2023 CVEs (page 36)
Page 36 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-46012 | Critical | 9.8 | 2024-05-07 | Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP. |
CVE-2023-7240 | Medium | 5.8 | 2024-05-07 | An improper authorization level has been detected in the login panel. It may lead to unauthenticated Server Side Request Forgery and allows to perform open se… |
CVE-2023-31234 | Medium | 6.3 | 2024-05-07 | Missing Authorization vulnerability in Tilda Publishing.This issue affects Tilda Publishing: from n/a through 0.3.23. |
CVE-2023-6810 | Medium | 4.3 | 2024-05-07 | The ClickCease Click Fraud Protection plugin for WordPress is vulnerable to unauthorized access of data due to an improper capability check on the get_settings… |
CVE-2023-33548 | Medium | 6.8 | 2024-05-06 | Cross Site Scripting (XSS) vulnerability in ASUS RT-AC51U with firmware versions up to and including 3.0.0.4.380.8591 allows attackers to run arbitrary code vi… |
CVE-2023-43531 | High | 8.4 | 2024-05-06 | Memory corruption while verifying the serialized header when the key pairs are generated. |
CVE-2023-43530 | Medium | 5.9 | 2024-05-06 | Memory corruption in HLOS while checking for the storage type. |
CVE-2023-43529 | High | 7.5 | 2024-05-06 | Transient DOS while processing IKEv2 Informational request messages, when a malformed fragment packet is received. |
CVE-2023-43528 | Medium | 6.1 | 2024-05-06 | Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size. |
CVE-2023-43527 | Medium | 6.8 | 2024-05-06 | Information disclosure while parsing dts header atom in Video. |
CVE-2023-43526 | Medium | 6.7 | 2024-05-06 | Memory corruption while querying module parameters from Listen Sound model client in kernel from user space. |
CVE-2023-43525 | Medium | 6.7 | 2024-05-06 | Memory corruption while copying the sound model data from user to kernel buffer during sound model register. |
CVE-2023-43524 | Medium | 6.7 | 2024-05-06 | Memory corruption when the bandpass filter order received from AHAL is not within the expected range. |
CVE-2023-43521 | Medium | 6.7 | 2024-05-06 | Memory corruption when multiple listeners are being registered with the same file descriptor. |
CVE-2023-33119 | High | 8.4 | 2024-05-06 | Memory corruption while loading a VM from a signed VM image that is not coherent in the processor cache. |
CVE-2023-49676 | Medium | 5.5 | 2024-05-06 | An unauthenticated local attacker may trick a user to open corrupted project files to crash the system due to use after free vulnerability. |
CVE-2023-49675 | High | 7.8 | 2024-05-06 | An unauthenticated local attacker may trick a user to open corrupted project files to execute arbitrary code or crash the system due to an out-of-bounds write… |
CVE-2023-6854 | Medium | 6.4 | 2024-05-06 | The Breakdance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom postmeta output in all versions up to, and including… |
CVE-2023-32873 | Medium | 6.7 | 2024-05-06 | In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution pr… |
CVE-2023-32871 | Medium | 5.3 | 2024-05-06 | In DA, there is a possible permission bypass due to an incorrect status check. This could lead to local escalation of privilege with no additional execution pr… |
CVE-2023-52729 | High | 7.5 | 2024-05-04 | TCPServer.cpp in SimpleNetwork through 29bc615 has an off-by-one error that causes a buffer overflow when trying to add '\0' to the end of long msg data. It ca… |
CVE-2023-27283 | Medium | 5.3 | 2024-05-04 | IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545. |
CVE-2023-7065 | Medium | 5.4 | 2024-05-04 | The Stop Spammers Security | Block Spam Users, Comments, Forms plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and incl… |
CVE-2023-40695 | Medium | 6.3 | 2024-05-03 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 does not invalidate session after logout which could allow an authenticated user to impersonate another user o… |
CVE-2023-40696 | Medium | 5.9 | 2024-05-03 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive in… |
CVE-2023-38724 | Medium | 6.3 | 2024-05-03 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could all… |
CVE-2023-28952 | Medium | 5.3 | 2024-05-03 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 is vulnerable to injection attacks in application logging by not sanitizing user provided data. IBM X-Force I… |
CVE-2023-23474 | Low | 3.7 | 2024-05-03 | IBM Cognos Controller 10.4.1, 10.4.2, and 11.0.0 could allow a remote attacker to obtain sensitive information when a stack trace is returned in the browser… |
CVE-2023-37407 | High | 8.8 | 2024-05-03 | IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request… |
CVE-2023-6363 | Medium | 5.1 | 2024-05-03 | Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user to mak… |
CVE-2023-41830 | Medium | 6.5 | 2024-05-03 | An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorizatio… |
