2023 CVEs (page 284)
Page 284 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-27088 | High | 8.8 | 2023-03-08 | feiqu-opensource Background Vertical authorization vulnerability exists in IndexController.java. demo users with low permission can perform operations within t… |
CVE-2023-26922 | Critical | 9.8 | 2023-03-08 | SQL injection vulnerability found in Varisicte matrix-gui v.2 allows a remote attacker to execute arbitrary code via the shell_exect parameter to the \www\page… |
CVE-2023-24773 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/database/list. |
CVE-2023-26261 | Critical | 9.8 | 2023-03-08 | In UBIKA WAAP Gateway/Cloud through 6.10, a blind XPath injection leads to an authentication bypass by stealing the session of another connected user. The fixe… |
CVE-2023-26952 | Medium | 5.4 | 2023-03-08 | onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Menu module. |
CVE-2023-25395 | Critical | 9.8 | 2023-03-08 | TOTOlink A7100RU V7.4cu.2313_B20191024 router was discovered to contain a command injection vulnerability via the ou parameter at /setting/delStaticDhcpRules. |
CVE-2023-1270 | Medium | 5.4 | 2023-03-08 | Cross-site Scripting in GitHub repository btcpayserver/btcpayserver prior to 1.8.3. |
CVE-2023-26950 | Medium | 5.4 | 2023-03-08 | onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Title parameter under the Adding Categories module. |
CVE-2023-1267 | Critical | 9.8 | 2023-03-08 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Ulkem Company PtteM Kart. This issue affects PtteM Kart… |
CVE-2023-23638 | Medium | 5.0 | 2023-03-08 | A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x versio… |
CVE-2023-1269 | Critical | 9.8 | 2023-03-08 | Use of Hard-coded Credentials in GitHub repository alextselegidis/easyappointments prior to 1.5.0. |
CVE-2023-24657 | Medium | 6.1 | 2023-03-08 | phpipam v1.6 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the closeClass parameter at /subnet-masks/popup.php. |
CVE-2023-0090 | Critical | 9.8 | 2023-03-08 | The webservices in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows for an anonymous user to execute remote code through 'eval in… |
CVE-2023-0089 | High | 8.8 | 2023-03-08 | The webutils in Proofpoint Enterprise Protection (PPS/POD) contain a vulnerability that allows an authenticated user to execute remote code through 'eval inje… |
CVE-2023-27476 | High | 8.2 | 2023-03-08 | OWSLib is a Python package for client programming with Open Geospatial Consortium (OGC) web service interface standards, and their related content models. OWSL… |
CVE-2023-24780 | Critical | 9.8 | 2023-03-08 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the id parameter at /databases/table/columns. |
CVE-2023-1264 | Medium | 5.5 | 2023-03-07 | NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1392. |
CVE-2023-1263 | Medium | 5.3 | 2023-03-07 | The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_de… |
CVE-2023-1236 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Internals in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to spoof the origin of an iframe via a crafted HTML… |
CVE-2023-1235 | Medium | 6.3 | 2023-03-07 | Type confusion in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit he… |
CVE-2023-1234 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to perform domain spoofing via a crafted H… |
CVE-2023-1233 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exte… |
CVE-2023-1232 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive informatio… |
CVE-2023-1231 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the… |
CVE-2023-1230 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in WebApp Installs in Google Chrome on Android prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malici… |
CVE-2023-1229 | Medium | 4.3 | 2023-03-07 | Inappropriate implementation in Permission prompts in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a cr… |
CVE-2023-1228 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Intents in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a… |
CVE-2023-1227 | High | 8.8 | 2023-03-07 | Use after free in Core in Google Chrome on Lacros prior to 111.0.5563.64 allowed a remote attacker who convinced a user to engage in specific UI interaction to… |
CVE-2023-1226 | Medium | 6.5 | 2023-03-07 | Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass content security policy via a c… |
CVE-2023-1225 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Navigation in Google Chrome on iOS prior to 111.0.5563.64 allowed a remote attacker to bypass same origin policy via a craft… |
