2023 CVEs (page 292)
Page 292 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0908 | Medium | 5.5 | 2023-02-18 | A vulnerability, which was classified as problematic, was found in Xoslab Easy File Locker 2.2.0.184. This affects the function MessageNotifyCallback in the li… |
CVE-2023-0907 | Medium | 4.4 | 2023-02-18 | A vulnerability, which was classified as problematic, has been found in Filseclab Twister Antivirus 8.17. Affected by this issue is the function 0x220017 in th… |
CVE-2023-0906 | High | 7.3 | 2023-02-18 | A vulnerability classified as critical was found in SourceCodester Online Pizza Ordering System 1.0. Affected by this vulnerability is the function delete_cate… |
CVE-2023-0905 | High | 7.3 | 2023-02-18 | A vulnerability classified as critical has been found in SourceCodester Employee Task Management System 1.0. Affected is an unknown function of the file change… |
CVE-2023-0904 | Medium | 6.3 | 2023-02-18 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been rated as critical. This issue affects some unknown processing of t… |
CVE-2023-0903 | Medium | 5.0 | 2023-02-18 | A vulnerability was found in SourceCodester Employee Task Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of t… |
CVE-2023-0902 | Low | 3.5 | 2023-02-18 | A vulnerability was found in SourceCodester Simple Food Ordering System 1.0. It has been classified as problematic. This affects an unknown part of the file pr… |
CVE-2023-0901 | Medium | 5.3 | 2023-02-18 | Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository pixelfed/pixelfed prior to 0.11.4. |
CVE-2023-24769 | Medium | 5.4 | 2023-02-17 | Changedetection.io before v0.40.1.1 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the main page. This vulnerability allows att… |
CVE-2023-23064 | Critical | 9.8 | 2023-02-17 | TOTOLINK A720R V4.1.5cu.532_ B20210610 is vulnerable to Incorrect Access Control. |
CVE-2023-22246 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code executi… |
CVE-2023-22244 | High | 7.8 | 2023-02-17 | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the… |
CVE-2023-22243 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-22239 | High | 7.8 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code… |
CVE-2023-22238 | High | 7.8 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut… |
CVE-2023-22237 | High | 7.8 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execut… |
CVE-2023-22236 | High | 7.8 | 2023-02-17 | Adobe Animate versions 22.0.8 (and earlier) and 23.0.0 (and earlier) are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-22234 | High | 7.8 | 2023-02-17 | Adobe Premiere Rush version 2.6 (and earlier) is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the c… |
CVE-2023-22233 | Medium | 5.5 | 2023-02-17 | After Affects versions 23.1 (and earlier), 22.6.3 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive… |
CVE-2023-22232 | Medium | 5.3 | 2023-02-17 | Adobe Connect versions 11.4.5 (and earlier), 12.1.5 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feat… |
CVE-2023-22231 | Medium | 5.5 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-22230 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22229 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22228 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary c… |
CVE-2023-22227 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code ex… |
CVE-2023-22226 | High | 7.8 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary… |
CVE-2023-21622 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21621 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execu… |
CVE-2023-21620 | Medium | 5.5 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21619 | High | 7.8 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21593 | Medium | 5.5 | 2023-02-17 | Adobe InDesign versions ID18.1 (and earlier) and ID17.4 (and earlier) are affected by a NULL Pointer Dereference vulnerability. An unauthenticated attacker cou… |
