CVEs published November 14, 2023
337 CVEs were published on November 14, 2023: 18 critical, 117 high. 4 are now in CISA KEV.
- Published
- 337
- Critical
- 18
- High
- 117
- Medium
- 135
- Low
- 29
- Unrated
- 38
- Now in CISA KEV
- 4
- Fix available
- 89
Most affected products
- Microsoft Windows
- 26
- Intel Unison software
- 23
- Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- 14
- Intel(R) Aptio* V UEFI Firmware Integrator Tools
- 9
- salesagility/suitecrm
- 7
- Silicon Labs Gecko Platform · Weston Embedded Cesium NET +1
- 6
- Zoom Video Communications Zoom Clients
- 6
- Intel(R) Optane(TM) SSD products
- 5
- Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- 5
- AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards · AM… +2
- 4
Critical 18
- CVE-2023-45616There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code execution bHewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45615There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45614There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sending Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-31273Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escalatioIntel DCM software
- CVE-2023-34991A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and Fortinet FortiWLM
- CVE-2023-36553A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 tFortinet FortiSIEM
- CVE-2023-36028Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36397Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-46601A vulnerability has been identified in COMOS (All versions).Siemens COMOS
- CVE-2023-44373Affected devices do not properly sanitize an input field.Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +36
- CVE-2023-43505A vulnerability has been identified in COMOS (All versions).Siemens COMOS
- CVE-2023-43504A vulnerability has been identified in COMOS (All versions < V10.4.4).Siemens COMOS
- CVE-2023-25181A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.Silicon Labs Gecko Platform · Weston Embedded Cesium NET +1
- CVE-2023-28391A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.Silicon Labs Gecko Platform · Weston Embedded Cesium NET +1
- CVE-2023-27882A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.Silicon Labs Gecko Platform · Weston Embedded Cesium NET +1
- CVE-2023-28379A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.Silicon Labs Gecko Platform · Weston Embedded Cesium NET +1
- CVE-2023-31247A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.Silicon Labs Gecko Platform · Weston Embedded Cesium NET +1
- CVE-2023-31403Improper Access Control vulnerability in SAP Business One product installationSAP_SE SAP Business One
High 117
- CVE-2023-41718When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when haIvanti Secure Access
- CVE-2023-35080A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploiIvanti Secure Access Client
- CVE-2023-38043A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attackerIvanti Secure Access Client Windows
- CVE-2023-38543A vulnerability exists on all versions of the Ivanti Secure Access Client below 22.6R1.1, which could allow a locally authenticated attackerIvanti Secure Access Client Windows
- CVE-2023-31100Improper Access Control in SMI handler vulnerability in Phoenix SecureCore™ Technology™ 4 allows SPI flash modification.Phoenix SecureCore™ Technology™
- CVE-2023-43591Improper privilege management in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of priZoom Video Communications Zoom Rooms for macOS
- CVE-2023-43590Link following in Zoom Rooms for macOS before version 5.16.0 may allow an authenticated user to conduct an escalation of privilege via locaZoom Video Communications Zoom Rooms for macOS
- CVE-2023-45625Multiple authenticated command injection vulnerabilities exist in the command line interface.Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45624An unauthenticated Denial-of-Service (DoS) vulnerability exists in the soft ap daemon accessed via the PAPI protocol.Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45623Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the Wi-Fi Uplink service accessed via the PAPI protocol.Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45622Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the BLE daemon service accessed via the PAPI protocol.Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45621Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol.Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45620Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the CLI service accessed via the PAPI protocol.Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45619There is an arbitrary file deletion vulnerability in the RSSI service accessed by PAPI (Aruba's access point management protocol).Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45618There are arbitrary file deletion vulnerabilities in the AirWave client service accessed by PAPI (Aruba's access point management protocol).Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45617There are arbitrary file deletion vulnerabilities in the CLI service accessed by PAPI (Aruba's access point management protocol).Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-47517WordPress SendPress Newsletters Plugin <= 1.23.11.6 is vulnerable to Cross Site Scripting (XSS)SendPress Newsletters
- CVE-2023-47518WordPress Restrict Categories Plugin <= 2.6.4 is vulnerable to Cross Site Scripting (XSS)Matthew Muro Restrict Categories
