2023 CVEs (page 97)
Page 97 of 307 — CVEs published in 2023, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45773 | High | 7.8 | 2023-12-04 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privileg… |
CVE-2023-40465 | High | 8.3 | 2023-12-04 | Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area netwo… |
CVE-2023-40464 | High | 8.1 | 2023-12-04 | Several versions of ALEOS, including ALEOS 4.16.0, use a hardcoded SSL certificate and private key. An attacker with access to these items coul… |
CVE-2023-40463 | High | 8.1 | 2023-12-04 | When configured in debugging mode by an authenticated user with administrative privileges, ALEOS 4.16 and earlier store the SHA512 hash of the… |
CVE-2023-40462 | High | 7.5 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not perform input sanitization during authentication, which could potentially result in a Denial… |
CVE-2023-40461 | High | 8.1 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier allows an authenticated user with Administrator privileges to access a file upload field whi… |
CVE-2023-40460 | High | 7.1 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not validate uploaded file names and types, which could potentially allow an authentica… |
CVE-2023-40459 | High | 7.5 | 2023-12-04 | The ACEManager component of ALEOS 4.16 and earlier does not adequately perform input sanitization during authentication, which could potentially resul… |
CVE-2023-40103 | High | 7.8 | 2023-12-04 | In multiple locations, there is a possible way to corrupt memory due to a double free. This could lead to local escalation of privilege with no additional exec… |
CVE-2023-40098 | Medium | 5.5 | 2023-12-04 | In mOnDone of NotificationConversationInfo.java, there is a possible way to access app notification data of another user due to a logic error in the code. This… |
CVE-2023-40097 | High | 7.8 | 2023-12-04 | In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation o… |
CVE-2023-40096 | High | 7.8 | 2023-12-04 | In OpRecordAudioMonitor::onFirstRef of AudioRecordClient.cpp, there is a possible way to record audio from the background due to a missing flag. This could lea… |
CVE-2023-40095 | High | 7.8 | 2023-12-04 | In createDontSendToRestrictedAppsBundle of PendingIntentUtils.java, there is a possible background activity launch due to a missing check. This could lead to l… |
CVE-2023-40094 | High | 7.8 | 2023-12-04 | In keyguardGoingAway of ActivityTaskManagerService.java, there is a possible lock screen bypass due to a missing permission check. This could lead to local esc… |
CVE-2023-40092 | Medium | 5.5 | 2023-12-04 | In verifyShortcutInfoPackage of ShortcutService.java, there is a possible way to see another user's image due to a confused deputy. This could lead to local in… |
CVE-2023-40091 | High | 7.8 | 2023-12-04 | In onTransact of IncidentService.cpp, there is a possible out of bounds write due to memory corruption. This could lead to local escalation of privilege with n… |
CVE-2023-40090 | Medium | 6.5 | 2023-12-04 | In BTM_BleVerifySignature of btm_ble.cc, there is a possible way to bypass signature validation due to side channel information disclosure. This could lead to… |
CVE-2023-40089 | High | 7.8 | 2023-12-04 | In getCredentialManagerPolicy of DevicePolicyManagerService.java, there is a possible method for users to select credential managers without permission due to… |
CVE-2023-40088 | High | 8.8 | 2023-12-04 | In callback_thread_event of com_android_bluetooth_btservice_AdapterService.cpp, there is a possible memory corruption due to a use after free. This could lead… |
CVE-2023-40087 | High | 8.8 | 2023-12-04 | In transcodeQ*ToFloat of btif_avrcp_audio_track.cc, there is a possible out of bounds write due to a missing bounds check. This could lead to paired device esc… |
CVE-2023-40084 | High | 7.8 | 2023-12-04 | In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additiona… |
CVE-2023-40083 | Medium | 5.5 | 2023-12-04 | In parse_gap_data of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User… |
CVE-2023-40082 | Critical | 9.8 | 2023-12-04 | In modify_for_next_stage of fdt.rs, there is a possible way to render KASLR ineffective due to improperly used crypto. This could lead to remote escalation of… |
CVE-2023-40081 | Medium | 5.5 | 2023-12-04 | In loadMediaDataInBgForResumption of MediaDataManager.kt, there is a possible way to view another user's images due to a confused deputy. This could lead to l… |