CVE-2023-21584 | Medium | 5.5 | 2023-02-17 | FrameMaker 2020 Update 4 (and earlier), 2022 (and earlier) are affected by a Use After Free vulnerability that could lead to disclosure of sensitive memory. An… |
CVE-2023-21583 | Medium | 5.5 | 2023-02-17 | Adobe Bridge versions 12.0.3 (and earlier) and 13.0.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensit… |
CVE-2023-21578 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21577 | Medium | 5.5 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memor… |
CVE-2023-21576 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21575 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution i… |
CVE-2023-21574 | High | 7.8 | 2023-02-17 | Photoshop version 23.5.3 (and earlier), 24.1 (and earlier) are affected by an Improper Input Validation vulnerability that could result in arbitrary code execu… |
CVE-2023-0482 | Medium | 5.5 | 2023-02-17 | In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insec… |
CVE-2023-24809 | Medium | 5.5 | 2023-02-17 | NetHack is a single player dungeon exploration game. Starting with version 3.6.2 and prior to version 3.6.7, illegal input to the "C" (call) command can cause… |
CVE-2023-23923 | High | 8.2 | 2023-02-17 | The vulnerability was found Moodle which exists due to insufficient limitations on the "start page" preference. A remote attacker can set that preference for a… |
CVE-2023-23922 | Medium | 6.1 | 2023-02-17 | The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in blog search. A remote attacker can trick the victim t… |
CVE-2023-23921 | Medium | 6.1 | 2023-02-17 | The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in some returnurl parameters. A remote attacker can tric… |
CVE-2023-24960 | High | 7.5 | 2023-02-17 | IBM InfoSphere Information Server 11.7 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL requ… |
CVE-2023-23279 | Critical | 9.8 | 2023-02-17 | Canteen Management System 1.0 is vulnerable to SQL Injection via /php_action/getOrderReport.php. |
CVE-2023-26020 | Medium | 5.7 | 2023-02-17 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Crafter Studio on Linux, MacOS, Windows, x86, ARM, 64 bit… |
CVE-2023-24785 | Medium | 5.5 | 2023-02-17 | An issue in Giorgio Tani peazip v.9.0.0 allows attackers to cause a denial of service via the End of Archive tag function of the peazip/pea UNPEA feature. |
CVE-2023-24964 | Medium | 6.2 | 2023-02-17 | IBM InfoSphere Information Server 11.7 could allow a local user to obtain sensitive information from a log files. IBM X-Force ID: 246463. |
CVE-2023-24369 | Medium | 6.1 | 2023-02-17 | A cross-site scripting (XSS) vulnerability in UJCMS v4.1.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the U… |
CVE-2023-22868 | Medium | 5.4 | 2023-02-17 | IBM Aspera Faspex 4.4.1 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering t… |
CVE-2023-0895 | High | 7.2 | 2023-02-17 | The WP Coder – add custom html, css and js code plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in versions up to, and in… |
CVE-2023-0822 | High | 8.8 | 2023-02-17 | The affected product DIAEnergie (versions prior to v1.9.03.001) contains improper authorization, which could allow an unauthorized user to bypass authorizatio… |
CVE-2023-23007 | High | 7.2 | 2023-02-17 | An issue was discovered in ESPCMS P8.21120101 after logging in to the background, there is a SQL injection vulnerability in the function node where members are… |
CVE-2023-24388 | Medium | 4.3 | 2023-02-17 | Cross-Site Request Forgery (CSRF) vulnerability in WpDevArt Booking calendar, Appointment Booking System plugin <= 3.2.3 versions affects plugin forms actions… |
CVE-2023-24329 | High | 7.5 | 2023-02-17 | An issue in the urllib.parse component of Python before 3.11.4 allows attackers to bypass blocklisting methods by supplying a URL that starts with blank charac… |