CVE-2023-41828 | Medium | 4.4 | 2024-05-03 | An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provide… |
CVE-2023-41826 | Medium | 5.1 | 2024-05-03 | A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or interact with non-expor… |
CVE-2023-41825 | Low | 2.8 | 2024-05-03 | A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files. |
CVE-2023-41824 | Low | 2.8 | 2024-05-03 | An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling phone number and c… |
CVE-2023-41823 | Medium | 4.4 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activitie… |
CVE-2023-41822 | Medium | 4.8 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS com… |
CVE-2023-41821 | Medium | 5.0 | 2024-05-03 | A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user information. |
CVE-2023-41820 | Medium | 5.0 | 2024-05-03 | An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Blue… |
CVE-2023-41819 | Medium | 6.1 | 2024-05-03 | A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content… |
CVE-2023-41818 | Medium | 5.0 | 2024-05-03 | An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read… |
CVE-2023-41817 | Low | 2.8 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read unauthorized information. |
CVE-2023-41816 | Medium | 5.0 | 2024-05-03 | An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database. |
CVE-2023-35701 | Medium | 6.6 | 2024-05-03 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Hive. The vulnerability affects the Hive JDBC driver component and it can po… |
CVE-2023-44472 | Medium | 4.3 | 2024-05-03 | Missing Authorization vulnerability in ThemeFuse Unyson.This issue affects Unyson: from n/a through 2.7.28. |
CVE-2023-25457 | Medium | 5.3 | 2024-05-03 | Missing Authorization vulnerability in Richteam Slider Carousel – Responsive Image Slider.This issue affects Slider Carousel – Responsive Image Slider: from n/… |
CVE-2023-51633 | Critical | 9.6 | 2024-05-03 | Centreon sysName Cross-Site Scripting Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected ins… |
CVE-2023-51629 | High | 8.8 | 2024-05-03 | D-Link DCS-8300LHV2 ONVIF Hardcoded PIN Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on a… |
CVE-2023-51628 | High | 8.0 | 2024-05-03 | D-Link DCS-8300LHV2 ONVIF SetHostName Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to… |
CVE-2023-51627 | High | 8.0 | 2024-05-03 | D-Link DCS-8300LHV2 ONVIF Duration Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to exe… |
CVE-2023-51626 | High | 8.8 | 2024-05-03 | D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Username Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows networ… |
CVE-2023-51625 | High | 8.0 | 2024-05-03 | D-Link DCS-8300LHV2 ONVIF SetSystemDateAndTime Command Injection Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to e… |
CVE-2023-51624 | High | 8.8 | 2024-05-03 | D-Link DCS-8300LHV2 RTSP ValidateAuthorizationHeader Nonce Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-a… |
CVE-2023-51623 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetAPClientSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attac… |
CVE-2023-51622 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetTriggerPPPoEValidate Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent a… |
CVE-2023-51621 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetDeviceSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attacke… |
CVE-2023-51620 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetIPv6PppoeSettings Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent atta… |
CVE-2023-51619 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetMyDLinkRegistration Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent at… |
CVE-2023-51618 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetWLanRadioSecurity Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent atta… |
CVE-2023-51617 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetWanSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2023-51616 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetSysEmailSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attac… |
CVE-2023-51615 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetQuickVPNSettings PSK Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent a… |
CVE-2023-51614 | Medium | 6.8 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetQuickVPNSettings Password Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjac… |
CVE-2023-51613 | High | 8.0 | 2024-05-03 | D-Link DIR-X3260 prog.cgi SetDynamicDNSSettings Stack-Based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent att… |
CVE-2023-51612 | Low | 3.3 | 2024-05-03 | Kofax Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informat… |