- CVE-2023-47520WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)Michael Uno (miunosoft) Responsive Column Widgets
- CVE-2023-48217Remote code execution via form uploads in statamic/cmsstatamic cms · statamic/cms
- CVE-2023-47522WordPress Photo Feed Plugin <= 2.2.1 is vulnerable to Cross Site Scripting (XSS)Photo Feed
- CVE-2023-36038ASP.NET Core Denial of Service VulnerabilityMicrosoft ASP.NET Core · Microsoft Visual Studio +1
- CVE-2023-39537Improper input validation in BIOS TCG2AMI AptioV
- CVE-2023-39536Improper input validation in BIOS OFBDAMI AptioV
- CVE-2023-39535Improper input validation in BIOS AMI AptioV
- CVE-2023-47631vantage6 Node accepts non-whitelisted algorithms from malicious servervantage6 · vantage6-server +1
- CVE-2023-47544WordPress Atarim Plugin <= 3.12 is vulnerable to Cross Site Scripting (XSS)Visual Website Collaboration, Feedback & Project Management…
- CVE-2023-47630Attacker can cause Kyverno user to unintentionally consume insecure imagekyverno · github.com/kyverno/kyverno
- CVE-2023-47547WordPress Products, Order & Customers Export for WooCommerce Plugin <= 2.0.7 is vulnerable to Cross Site Scripting (XSS)WPFactory Products, Order & Customers Export for WooCommerce
- CVE-2023-5528Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalationKubernetes kubelet · k8s.io/kubernetes
- CVE-2023-47130Unsafe deserialization of user data in yiisoft/yiiyiisoft yii · yiisoft/yii
- CVE-2023-46132Crosslinking transaction attack in hyperledger/fabrichyperledger fabric · github.com/hyperledger/fabric
- CVE-2023-36049.NET, .NET Framework, and Visual Studio Elevation of Privilege VulnerabilityMicrosoft Visual Studio · Microsoft .NET +1
- CVE-2023-36007Microsoft Send Customer Voice survey from Dynamics 365 Spoofing VulnerabilityMicrosoft Send Customer Voice survey from Dynamics 365 app
- CVE-2023-36437Azure DevOps Server Remote Code Execution VulnerabilityMicrosoft Azure Pipelines Agent
- CVE-2023-47550WordPress Donations Made Easy – Smart Donations Plugin <= 4.0.12 is vulnerable to Cross Site Scripting (XSS)RedNao Donations Made Easy – Smart Donations
- CVE-2023-26222TIBCO EBX Cross-site Scripting (XXS) VulnerabilityTIBCO Software TIBCO EBX · TIBCO Software TIBCO Product and…
- CVE-2023-28741Buffer overflow in some Intel(R) QAT drivers for Windows - HW Version 1.0 before version 1.10 may allow an authenticated user to potentiallyIntel(R) QAT drivers for Windows - HW
- CVE-2022-29510Improper buffer restrictions in some Intel(R) Server Board M10JNP2SB BIOS firmware before version 7.219 may allow a privileged user to potenIntel(R) Server Board M10JNP2SB BIOS firmware
- CVE-2022-24379Improper input validation in some Intel(R) Server System M70KLP Family BIOS firmware before version 01.04.0029 may allow a privileged user tIntel(R) Server System M70KLP Family BIOS firmware
- CVE-2022-29262Improper buffer restrictions in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of priIntel(R) Server Board BIOS firmware
- CVE-2022-33945Improper input validation in some Intel(R) Server board and Intel(R) Server System BIOS firmware may allow a privileged user to potentially Intel(R) Server board and Intel(R) Server System BIOS firmw…
- CVE-2023-34431Improper input validation in some Intel(R) Server Board BIOS firmware may allow a privileged user to potentially enable escalation of privilIntel(R) Server Board BIOS firmware
- CVE-2023-24592Path traversal in the some Intel(R) oneAPI Toolkits and Component software before version 2023.1 may allow authenticated user to potentiallyIntel(R) oneAPI Toolkits and Component software
- CVE-2023-29157Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatioIntel(R) OFU software
- CVE-2023-32204Improper access control in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatioIntel(R) OFU software
- CVE-2023-32641Improper input validation in firmware for Intel(R) QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of sIntel(R) QAT
- CVE-2022-36374Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmi Windows 5.27.03.0003 may allow a privilIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-28397Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated to potentially enable escalationIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2022-36396Improper access control in some Intel(R) Aptio* V UEFI Firmware Integrator Tools before version iDmiEdit-Linux-5.27.06.0017 may allow a privIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-28737Improper initialization in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable escalIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-32279Improper access control in user mode driver for some Intel(R) Connectivity Performance Suite before version 2.1123.214.2 may allow unauthentIntel(R) Connectivity Performance Suite
- CVE-2023-22292Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via local acIntel Unison software
- CVE-2023-22285Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via networkIntel Unison software
- CVE-2023-22337Improper input validation for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via netwoIntel Unison software
- CVE-2023-36860Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via nIntel Unison software
- CVE-2022-41689Improper access control in some Intel In-Band Manageability software before version 3.0.14 may allow an authenticated user to potentially enIntel In-Band Manageability software