CVE-2023-23899 | Medium | 4.3 | 2023-02-17 | Cross-Site Request Forgery (CSRF) vulnerability in HasThemes Extensions For CF7 plugin <= 2.0.8 versions leads to arbitrary plugin activation. |
CVE-2023-23586 | Medium | 5.5 | 2023-02-17 | Due to a vulnerability in the io_uring subsystem, it is possible to leak kernel memory information to the user process. timens_install calls current_is_single_… |
CVE-2023-0882 | High | 8.8 | 2023-02-17 | Improper Input Validation, Authorization Bypass Through User-Controlled Key vulnerability in Kron Tech Single Connect on Windows allows Privilege Abuse. This i… |
CVE-2023-0887 | High | 7.0 | 2023-02-17 | A vulnerability was found in phjounin TFTPD64-SE 4.64 and classified as critical. This issue affects some unknown processing of the file tftpd64_svc.exe. The m… |
CVE-2023-0883 | Medium | 6.3 | 2023-02-17 | A vulnerability has been found in SourceCodester Online Pizza Ordering System 1.0 and classified as critical. This vulnerability affects unknown code of the fi… |
CVE-2023-24221 | Critical | 9.8 | 2023-02-17 | LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/DeptMapper.xml. |
CVE-2023-24220 | Critical | 9.8 | 2023-02-17 | LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/RoleMapper.xml. |
CVE-2023-24219 | Critical | 9.8 | 2023-02-17 | LuckyframeWEB v3.5 was discovered to contain a SQL injection vulnerability via the dataScope parameter at /system/UserMapper.xml. |
CVE-2023-24078 | High | 8.8 | 2023-02-17 | Real Time Logic FuguHub v8.1 and earlier was discovered to contain a remote code execution (RCE) vulnerability via the component /FuguHub/cmsdocs/. |
CVE-2023-23695 | Medium | 5.9 | 2023-02-17 | Dell Secure Connect Gateway (SCG) version 5.14.00.12 contains a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker could potentia… |
CVE-2023-0880 | High | 8.3 | 2023-02-17 | Misinterpretation of Input in GitHub repository thorsten/phpmyfaq prior to 3.1.11. |
CVE-2023-0879 | Medium | 6.3 | 2023-02-17 | Cross-site Scripting (XSS) - Stored in GitHub repository btcpayserver/btcpayserver prior to 1.7.12. |
CVE-2023-0878 | Medium | 6.1 | 2023-02-17 | Cross-site Scripting (XSS) - Generic in GitHub repository nuxt/framework prior to 3.2.1. |
CVE-2023-0877 | High | 8.8 | 2023-02-17 | Code Injection in GitHub repository froxlor/froxlor prior to 2.0.11. |
CVE-2023-0821 | Medium | 6.5 | 2023-02-16 | HashiCorp Nomad and Nomad Enterprise 1.2.15 up to 1.3.8, and 1.4.3 jobs using a maliciously compressed artifact stanza source can cause excessive disk usage. F… |
CVE-2023-22380 | Medium | 6.5 | 2023-02-16 | A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site. To exploit thi… |
CVE-2023-0866 | High | 7.8 | 2023-02-16 | Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.3.0-DEV. |
CVE-2023-25653 | High | 7.5 | 2023-02-16 | node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for web browsers and node.js-based servers. Prior to version 2.2.0, w… |
CVE-2023-25602 | High | 7.8 | 2023-02-16 | A stack-based buffer overflow in Fortinet FortiWeb 6.4 all versions, FortiWeb versions 6.3.17 and earlier, FortiWeb versions 6.2.6 and earlier, FortiWeb versio… |
CVE-2023-23784 | Medium | 5.7 | 2023-02-16 | A relative path traversal in Fortinet FortiWeb version 7.0.0 through 7.0.2, FortiWeb version 6.3.6 through 6.3.20, FortiWeb 6.4 all versions allows attacker to… |
CVE-2023-23783 | Medium | 6.7 | 2023-02-16 | A use of externally-controlled format string in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb 6.4 all versions allows attacker to execute unauthorize… |
CVE-2023-23782 | High | 7.8 | 2023-02-16 | A heap-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, FortiWeb version 6.3.0 through 6.3.19, FortiWeb 6.4 all versions, FortiWeb 6.2 a… |
CVE-2023-23781 | Medium | 6.4 | 2023-02-16 | A stack-based buffer overflow vulnerability [CWE-121] in FortiWeb version 7.0.1 and below, 6.4 all versions, version 6.3.19 and below SAML server configuration… |
