2023 CVEs (page 34)
Page 34 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-44478 | High | 7.1 | 2024-05-17 | Cross-Site Request Forgery (CSRF) vulnerability in WP Hive Events Rich Snippets for Google allows Exploitation of Trusted Credentials.This issue affects Events… |
CVE-2023-41957 | High | 8.6 | 2024-05-17 | Improper Privilege Management vulnerability in smp7, wp.Insider Simple Membership allows Privilege Escalation.This issue affects Simple Membership: from n/a th… |
CVE-2023-41956 | High | 8.8 | 2024-05-17 | Improper Authentication vulnerability in smp7, wp.Insider Simple Membership.This issue affects Simple Membership: from n/a through 4.3.4. |
CVE-2023-41955 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in WPDeveloper Essential Addons for Elementor allows Privilege Escalation.This issue affects Essential Addons for E… |
CVE-2023-41954 | High | 8.6 | 2024-05-17 | Improper Privilege Management vulnerability in ProfilePress Membership Team ProfilePress allows Privilege Escalation.This issue affects ProfilePress: from n/a… |
CVE-2023-41665 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in GiveWP allows Privilege Escalation.This issue affects GiveWP: from n/a through 2.33.0. |
CVE-2023-41243 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in WPvivid Team WPvivid Backup and Migration allows Privilege Escalation.This issue affects WPvivid Backup and Migr… |
CVE-2023-39163 | High | 8.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Averta Phlox Shop allows PHP Local File Inclusion.This issue af… |
CVE-2023-38399 | High | 8.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Averta Phlox Portfolio allows PHP Local File Inclusion.This iss… |
CVE-2023-37999 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in HasThemes HT Mega allows Privilege Escalation.This issue affects HT Mega: from n/a through 2.2.0. |
CVE-2023-37888 | High | 7.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in By Averta Shortcodes and extra features for Phlox theme allows… |
CVE-2023-37866 | High | 7.2 | 2024-05-17 | Improper Privilege Management vulnerability in Crocoblock JetFormBuilder allows Privilege Escalation.This issue affects JetFormBuilder: from n/a through 3.0.8. |
CVE-2023-37389 | High | 8.8 | 2024-05-17 | Improper Privilege Management vulnerability in SAASPROJECT Booking Package Booking Package allows Privilege Escalation.This issue affects Booking Package: from… |
CVE-2023-37385 | High | 7.3 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in StylemixThemes Consulting allows PHP Local File Inclusion.This… |
CVE-2023-35881 | High | 7.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WooCommerce WooCommerce One Page Checkout allows PHP Local File… |
CVE-2023-34186 | Medium | 5.3 | 2024-05-17 | Missing Authorization vulnerability in Imran Sayed Headless CMS.This issue affects Headless CMS: from n/a through 2.0.3. |
CVE-2023-33321 | Medium | 5.3 | 2024-05-17 | Missing Authorization vulnerability in Metagauss EventPrime allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EventPri… |
CVE-2023-33310 | Medium | 6.0 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Valiano Unite Gallery Lite allows PHP Local File Inclusion.This… |
CVE-2023-32297 | Critical | 9.0 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in LWS LWS Affiliation allows PHP Local File Inclusion.This issue… |
CVE-2023-32244 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in xtemos Woodmart Core allows Privilege Escalation.This issue affects Woodmart Core: from n/a through 1.0.36. |
CVE-2023-32129 | Medium | 4.3 | 2024-05-17 | Missing Authorization vulnerability in Sparkle WP Editorialmag editorialmag.This issue affects Editorialmag: from n/a through 1.1.9. |
CVE-2023-32110 | High | 7.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in artbees JupiterX allows PHP Local File Inclusion.This issue aff… |
CVE-2023-26540 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in Favethemes Houzez allows Privilege Escalation.This issue affects Houzez: from n/a through 2.7.1. |
CVE-2023-26526 | High | 7.7 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Nota-Info Bookly allows Path Traversal, Manipulating Web Input… |