- CVE-2023-23583Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially Intel(R) Processors
- CVE-2023-20563Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Gr… +9
- CVE-2022-23820Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code executAMD Ryzen™ 3000 series Desktop Processors “Matisse" · A… +17
- CVE-2023-32701Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)BlackBerry QNX Software Development Platform
- CVE-2022-40681A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attackeFortinet FortiClientWindows
- CVE-2023-26205An improper access control vulnerability [CWE-284] in FortiADC automation feature 7.1.0 through 7.1.2, 7.0 all versions, 6.2 all versions, 6Fortinet FortiADC
- CVE-2023-41840A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a maliciousFortinet FortiClientWindows
- CVE-2023-42783A relative path traversal in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 and 8.4.2 through 8.4.0 and 8.3.2 throughFortinet FortiWLM
- CVE-2023-36018Visual Studio Code Jupyter Extension Spoofing VulnerabilityMicrosoft Jupyter Extension for Visual Studio Code
- CVE-2023-36025Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36021Microsoft On-Prem Data Gateway Security Feature Bypass VulnerabilityMicrosoft On-Prem Data Gateway
- CVE-2023-36033Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36031Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-36035Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-36037Microsoft Excel Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-36045Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-36041Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-36039Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-36050Microsoft Exchange Server Spoofing VulnerabilityMicrosoft Exchange Server 2019 Cumulative Update · Microsof…
- CVE-2023-36047Windows Authentication Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36046Windows Authentication Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-36392DHCP Server Service Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-36393Windows User Interface Application Core Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36394Windows Search Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36395Windows Deployment Services Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-36396Windows Compressed Folder Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36399Windows Storage Elevation of Privilege VulnerabilityMicrosoft Windows Server 2022, 23H2 Edition · Microsoft… +1
- CVE-2023-36400Windows HMAC Key Derivation Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36401Microsoft Remote Registry Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36402Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36403Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36405Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36407Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-36408Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36439Microsoft Exchange Server Remote Code Execution VulnerabilityMicrosoft Exchange Server 2016 Cumulative Update · Microsof…
- CVE-2023-36017Windows Scripting Engine Memory Corruption VulnerabilityMicrosoft Windows
- CVE-2023-36036Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36052Azure CLI REST Command Information Disclosure VulnerabilityMicrosoft Azure App Service · Microsoft Azure Function A… +1
- CVE-2023-36410Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-36422Microsoft Windows Defender Elevation of Privilege VulnerabilityMicrosoft Windows Defender Antimalware Platform
- CVE-2023-36423Microsoft Remote Registry Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36424Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36425Windows Distributed File System (DFS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-36427Windows Hyper-V Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36560ASP.NET Security Feature Bypass VulnerabilityMicrosoft .NET Framework 3.5 AND · Microsoft .NET Framework
- CVE-2023-36705Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36719Microsoft Speech Application Programming Interface (SAPI) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-38151Microsoft Host Integration Server 2020 Remote Code Execution VulnerabilityMicrosoft Host Integration Server
- CVE-2023-6131Code Injection in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-6130Path Traversal: '\..\filename' in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-6111Use-after-free in Linux kernel's netfilter: nf_tables componentLinux Kernel
- CVE-2023-46590A vulnerability has been identified in Siemens OPC UA Modelling Editor (SiOME) (All versions < V2.8).Siemens OPC UA Modelling Editor
- CVE-2023-46098A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).Siemens SIMATIC PCS neo
- CVE-2023-44317A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NASiemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2023-24585An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.Silicon Labs Gecko Platform · Weston Embedded Cesium NET +1
- CVE-2023-6006Privilege Escalation VulnerabilityPaperCut NG, PaperCut MF
- CVE-2023-47629Privilege escalation through email sign-up in datahubdatahub-project datahub
- CVE-2022-45781Buffer Overflow vulnerability in Tenda AX1803 v1.0.0.1_2994 and earlier allows attackers to run arbitrary code via /goform/SetOnlineDevName.