CVE-2023-51611 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-51610 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JP2 File Parsing Use-After-Free Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive informat… |
CVE-2023-51609 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF JP2 File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-51608 | High | 7.8 | 2024-05-03 | Kofax Power PDF J2K File Parsing Memory Corruption Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-51607 | Medium | 5.5 | 2024-05-03 | Kofax Power PDF PNG File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive info… |
CVE-2023-51606 | High | 7.8 | 2024-05-03 | Kofax Power PDF U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code o… |
CVE-2023-51605 | Medium | 6.5 | 2024-05-03 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose s… |
CVE-2023-51604 | Medium | 6.5 | 2024-05-03 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose s… |
CVE-2023-51603 | High | 8.8 | 2024-05-03 | Honeywell Saia PG5 Controls Suite CAB File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu… |
CVE-2023-51602 | Medium | 6.5 | 2024-05-03 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose s… |
CVE-2023-51601 | Medium | 6.5 | 2024-05-03 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose s… |
CVE-2023-51600 | Medium | 6.5 | 2024-05-03 | Honeywell Saia PG5 Controls Suite XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose s… |
CVE-2023-51599 | High | 8.8 | 2024-05-03 | Honeywell Saia PG5 Controls Suite Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2023-51598 | High | 8.8 | 2024-05-03 | Hancom Office Word DOC File Parsing Use-After-Free Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on… |
CVE-2023-51597 | High | 7.8 | 2024-05-03 | Kofax Power PDF U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code… |
CVE-2023-51596 | High | 7.1 | 2024-05-03 | BlueZ Phone Book Access Profile Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute… |
CVE-2023-51595 | Critical | 9.8 | 2024-05-03 | Voltronic Power ViewPower Pro selectDeviceListBy SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit… |
CVE-2023-51594 | Medium | 5.7 | 2024-05-03 | BlueZ OBEX Library Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive informat… |
CVE-2023-51593 | Critical | 9.8 | 2024-05-03 | Voltronic Power ViewPower Pro Expression Language Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrar… |
CVE-2023-51592 | Medium | 5.7 | 2024-05-03 | BlueZ Audio Profile AVRCP parse_media_folder Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to d… |
CVE-2023-51591 | High | 7.5 | 2024-05-03 | Voltronic Power ViewPower Pro doDocument XML External Entity Processing Information Disclosure Vulnerability. This vulnerability allows remote attackers to dis… |
CVE-2023-51590 | Critical | 9.8 | 2024-05-03 | Voltronic Power ViewPower Pro UpLoadAction Unrestricted File Upload Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… |
CVE-2023-51589 | Medium | 5.7 | 2024-05-03 | BlueZ Audio Profile AVRCP parse_media_element Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to… |
CVE-2023-51588 | High | 7.8 | 2024-05-03 | Voltronic Power ViewPower Pro MySQL Use of Hard-coded Credentials Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escala… |
CVE-2023-51587 | High | 7.5 | 2024-05-03 | Voltronic Power ViewPower getModbusPassword Missing Authentication Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose… |
CVE-2023-51586 | Critical | 9.8 | 2024-05-03 | Voltronic Power ViewPower Pro selectEventConfig SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitr… |
CVE-2023-51585 | High | 8.8 | 2024-05-03 | Voltronic Power ViewPower USBCommEx shutdown Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbit… |
CVE-2023-51584 | High | 8.8 | 2024-05-03 | Voltronic Power ViewPower USBCommEx shutdown Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execut… |
CVE-2023-51583 | Critical | 9.8 | 2024-05-03 | Voltronic Power ViewPower UpsScheduler Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbi… |
CVE-2023-51582 | Critical | 9.8 | 2024-05-03 | Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execu… |
CVE-2023-51581 | Critical | 9.8 | 2024-05-03 | Voltronic Power ViewPower MacMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute… |
CVE-2023-51580 | Medium | 5.7 | 2024-05-03 | BlueZ Audio Profile AVRCP avrcp_parse_attribute_list Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows network-adjacent attack… |
CVE-2023-51579 | High | 7.8 | 2024-05-03 | Voltronic Power ViewPower Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privi… |
CVE-2023-51578 | High | 7.5 | 2024-05-03 | Voltronic Power ViewPower MonitorConsole Exposed Dangerous Method Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denia… |
CVE-2023-51577 | High | 7.8 | 2024-05-03 | Voltronic Power ViewPower setShutdown Exposed Dangerous Method Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate… |