2023 CVEs (page 56)
Page 56 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4993 | High | 7.5 | 2024-02-15 | Incorrect Use of Privileged APIs vulnerability in Utarit Information Technologies SoliPay Mobile App allows Collect Data as Provided by Users. This issue affe… |
CVE-2023-47537 | Medium | 4.8 | 2024-02-15 | An improper certificate validation vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2.0 through 7.2.6, FortiOS 7.0.0 through 7.0.15, FortiOS 6… |
CVE-2023-45581 | High | 8.8 | 2024-02-15 | An improper privilege management vulnerability [CWE-269] in Fortinet FortiClientEMS version 7.2.0 through 7.2.2 and before 7.0.10 allows an Site administrator… |
CVE-2023-44253 | Medium | 5.0 | 2024-02-15 | An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in Fortinet FortiManager version 7.4.0 through 7.4.1 and before 7.2.5, Fo… |
CVE-2023-26206 | Medium | 6.8 | 2024-02-15 | An improper neutralization of input during web page generation ('cross-site scripting') in Fortinet FortiNAC 9.4.0 - 9.4.2, 9.2.0 - 9.2.8, 9.1.0 - 9.1.10 and 7… |
CVE-2023-39245 | Critical | 9.8 | 2024-02-15 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthentic… |
CVE-2023-39244 | High | 7.3 | 2024-02-15 | DELL ESI (Enterprise Storage Integrator) for SAP LAMA, version 10.0, contains an information disclosure vulnerability in EHAC component. An remote unauthentica… |
CVE-2023-32484 | Critical | 9.8 | 2024-02-15 | Dell Networking Switches running Enterprise SONiC versions 4.1.0, 4.0.5, 3.5.4 and below contains an improper input validation vulnerability. A remote unauthe… |
CVE-2023-32462 | Critical | 9.8 | 2024-02-15 | Dell OS10 Networking Switches running 10.5.2.x and above contain an OS command injection vulnerability when using remote user authentication. A remote unauthe… |
CVE-2023-28078 | Critical | 9.1 | 2024-02-15 | Dell OS10 Networking Switches running 10.5.2.x and above contain a vulnerability with zeroMQ when VLT is configured. A remote unauthenticated attacker could p… |
CVE-2023-4539 | High | 7.5 | 2024-02-15 | Use of a hard-coded password for a special database account created during Comarch ERP XL installation allows an attacker to retrieve embedded sensitive data s… |
CVE-2023-4538 | Medium | 6.2 | 2024-02-15 | The database access credentials configured during installation are stored in a special table, and are encrypted with a shared key, same among all Comarch ERP X… |
CVE-2023-4537 | High | 7.4 | 2024-02-15 | Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data… |
CVE-2023-51787 | High | 7.5 | 2024-02-15 | An issue was discovered in Wind River VxWorks 7 22.09 and 23.03. If a VxWorks task or POSIX thread that uses OpenSSL exits, limited per-task memory is not free… |
CVE-2023-46596 | Medium | 5.1 | 2024-02-15 | Improper input validation in Algosec FireFlow VisualFlow workflow editor via Name, Description and Configuration File field in version A32.20, A32.50, A32.60… |
CVE-2023-6138 | High | 7.9 | 2024-02-14 | A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary… |
CVE-2023-49721 | Medium | 6.7 | 2024-02-14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in LXD. This allows an OS-resident attacker to bypass Secure Boot. |
CVE-2023-48733 | Medium | 6.7 | 2024-02-14 | An insecure default to allow UEFI Shell in EDK2 was left enabled in Ubuntu's EDK2. This allows an OS-resident attacker to bypass Secure Boot. |
CVE-2023-50927 | High | 8.6 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An attacker can trigger out-of-bounds reads in the RPL-Lite impl… |
CVE-2023-50926 | High | 7.5 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds read can be caused by an incoming DIO message w… |
CVE-2023-48229 | High | 7.0 | 2024-02-14 | Contiki-NG is an open-source, cross-platform operating system for Next-Generation IoT devices. An out-of-bounds write exists in the driver for IEEE 802.15.4 ra… |
CVE-2023-6409 | High | 7.7 | 2024-02-14 | CWE-798: Use of Hard-coded Credentials vulnerability exists that could cause unauthorized access to a project file protected with application password when op… |
CVE-2023-6408 | High | 8.1 | 2024-02-14 | CWE-924: Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability exists that could cause a denial of service an… |
CVE-2023-27975 | High | 7.1 | 2024-02-14 | CWE-522: Insufficiently Protected Credentials vulnerability exists that could cause unauthorized access to the project file in EcoStruxure Control Expert when… |
CVE-2023-50868 | High | 7.5 | 2024-02-14 | The Closest Encloser Proof aspect of the DNS protocol (in RFC 5155 when RFC 9276 guidance is skipped) allows remote attackers to cause a denial of service (CPU… |
CVE-2023-50387 | High | 7.5 | 2024-02-14 | Certain DNSSEC aspects of the DNS protocol (in RFC 4033, 4034, 4035, 6840, and related RFCs) allow remote attackers to cause a denial of service (CPU consumpti… |
CVE-2023-5123 | High | 8.0 | 2024-02-14 | The JSON datasource plugin ( https://grafana.com/grafana/plugins/marcusolsson-json-datasource/ ) is a Grafana Labs maintained plugin for Grafana that allows fo… |
CVE-2023-5122 | Medium | 5.0 | 2024-02-14 | Grafana is an open-source platform for monitoring and observability. The CSV datasource plugin is a Grafana Labs maintained plugin for Grafana that allows for… |
CVE-2023-46186 | Medium | 5.3 | 2024-02-14 | IBM Jazz for Service Management 1.1.3.20 could allow an unauthorized user to obtain sensitive file information using forced browsing due to improper access con… |
