2023 CVEs (page 294)
Page 294 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21720 | Medium | 5.3 | 2023-02-14 | Microsoft Edge (Chromium-based) Tampering Vulnerability |
CVE-2023-21718 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21717 | High | 8.8 | 2023-02-14 | Microsoft SharePoint Server Elevation of Privilege Vulnerability |
CVE-2023-21716 | Critical | 9.8 | 2023-02-14 | Microsoft Word Remote Code Execution Vulnerability |
CVE-2023-21715 | High | 7.3 | 2023-02-14 | Microsoft Publisher Security Feature Bypass Vulnerability |
CVE-2023-21714 | Medium | 5.5 | 2023-02-14 | Microsoft Office Information Disclosure Vulnerability |
CVE-2023-21713 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21710 | High | 7.2 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21707 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21706 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21705 | High | 8.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-21704 | High | 7.8 | 2023-02-14 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21703 | Medium | 6.5 | 2023-02-14 | Azure Data Box Gateway Remote Code Execution Vulnerability |
CVE-2023-21702 | High | 7.5 | 2023-02-14 | Windows iSCSI Service Denial of Service Vulnerability |
CVE-2023-21701 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability |
CVE-2023-21700 | High | 7.5 | 2023-02-14 | Windows iSCSI Discovery Service Denial of Service Vulnerability |
CVE-2023-21699 | Medium | 5.3 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-21697 | Medium | 6.2 | 2023-02-14 | Windows Internet Storage Name Service (iSNS) Server Information Disclosure Vulnerability |
CVE-2023-21695 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21694 | Medium | 6.8 | 2023-02-14 | Windows Fax Service Remote Code Execution Vulnerability |
CVE-2023-21693 | Medium | 5.7 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability |
CVE-2023-21692 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21691 | High | 7.5 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability |
CVE-2023-21690 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21689 | Critical | 9.8 | 2023-02-14 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability |
CVE-2023-21688 | High | 7.8 | 2023-02-14 | NT OS Kernel Elevation of Privilege Vulnerability |
CVE-2023-21687 | Medium | 5.5 | 2023-02-14 | HTTP.sys Information Disclosure Vulnerability |
CVE-2023-21686 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21685 | High | 8.8 | 2023-02-14 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21684 | High | 8.8 | 2023-02-14 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability |
CVE-2023-21573 | Medium | 5.4 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21572 | Medium | 6.5 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21571 | Medium | 5.4 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21570 | Medium | 5.4 | 2023-02-14 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability |
CVE-2023-21568 | High | 7.3 | 2023-02-14 | Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability |
CVE-2023-21564 | High | 7.1 | 2023-02-14 | Azure DevOps Server Cross-Site Scripting Vulnerability |
CVE-2023-21529 | High | 8.8 | 2023-02-14 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2023-21528 | High | 7.8 | 2023-02-14 | Microsoft SQL Server Remote Code Execution Vulnerability |
CVE-2023-25725 | Critical | 9.1 | 2023-02-14 | HAProxy before 2.7.3 may allow a bypass of access control because HTTP/1 headers are inadvertently lost in some situations, aka "request smuggling." The HTTP h… |
CVE-2023-25571 | Medium | 6.8 | 2023-02-14 | Backstage is an open platform for building developer portals. `@backstage/catalog-model` prior to version 1.2.0, `@backstage/core-components` prior to 0.12.4… |
CVE-2023-25567 | High | 7.5 | 2023-02-14 | GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to… |
CVE-2023-25566 | High | 7.5 | 2023-02-14 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsin… |
CVE-2023-25565 | High | 7.5 | 2023-02-14 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target inf… |
CVE-2023-25564 | Medium | 6.5 | 2023-02-14 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, memory corruption can be triggered when de… |
CVE-2023-25563 | Medium | 5.9 | 2023-02-14 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, multiple out-of-bounds reads when decoding… |
CVE-2023-22943 | Medium | 4.8 | 2023-02-14 | In Splunk Add-on Builder (AoB) versions below 4.1.2 and the Splunk CloudConnect SDK versions below 3.1.3, requests to third-party APIs through the REST API Mod… |
CVE-2023-22942 | Medium | 5.4 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a cross-site request forgery in the Splunk Secure Gateway (SSG) app in the ‘kvstore_client’ REST… |
CVE-2023-22941 | Medium | 6.5 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, an improperly-formatted ‘INGEST_EVAL’ parameter in a Field Transformation crashes the Splunk dae… |
CVE-2023-22940 | Medium | 6.3 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, aliases of the ‘collect’ search processing language (SPL) command, including ‘summaryindex’, ‘su… |
CVE-2023-22939 | High | 8.1 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards for risky… |
CVE-2023-22938 | Medium | 4.3 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘sendemail’ REST API endpoint lets any authenticated user send an email as the Splunk instan… |