CVE-2023-1224 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Web Payments API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a c… |
CVE-2023-1223 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafte… |
CVE-2023-1222 | High | 8.8 | 2023-03-07 | Heap buffer overflow in Web Audio API in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HT… |
CVE-2023-1221 | Medium | 4.3 | 2023-03-07 | Insufficient policy enforcement in Extensions API in Google Chrome prior to 111.0.5563.64 allowed an attacker who convinced a user to install a malicious exten… |
CVE-2023-1220 | High | 8.8 | 2023-03-07 | Heap buffer overflow in UMA in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially exploit h… |
CVE-2023-1219 | High | 8.8 | 2023-03-07 | Heap buffer overflow in Metrics in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process to potentially explo… |
CVE-2023-1218 | High | 8.8 | 2023-03-07 | Use after free in WebRTC in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chr… |
CVE-2023-1217 | Medium | 6.5 | 2023-03-07 | Stack buffer overflow in Crash reporting in Google Chrome on Windows prior to 111.0.5563.64 allowed a remote attacker who had compromised the renderer process… |
CVE-2023-1216 | High | 8.8 | 2023-03-07 | Use after free in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker who had convienced the user to engage in direct UI interaction to… |
CVE-2023-1215 | High | 8.8 | 2023-03-07 | Type confusion in CSS in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi… |
CVE-2023-1214 | High | 8.8 | 2023-03-07 | Type confusion in V8 in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu… |
CVE-2023-1213 | High | 8.8 | 2023-03-07 | Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page… |
CVE-2023-20651 | Medium | 4.4 | 2023-03-07 | In apu, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20650 | Medium | 6.7 | 2023-03-07 | In apu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20649 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20648 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20647 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20646 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20645 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20644 | Medium | 4.4 | 2023-03-07 | In ril, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with System execution privileges… |
CVE-2023-20643 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20642 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20641 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20640 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20639 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20638 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20637 | Medium | 6.7 | 2023-03-07 | In ril, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20636 | Medium | 6.7 | 2023-03-07 | In display drm, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20635 | Medium | 4.4 | 2023-03-07 | In keyinstall, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution pri… |
CVE-2023-20634 | Medium | 6.7 | 2023-03-07 | In widevine, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20633 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20632 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20630 | Medium | 6.7 | 2023-03-07 | In usb, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privilege… |
CVE-2023-20628 | Medium | 6.7 | 2023-03-07 | In thermal, there is a possible memory corruption due to an uncaught exception. This could lead to local escalation of privilege with System execution privileg… |
CVE-2023-20627 | Medium | 6.7 | 2023-03-07 | In pqframework, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution p… |
CVE-2023-20626 | Medium | 6.7 | 2023-03-07 | In msdc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20625 | Medium | 6.4 | 2023-03-07 | In adsp, there is a possible double free due to a race condition. This could lead to local escalation of privilege with System execution privileges needed. Use… |
CVE-2023-20624 | Medium | 6.7 | 2023-03-07 | In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privil… |
CVE-2023-20623 | Medium | 6.4 | 2023-03-07 | In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution priv… |
CVE-2023-20621 | Medium | 6.7 | 2023-03-07 | In tinysys, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privi… |
CVE-2023-20620 | Medium | 4.1 | 2023-03-07 | In adsp, there is a possible escalation of privilege due to a logic error. This could lead to local escalation of privilege with System execution privileges ne… |