CVE-2023-23780 | High | 8.0 | 2023-02-16 | A stack-based buffer overflow in Fortinet FortiWeb version 7.0.0 through 7.0.1, Fortinet FortiWeb version 6.3.6 through 6.3.19, Fortinet FortiWeb 6.4 all versi… |
CVE-2023-23779 | Medium | 6.8 | 2023-02-16 | Multiple improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerabilities [CWE-78] in FortiWeb version 7.0.1 and belo… |
CVE-2023-23778 | Medium | 4.9 | 2023-02-16 | A relative path traversal vulnerability [CWE-23] in FortiWeb version 7.0.1 and below, 6.4 all versions, 6.3 all versions, 6.2 all versions may allow an authent… |
CVE-2023-22638 | High | 7.1 | 2023-02-16 | Several improper neutralization of inputs during web page generation vulnerability [CWE-79] in FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8… |
CVE-2023-0475 | Medium | 4.2 | 2023-02-16 | HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0. |
CVE-2023-24807 | High | 7.5 | 2023-02-16 | Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the `Headers.set()` and `Headers.append()` methods are vulnerable to Regular Expression Deni… |
CVE-2023-24485 | High | 7.8 | 2023-02-16 | Vulnerabilities have been identified that, collectively, allow a standard Windows user to perform operations as SYSTEM on the computer running Citrix Workspace… |
CVE-2023-24484 | Medium | 5.5 | 2023-02-16 | A malicious user can cause log files to be written to a directory that they do not have permission to write to. |
CVE-2023-24483 | High | 7.8 | 2023-02-16 | A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual… |
CVE-2023-23947 | Critical | 9.1 | 2023-02-16 | Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All Argo CD versions starting with 2.3.0-rc1 and prior to 2.3.17, 2.4.23 2.5.11, and… |
CVE-2023-23936 | Medium | 6.5 | 2023-02-16 | Undici is an HTTP/1.1 client for Node.js. Starting with version 2.0.0 and prior to version 5.19.1, the undici library does not protect `host` HTTP header from… |
CVE-2023-23752 | Medium | 5.3 | 2023-02-16 | An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints. |
CVE-2023-23926 | Medium | 5.9 | 2023-02-16 | APOC (Awesome Procedures on Cypher) is an add-on library for Neo4j. An XML External Entity (XXE) vulnerability found in the apoc.import.graphml procedure of AP… |
CVE-2023-23558 | Medium | 6.3 | 2023-02-16 | In Eternal Terminal 6.2.1, TelemetryService uses fixed paths in /tmp. For example, a local attacker can create /tmp/.sentry-native-etserver with mode 0777 befo… |
CVE-2023-25173 | Medium | 5.3 | 2023-02-16 | containerd is an open source container runtime. A bug was found in containerd prior to versions 1.6.18 and 1.5.18 where supplementary groups are not set up pro… |
CVE-2023-25153 | Medium | 6.2 | 2023-02-16 | containerd is an open source container runtime. Before versions 1.6.18 and 1.5.18, when importing an OCI image, there was no limit on the number of bytes read… |
CVE-2023-24238 | Critical | 9.8 | 2023-02-16 | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the city parameter at setting/delStaticDhcpRules. |
CVE-2023-24236 | Critical | 9.8 | 2023-02-16 | TOTOlink A7100RU(V7.4cu.2313_B20191024) was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules. |
CVE-2023-22580 | Medium | 5.3 | 2023-02-16 | Due to improper input filtering in the sequalize js library, can malicious queries lead to sensitive information disclosure. |
CVE-2023-22579 | Critical | 9.9 | 2023-02-16 | Due to improper parameter filtering in the sequalize js library, can a attacker peform injection. |
CVE-2023-22578 | Critical | 10.0 | 2023-02-16 | Due to improper artibute filtering in the sequalize js library, can a attacker peform SQL injections. |
CVE-2023-0862 | High | 7.2 | 2023-02-16 | The NetModule NSRW web administration interface is vulnerable to path traversals, which could lead to arbitrary file uploads and deletion. By uploading malicio… |