CVE-2023-24465 | Medium | 5.5 | 2023-03-10 | Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions has a null pointer reference vulnerability w… |
CVE-2023-22436 | High | 7.8 | 2023-03-10 | The kernel subsystem function check_permission_for_set_tokenid within OpenHarmony-v3.1.5 and prior versions has an UAF vulnerability which local attackers ca… |
CVE-2023-22301 | Medium | 6.5 | 2023-03-10 | The kernel subsystem hmdfs within OpenHarmony-v3.1.5 and prior versions has an arbitrary memory accessing vulnerability which network attackers can launch a… |
CVE-2023-1312 | Medium | 4.8 | 2023-03-10 | Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.5.19. |
CVE-2023-0083 | Medium | 4.0 | 2023-03-10 | The ArKUI framework subsystem within OpenHarmony-v3.1.5 and prior versions, OpenHarmony-v3.0.7 and prior versions has an Improper Input Validation vulnerabi… |
CVE-2023-1311 | Medium | 6.3 | 2023-03-10 | A vulnerability, which was classified as critical, was found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. This affects an unknown p… |
CVE-2023-1310 | Medium | 6.3 | 2023-03-10 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Graduate Tracer System 1.0. Affected by this issue is some unknown f… |
CVE-2023-1309 | Medium | 6.3 | 2023-03-10 | A vulnerability classified as critical was found in SourceCodester Online Graduate Tracer System 1.0. Affected by this vulnerability is an unknown functionalit… |
CVE-2023-1308 | Medium | 6.3 | 2023-03-10 | A vulnerability classified as critical has been found in SourceCodester Online Graduate Tracer System 1.0. Affected is an unknown function of the file admin/ad… |
CVE-2023-1091 | Critical | 9.8 | 2023-03-10 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alpata Licensed Warehousing Automation System allows Comm… |
CVE-2023-27119 | Medium | 5.5 | 2023-03-10 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::Decompiler::WrapChild. |
CVE-2023-27117 | High | 7.8 | 2023-03-10 | WebAssembly v1.0.29 was discovered to contain a heap overflow via the component component wabt::Node::operator. |
CVE-2023-27116 | Medium | 5.5 | 2023-03-10 | WebAssembly v1.0.29 discovered to contain an abort in CWriter::MangleType. |
CVE-2023-27115 | Medium | 5.5 | 2023-03-10 | WebAssembly v1.0.29 was discovered to contain a segmentation fault via the component wabt::cat_compute_size. |
CVE-2023-27114 | Medium | 5.5 | 2023-03-10 | radare2 v5.8.3 was discovered to contain a segmentation fault via the component wasm_dis at p/wasm/wasm.c. |
CVE-2023-1307 | Critical | 9.8 | 2023-03-10 | Authentication Bypass by Primary Weakness in GitHub repository froxlor/froxlor prior to 2.0.13. |
CVE-2023-20064 | Medium | 4.6 | 2023-03-09 | A vulnerability in the GRand Unified Bootloader (GRUB) for Cisco IOS XR Software could allow an unauthenticated attacker with physical access to the device to… |
CVE-2023-20049 | High | 8.6 | 2023-03-09 | A vulnerability in the bidirectional forwarding detection (BFD) hardware offload feature of Cisco IOS XR Software for Cisco ASR 9000 Series Aggregation Service… |
CVE-2023-1303 | Medium | 6.3 | 2023-03-09 | A vulnerability was found in UCMS 1.6 and classified as critical. This issue affects some unknown processing of the file sadmin/fileedit.php of the component S… |
CVE-2023-1302 | Low | 3.5 | 2023-03-09 | A vulnerability, which was classified as problematic, was found in SourceCodester File Tracker Manager System 1.0. This affects an unknown part of the file nor… |
CVE-2023-1301 | Medium | 6.3 | 2023-03-09 | A vulnerability, which was classified as critical, has been found in SourceCodester Friendly Island Pizza Website and Ordering System 1.0. Affected by this iss… |
CVE-2023-1300 | Medium | 6.3 | 2023-03-09 | A vulnerability classified as critical was found in SourceCodester COVID 19 Testing Management System 1.0. Affected by this vulnerability is an unknown functio… |
CVE-2023-1072 | Medium | 4.3 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 9.0 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions star… |
CVE-2023-0623 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validatio… |
CVE-2023-0622 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds write vulnerability when parsing project (i.e. HMI) files. The product lacks proper validatio… |
CVE-2023-0621 | High | 7.8 | 2023-03-09 | Cscape Envision RV version 4.60 is vulnerable to an out-of-bounds read vulnerability when parsing project (i.e. HMI) files. The product lacks proper validation… |
CVE-2023-0050 | High | 8.7 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions sta… |
CVE-2023-27490 | High | 8.1 | 2023-03-09 | NextAuth.js is an open source authentication solution for Next.js applications. `next-auth` applications using OAuth provider versions before `v4.20.1` have be… |
CVE-2023-27484 | Medium | 6.2 | 2023-03-09 | crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. In affected versions an already highly p… |
