2023 CVEs (page 76)
Page 76 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-52173 | Critical | 9.8 | 2023-12-29 | XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0. |
CVE-2023-51435 | High | 7.1 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51434 | Critical | 9.3 | 2023-12-29 | Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution. |
CVE-2023-51433 | Low | 2.9 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51432 | Low | 3.2 | 2023-12-29 | Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak. |
CVE-2023-51431 | High | 7.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-51430 | Medium | 4.4 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51429 | Medium | 6.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. |
CVE-2023-51428 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-51427 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-51426 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-31296 | Medium | 5.3 | 2023-12-29 | CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows attackers to obtain sensitive information via the… |
CVE-2023-23443 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-23442 | Medium | 4.6 | 2023-12-29 | Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. |
CVE-2023-23441 | Medium | 6.0 | 2023-12-29 | Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak. |
CVE-2023-7148 | Medium | 5.0 | 2023-12-29 | A vulnerability has been found in ShifuML shifu 0.12.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file src/m… |
CVE-2023-7147 | Medium | 6.3 | 2023-12-29 | A vulnerability, which was classified as critical, was found in gopeak MasterLab up to 3.3.10. Affected is the function base64ImageContent of the file app/ctrl… |
CVE-2023-31294 | High | 7.5 | 2023-12-29 | CSV Injection vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to obtain sensitive information v… |
CVE-2023-31293 | Medium | 4.3 | 2023-12-29 | An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows remote attackers to obtain sensitive information and bypass pr… |
CVE-2023-23440 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2023-23439 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2023-23438 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions |
CVE-2023-23437 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak |
CVE-2023-23430 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23429 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23428 | Low | 3.3 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23427 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions. |
CVE-2023-23426 | Medium | 6.6 | 2023-12-29 | Some Honor products are affected by file writing vulnerability, successful exploitation could cause information disclosure. |
CVE-2023-23424 | Medium | 6.5 | 2023-12-29 | Some Honor products are affected by file writing vulnerability, successful exploitation could cause code execution |
CVE-2023-7146 | Medium | 6.3 | 2023-12-29 | A vulnerability, which was classified as critical, has been found in gopeak MasterLab up to 3.3.10. This issue affects the function sqlInjectDelete of the file… |
CVE-2023-7145 | Medium | 6.3 | 2023-12-29 | A vulnerability classified as critical was found in gopeak MasterLab up to 3.3.10. This vulnerability affects the function sqlInject of the file app/ctrl/Frame… |
CVE-2023-31301 | Medium | 6.1 | 2023-12-29 | Stored Cross Site Scripting (XSS) Vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute ar… |
CVE-2023-31298 | Medium | 4.8 | 2023-12-29 | Cross Site Scripting (XSS) vulnerability in Sesami Cash Point & Transport Optimizer (CPTO) version 6.3.8.6 (#718), allows remote attackers to execute arbitrary… |
CVE-2023-31292 | Medium | 5.5 | 2023-12-29 | An issue was discovered in Sesami Cash Point & Transport Optimizer (CPTO) 6.3.8.6 (#718), allows local attackers to obtain sensitive information and bypass aut… |
CVE-2023-23436 | High | 7.3 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23435 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23434 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. |
CVE-2023-23433 | Medium | 4.0 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23432 | High | 7.3 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-23431 | High | 7.3 | 2023-12-29 | Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct syste… |
CVE-2023-7144 | Medium | 6.3 | 2023-12-29 | A vulnerability classified as critical has been found in gopeak MasterLab up to 3.3.10. This affects the function sqlInject of the file app/ctrl/framework/Feat… |
CVE-2023-7143 | Low | 2.4 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of… |