CVE-2023-6441 | Critical | 9.8 | 2024-02-14 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in UNI-PA University Marketing & Computer Internet Trade Inc… |
CVE-2023-42776 | Low | 3.8 | 2024-02-14 | Improper input validation in some Intel(R) SGX DCAP software for Windows before version 1.19.100.3 may allow an authenticateed user to potentially enable infor… |
CVE-2023-41252 | Medium | 6.5 | 2024-02-14 | Out-of-bounds read in some Intel(R) QAT software drivers for Windows before version QAT1.7-W-1.11.0 may allow an authenticated user to potentially enable denia… |
CVE-2023-41231 | Medium | 6.7 | 2024-02-14 | Incorrect default permissions in some ACAT software maintained by Intel(R) before version 2.0.0 may allow an authenticated user to potentially enable escalatio… |
CVE-2023-41091 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path for some Intel(R) MPI Library Software before version 2021.11 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2023-41090 | Low | 1.8 | 2024-02-14 | Race condition in some Intel(R) MAS software before version 2.3 may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-40161 | Medium | 6.6 | 2024-02-14 | Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user to potentially enable escalation of pri… |
CVE-2023-40156 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable escalation of privi… |
CVE-2023-40154 | Medium | 6.7 | 2024-02-14 | Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially enable escalation of… |
CVE-2023-39941 | High | 7.1 | 2024-02-14 | Improper access control in some Intel(R) SUR software before version 2.4.10587 may allow an unauthenticated user to potentially enable denial of service via ad… |
CVE-2023-39932 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow a privillaged user to potentially enable escalation of pri… |
CVE-2023-39432 | Medium | 6.7 | 2024-02-14 | Improper access control element in some Intel(R) Ethernet tools and driver install software, before versions 28.2, may allow an authenticated user to potential… |
CVE-2023-39425 | High | 8.8 | 2024-02-14 | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2023-38566 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) ISPC software before version 1.21.0 may allow an authenticated user to potentially enable escalation of privilege via… |
CVE-2023-38561 | Medium | 5.5 | 2024-02-14 | Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2023-38135 | Medium | 6.7 | 2024-02-14 | Improper authorization in some Intel(R) PM software may allow a privileged user to potentially enable escalation of privilege via local access. |
CVE-2023-36493 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) SDK for OpenCL(TM) Applications software may allow an authenticated user to potentially enable escalation of privileg… |
CVE-2023-36490 | Medium | 5.0 | 2024-02-14 | Improper initialization in some Intel(R) MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local acce… |
CVE-2023-35769 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) CIP software before version 2.4.10577 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2023-35121 | High | 7.8 | 2024-02-14 | Improper access control in the Intel(R) oneAPI DPC++/C++ Compiler before version 2022.2.1 for some Intel(R) oneAPI Toolkits before version 2022.3.1 may allow… |
CVE-2023-35062 | Medium | 6.3 | 2024-02-14 | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow a privileged user to potentially enable escalation of privilege via loca… |
CVE-2023-35061 | Medium | 4.3 | 2024-02-14 | Improper initialization for the Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to pote… |
CVE-2023-35060 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) Battery Life Diagnostic Tool software before version 2.3.1 may allow an authenticated user to potentially enable esca… |
CVE-2023-35003 | Medium | 6.7 | 2024-02-14 | Path transversal in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege via loc… |
CVE-2023-34983 | Medium | 4.3 | 2024-02-14 | Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to p… |
CVE-2023-34351 | High | 7.5 | 2024-02-14 | Buffer underflow in some Intel(R) PCM software before version 202307 may allow an unauthenticated user to potentially enable denial of service via network acce… |
CVE-2023-34315 | Medium | 6.7 | 2024-02-14 | Incorrect default permissions in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of priv… |
CVE-2023-33875 | High | 7.1 | 2024-02-14 | Improper access control for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to pot… |
CVE-2023-33870 | Medium | 6.7 | 2024-02-14 | Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially enable escalation of… |
CVE-2023-32651 | Medium | 4.3 | 2024-02-14 | Improper validation of specified type of input for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unau… |
CVE-2023-32647 | Medium | 6.8 | 2024-02-14 | Improper access control in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege vi… |
CVE-2023-32646 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path element in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of p… |
CVE-2023-32644 | Medium | 4.3 | 2024-02-14 | Protection mechanism failure for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user t… |
CVE-2023-32642 | Medium | 4.3 | 2024-02-14 | Insufficient adherence to expected conventions for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unau… |
CVE-2023-32618 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially… |