CVE-2023-40080 | High | 7.8 | 2023-12-04 | In multiple functions of btm_ble_gap.cc, there is a possible out of bounds write due to a logic error in the code. This could lead to local escalation of privi… |
CVE-2023-40079 | High | 7.8 | 2023-12-04 | In injectSendIntentSender of ShortcutService.java, there is a possible background activity launch due to a permissions bypass. This could lead to local escalat… |
CVE-2023-40078 | Critical | 9.8 | 2023-12-04 | In a2dp_vendor_opus_decoder_decode_packet of a2dp_vendor_opus_decoder.cc, there is a possible out of bounds write due to a heap buffer overflow. This could lea… |
CVE-2023-40077 | High | 8.1 | 2023-12-04 | In multiple functions of MetaDataBase.cpp, there is a possible UAF write due to a race condition. This could lead to remote escalation of privilege with no add… |
CVE-2023-40076 | Medium | 5.5 | 2023-12-04 | In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This could lead… |
CVE-2023-40075 | Medium | 5.5 | 2023-12-04 | In forceReplaceShortcutInner of ShortcutPackage.java, there is a possible way to register unlimited packages due to a missing bounds check. This could lead to… |
CVE-2023-40074 | Medium | 5.5 | 2023-12-04 | In saveToXml of PersistableBundle.java, invalid data could lead to local persistent denial of service with no additional execution privileges needed. User inte… |
CVE-2023-40073 | Medium | 5.5 | 2023-12-04 | In visitUris of Notification.java, there is a possible cross-user media read due to Confused Deputy. This could lead to local information disclosure with no ad… |
CVE-2023-35690 | Critical | 9.8 | 2023-12-04 | In RGXDestroyHWRTData of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privileg… |
CVE-2023-35668 | Medium | 5.5 | 2023-12-04 | In visitUris of Notification.java, there is a possible way to display images from another user due to a confused deputy. This could lead to local information d… |
CVE-2023-24052 | Critical | 9.8 | 2023-12-04 | An issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via the change password functionality as it does not… |
CVE-2023-24051 | Critical | 9.8 | 2023-12-04 | A client side rate limit issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via brute force style attacks. |
CVE-2023-24050 | Medium | 5.4 | 2023-12-04 | Cross Site Scripting (XSS) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary code via crafted string when setting the Wi-… |
CVE-2023-24049 | Critical | 9.8 | 2023-12-04 | An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges on the device via poor credential management. |
CVE-2023-24048 | High | 8.8 | 2023-12-04 | Cross Site Request Forgery (CSRF) vulnerability in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain control of the device via crafted GET request… |
CVE-2023-24047 | Medium | 6.8 | 2023-12-04 | An Insecure Credential Management issue discovered in Connectize AC21000 G6 641.139.1.1256 allows attackers to gain escalated privileges via use of weak hashin… |
CVE-2023-24046 | Medium | 6.8 | 2023-12-04 | An issue was discovered on Connectize AC21000 G6 641.139.1.1256 allows attackers to run arbitrary commands via use of a crafted string in the ping utility. |
CVE-2023-21403 | Critical | 9.8 | 2023-12-04 | In RGXDestroyZSBufferKM of rgxta3d.c, there is a possible arbitrary code execution due to an uncaught exception. This could lead to local escalation of privile… |
CVE-2023-21402 | Critical | 9.8 | 2023-12-04 | In MMU_UnmapPages of mmu_common.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in… |
CVE-2023-21401 | Critical | 9.8 | 2023-12-04 | In DevmemIntChangeSparse of devicemem_server.c, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of priv… |
CVE-2023-21263 | Critical | 9.8 | 2023-12-04 | In OSMMapPMRGeneric of pmr_os.c, there is a possible out of bounds write due to an uncaught exception. This could lead to local escalation of privilege in t… |
CVE-2023-21228 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat… |
CVE-2023-21227 | High | 7.5 | 2023-12-04 | In HTBLogKM of htbserver.c, there is a possible information disclosure due to log information disclosure. This could lead to local information disclosure in th… |
CVE-2023-21218 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalat… |
CVE-2023-21217 | Critical | 9.8 | 2023-12-04 | In PMRWritePMPageList of TBD, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no addi… |
