2023 CVEs (page 305)
Page 305 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0245 | Medium | 6.3 | 2023-01-12 | A vulnerability, which was classified as critical, has been found in SourceCodester Online Flight Booking Management System. This issue affects some unknown pr… |
CVE-2023-0244 | Medium | 6.3 | 2023-01-12 | A vulnerability classified as critical was found in TuziCMS 2.0.6. This vulnerability affects the function delall of the file \App\Manage\Controller\KefuContro… |
CVE-2023-0243 | Medium | 6.3 | 2023-01-12 | A vulnerability classified as critical has been found in TuziCMS 2.0.6. This affects the function index of the file App\Manage\Controller\ArticleController.cla… |
CVE-2023-23455 | Medium | 5.5 | 2023-01-12 | atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confusion (non-negative n… |
CVE-2023-23454 | Medium | 5.5 | 2023-01-12 | cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read) because of type c… |
CVE-2023-0042 | Medium | 6.1 | 2023-01-12 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 11.4 prior to 15.5.7, 15.6 prior to 15.6.4, and 15.7 prior to 15.7.2. GitLab… |
CVE-2023-0227 | Medium | 6.5 | 2023-01-12 | Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36. |
CVE-2023-22492 | Medium | 5.9 | 2023-01-11 | ZITADEL is a combination of Auth0 and Keycloak. RefreshTokens is an OAuth 2.0 feature that allows applications to retrieve new access tokens and refresh the us… |
CVE-2023-22487 | High | 7.7 | 2023-01-11 | Flarum is a forum software for building communities. Using the mentions feature provided by the flarum/mentions extension, users can mention any post ID on the… |
CVE-2023-22952 | High | 8.8 | 2023-01-11 | In SugarCRM before 12.0. Hotfix 91155, a crafted request can inject custom PHP code through the EmailTemplates because of missing input validation. |
CVE-2023-20532 | Medium | 5.3 | 2023-01-11 | Insufficient input validation in the SMU may allow an attacker to improperly lock resources, potentially resulting in a denial of service. |
CVE-2023-20531 | High | 7.5 | 2023-01-11 | Insufficient bound checks in the SMU may allow an attacker to update the SRAM from/to address space to an invalid value potentially resulting in a denial of se… |
CVE-2023-20530 | High | 7.5 | 2023-01-11 | Insufficient input validation of BIOS mailbox messages in SMU may result in out-of-bounds memory reads potentially resulting in a denial of service. |
CVE-2023-20529 | High | 7.5 | 2023-01-11 | Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service… |
CVE-2023-20528 | Low | 2.4 | 2023-01-11 | Insufficient input validation in the SMU may allow a physical attacker to exfiltrate SMU memory contents over the I2C bus potentially leading to a loss of conf… |
CVE-2023-20527 | Medium | 6.5 | 2023-01-11 | Improper syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory out-of-bounds, potentially leading to a denial-of-servic… |
CVE-2023-20525 | Medium | 6.5 | 2023-01-11 | Insufficient syscall input validation in the ASP Bootloader may allow a privileged attacker to read memory outside the bounds of a mapped register potentially… |
CVE-2023-20523 | Medium | 5.7 | 2023-01-11 | TOCTOU in the ASP may allow a physical attacker to write beyond the buffer bounds, potentially leading to a loss of integrity or denial of service. |
CVE-2023-20522 | High | 7.5 | 2023-01-11 | Insufficient input validation in ASP may allow an attacker with a malicious BIOS to potentially cause a denial of service. |
CVE-2023-22963 | Medium | 5.3 | 2023-01-11 | The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression. |
CVE-2023-22959 | High | 8.8 | 2023-01-11 | WebChess through 0.9.0 and 1.0.0.rc2 allows SQL injection: mainmenu.php, chess.php, and opponentspassword.php (txtFirstName, txtLastName). |
CVE-2023-22958 | Medium | 6.1 | 2023-01-11 | The Syracom Secure Login plugin before 3.1.1.0 for Jira may allow spoofing of 2FA PIN validation via the plugins/servlet/twofactor/public/pinvalidation target… |
CVE-2023-22947 | High | 7.3 | 2023-01-11 | Insecure folder permissions in the Windows installation path of Shibboleth Service Provider (SP) before 3.4.1 allow an unprivileged local attacker to escalate… |
CVE-2023-22945 | Medium | 4.3 | 2023-01-11 | In the GrowthExperiments extension for MediaWiki through 1.39, the growthmanagementorlist API allows blocked users (blocked in ApiManageMentorList) to enroll a… |
CVE-2023-21793 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21792 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21791 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21790 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21789 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21788 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21787 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21786 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21785 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21784 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21783 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21782 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21781 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21780 | High | 7.8 | 2023-01-10 | 3D Builder Remote Code Execution Vulnerability |
CVE-2023-21779 | High | 7.8 | 2023-01-10 | Visual Studio Code Remote Code Execution Vulnerability |
CVE-2023-21776 | Medium | 5.5 | 2023-01-10 | Windows Kernel Information Disclosure Vulnerability |