CVE-2023-27483 | Medium | 5.9 | 2023-03-09 | crossplane-runtime is a set of go libraries used to build Kubernetes controllers in Crossplane and its related stacks. An out of memory panic vulnerability has… |
CVE-2023-27214 | Critical | 9.8 | 2023-03-09 | Online Student Management System v1.0 was discovered to contain multiple SQL injection vulnerabilities via the fromdate and todate parameters at /eduauth/stude… |
CVE-2023-27213 | Critical | 9.8 | 2023-03-09 | Online Student Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter at /eduauth/student/search.php. |
CVE-2023-27212 | Medium | 6.1 | 2023-03-09 | A cross-site scripting (XSS) vulnerability in /php-opos/signup.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTM… |
CVE-2023-27211 | Medium | 6.1 | 2023-03-09 | A cross-site scripting (XSS) vulnerability in /admin/navbar.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML v… |
CVE-2023-27210 | Critical | 9.8 | 2023-03-09 | Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/view_order.php. |
CVE-2023-27208 | Medium | 6.1 | 2023-03-09 | A cross-site scripting (XSS) vulnerability in /php-opos/login.php of Online Pizza Ordering System 1.0 allows attackers to execute arbitrary web scripts or HTML… |
CVE-2023-27207 | Critical | 9.8 | 2023-03-09 | Online Pizza Ordering System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/manage_user.php. |
CVE-2023-27206 | Medium | 6.1 | 2023-03-09 | A cross-site scripting (XSS) vulnerability in /kruxton/navbar.php of Best POS Management System 1.0 allows attackers to execute arbitrary web scripts or HTML v… |
CVE-2023-27205 | Critical | 9.8 | 2023-03-09 | Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the month parameter at /kruxton/sales_report.php. |
CVE-2023-27204 | Critical | 9.8 | 2023-03-09 | Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/manage_user.php. |
CVE-2023-27203 | Critical | 9.8 | 2023-03-09 | Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /billing/home.php. |
CVE-2023-27202 | Critical | 9.8 | 2023-03-09 | Best POS Management System 1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /kruxton/receipt.php. |
CVE-2023-26957 | Critical | 9.1 | 2023-03-09 | onekeyadmin v1.3.9 was discovered to contain an arbitrary file delete vulnerability via the component \admin\controller\plugins. |
CVE-2023-0223 | Medium | 5.3 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 15.5 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions sta… |
CVE-2023-1084 | Low | 2.7 | 2023-03-09 | An issue has been discovered in GitLab CE/EE affecting all versions before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions starting from 15… |
CVE-2023-0483 | Medium | 5.5 | 2023-03-09 | An issue has been discovered in GitLab affecting all versions starting from 12.1 before 15.7.8, all versions starting from 15.8 before 15.8.4, all versions sta… |
CVE-2023-25814 | High | 7.1 | 2023-03-09 | metersphere is an open source continuous testing platform. In versions prior to 2.7.1 a user who has permission to create a resource file through UI operations… |
CVE-2023-25573 | High | 8.6 | 2023-03-09 | metersphere is an open source continuous testing platform. In affected versions an improper access control vulnerability exists in `/api/jmeter/download/files`… |
CVE-2023-1288 | Medium | 6.8 | 2023-03-09 | An XML External Entity injection (XXE) vulnerability in ENOVIA Live Collaboration V6R2013xE allows an attacker to read local files on the server. |
CVE-2023-1287 | Critical | 9.0 | 2023-03-09 | An XSL template vulnerability in ENOVIA Live Collaboration V6R2013xE allows Remote Code Execution. |
CVE-2023-0845 | Medium | 4.9 | 2023-03-09 | Consul and Consul Enterprise allowed an authenticated user with service:write permissions to trigger a workflow that causes Consul server and client agents to… |
CVE-2023-26209 | Low | 3.7 | 2023-03-09 | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiDeceptor 3.1.x and before allows a remote unauthenticated… |
CVE-2023-26208 | Low | 3.7 | 2023-03-09 | A improper restriction of excessive authentication attempts vulnerability [CWE-307] in Fortinet FortiAuthenticator 6.4.x and before allows a remote unauthenti… |
CVE-2023-1294 | High | 7.3 | 2023-03-09 | A vulnerability was found in SourceCodester File Tracker Manager System 1.0. It has been classified as critical. Affected is an unknown function of the file /f… |
CVE-2023-1293 | Medium | 5.0 | 2023-03-09 | A vulnerability was found in SourceCodester Online Graduate Tracer System 1.0 and classified as critical. This issue affects the function mysqli_query of the f… |
CVE-2023-1292 | Medium | 6.3 | 2023-03-09 | A vulnerability has been found in SourceCodester Sales Tracker Management System 1.0 and classified as critical. This vulnerability affects the function delete… |
CVE-2023-1291 | Medium | 6.3 | 2023-03-09 | A vulnerability, which was classified as critical, was found in SourceCodester Sales Tracker Management System 1.0. This affects an unknown part of the file ad… |