CVE-2023-32280 | Medium | 5.3 | 2024-02-14 | Insufficiently protected credentials in some Intel(R) Server Product OpenBMC firmware before versions egs-1.05 may allow an unauthenticated user to enable info… |
CVE-2023-31271 | Medium | 6.7 | 2024-02-14 | Improper access control in some Intel(R) VROC software before version 8.0.8.1001 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-31189 | Medium | 5.2 | 2024-02-14 | Improper authentication in some Intel(R) Server Product OpenBMC firmware before version egs-1.09 may allow an authenticated user to enable escalation of privil… |
CVE-2023-30767 | Medium | 5.5 | 2024-02-14 | Improper buffer restrictions in Intel(R) Optimization for TensorFlow before version 2.13.0 may allow an authenticated user to potentially enable escalation of… |
CVE-2023-29162 | Medium | 6.0 | 2024-02-14 | Improper buffer restrictions the Intel(R) C++ Compiler Classic before version 2021.8 for Intel(R) oneAPI Toolkits before version 2022.3.1 may allow a privilege… |
CVE-2023-29153 | Medium | 4.9 | 2024-02-14 | Uncontrolled resource consumption for some Intel(R) SPS firmware before version SPS_E5_06.01.04.002.0 may allow a privileged user to potentially enable denial… |
CVE-2023-28745 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in Intel(R) QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of pr… |
CVE-2023-28739 | Medium | 6.7 | 2024-02-14 | Incorrect default permissions in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable esc… |
CVE-2023-28720 | Medium | 6.1 | 2024-02-14 | Improper initialization for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to pot… |
CVE-2023-28715 | Medium | 5.0 | 2024-02-14 | Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially e… |
CVE-2023-28407 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) XTU software before version 7.12.0.29 may allow an authenticated user to potentially enable escalation of privilege v… |
CVE-2023-28396 | Medium | 6.1 | 2024-02-14 | Improper access control in firmware for some Intel(R) Thunderbol(TM) Controllers versions before 41 may allow a privileged user to enable denial of service via… |
CVE-2023-28374 | Medium | 6.1 | 2024-02-14 | Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to p… |
CVE-2023-27517 | Medium | 6.6 | 2024-02-14 | Improper access control in some Intel(R) Optane(TM) PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to… |
CVE-2023-27308 | Medium | 4.6 | 2024-02-14 | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escal… |
CVE-2023-27307 | Low | 3.8 | 2024-02-14 | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable i… |
CVE-2023-27303 | Low | 3.8 | 2024-02-14 | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable inform… |
CVE-2023-27301 | Medium | 4.2 | 2024-02-14 | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escala… |
CVE-2023-27300 | Low | 3.8 | 2024-02-14 | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable i… |
CVE-2023-26596 | Low | 2.5 | 2024-02-14 | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial… |
CVE-2023-26592 | Low | 3.8 | 2024-02-14 | Deserialization of untrusted data in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially ena… |
CVE-2023-26591 | Low | 2.0 | 2024-02-14 | Unchecked return value in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable denia… |
CVE-2023-26586 | Medium | 4.3 | 2024-02-14 | Uncaught exception for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow an unauthenticated user to potentia… |
CVE-2023-26585 | Medium | 5.0 | 2024-02-14 | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable denial… |
CVE-2023-25951 | Medium | 6.0 | 2024-02-14 | Improper input validation for some Intel(R) PROSet/Wireless and Intel(R) Killer(TM) Wi-Fi software before version 22.240 may allow a privileged user to potenti… |
CVE-2023-25945 | Medium | 6.7 | 2024-02-14 | Protection mechanism failure in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege… |
CVE-2023-25779 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enab… |
CVE-2023-25777 | High | 7.9 | 2024-02-14 | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escala… |
CVE-2023-25769 | Medium | 5.5 | 2024-02-14 | Uncontrolled resource consumption in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially ena… |
CVE-2023-25174 | Medium | 6.7 | 2024-02-14 | Improper access control in some Intel(R) Chipset Driver Software before version 10.1.19444.8378 may allow an authenticated user to potentially enable escalatio… |
CVE-2023-25073 | Medium | 5.5 | 2024-02-14 | Improper access control in some Intel(R) DSA software before version 23.4.33 may allow an authenticated user to potentially enable denial of service via local… |
CVE-2023-24591 | Medium | 6.7 | 2024-02-14 | Uncontrolled search path in some Intel(R) Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalat… |
CVE-2023-24589 | Medium | 6.1 | 2024-02-14 | Improper buffer restrictions in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow a privileged user to potentially enable escal… |
CVE-2023-24542 | Medium | 6.7 | 2024-02-14 | Unquoted search path or element in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enabl… |
CVE-2023-24481 | Medium | 6.3 | 2024-02-14 | Improper access control in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escala… |
CVE-2023-24463 | Medium | 4.3 | 2024-02-14 | Improper input validation in some Intel(R) Thunderbolt(TM) DCH drivers for Windows before version 88 may allow an unauthenticated user to potentially enable in… |