CVE-2023-21774 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21773 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21772 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21771 | High | 7.0 | 2023-01-10 | Windows Local Session Manager (LSM) Elevation of Privilege Vulnerability |
CVE-2023-21768 | High | 7.8 | 2023-01-10 | Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability |
CVE-2023-21767 | High | 7.8 | 2023-01-10 | Windows Overlay Filter Elevation of Privilege Vulnerability |
CVE-2023-21766 | Medium | 4.7 | 2023-01-10 | Windows Overlay Filter Information Disclosure Vulnerability |
CVE-2023-21765 | High | 7.8 | 2023-01-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2023-21764 | High | 7.8 | 2023-01-10 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-21763 | High | 7.8 | 2023-01-10 | Microsoft Exchange Server Elevation of Privilege Vulnerability |
CVE-2023-21762 | High | 8.0 | 2023-01-10 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-21761 | High | 7.5 | 2023-01-10 | Microsoft Exchange Server Information Disclosure Vulnerability |
CVE-2023-21760 | High | 7.1 | 2023-01-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2023-21759 | Low | 3.3 | 2023-01-10 | Windows Smart Card Resource Management Server Security Feature Bypass Vulnerability |
CVE-2023-21758 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21757 | High | 7.5 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Denial of Service Vulnerability |
CVE-2023-21755 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21754 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21753 | Medium | 5.5 | 2023-01-10 | Event Tracing for Windows Information Disclosure Vulnerability |
CVE-2023-21752 | High | 7.1 | 2023-01-10 | Windows Backup Service Elevation of Privilege Vulnerability |
CVE-2023-21750 | High | 7.1 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21749 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21748 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21747 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21746 | High | 7.8 | 2023-01-10 | Windows NTLM Elevation of Privilege Vulnerability |
CVE-2023-21745 | High | 8.0 | 2023-01-10 | Microsoft Exchange Server Spoofing Vulnerability |
CVE-2023-21744 | High | 8.8 | 2023-01-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2023-21743 | Medium | 5.3 | 2023-01-10 | Microsoft SharePoint Server Security Feature Bypass Vulnerability |
CVE-2023-21742 | High | 8.8 | 2023-01-10 | Microsoft SharePoint Server Remote Code Execution Vulnerability |
CVE-2023-21741 | High | 7.1 | 2023-01-10 | Microsoft Office Visio Information Disclosure Vulnerability |
CVE-2023-21739 | High | 7.0 | 2023-01-10 | Windows Bluetooth Driver Elevation of Privilege Vulnerability |
CVE-2023-21738 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21737 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21736 | High | 7.8 | 2023-01-10 | Microsoft Office Visio Remote Code Execution Vulnerability |
CVE-2023-21735 | High | 7.8 | 2023-01-10 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-21734 | High | 7.8 | 2023-01-10 | Microsoft Office Remote Code Execution Vulnerability |
CVE-2023-21733 | High | 7.0 | 2023-01-10 | Windows Bind Filter Driver Elevation of Privilege Vulnerability |
CVE-2023-21732 | High | 8.8 | 2023-01-10 | Microsoft ODBC Driver Remote Code Execution Vulnerability |
CVE-2023-21730 | High | 7.8 | 2023-01-10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
CVE-2023-21728 | High | 7.5 | 2023-01-10 | Windows Netlogon Denial of Service Vulnerability |
CVE-2023-21726 | High | 7.8 | 2023-01-10 | Windows Credential Manager User Interface Elevation of Privilege Vulnerability |
CVE-2023-21725 | Medium | 6.3 | 2023-01-10 | Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability |
CVE-2023-21724 | High | 7.8 | 2023-01-10 | Microsoft DWM Core Library Elevation of Privilege Vulnerability |
CVE-2023-21683 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21682 | Medium | 5.3 | 2023-01-10 | Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability |
CVE-2023-21681 | High | 8.8 | 2023-01-10 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability |
CVE-2023-21680 | High | 7.8 | 2023-01-10 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2023-21679 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |
CVE-2023-21678 | High | 7.8 | 2023-01-10 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2023-21677 | High | 7.5 | 2023-01-10 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
CVE-2023-21676 | High | 8.8 | 2023-01-10 | Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability |
CVE-2023-21675 | High | 7.8 | 2023-01-10 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2023-21674 | High | 8.8 | 2023-01-10 | Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability |
CVE-2023-21563 | Medium | 6.8 | 2023-01-10 | BitLocker Security Feature Bypass Vulnerability |
CVE-2023-21561 | High | 7.8 | 2023-01-10 | Microsoft Cryptographic Services Elevation of Privilege Vulnerability |
CVE-2023-21560 | Medium | 6.6 | 2023-01-10 | Windows Boot Manager Security Feature Bypass Vulnerability |
CVE-2023-21559 | Medium | 5.5 | 2023-01-10 | Windows Cryptographic Information Disclosure Vulnerability |
CVE-2023-21558 | High | 7.8 | 2023-01-10 | Windows Error Reporting Service Elevation of Privilege Vulnerability |
CVE-2023-21557 | High | 7.5 | 2023-01-10 | Windows Lightweight Directory Access Protocol (LDAP) Denial of Service Vulnerability |
CVE-2023-21556 | High | 8.1 | 2023-01-10 | Windows Layer 2 Tunneling Protocol (L2TP) Remote Code Execution Vulnerability |