CVE-2023-1290 | Medium | 6.3 | 2023-03-09 | A vulnerability, which was classified as critical, has been found in SourceCodester Sales Tracker Management System 1.0. Affected by this issue is some unknown… |
CVE-2023-1286 | Medium | 4.8 | 2023-03-09 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.19. |
CVE-2023-1251 | Critical | 9.8 | 2023-03-09 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Akinsoft Wolvox. This issue affects Wolvox: before 8.02.0… |
CVE-2023-27986 | High | 7.8 | 2023-03-09 | emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to Emacs Lisp code injections through a crafted mailto: URI with unescaped double-quote chara… |
CVE-2023-27985 | High | 7.8 | 2023-03-09 | emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of complia… |
CVE-2023-26110 | High | 7.3 | 2023-03-09 | All versions of the package node-bluetooth are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length validation… |
CVE-2023-26109 | High | 7.3 | 2023-03-09 | All versions of the package node-bluetooth-serial-port are vulnerable to Buffer Overflow via the findSerialPortChannel method due to improper user input length… |
CVE-2023-26948 | High | 7.5 | 2023-03-09 | onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/file/download. |
CVE-2023-27974 | High | 7.5 | 2023-03-09 | Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when cus… |
CVE-2023-0030 | High | 7.8 | 2023-03-08 | A use-after-free flaw was found in the Linux kernel’s nouveau driver in how a user triggers a memory overflow that causes the nvkm_vma_tail function to fail. T… |
CVE-2023-24777 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/list. |
CVE-2023-1283 | Critical | 10.0 | 2023-03-08 | Code Injection in GitHub repository builderio/qwik prior to 0.21.0. |
CVE-2023-27477 | Low | 3.1 | 2023-03-08 | wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's code generation backend, Cranelift, has a bug on x86_64 platforms for the WebAssembly `i8x16… |
CVE-2023-24782 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/edit. |
CVE-2023-24282 | Medium | 5.4 | 2023-03-08 | An arbitrary file upload vulnerability in Poly Trio 8800 7.2.2.1094 allows attackers to execute arbitrary code via a crafted ringtone file. |
CVE-2023-22892 | High | 7.5 | 2023-03-08 | There exists an information disclosure vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by unauthenticated users to read arb… |
CVE-2023-22891 | High | 8.1 | 2023-03-08 | There exists a privilege escalation vulnerability in SmartBear Zephyr Enterprise through 7.15.0 that could be exploited by authorized users to reset passwords… |
CVE-2023-22890 | High | 7.5 | 2023-03-08 | SmartBear Zephyr Enterprise through 7.15.0 allows unauthenticated users to upload large files, which could exhaust the local drive space, causing a denial of s… |
CVE-2023-22889 | Critical | 9.8 | 2023-03-08 | SmartBear Zephyr Enterprise through 7.15.0 mishandles user-defined input during report generation. This could lead to remote code execution by unauthenticated… |
CVE-2023-26489 | Critical | 9.9 | 2023-03-08 | wasmtime is a fast and secure runtime for WebAssembly. In affected versions wasmtime's code generator, Cranelift, has a bug on x86_64 targets where address-mod… |
CVE-2023-24533 | High | 7.5 | 2023-03-08 | Multiplication of certain unreduced P-256 scalars produce incorrect results. There are no protocols known at this time that can be attacked due to this. |
CVE-2023-24532 | Medium | 5.3 | 2023-03-08 | The ScalarMult and ScalarBaseMult methods of the P256 Curve may return an incorrect result if called with some specific unreduced scalars (a scalar larger than… |
CVE-2023-27486 | High | 8.1 | 2023-03-08 | xCAT is a toolkit for deployment and administration of computer clusters. In versions prior to 2.16.5 if zones are configured as a mechanism to secure clusters… |
CVE-2023-26956 | High | 7.5 | 2023-03-08 | onekeyadmin v1.3.9 was discovered to contain an arbitrary file read vulnerability via the component /admin1/curd/code. |
CVE-2023-23760 | Medium | 4.9 | 2023-03-08 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To exploit this… |
CVE-2023-1278 | Low | 3.5 | 2023-03-08 | A vulnerability, which was classified as problematic, has been found in IBOS up to 4.5.5. Affected by this issue is some unknown functionality of the file mobi… |
CVE-2023-1277 | High | 7.8 | 2023-03-08 | A vulnerability, which was classified as critical, was found in kylin-system-updater up to 1.4.20kord on Ubuntu Kylin. Affected is the function InstallSnap of… |
CVE-2023-1276 | Medium | 4.7 | 2023-03-08 | A vulnerability, which was classified as critical, has been found in SUL1SS_shop. This issue affects some unknown processing of the file application\merch\cont… |
CVE-2023-27482 | Critical | 10.0 | 2023-03-08 | homeassistant is an open source home automation tool. A remotely exploitable vulnerability bypassing authentication for accessing the Supervisor API through Ho… |
CVE-2023-1275 | Low | 3.5 | 2023-03-08 | A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the f… |