2023 CVEs (page 303)
Page 303 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-21891 | Medium | 5.4 | 2023-01-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that… |
CVE-2023-21890 | Critical | 9.8 | 2023-01-18 | Vulnerability in the Oracle Communications Converged Application Server product of Oracle Communications (component: Core). Supported versions that are affect… |
CVE-2023-21889 | Low | 3.8 | 2023-01-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and pr… |
CVE-2023-21888 | Medium | 5.4 | 2023-01-18 | Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: WebUI). Supported versions that are affected are 18.8.0-18.8… |
CVE-2023-21887 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploita… |
CVE-2023-21886 | High | 8.1 | 2023-01-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and pr… |
CVE-2023-21885 | Low | 3.8 | 2023-01-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and pr… |
CVE-2023-21884 | Medium | 4.4 | 2023-01-18 | Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and pr… |
CVE-2023-21883 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21882 | Low | 2.7 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21881 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21880 | Medium | 5.5 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable v… |
CVE-2023-21879 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21878 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21877 | Medium | 5.5 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable v… |
CVE-2023-21876 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21875 | Medium | 5.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.31 and prior… |
CVE-2023-21874 | Low | 2.7 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.30 and prior. Easi… |
CVE-2023-21873 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21872 | Medium | 5.5 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.29 and prior. Easily ex… |
CVE-2023-21871 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable v… |
CVE-2023-21870 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21869 | Medium | 5.5 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.31 and prior. Easily exploitable v… |
CVE-2023-21868 | Medium | 6.5 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21867 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21866 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily ex… |
CVE-2023-21865 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily ex… |
CVE-2023-21864 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily ex… |
CVE-2023-21863 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily ex… |
CVE-2023-21862 | High | 8.1 | 2023-01-18 | Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: XML Security component). The supported version that is affec… |
CVE-2023-21861 | Medium | 5.4 | 2023-01-18 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Visual Analyzer). Supported versions that… |
CVE-2023-21859 | Medium | 4.4 | 2023-01-18 | Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine). The supported version that is affected is… |
CVE-2023-21858 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Collaborative Planning product of Oracle E-Business Suite (component: Installation). Supported versions that are affected are 12.2… |
CVE-2023-21857 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Auomated Test Suite). Supported versions that are affected… |
CVE-2023-21856 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports). Supported versions that are affec… |
CVE-2023-21855 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Sales for Handhelds product of Oracle E-Business Suite (component: Pocket Outlook Sync(PocketPC)). Supported versions that are aff… |
CVE-2023-21854 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Core Components). Supported versions that are affected are 12.2.3-12… |
CVE-2023-21853 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Synchronization). Supported versions that are affected are 12… |
CVE-2023-21852 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component: Setup). Supported versions that are affected are 12.2.3-12.2.12… |
CVE-2023-21851 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2… |
CVE-2023-21850 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: E-Business Collections). Supported versions that are affecte… |