CVE-2023-26009 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in Favethemes Houzez Login Register allows Privilege Escalation.This issue affects Houzez Login Register: from n/a… |
CVE-2023-25701 | Critical | 9.8 | 2024-05-17 | Improper Privilege Management vulnerability in WhatArmy WatchTowerHQ allows Privilege Escalation.This issue affects WatchTowerHQ: from n/a through 3.6.16. |
CVE-2023-25444 | Critical | 9.1 | 2024-05-17 | Unrestricted Upload of File with Dangerous Type vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plugin allows Using Malicious Files.This… |
CVE-2023-25050 | High | 7.1 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Vova Anokhin Shortcodes Ultimate allows Absolute Path Traversal… |
CVE-2023-24379 | Medium | 6.8 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Web-Settler Landing Page Builder – Free Landing Page Templates… |
CVE-2023-23990 | High | 7.6 | 2024-05-17 | Improper Privilege Management vulnerability in Qube One Ltd. Redirection for Contact Form 7 wpcf7-redirect allows Privilege Escalation.This issue affects Redir… |
CVE-2023-23988 | High | 7.5 | 2024-05-17 | Missing Authorization vulnerability in Joseph C Dolson My Tickets.This issue affects My Tickets: from n/a through 1.9.11. |
CVE-2023-23888 | High | 7.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Rank Math Rank Math SEO allows Path Traversal.This issue affect… |
CVE-2023-23872 | Medium | 4.9 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in German Mesky GMAce allows Path Traversal.This issue affects GMA… |
CVE-2023-23700 | High | 7.6 | 2024-05-17 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OceanWP allows PHP Local File Inclusion.This issue affects Ocea… |
CVE-2023-23645 | Critical | 9.9 | 2024-05-17 | Improper Control of Generation of Code ('Code Injection') vulnerability in MainWP MainWP Code Snippets Extension allows Code Injection.This issue affects MainW… |
CVE-2023-49614 | Medium | 5.7 | 2024-05-16 | Out of bounds write in firmware for some Intel(R) FPGA products before version 2.9.0 may allow escalation of privilege and information disclosure. |
CVE-2023-48727 | Low | 3.3 | 2024-05-16 | NULL pointer dereference in some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable information disclosure vi… |
CVE-2023-48368 | Medium | 5.9 | 2024-05-16 | Improper input validation in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2023-47859 | Medium | 5.5 | 2024-05-16 | Improper access control for some Intel(R) Wireless Bluetooth products for Windows before version 23.20 may allow an authenticated user to potentially enable de… |
CVE-2023-47855 | Medium | 6.0 | 2024-05-16 | Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of pri… |
CVE-2023-47282 | Low | 3.9 | 2024-05-16 | Out-of-bounds write in Intel(R) Media SDK all versions and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially e… |
CVE-2023-47210 | Medium | 4.7 | 2024-05-16 | Improper input validation for some Intel(R) PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enabl… |
CVE-2023-47169 | Low | 3.3 | 2024-05-16 | Improper buffer restrictions in Intel(R) Media SDK software all versions may allow an authenticated user to potentially enable denial of service via local acce… |
CVE-2023-47165 | Medium | 6.0 | 2024-05-16 | Improper conditions check in the Intel(R) Data Center GPU Max Series 1100 and 1550 products may allow an privileged user to potentially enable denial of servic… |
CVE-2023-46691 | High | 7.9 | 2024-05-16 | Use after free in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via loc… |
CVE-2023-46689 | High | 8.8 | 2024-05-16 | Improper neutralization in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-46103 | Medium | 4.7 | 2024-05-16 | Sequence of processor instructions leads to unexpected behavior in Intel(R) Core(TM) Ultra Processors may allow an authenticated user to potentially enable den… |
CVE-2023-45846 | Medium | 5.5 | 2024-05-16 | Incomplete cleanup in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable denial of service via local a… |
CVE-2023-45845 | Medium | 4.4 | 2024-05-16 | Improper conditions check for some Intel(R) Wireless Bluetooth(R) products for Windows before version 23.20 may allow a privileged user to potentially enable d… |