CVE-2023-21216 | Critical | 9.8 | 2023-12-04 | In PMRChangeSparseMemOSMem of physmem_osmem_linux.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation… |
CVE-2023-21215 | Critical | 9.8 | 2023-12-04 | In DevmemIntAcquireRemoteCtx of devicemem_server.c, there is a possible arbitrary code execution due to a race condition. This could lead to local escalation o… |
CVE-2023-21166 | Critical | 9.8 | 2023-12-04 | In RGXBackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in t… |
CVE-2023-21164 | Critical | 9.8 | 2023-12-04 | In DevmemIntMapPMR of devicemem_server.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privileg… |
CVE-2023-21163 | Critical | 9.8 | 2023-12-04 | In PMR_ReadBytes of pmr.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in the kernel… |
CVE-2023-21162 | Critical | 9.8 | 2023-12-04 | In RGXUnbackingZSBuffer of rgxta3d.c, there is a possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege in… |
CVE-2023-6063 | High | 7.5 | 2023-12-04 | The WP Fastest Cache WordPress plugin before 1.2.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injec… |
CVE-2023-5990 | Medium | 6.5 | 2023-12-04 | The Interactive Contact Form and Multi Step Form Builder with Drag & Drop Editor WordPress plugin before 3.4.2 does not have CSRF checks on some of its form ac… |
CVE-2023-5979 | Medium | 6.5 | 2023-12-04 | The eCommerce Product Catalog Plugin for WordPress plugin before 3.3.26 does not have CSRF checks in some of its admin pages, which could allow attackers to ma… |
CVE-2023-5953 | High | 8.8 | 2023-12-04 | The Welcart e-Commerce WordPress plugin before 2.9.5 does not validate files to be uploaded, as well as does not have authorisation and CSRF in an AJAX action… |
CVE-2023-5952 | Critical | 9.8 | 2023-12-04 | The Welcart e-Commerce WordPress plugin before 2.9.5 unserializes user input from cookies, which could allow unautehtniacted users to perform PHP Object Inject… |
CVE-2023-5951 | Medium | 6.1 | 2023-12-04 | The Welcart e-Commerce WordPress plugin before 2.9.5 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cro… |
CVE-2023-5884 | Medium | 6.5 | 2023-12-04 | The Word Balloon WordPress plugin before 4.20.3 does not protect some of its actions against CSRF attacks, allowing an unauthenticated attacker to trick a logg… |
CVE-2023-5874 | Medium | 4.8 | 2023-12-04 | The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-5809 | Medium | 4.8 | 2023-12-04 | The Popup box WordPress plugin before 3.8.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-5762 | High | 8.8 | 2023-12-04 | The Filr WordPress plugin before 1.2.3.6 is vulnerable from an RCE (Remote Code Execution) vulnerability, which allows the operating system to execute commands… |
CVE-2023-5210 | Medium | 6.1 | 2023-12-04 | The AMP+ Plus WordPress plugin through 3.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Sc… |
CVE-2023-5141 | Medium | 6.1 | 2023-12-04 | The BSK Contact Form 7 Blacklist WordPress plugin through 1.0.1 does not sanitise and escape the inserted_count parameter before outputting it back in the page… |
CVE-2023-5137 | Medium | 4.8 | 2023-12-04 | The Simply Excerpts WordPress plugin through 1.4 does not sanitize and escape some fields in the plugin settings, which could allow high-privilege users such a… |
CVE-2023-5108 | High | 7.2 | 2023-12-04 | The Easy Newsletter Signups WordPress plugin through 1.0.4 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a S… |
CVE-2023-5105 | Medium | 6.5 | 2023-12-04 | The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download logic and download fi… |
CVE-2023-4460 | Medium | 5.4 | 2023-12-04 | The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a role as low as Author… |
CVE-2023-49080 | Low | 3.5 | 2023-12-04 | The Jupyter Server provides the backend (i.e. the core services, APIs, and REST endpoints) for Jupyter web applications like Jupyter notebook, JupyterLab, and… |
CVE-2023-47633 | High | 7.5 | 2023-12-04 | Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an autom… |
CVE-2023-47124 | Medium | 5.9 | 2023-12-04 | Traefik is an open source HTTP reverse proxy and load balancer. When Traefik is configured to use the `HTTPChallenge` to generate and renew the Let's Encrypt T… |
CVE-2023-47106 | Medium | 4.8 | 2023-12-04 | Traefik is an open source HTTP reverse proxy and load balancer. When a request is sent to Traefik with a URL fragment, Traefik automatically URL encodes and fo… |