- CVE-2023-43902Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accounts
- CVE-2023-45558An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
Medium, low and unrated 202
- CVE-2023-46121Generic Extractor MITM Vulnerability in yt-dlpyt-dlp
- CVE-2023-39337A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifier tIvanti EPMM
- CVE-2023-39335A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to impIvanti EPMM
- CVE-2023-38544A logged in user can modify specific files that may lead to unauthorized changes in system-wide configuration settings.Ivanti Secure Access Linux
- CVE-2023-43582Improper authorization in some Zoom clients may allow an authorized user to conduct an escalation of privilege via network access.Zoom Video Communications Zoom Clients
- CVE-2023-43588Insufficient control flow management in some Zoom clients may allow an authenticated user to conduct an information disclosure via network aZoom Video Communications Zoom Clients
- CVE-2023-39199Cryptographic issues with In-Meeting Chat for some Zoom clients may allow a privileged user to conduct an information disclosure via networkZoom Video Communications Zoom Clients
- CVE-2023-39206Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.Zoom Video Communications Zoom Clients
- CVE-2023-45627An authenticated Denial-of-Service (DoS) vulnerability exists in the CLI service.Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-45626An authenticated vulnerability has been identified allowing an attacker to effectively establish highly privileged persistent arbitrary codeHewlett Packard Enterprise (HPE) Aruba Access Points: 100 S…
- CVE-2023-5189Hub: insecure galaxy-importer tarfile extractionRed Hat Ansible Automation Platform 2.4 for RHEL · Red H… +2
- CVE-2023-39205Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network acceZoom Video Communications Zoom Clients
- CVE-2023-39204Buffer overflow in some Zoom clients may allow an unauthenticated user to conduct a denial of service via network access.Zoom Video Communications Zoom Clients
- CVE-2023-39203Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated useZoom Video Communications Zoom Rooms Client for Windows and…
- CVE-2023-39202Untrusted search path in Zoom Rooms Client for Windows and Zoom VDI Client may allow a privileged user to conduct a denial of service via loZoom Video Communications Zoom Rooms Client for Windows and…
- CVE-2023-36558ASP.NET Core Security Feature Bypass VulnerabilityMicrosoft .NET · Microsoft ASP.NET Core +2
- CVE-2023-47524WordPress CodeBard's Patron Button and Widgets for Patreon Plugin <= 2.1.9 is vulnerable to Cross Site Scripting (XSS)CodeBard's Patron Button and Widgets for Patreon
- CVE-2023-47528WordPress WP Edit Username Plugin <= 1.0.5 is vulnerable to Cross Site Scripting (XSS)Sajjad Hossain Sagor WP Edit Username
- CVE-2023-47532WordPress WP Crowdfunding Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)Themeum WP Crowdfunding
- CVE-2023-47533WordPress Countdown and CountUp, WooCommerce Sales Timer Plugin <= 1.8.2 is vulnerable to Cross Site Scripting (XSS)wpdevart Countdown and CountUp, WooCommerce Sales Timer
- CVE-2023-47545WordPress Forms for Mailchimp by Optin Cat Plugin <= 2.5.4 is vulnerable to Cross Site Scripting (XSS)Fatcat Apps Forms for Mailchimp by Optin Cat – Grow Your Ma…
- CVE-2023-47640Insecure Use of HMAC-SHA1 For Session Signing in datahubdatahub-project datahub
- CVE-2023-47546WordPress OneClick Chat to Order Plugin <= 1.0.4.2 is vulnerable to Cross Site Scripting (XSS)Walter Pinem OneClick Chat to Order
- CVE-2023-47627Request smuggling in aiohttpaio-libs aiohttp · aiohttp
- CVE-2023-47641Inconsistent interpretation of `Content-Length` vs. `Transfer-Encoding` in aiohttpaio-libs aiohttp · aiohttp
- CVE-2023-47549WordPress EazyDocs Plugin <= 2.3.3 is vulnerable to Cross Site Scripting (XSS)spider-themes EazyDocs – Most Powerful Knowledge base, wiki…
- CVE-2023-34060VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 10.5VMware Cloud Director Appliance
- CVE-2023-47125By-passing Cross-Site Scripting Protection in HTML SanitizerTYPO3 html-sanitizer · typo3/html-sanitizer
- CVE-2023-47126Information Disclosure in Install Tool in typo3/cms-installtypo3 · typo3/cms-install
- CVE-2023-47554WordPress Actueel Financieel Nieuws – Denk Internet Solutions Plugin <= 5.1.0 is vulnerable to Cross Site Scripting (XSS)DenK BV Actueel Financieel Nieuws – Denk Internet Solutions
- CVE-2023-47646WordPress Recently viewed and most viewed products Plugin <= 1.1.1 is vulnerable to Cross Site Scripting (XSS)CedCommerce Recently viewed and most viewed products
- CVE-2023-47127Weak Authentication in Session Handling in typo3/cms-coretypo3 · typo3/cms-core
- CVE-2023-22313Improper buffer restrictions in some Intel(R) QAT Library software before version 22.07.1 may allow a privileged user to potentially enable Intel(R) QAT Library software
- CVE-2023-28740Uncontrolled search path element in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated uIntel(R) QAT drivers for Windows - HW
- CVE-2023-28378Improper authorization in some Intel(R) QAT drivers for Windows - HW Version 2.0 before version 2.0.4 may allow an authenticated user to potIntel(R) QAT drivers for Windows - HW
- CVE-2023-28388Uncontrolled search path element in some Intel(R) Chipset Device Software before version 10.1.19444.8378 may allow an authenticated user to Intel(R) Chipset Device Software