CVE-2023-21849 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle Applications DBA product of Oracle E-Business Suite (component: Java utils). Supported versions that are affected are 12.2.3-12.2… |
CVE-2023-21848 | High | 8.8 | 2023-01-18 | Vulnerability in the Oracle Communications Convergence product of Oracle Communications Applications (component: Admin Configuration). The supported version… |
CVE-2023-21847 | Medium | 5.4 | 2023-01-18 | Vulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business Suite (component: Download). Supported versions that are affected… |
CVE-2023-21846 | High | 8.8 | 2023-01-18 | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 5.9.0.0.0, 6.4.0… |
CVE-2023-21845 | Medium | 5.4 | 2023-01-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Panel Processor). The supported version that is affected is 8… |
CVE-2023-21844 | Medium | 5.4 | 2023-01-18 | Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Elastic Search). Supported versions that are affected are 8.59… |
CVE-2023-21843 | Low | 3.7 | 2023-01-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are… |
CVE-2023-21842 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container). Supported versions that are affected are 12.2.1.3… |
CVE-2023-21841 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2023-21840 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.40 and prior. Easily exploitab… |
CVE-2023-21839 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2023-21838 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2023-21837 | High | 7.5 | 2023-01-18 | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1… |
CVE-2023-21836 | Medium | 4.9 | 2023-01-18 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.31 and prior. Easily exploita… |
CVE-2023-21835 | Medium | 5.3 | 2023-01-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are O… |
CVE-2023-21834 | Medium | 4.3 | 2023-01-18 | Vulnerability in the Oracle Self-Service Human Resources product of Oracle E-Business Suite (component: Workflow, Approval, Work Force Management). Supported… |
CVE-2023-21832 | High | 8.8 | 2023-01-18 | Vulnerability in the Oracle BI Publisher product of Oracle Fusion Middleware (component: Security). Supported versions that are affected are 5.9.0.0.0, 6.4.0… |
CVE-2023-21831 | Medium | 5.3 | 2023-01-18 | Vulnerability in the PeopleSoft Enterprise CS Academic Advisement product of Oracle PeopleSoft (component: Advising Notes). The supported version that is aff… |
CVE-2023-21830 | Medium | 5.3 | 2023-01-18 | Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affec… |
CVE-2023-21829 | Medium | 6.3 | 2023-01-18 | Vulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploit… |
CVE-2023-21828 | High | 8.1 | 2023-01-18 | Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting). The supported versio… |
CVE-2023-21827 | Medium | 4.3 | 2023-01-18 | Vulnerability in the Oracle Database Data Redaction component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploit… |
CVE-2023-21826 | High | 7.6 | 2023-01-18 | Vulnerability in the Oracle Hospitality Reporting and Analytics product of Oracle Food and Beverage Applications (component: Reporting). The supported versio… |
CVE-2023-21825 | Medium | 5.3 | 2023-01-18 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Supplier Management). Supported versions that are affected are 12… |
CVE-2023-21824 | Medium | 4.4 | 2023-01-18 | Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications Applications (component: Customer, Config, Pricing Ma… |
CVE-2023-22734 | Medium | 4.3 | 2023-01-17 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validation was not checked properly, and it wa… |
CVE-2023-22733 | Low | 2.7 | 2023-01-17 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module would write out all kind of sent mails… |
CVE-2023-22732 | Low | 3.7 | 2023-01-17 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. The Administration session expiration was set to one week, when an attacker… |
CVE-2023-22731 | Critical | 9.9 | 2023-01-17 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**, it is possible to… |
CVE-2023-22730 | Medium | 5.3 | 2023-01-17 | Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same line item multiple tim… |
CVE-2023-23637 | High | 7.6 | 2023-01-17 | IMPatienT before 1.5.2 allows stored XSS via onmouseover in certain text fields within a PATCH /modify_onto request to the ontology builder. This may allow att… |
CVE-2023-22727 | Critical | 9.8 | 2023-01-17 | CakePHP is a development framework for PHP web apps. In affected versions the `Cake\Database\Query::limit()` and `Cake\Database\Query::offset()` methods are vu… |