CVE-2023-45745 | High | 7.9 | 2024-05-16 | Improper input validation in some Intel(R) TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of pri… |
CVE-2023-45743 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in some Intel(R) DSA software uninstallers before version 23.4.39.10 may allow an authenticated user to potentially enable escalation… |
CVE-2023-45736 | Medium | 6.7 | 2024-05-16 | Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of p… |
CVE-2023-45733 | Low | 2.8 | 2024-05-16 | Hardware logic contains race conditions in some Intel(R) Processors may allow an authenticated user to potentially enable partial information disclosure via lo… |
CVE-2023-45320 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path element in some Intel(R) VTune(TM) Profiler software before version 2024.0 may allow an authenticated user to potentially enable escal… |
CVE-2023-45315 | Medium | 5.5 | 2024-05-16 | Improper initialization in some Intel(R) Power Gadget software for Windwos all versions may allow an authenticated user to potentially enable denial of service… |
CVE-2023-45221 | Medium | 4.8 | 2024-05-16 | Improper buffer restrictions in Intel(R) Media SDK all versions may allow an authenticated user to potentially enable escalation of privilege via local access. |
CVE-2023-45217 | High | 8.8 | 2024-05-16 | Improper access control in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-43751 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in Intel(R) Graphics Command Center Service bundled in some Intel(R) Graphics Windows DCH driver software before versions 31.0.101.379… |
CVE-2023-43748 | High | 7.8 | 2024-05-16 | Improper access control in some Intel(R) GPA Framework software installers before version 2023.3 may allow an authenticated user to potentially enable escalati… |
CVE-2023-43745 | Low | 2.8 | 2024-05-16 | Improper input validation in some Intel(R) CBI software before version 1.1.0 may allow an authenticated user to potentially enable denial of service via local… |
CVE-2023-43629 | High | 7.8 | 2024-05-16 | Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation o… |
CVE-2023-43487 | Medium | 4.7 | 2024-05-16 | Improper access control in some Intel(R) CST before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via local access. |
CVE-2023-42773 | High | 8.8 | 2024-05-16 | Improper neutralization in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-42668 | Medium | 6.7 | 2024-05-16 | Incorrect default permissions in some onboard video driver software before version 1.14 for Intel(R) Server Boards based on Intel(R) 62X Chipset may allow an a… |
CVE-2023-42433 | Medium | 6.7 | 2024-05-16 | Incorrect default permissions in some Endurance Gaming Mode software installers before version 1.3.937.0 may allow an authenticated user to potentially enable… |
CVE-2023-41961 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in some Intel(R) GPA software before version 2023.3 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2023-41234 | Medium | 5.0 | 2024-05-16 | NULL pointer dereference in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable denial of service via… |
CVE-2023-41092 | High | 7.6 | 2024-05-16 | Unchecked return value in SDM firmware for Intel(R) Stratix 10 and Intel(R) Agilex 7 FPGAs before version 23.3 may allow an authenticated user to potentially e… |
CVE-2023-41082 | Medium | 4.4 | 2024-05-16 | Null pointer dereference for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable denial of service via lo… |
CVE-2023-40536 | Medium | 4.3 | 2024-05-16 | Race condition for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable de… |
CVE-2023-40155 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-40071 | High | 7.3 | 2024-05-16 | Improper access control in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2023-40070 | High | 8.8 | 2024-05-16 | Improper access control in some Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable escalation of privi… |
CVE-2023-39929 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in some Libva software maintained by Intel(R) before version 2.20.0 may allow an authenticated user to potentially enable escalation o… |