CVE-2023-22937 | Medium | 4.3 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the lookup table upload feature let a user upload lookup tables with unnecessary filename extens… |
CVE-2023-22936 | Medium | 6.3 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘search_listener’ parameter in a search allows for a blind server-side request forgery (SSRF… |
CVE-2023-22935 | High | 8.1 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass SPL safegua… |
CVE-2023-22934 | High | 7.3 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for ris… |
CVE-2023-22933 | High | 8.0 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View throug… |
CVE-2023-22932 | High | 8.7 | 2023-02-14 | In Splunk Enterprise 9.0 versions before 9.0.4, a View allows for Cross-Site Scripting (XSS) through the error message in a Base64-encoded image. The vulnerabi… |
CVE-2023-22931 | Medium | 4.3 | 2023-02-14 | In Splunk Enterprise versions below 8.1.13 and 8.2.10, the ‘createrss’ external search command overwrites existing Resource Description Format Site Summary (RS… |
CVE-2023-0830 | Medium | 6.3 | 2023-02-14 | A vulnerability classified as critical has been found in EasyNAS 1.1.0. Affected is the function system of the file /backup.pl. The manipulation leads to os co… |
CVE-2023-25576 | High | 7.5 | 2023-02-14 | @fastify/multipart is a Fastify plugin to parse the multipart content-type. Prior to versions 7.4.1 and 6.0.1, @fastify/multipart may experience denial of serv… |
CVE-2023-24161 | Critical | 9.8 | 2023-02-14 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the webWlanIdx parameter in the setWebWlanIdx function. |
CVE-2023-24160 | Critical | 9.8 | 2023-02-14 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admuser parameter in the setPasswordCfg function. |
CVE-2023-24159 | Critical | 9.8 | 2023-02-14 | TOTOLINK CA300-PoE V6.2c.884 was discovered to contain a command injection vulnerability via the admpass parameter in the setPasswordCfg function. |
CVE-2023-25149 | High | 8.8 | 2023-02-14 | TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through 2.9.2. During installation, TimescaleD… |
CVE-2023-25141 | High | 7.5 | 2023-02-14 | Apache Sling JCR Base < 3.1.12 has a critical injection vulnerability when running on old JDK versions (JDK 1.8.191 or earlier) through utility functions in Re… |
CVE-2023-0827 | Medium | 5.4 | 2023-02-14 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 1.5.17. |
CVE-2023-25065 | Medium | 5.4 | 2023-02-14 | Cross-Site Request Forgery (CSRF) vulnerability in ShapedPlugin WP Tabs – Responsive Tabs Plugin for WordPress plugin <= 2.1.14 versions. |
CVE-2023-24382 | Medium | 5.4 | 2023-02-14 | Cross-Site Request Forgery (CSRF) vulnerability in Photon WP Material Design Icons for Page Builders plugin <= 1.4.2 versions. |
CVE-2023-24377 | Medium | 5.4 | 2023-02-14 | Cross-Site Request Forgery (CSRF) vulnerability in Ecwid Ecommerce Ecwid Ecommerce Shopping Cart plugin <= 6.11.3 versions. |
CVE-2023-25140 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Parasolid V34.0 (All versions < V34.0.254), Parasolid V34.1 (All versions < V34.1.242), Parasolid V35.0 (All versions <… |
CVE-2023-24996 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24995 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24994 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24993 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24992 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24991 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24990 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24989 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24988 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24987 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24986 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24985 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24984 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24983 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24982 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24981 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24980 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24979 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past t… |
CVE-2023-24978 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to uninitialized pointer… |
CVE-2023-24581 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223… |
CVE-2023-24566 | Low | 3.3 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223… |
CVE-2023-24565 | Low | 3.3 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223… |
CVE-2023-24564 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2022 (All versions), Solid Edge SE2023 (All versions < V223… |
CVE-2023-24563 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24562 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24561 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24560 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24559 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24558 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |
CVE-2023-24557 | High | 7.8 | 2023-02-14 | A vulnerability has been identified in Solid Edge SE2022 (All versions < V222.0MP12), Solid Edge SE2023 (All versions < V223.0Update2). The affected applicatio… |