- CVE-2023-29504Uncontrolled search path element in some Intel(R) RealSense(TM) Dynamic Calibration software before version 2.13.1.0 may allow an authenticaIntel(R) RealSense(TM) Dynamic Calibration software
- CVE-2023-27513Uncontrolled search path element in some Intel(R) Server Information Retrieval Utility software before version 16.0.9 may allow an authenticIntel(R) Server Information Retrieval Utility software
- CVE-2023-22329Improper input validation in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable denial of Intel(R) Processors
- CVE-2023-25756Out-of-bounds read in the BIOS firmware for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of priIntel(R) Processors
- CVE-2023-40540Non-Transparent Sharing of Microarchitectural Resources in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enableIntel(R) NUC BIOS firmware
- CVE-2023-40220Improper buffer restrictions in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable information disclosure viaIntel(R) NUC BIOS firmware
- CVE-2023-27383Protection mechanism failure in some Intel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library software before version 2021.9 may allow a pIntel(R) oneAPI HPC Toolkit 2023.1 and Intel(R)MPI Library…
- CVE-2022-38786Improper access control in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentiaIntel Battery Life Diagnostic Tool software
- CVE-2023-32662Improper authorization in some Intel Battery Life Diagnostic Tool installation software before version 2.2.1 may allow a privilaged user to Intel Battery Life Diagnostic Tool installation software
- CVE-2023-34430Uncontrolled search path in some Intel Battery Life Diagnostic Tool software before version 2.2.1 may allow an authenticated user to potentiIntel Battery Life Diagnostic Tool software
- CVE-2023-38411Improper access control in the Intel Smart Campus android application before version 9.4 may allow an authenticated user to potentially enabIntel Smart Campus android application
- CVE-2023-29161Uncontrolled search path in some Intel(R) OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalatiIntel(R) OFU software
- CVE-2023-31203Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow OpenVINO Model Server software
- CVE-2023-25080Protection mechanism failure in some Intel(R) Distribution of OpenVINO toolkit software before version 2023.0.0 may allow an authenticated uIntel(R) Distribution of OpenVINO toolkit software
- CVE-2023-33872Improper access control in the Intel Support android application all verions may allow an authenticated user to potentially enable informatiIntel Support android application
- CVE-2023-24588Exposure of sensitive information to an unauthorized actor in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticateIntel(R) Optane(TM) SSD products
- CVE-2023-27306Improper Initialization in firmware for some Intel(R) Optane(TM) SSD products may allow an authenticated user to potentially enable denial oIntel(R) Optane(TM) SSD products
- CVE-2023-27879Improper access control in firmware for some Intel(R) Optane(TM) SSD products may allow an unauthenticated user to potentially enable informIntel(R) Optane(TM) SSD products
- CVE-2023-27519Improper input validation in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enable escalationIntel(R) Optane(TM) SSD products
- CVE-2023-24587Insufficient control flow management in firmware for some Intel(R) Optane(TM) SSD products may allow a privileged user to potentially enableIntel(R) Optane(TM) SSD products
- CVE-2023-28376Out-of-bounds read in the firmware for some Intel(R) E810 Ethernet Controllers and Adapters before version 1.7.1 may allow an unauthenticateIntel(R) E810 Ethernet Controllers and Adapters
- CVE-2023-22327Out-of-bounds write in firmware for some Intel(R) FPGA products before version 2.8.1 may allow a privileged user to potentially enable inforIntel(R) FPGA products
- CVE-2023-28723Exposure of sensitive information to an unauthorized actor in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticatIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-25949Uncontrolled resource consumption in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-22305Integer overflow in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of seIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-26589Use after free in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allowed an authenticated user to potentially enable denial of seIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-22310Race condition in some Intel(R) Aptio* V UEFI Firmware Integrator Tools may allow an authenticated user to potentially enable denial of servIntel(R) Aptio* V UEFI Firmware Integrator Tools
- CVE-2023-32655Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller installatio software beforeIntel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type…
- CVE-2023-32278Path transversal in some Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniwill Service Driver iIntel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 La…
- CVE-2023-28377Improper authentication in some Intel(R) NUC Kit NUC11PH USB firmware installation software before version 1.1 for Windows may allow an authIntel(R) NUC Kit NUC11PH USB firmware installation software
- CVE-2023-33878Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows may allow an authentIntel(R) NUC P14E Laptop Element Audio Install Package soft…
- CVE-2023-32660Uncontrolled search path in some Intel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Update Tool installation software before version 46 mIntel(R) NUC Kit NUC6i7KYK Thunderbolt(TM) 3 Firmware Updat…