CVE-2023-48967 | Critical | 9.8 | 2023-12-04 | Ssolon <= 2.6.0 and <=2.5.12 is vulnerable to Deserialization of Untrusted Data. |
CVE-2023-48910 | Critical | 9.8 | 2023-12-04 | Microcks up to 1.17.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /jobs and /artifact/download. This vulnerability allows… |
CVE-2023-48966 | High | 8.8 | 2023-12-04 | An arbitrary file upload vulnerability in the component /admin/api.upload/file of ThinkAdmin v6.1.53 allows attackers to execute arbitrary code via a crafted Z… |
CVE-2023-48965 | High | 8.8 | 2023-12-04 | An issue in the component /admin/api.plugs/script of ThinkAdmin v6.1.53 allows attackers to getshell via providing a crafted URL to download a malicious PHP fi… |
CVE-2023-5768 | Medium | 5.9 | 2023-12-04 | A vulnerability exists in the HCI IEC 60870-5-104 that affects the RTU500 series product versions listed below. Incomplete or wrong received APDU frame layout… |
CVE-2023-5767 | Medium | 6.0 | 2023-12-04 | A vulnerability exists in the webserver that affects the RTU500 series product versions listed below. A malicious actor could perform cross-site scripting o… |
CVE-2023-48866 | Medium | 5.4 | 2023-12-04 | A Cross-Site Scripting (XSS) vulnerability in the recipe preparation component within /api/objects/recipes and note component within /api/objects/shopping_list… |
CVE-2023-48815 | Medium | 6.1 | 2023-12-04 | kkFileView v4.3.0 is vulnerable to Incorrect Access Control. |
CVE-2023-41613 | High | 7.8 | 2023-12-04 | EzViz Studio v2.2.0 is vulnerable to DLL hijacking. |
CVE-2023-6460 | Medium | 4.0 | 2023-12-04 | A potential logging of the firestore key via logging within nodejs-firestore exists - Developers who were logging objects through this._settings would be loggi… |
CVE-2023-48863 | High | 7.5 | 2023-12-04 | SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to in… |
CVE-2023-48800 | Critical | 9.8 | 2023-12-04 | In TOTOLINK X6000R_Firmware V9.4.0cu.852_B20230719, the shttpd file sub_417338 function obtains fields from the front-end, connects them through the snprintf f… |
CVE-2023-48799 | Critical | 9.8 | 2023-12-04 | TOTOLINK-X6000R Firmware-V9.4.0cu.852_B20230719 is vulnerable to Command Execution. |
CVE-2023-32804 | High | 7.8 | 2023-12-04 | Out-of-bounds Write vulnerability in Arm Ltd Midgard GPU Userspace Driver, Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd… |
CVE-2023-6481 | High | 7.1 | 2023-12-04 | A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service… |
CVE-2023-44306 | Medium | 6.5 | 2023-12-04 | Dell DM5500 contains a path traversal vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this vulnerability to… |
CVE-2023-44305 | High | 8.1 | 2023-12-04 | Dell DM5500 5.14.0.0, contains a Stack-based Buffer Overflow Vulnerability in the appliance. An unauthenticated remote attacker may exploit this vulnerabili… |
CVE-2023-44304 | High | 8.8 | 2023-12-04 | Dell DM5500 contains a privilege escalation vulnerability in the appliance. A remote attacker with low privileges could potentially exploit this vulnerabili… |
CVE-2023-44302 | High | 8.1 | 2023-12-04 | Dell DM5500 5.14.0.0 and prior contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerabilit… |
CVE-2023-44301 | Medium | 5.4 | 2023-12-04 | Dell DM5500 5.14.0.0 and prior contain a Reflected Cross-Site Scripting Vulnerability. A network attacker with low privileges could potentially exploit this… |
CVE-2023-44300 | Medium | 5.5 | 2023-12-04 | Dell DM5500 5.14.0.0, contain a Plain-text Password Storage Vulnerability in the appliance. A local attacker with privileges could potentially exploit this… |
CVE-2023-44291 | High | 7.2 | 2023-12-04 | Dell DM5500 5.14.0.0 contains an OS command injection vulnerability in the appliance. A remote attacker with high privileges could potentially exploit this… |
CVE-2023-5332 | Medium | 5.9 | 2023-12-04 | Patch in third party library Consul requires 'enable-script-checks' to be set to False. This was required to enable a patch by the vendor. Without this setting… |
CVE-2023-49287 | High | 7.7 | 2023-12-04 | TinyDir is a lightweight C directory and file reader. Buffer overflows in the `tinydir_file_open()` function. This vulnerability has been patched in version 1… |
CVE-2023-49108 | High | 8.8 | 2023-12-04 | Path traversal vulnerability exists in RakRak Document Plus Ver.3.2.0.0 to Ver.6.4.0.7 (excluding Ver.6.1.1.3a). If this vulnerability is exploited, arbitrary… |