CVE-2023-39433 | Medium | 4.4 | 2024-05-16 | Improper access control for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2023-38654 | High | 8.2 | 2024-05-16 | Improper input validation for some some Intel(R) PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentiall… |
CVE-2023-38581 | High | 8.8 | 2024-05-16 | Buffer overflow in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enable escalation of privilege via lo… |
CVE-2023-38420 | Low | 3.8 | 2024-05-16 | Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable information disclosure… |
CVE-2023-38417 | Medium | 4.3 | 2024-05-16 | Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentially enable denial o… |
CVE-2023-35192 | Medium | 6.7 | 2024-05-16 | Uncontrolled search path in some Intel(R) GPA Framework software before version 2023.3 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2023-28402 | High | 7.2 | 2024-05-16 | Improper input validation in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-28383 | Medium | 6.1 | 2024-05-16 | Improper conditions check in some Intel(R) BIOS PPAM firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-27504 | High | 7.2 | 2024-05-16 | Improper conditions check in some Intel(R) BIOS Guard firmware may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-24460 | High | 8.2 | 2024-05-16 | Incorrect default permissions in some Intel(R) GPA software installers before version 2023.3 may allow an authenticated user to potentially enable escalation o… |
CVE-2023-22662 | Medium | 5.8 | 2024-05-16 | Improper input validation of EpsdSrMgmtConfig in UEFI firmware for some Intel(R) Server Board S2600BP products may allow a privileged user to potentially enabl… |
CVE-2023-22656 | Low | 3.9 | 2024-05-16 | Out-of-bounds read in Intel(R) Media SDK and some Intel(R) oneVPL software before version 23.3.5 may allow an authenticated user to potentially enable escalati… |
CVE-2023-47717 | Medium | 4.4 | 2024-05-16 | IBM Security Guardium 12.0 could allow a privileged user to perform unauthorized actions that could lead to a denial of service. IBM X-Force ID: 271690. |
CVE-2023-48643 | Critical | 9.8 | 2024-05-16 | Shrubbery tac_plus 2.x, 3.x. and 4.x through F4.0.4.28 allows unauthenticated Remote Command Execution. The product allows users to configure authorization che… |
CVE-2023-46842 | Medium | 6.5 | 2024-05-16 | Unlike 32-bit PV guests, HVM guests may switch freely between 64-bit and other modes. This in particular means that they may set registers used to pass 32-bit… |
CVE-2023-40297 | High | 7.5 | 2024-05-15 | Stakater Forecastle 1.0.139 and before allows %5C../ directory traversal in the website component. |
CVE-2023-7258 | Medium | 4.8 | 2024-05-15 | A denial of service exists in Gvisor Sandbox where a bug in reference counting code in mount point tracking could lead to a panic, making it possible for an at… |
CVE-2023-5938 | High | 8.0 | 2024-05-15 | Multiple functions use archives without properly validating the filenames therein, rendering the application vulnerable to path traversal via 'zip slip' attack… |
CVE-2023-5937 | Low | 3.8 | 2024-05-15 | On Windows systems, the Arc configuration files resulted to be world-readable. This can lead to information disclosure by local attackers, via exfiltration… |
CVE-2023-5936 | High | 7.8 | 2024-05-15 | On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be a… |
CVE-2023-5935 | High | 7.4 | 2024-05-15 | When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authenticatio… |
CVE-2023-6324 | High | 8.1 | 2024-05-15 | ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity |
CVE-2023-6323 | Medium | 4.3 | 2024-05-15 | ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server. |
CVE-2023-6322 | High | 7.2 | 2024-05-15 | A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version… |
CVE-2023-6321 | High | 7.2 | 2024-05-15 | A command injection vulnerability exists in the IOCTL that manages OTA updates. A specially crafted command can lead to command execution as the root user. An… |
CVE-2023-33327 | High | 8.8 | 2024-05-14 | Improper Privilege Management vulnerability in Teplitsa of social technologies Leyka allows Privilege Escalation.This issue affects Leyka: from n/a through 3.3… |