- CVE-2023-33874Uncontrolled search path in some Intel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID Event Filter Driver installation software beforeIntel(R) NUC 12 Pro Kits & Mini PCs - NUC12WS Intel(R) HID…
- CVE-2023-32658Unquoted search path in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may aIntel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmwar…
- CVE-2022-41700Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticatIntel(R) NUC Pro Software Suite installation software
- CVE-2022-27229Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before version 1.79.1.1 may allowIntel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmwar…
- CVE-2022-33898Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated Intel(R) NUC Watchdog Timer installation software
- CVE-2023-32661Improper authentication in some Intel(R) NUC Kits NUC7PJYH and NUC7CJYH Realtek* SD Card Reader Driver installation software before version Intel(R) NUC Kits NUC7PJYH and NUC7CJYH Realtek* SD Card Re…
- CVE-2023-32283Insertion of sensitive information into log file in some Intel(R) On Demand software before versions 1.16.2, 2.1.1, 3.1.0 may allow an autheIntel(R) On Demand software
- CVE-2023-34997Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authIntel Server Configuration Utility software
- CVE-2023-25075Unquoted search path in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authenticated Intel Server Configuration Utility software
- CVE-2022-46298Incomplete cleanup for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.Intel Unison software
- CVE-2022-41659Improper access control for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.Intel Unison software
- CVE-2022-46301Improper Initialization for some Intel Unison software may allow a privileged user to potentially enable denial of service via local access.Intel Unison software
- CVE-2022-46646Exposure of sensitive information to an unauthorized actor for some Intel Unison software may allow an authenticated user to potentially enaIntel Unison software
- CVE-2022-45469Improper input validation for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via lIntel Unison software
- CVE-2022-46647Insertion of sensitive information into log file for some Intel Unison software may allow an authenticated user to potentially enable informIntel Unison software
- CVE-2022-46299Insufficient control flow management for some Intel Unison software may allow an authenticated user to potentially enable information discloIntel Unison software
- CVE-2022-43477Incomplete cleanup for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via local accIntel Unison software
- CVE-2022-43666Exposure of sensitive system information due to uncleared debug information for some Intel Unison software may allow an authenticated user tIntel Unison software
- CVE-2022-45109Improper initialization for some Intel Unison software may allow an authenticated user to potentially enable information disclosure via locaIntel Unison software
- CVE-2023-39411Improper input validationation for some Intel Unison software may allow a privileged user to potentially enable denial of service via local Intel Unison software
- CVE-2023-39228Improper access control for some Intel Unison software may allow an unauthenticated user to potentially enable denial of service via networkIntel Unison software
- CVE-2023-38570Access of memory location after end of buffer for some Intel Unison software may allow an authenticated user to potentially enable escalatioIntel Unison software
- CVE-2023-39412Cross-site request forgery in some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via nIntel Unison software
- CVE-2023-39221Improper access control for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via netIntel Unison software
- CVE-2023-22663Improper authentication for some Intel Unison software may allow an authenticated user to potentially enable escalation of privilege via netIntel Unison software
- CVE-2023-22448Improper access control for some Intel Unison software may allow a privileged user to potentially enable escalation of privilege via networkIntel Unison software
- CVE-2023-38131Improper input validationation for some Intel Unison software may allow an authenticated user to potentially enable denial of service via neIntel Unison software
- CVE-2023-22290Uncaught exception for some Intel Unison software may allow an authenticated user to potentially enable denial of service via network accessIntel Unison software
- CVE-2023-28404Out-of-bounds read in the Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow an authentiIntel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows dri…
- CVE-2023-28401Out-of-bounds write in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows drivers before version 31.0.101.4255 may allow authenticIntel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows dri…
- CVE-2023-25071NULL pointer dereference in some Intel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drviers before version 31.0.101.4255 may allow authIntel(R) Arc(TM) & Iris(R) Xe Graphics - WHQL - Windows Drv…
- CVE-2022-42879NULL pointer dereference in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentiallyIntel(R) Arc(TM) Control software
- CVE-2023-25952Out-of-bounds write in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentially enabIntel(R) Arc(TM) Control software