CVE-2023-22499 | High | 7.5 | 2023-01-17 | Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by… |
CVE-2023-0296 | Medium | 5.3 | 2023-01-17 | The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though… |
CVE-2023-0122 | High | 7.5 | 2023-01-17 | A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmet_setup_auth(), allows an attacker to perform a Pre-Auth Denial of Serv… |
CVE-2023-23749 | High | 7.5 | 2023-01-17 | The 'LDAP Integration with Active Directory and OpenLDAP - NTLM & Kerberos Login' extension is vulnerable to LDAP Injection since is not properly sanitizing th… |
CVE-2023-22624 | High | 7.5 | 2023-01-17 | Zoho ManageEngine Exchange Reporter Plus before 5708 allows attackers to conduct XXE attacks. |
CVE-2023-22875 | High | 8.4 | 2023-01-17 | IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not requi… |
CVE-2023-0158 | High | 7.5 | 2023-01-17 | NLnet Labs Krill supports direct access to the RRDP repository content through its built-in web server at the "/rrdp" endpoint. Prior to 0.12.1 a direct query… |
CVE-2023-0338 | Medium | 6.1 | 2023-01-17 | Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch. |
CVE-2023-0337 | Medium | 6.1 | 2023-01-17 | Cross-site Scripting (XSS) - Reflected in GitHub repository lirantal/daloradius prior to master-branch. |
CVE-2023-22366 | High | 7.8 | 2023-01-17 | CX-Motion-MCH v2.32 and earlier contains an access of uninitialized pointer vulnerability. Having a user to open a specially crafted project file may lead to i… |
CVE-2023-22357 | Critical | 9.8 | 2023-01-17 | Active debug code exists in OMRON CP1L-EL20DR-D all versions, which may lead to a command that is not specified in FINS protocol being executed without authent… |
CVE-2023-22316 | Medium | 6.5 | 2023-01-17 | Hidden functionality vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker to access the produ… |
CVE-2023-22304 | High | 8.0 | 2023-01-17 | OS command injection vulnerability in PIX-RT100 versions RT100_TEQ_2.1.1_EQ101 and RT100_TEQ_2.1.2_EQ101 allows a network-adjacent attacker who can access prod… |
CVE-2023-22303 | Critical | 9.8 | 2023-01-17 | TP-Link SG105PE firmware prior to 'TL-SG105PE(UN) 1.0_1.0.0 Build 20221208' contains an authentication bypass vulnerability. Under the certain conditions, an a… |
CVE-2023-22298 | Medium | 6.1 | 2023-01-17 | Open redirect vulnerability in pgAdmin 4 versions prior to v6.14 allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and condu… |
CVE-2023-22296 | Medium | 6.1 | 2023-01-17 | Reflected cross-site scripting vulnerability in MAHO-PBX NetDevancer series MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer… |
CVE-2023-22286 | High | 8.1 | 2023-01-17 | Cross-site request forgery (CSRF) vulnerability in MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver… |
CVE-2023-22280 | High | 7.2 | 2023-01-17 | MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/… |
CVE-2023-22279 | Critical | 9.8 | 2023-01-17 | MAHO-PBX NetDevancer Lite/Uni/Pro/Cloud prior to Ver.1.11.00, MAHO-PBX NetDevancer VSG Lite/Uni prior to Ver.1.11.00, and MAHO-PBX NetDevancer MobileGate Home/… |
CVE-2023-22278 | Medium | 5.3 | 2023-01-17 | m-FILTER prior to Ver.5.70R01 (Ver.5 Series) and m-FILTER prior to Ver.4.87R04 (Ver.4 Series) allows a remote unauthenticated attacker to bypass authentication… |
CVE-2023-0332 | High | 7.3 | 2023-01-17 | A vulnerability was found in SourceCodester Online Food Ordering System 2.0. It has been classified as critical. Affected is an unknown function of the file ad… |
CVE-2023-0327 | Low | 3.5 | 2023-01-16 | A vulnerability was found in saemorris TheRadSystem. It has been classified as problematic. Affected is an unknown function of the file users.php. The manipula… |
CVE-2023-0324 | High | 7.3 | 2023-01-16 | A vulnerability was found in SourceCodester Online Tours & Travels Management System 1.0 and classified as critical. Affected by this issue is some unknown fun… |
CVE-2023-0323 | Medium | 5.4 | 2023-01-16 | Cross-site Scripting (XSS) - Stored in GitHub repository pimcore/pimcore prior to 10.5.14. |
CVE-2023-0316 | Medium | 5.5 | 2023-01-16 | Path Traversal: '\..\filename' in GitHub repository froxlor/froxlor prior to 2.0.0. |
CVE-2023-0315 | High | 8.8 | 2023-01-16 | Command Injection in GitHub repository froxlor/froxlor prior to 2.0.8. |
CVE-2023-0314 | Medium | 6.1 | 2023-01-15 | Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.10. |