CVE-2023-7142 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functio… |
CVE-2023-7141 | Medium | 4.3 | 2023-12-29 | A vulnerability was found in code-projects Client Details System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin… |
CVE-2023-52085 | Low | 3.3 | 2023-12-29 | Winter is a free, open-source content management system. Users with access to backend forms that include a ColorPicker FormWidget can provide a value that woul… |
CVE-2023-50104 | Critical | 9.8 | 2023-12-29 | ZZCMS 2023 has a file upload vulnerability in 3/E_bak5.1/upload/index.php, allowing attackers to exploit this loophole to gain server privileges and execute ar… |
CVE-2023-7140 | Medium | 4.3 | 2023-12-28 | A vulnerability was found in code-projects Client Details System 1.0 and classified as problematic. This issue affects some unknown processing of the file /adm… |
CVE-2023-7139 | Medium | 4.3 | 2023-12-28 | A vulnerability has been found in code-projects Client Details System 1.0 and classified as problematic. This vulnerability affects unknown code of the file /a… |
CVE-2023-52152 | High | 7.5 | 2023-12-28 | mupnp/net/uri.c in mUPnP for C through 3.0.2 has an out-of-bounds read and application crash because it lacks a certain host length recalculation. |
CVE-2023-52084 | Low | 2.0 | 2023-12-28 | Winter is a free, open-source content management system. Prior to 1.2.4, Users with access to backend forms that include a ColorPicker FormWidget can provide a… |
CVE-2023-52083 | Low | 2.0 | 2023-12-28 | Winter is a free, open-source content management system. Prior to 1.2.4, users with the `media.manage_media` permission can upload files to the Media Manager… |
CVE-2023-50448 | Medium | 6.5 | 2023-12-28 | In ActiveAdmin (aka Active Admin) before 2.12.0, a concurrency issue allows a malicious actor to access potentially private data (that belongs to another user)… |
CVE-2023-7138 | Medium | 6.3 | 2023-12-28 | A vulnerability, which was classified as critical, was found in code-projects Client Details System 1.0. This affects an unknown part of the file /admin of the… |
CVE-2023-7137 | Medium | 6.3 | 2023-12-28 | A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. Affected by this issue is some unknown functional… |
CVE-2023-7136 | Low | 2.4 | 2023-12-28 | A vulnerability classified as problematic was found in code-projects Record Management System 1.0. Affected by this vulnerability is an unknown functionality o… |
CVE-2023-7135 | Low | 2.4 | 2023-12-28 | A vulnerability classified as problematic has been found in code-projects Record Management System 1.0. Affected is an unknown function of the file /main/offic… |
CVE-2023-7134 | Medium | 6.3 | 2023-12-28 | A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown processing. The manipu… |
CVE-2023-50839 | Critical | 9.3 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in JS Help Desk JS Help Desk – Best Help Desk & Support Plug… |
CVE-2023-50838 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Basix NEX-Forms – Ultimate Form Builder – Contact forms a… |
CVE-2023-50847 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Collne Inc. Welcart e-Commerce.This issue affects Welcart… |
CVE-2023-50846 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in RegistrationMagic RegistrationMagic – Custom Registration… |
CVE-2023-50845 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AyeCode - WordPress Business Directory Plugins GeoDirecto… |
CVE-2023-50844 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affe… |
CVE-2023-50843 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Clockwork Clockwork SMS Notfications.This issue affects C… |
CVE-2023-50842 | High | 8.5 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Matthew Fries MF Gig Calendar.This issue affects MF Gig C… |
CVE-2023-50841 | High | 8.5 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Repute Infosystems BookingPress – Appointment Booking Cal… |
CVE-2023-50840 | High | 8.5 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in wpdevelop, oplugins Booking Manager.This issue affects Bo… |
CVE-2023-7133 | Medium | 4.3 | 2023-12-28 | A vulnerability was found in y_project RuoYi 4.7.8. It has been declared as problematic. This vulnerability affects unknown code of the file /login of the comp… |
CVE-2023-7132 | Low | 3.5 | 2023-12-28 | A vulnerability was found in code-projects Intern Membership Management System 2.0. It has been classified as problematic. This affects an unknown part of the… |
CVE-2023-7131 | Medium | 6.3 | 2023-12-28 | A vulnerability was found in code-projects Intern Membership Management System 2.0 and classified as critical. Affected by this issue is some unknown functiona… |