- CVE-2023-27305Incorrect default permissions in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to potentIntel(R) Arc(TM) Control software
- CVE-2023-29165Unquoted search path or element in some Intel(R) Arc(TM) Control software before version 1.73.5335.2 may allow an authenticated user to poteIntel(R) Arc(TM) Control software
- CVE-2023-34350Uncontrolled search path element in some Intel(R) XTU software before version 7.12.0.15 may allow an authenticated user to potentially enablIntel(R) XTU software
- CVE-2023-34314Insecure inherited permissions in some Intel(R) Simics Simulator software before version 1.7.2 may allow an authenticated user to potentiallIntel(R) Simics Simulator software
- CVE-2023-32638Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially eIntel Arc RGB Controller software
- CVE-2023-39230Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user Intel Rapid Storage Technology software
- CVE-2023-20596Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leadinAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Gr… +5
- CVE-2023-20571A race condition in System Management Mode (SMM) code may allow an attacker using a compromised user space to leverage CVE-2018-8897 potentiAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Gr… +6
- CVE-2023-20565Insufficient protections in System Management Mode (SMM) code may allow an attacker to potentially enable escalation of privilege via local AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Gr… +6
- CVE-2022-23821Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code execAMD Ryzen™ 3000 Series Desktop Processors “Matisse” · A… +19
- CVE-2021-46758Insufficient validation of SPI flash addresses in the ASP (AMD Secure Processor) bootloader may allow an attacker to read data in memory mapAMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Gr… +7
- CVE-2023-20592Improper or unexpected behavior of the INVD instruction in some AMD CPUs may allow an attacker with a malicious hypervisor to affect cache l1st Gen AMD EPYC™ Processors · 2nd Gen AMD EPYC™ Process… +1
- CVE-2023-20566Improper address validation in ASP with SNP enabled may potentially allow an attacker to compromise guest memory integrity.3rd Gen AMD EPYC™ Processors · 4th Gen AMD EPYC™ Process… +1
- CVE-2023-20519A Use-After-Free vulnerability in the management of an SNP guest context page may allow a malicious hypervisor to masquerade as the guest's 3rd Gen AMD EPYC™ Processors · 4th Gen AMD EPYC™ Processors
- CVE-2022-23830SMM configuration may not be immutable, as intended, when SNP is enabled resulting in a potential limited loss of guest memory integrity.3rd Gen AMD EPYC™ Processors · 4th Gen AMD EPY™ Processo… +1
- CVE-2021-26345Failure to validate the value in APCB may allow a privileged attacker to tamper with the APCB token to force an out-of-bounds memory read po2nd Gen AMD EPYC™ Processors · 3rd Gen AMD EPYC™ Process… +2
- CVE-2023-47653WordPress TWB Woocommerce Reviews Plugin <= 1.7.5 is vulnerable to Cross Site Scripting (XSS)Abu Bakar TWB Woocommerce Reviews
- CVE-2023-20533Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, poAMD Ryzen™ 3000 series Desktop Processors “Matisse" · AM… +8
- CVE-2023-20526Insufficient input validation in the ASP Bootloader may enable a privileged attacker with physical access to expose the contents of ASP memoAMD Ryzen™ Threadripper™ 2000 Series Processors “Colfax”… +3
- CVE-2023-20521TOCTOU in the ASP Bootloader may allow an attacker with physical access to tamper with SPI ROM records after memory content verification, poAMD Athlon™ 3000 Series Desktop Processors with Radeon™… +10
- CVE-2021-46774Insufficient DRAM address validation in System Management Unit (SMU) may allow an attacker to read/write from/to an invalid DRAM address, poAMD Ryzen™ 3000 series Desktop Processors “Matisse" · AM… +9
- CVE-2021-46766Improper clearing of sensitive data in the ASP Bootloader may expose secret keys to a privileged attacker accessing ASP SRAM, potentially leAMD Ryzen™ Threadripper™ PRO 3000WX Series Processors “… +1
- CVE-2023-31320Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in AMD Radeon™ RX 5000/6000/7000 Series Graphics Cards · AM… +2
- CVE-2023-20568Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch RadeAMD Radeon™ RX 5000/6000/7000 Series Graphics Cards · AM… +2
- CVE-2023-20567Improper signature verification of RadeonTM RX Vega M Graphics driver for Windows may allow an attacker with admin privileges to launch AMDSAMD Radeon™ RX 5000/6000/7000 Series Graphics Cards · AM… +2
- CVE-2021-46748Insufficient bounds checking in the ASP (AMD Secure Processor) may allow an attacker to access memory outside the bounds of what is permissiAMD Radeon™ RX 5000/6000/7000 Series Graphics Cards · AM… +2
- CVE-2023-47654WordPress BZScore – Live Score Plugin <= 1.03 is vulnerable to Cross Site Scripting (XSS)livescore.bz BZScore – Live Score
- CVE-2023-47656WordPress ANAC XML Bandi di Gara Plugin <= 7.5 is vulnerable to Cross Site Scripting (XSS)Marco Milesi ANAC XML Bandi di Gara
- CVE-2023-47658WordPress Extra Product Options for WooCommerce Plugin <= 3.0.3 is vulnerable to Cross Site Scripting (XSS)actpro Extra Product Options for WooCommerce
- CVE-2023-25603A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6.4.Fortinet FortiDDoS-F · Fortinet FortiADC
- CVE-2023-40719A use of hard-coded credentials vulnerability in Fortinet FortiAnalyzer and FortiManager 7.0.0 - 7.0.8, 7.2.0 - 7.2.3 and 7.4.0 allows an atFortinet FortiAnalyzer · Fortinet FortiManager