CVE-2023-1003 | Medium | 5.3 | 2023-03-07 | A vulnerability, which was classified as critical, was found in Typora up to 1.5.5 on Windows. Affected is an unknown function of the component WSH JScript Han… |
CVE-2023-27485 | Medium | 4.3 | 2023-03-07 | thmmniii/fbs-core is an open source feedback system for students. In versions prior to 1.5.3 when querying `subresults`, it is possible to query `subresults` f… |
CVE-2023-27481 | Medium | 4.3 | 2023-03-07 | Directus is a real-time API and App dashboard for managing SQL database content. In versions prior to 9.16.0 users with read access to the `password` field in… |
CVE-2023-27480 | High | 7.7 | 2023-03-07 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with edit rights on a do… |
CVE-2023-27479 | Critical | 9.9 | 2023-03-07 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions any user with view rights can exe… |
CVE-2023-27478 | Medium | 6.5 | 2023-03-07 | libmemcached-awesome is an open source C/C++ client library and tools for the memcached server. `libmemcached` could return data for a previously requested key… |
CVE-2023-27475 | High | 8.8 | 2023-03-07 | Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files from a mal… |
CVE-2023-24775 | Critical | 9.8 | 2023-03-07 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php. |
CVE-2023-25611 | Medium | 4.0 | 2023-03-07 | A improper neutralization of formula elements in a CSV file vulnerability in Fortinet FortiAnalyzer 6.4.0 - 6.4.9, 7.0.0 - 7.0.5, and 7.2.0 - 7.2.1 allows loca… |
CVE-2023-25605 | High | 7.5 | 2023-03-07 | A improper access control vulnerability in Fortinet FortiSOAR 7.3.0 - 7.3.1 allows an attacker authenticated on the administrative interface to perform unautho… |
CVE-2023-25230 | Medium | 4.9 | 2023-03-07 | A Server-Side Request Forgery (SSRF) in loonflow r2.0.14 allows attackers to force the application to make arbitrary requests via manipulation of the hook_url… |
CVE-2023-25223 | High | 7.2 | 2023-03-07 | CRMEB <=1.3.4 is vulnerable to SQL Injection via /api/admin/user/list. |
CVE-2023-23776 | Medium | 4.6 | 2023-03-07 | An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in FortiAnalyzer versions 7.2.0 through 7.2.1, 7.0.0 through 7.0.4 and 6… |
CVE-2023-1257 | High | 7.6 | 2023-03-07 | An attacker with physical access to the affected Moxa UC Series devices can initiate a restart of the device and gain access to its BIOS. Command line options… |
CVE-2023-27522 | High | 7.5 | 2023-03-07 | HTTP Response Smuggling vulnerability in Apache HTTP Server via mod_proxy_uwsgi. This issue affects Apache HTTP Server: from 2.4.30 through 2.4.55. Special ch… |
CVE-2023-25690 | Critical | 9.8 | 2023-03-07 | Some mod_proxy configurations on Apache HTTP Server versions 2.4.0 through 2.4.55 allow a HTTP Request Smuggling attack. Configurations are affected when m… |
CVE-2023-26953 | Medium | 4.8 | 2023-03-07 | onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Add Administrator module. |
CVE-2023-24781 | Critical | 9.8 | 2023-03-07 | Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\MemberLevel.php. |
CVE-2023-1254 | Low | 3.5 | 2023-03-07 | A vulnerability has been found in SourceCodester Health Center Patient Record Management System 1.0 and classified as problematic. This vulnerability affects u… |
CVE-2023-1253 | High | 7.3 | 2023-03-07 | A vulnerability, which was classified as critical, was found in SourceCodester Health Center Patient Record Management System 1.0. This affects an unknown part… |
CVE-2023-26955 | Medium | 5.4 | 2023-03-07 | onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Admin Group module. |
CVE-2023-26954 | Medium | 5.4 | 2023-03-07 | onekeyadmin v1.3.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the User Group module. |
CVE-2023-1245 | Medium | 5.4 | 2023-03-07 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1244 | Medium | 5.4 | 2023-03-07 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1243 | Medium | 4.8 | 2023-03-07 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1242 | Medium | 5.4 | 2023-03-07 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1241 | Medium | 5.4 | 2023-03-07 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1240 | Medium | 5.4 | 2023-03-07 | Cross-site Scripting (XSS) - Stored in GitHub repository answerdev/answer prior to 1.0.6. |
CVE-2023-1239 | Medium | 4.8 | 2023-03-07 | Cross-site Scripting (XSS) - Reflected in GitHub repository answerdev/answer prior to 1.0.6. |