CVE-2023-7163 | Critical | 10.0 | 2023-12-28 | A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could… |
CVE-2023-7129 | Medium | 5.5 | 2023-12-28 | A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the component Voters Login… |
CVE-2023-52082 | High | 8.8 | 2023-12-28 | Lychee is a free photo-management tool. Prior to 5.0.2, Lychee is vulnerable to an SQL injection on any binding when using mysql/mariadb. This injection is on… |
CVE-2023-52081 | Medium | 5.3 | 2023-12-28 | ffcss is a CLI interface to apply and configure Firefox CSS themes. Prior to 0.2.0, the function `lookupPreprocess()` is meant to apply some transformations to… |
CVE-2023-52079 | Medium | 6.8 | 2023-12-28 | msgpackr is a fast MessagePack NodeJS/JavaScript implementation. Prior to 1.10.1, when decoding user supplied MessagePack messages, users can trigger stuck thr… |
CVE-2023-50267 | Medium | 4.3 | 2023-12-28 | MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to… |
CVE-2023-7128 | Medium | 6.3 | 2023-12-28 | A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /a… |
CVE-2023-7127 | Medium | 6.3 | 2023-12-28 | A vulnerability classified as critical was found in code-projects Automated Voting System 1.0. This vulnerability affects unknown code of the component Login… |
CVE-2023-50470 | Medium | 5.4 | 2023-12-28 | A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a cr… |
CVE-2023-46987 | High | 8.8 | 2023-12-28 | SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php. |
CVE-2023-7126 | Medium | 6.3 | 2023-12-28 | A vulnerability classified as critical has been found in code-projects Automated Voting System 1.0. This affects an unknown part of the file /admin/ of the com… |
CVE-2023-50855 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Sam Perrow Pre* Party Resource Hints.This issue affects P… |
CVE-2023-50854 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Squirrly Squirrly SEO - Advanced Pack.This issue affects… |
CVE-2023-50853 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nasirahmed Advanced Form Integration – Connect WooCommerc… |
CVE-2023-50852 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Booking Calendar | Appointment Booking | B… |
CVE-2023-50851 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in N Squared Appointment Booking Calendar — Simply Schedule… |
CVE-2023-50849 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in E2Pdf.Com E2Pdf – Export To Pdf Tool for WordPress.This i… |
CVE-2023-50848 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Aaron J 404 Solution.This issue affects 404 Solution: fro… |
CVE-2023-50873 | Medium | 4.3 | 2023-12-28 | Cross-Site Request Forgery (CSRF) vulnerability in Marios Alexandrou Add Any Extension to Pages.This issue affects Add Any Extension to Pages: from n/a through… |
CVE-2023-50860 | Medium | 6.5 | 2023-12-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TMS Booking for Appointments and Events Calendar – Amelia… |
CVE-2023-50859 | Medium | 6.5 | 2023-12-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum WP Crowdfunding allows Stored XSS.This issue affe… |
CVE-2023-50858 | Medium | 5.4 | 2023-12-28 | Cross-Site Request Forgery (CSRF) vulnerability in Bill Minozzi Disable Json API, Login Lockdown, XMLRPC, Pingback, Stop User Enumeration Anti Hacker Scan.This… |
CVE-2023-50857 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Recover WooCommerce Cart Abandonment, Newslette… |
CVE-2023-50856 | High | 7.6 | 2023-12-28 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in FunnelKit Funnel Builder for WordPress by FunnelKit – Cus… |
CVE-2023-50836 | Medium | 5.9 | 2023-12-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ibericode HTML Forms allows Stored XSS.This issue affects… |
CVE-2023-36381 | Medium | 6.6 | 2023-12-28 | Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.This issue affects Zippy: from n/a through 1.6.5. |
CVE-2023-32795 | High | 8.2 | 2023-12-28 | Deserialization of Untrusted Data vulnerability in WooCommerce Product Add-Ons.This issue affects Product Add-Ons: from n/a through 6.1.3. |
CVE-2023-32513 | High | 7.5 | 2023-12-28 | Deserialization of Untrusted Data vulnerability in GiveWP GiveWP – Donation Plugin and Fundraising Platform.This issue affects GiveWP – Donation Plugin and Fun… |
CVE-2023-27447 | Medium | 5.3 | 2023-12-28 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in VeronaLabs WP SMS – Messaging & SMS Notification for WordPress, WooCommerce, Gravit… |
CVE-2023-51501 | High | 7.1 | 2023-12-28 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Undsgn Uncode - Creative & WooCommerce WordPress Theme al… |