- CVE-2023-29177Multiple buffer copy without checking size of input ('classic buffer overflow') vulnerabilities [CWE-120] in FortiADC version 7.2.0 and befoFortinet FortiDDoS-F · Fortinet FortiADC
- CVE-2023-36633An improper authorization vulnerability [CWE-285] in FortiMail webmail version 7.2.0 through 7.2.2 and before 7.0.5 allows an authenticated Fortinet FortiMail
- CVE-2023-33304A use of hard-coded credentials vulnerability in Fortinet FortiClient Windows 7.0.0 - 7.0.9 and 7.2.0 - 7.2.1 allows an attacker to bypass sFortinet FortiClientWindows
- CVE-2023-44248An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all mFortinet FortiEDR CollectorWindows
- CVE-2023-45585An insertion of sensitive information into log file vulnerability [CWE-532] in FortiSIEM version 7.0.0, version 6.7.6 and below, version 6.Fortinet FortiSIEM
- CVE-2023-41676An exposure of sensitive information to an unauthorized actor [CWE-200] in FortiSIEM version 7.0.0 and before 6.7.5 may allow an attacker wFortinet FortiSIEM
- CVE-2023-45582An improper restriction of excessive authentication attempts vulnerability [CWE-307] in FortiMail webmail version 7.2.0 through 7.2.4, 7.0.0Fortinet FortiMail
- CVE-2023-28002An improper validation of integrity check value vulnerability [CWE-354] in FortiOS 7.2.0 through 7.2.3, 7.0.0 through 7.0.12, 6.4 all versioFortinet FortiOS · Fortinet FortiProxy
- CVE-2023-36641A numeric truncation error vulnerability in Fortinet FortiOS 7.4.0, FortiOS 7.2.0 through 7.2.5, FortiOS 7.0.0 through 7.0.12, FortiOS 6.4 aFortinet FortiOS · Fortinet FortiProxy
- CVE-2023-36016Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-36030Microsoft Dynamics 365 Sales Spoofing VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-36042Visual Studio Denial of Service VulnerabilityMicrosoft Visual Studio · Microsoft .NET Framework 3.5 AND
- CVE-2023-36398Windows NTFS Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36404Windows Kernel Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36406Windows Hyper-V Information Disclosure VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-38177Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-36043Open Management Infrastructure Information Disclosure VulnerabilityMicrosoft System Center Operations Manager (SCOM)
- CVE-2023-36413Microsoft Office Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-36428Microsoft Local Security Authority Subsystem Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-47659WordPress Lava Directory Manager Plugin <= 1.1.34 is vulnerable to Cross Site Scripting (XSS)Lavacode Lava Directory Manager
- CVE-2023-47660WordPress Product Visibility by Country for WooCommerce Plugin <= 1.4.9 is vulnerable to Cross Site Scripting (XSS)WP Wham Product Visibility by Country for WooCommerce
- CVE-2023-6128Cross-site Scripting (XSS) - Reflected in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-6127Unrestricted Upload of File with Dangerous Type in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-6126Code Injection in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-6125Code Injection in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-6124Server-Side Request Forgery (SSRF) in salesagility/suitecrmsalesagility/suitecrm
- CVE-2023-46099A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).Siemens SIMATIC PCS neo
- CVE-2023-46097A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).Siemens SIMATIC PCS neo
- CVE-2023-46096A vulnerability has been identified in SIMATIC PCS neo (All versions < V4.1).Siemens SIMATIC PCS neo
- CVE-2023-45794A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications using Mendix 7 (AllSiemens Mendix Applications using Mendix
- CVE-2023-44374A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2023-44322A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2023-44321Affected devices do not properly validate the length of inputs when performing certain configuration changes in the web interface allowing aSiemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +50
- CVE-2023-44320A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NASiemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2023-44319A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +18
- CVE-2023-44318Affected devices use a hardcoded key to obfuscate the configuration backup that an administrator can export from the device.Siemens RUGGEDCOM RM1224 LTE(4G) EU · Siemens RUGGEDCOM… +50
- CVE-2023-43503A vulnerability has been identified in COMOS (All versions < V10.4.4).Siemens COMOS
- CVE-2023-6109YOP Poll <= 6.5.26 - Race Condition to Vote Manipulationyourownprogrammer YOP Poll
- CVE-2023-47609SQL injection vulnerability in OSS Calendar versions prior to v.2.0.3 allows a remote authenticated attacker to execute arbitrary code or obThinkingreed OSS Calendar
- CVE-2023-42480Information Disclosure in NetWeaver AS Java LogonSAP_SE NetWeaver AS Java
- CVE-2023-41366Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and ABAP PlatformSAP_SE SAP NetWeaver Application Server ABAP and ABAP Platf…
- CVE-2023-47628Session Expiration Misconfiguration in datahubdatahub-project datahub
- CVE-2023-31754Optimizely CMS UI before v12.16.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Admin panel.
- CVE-2023-41570MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API.
- CVE-2023-42325Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the sta
- CVE-2023-42326An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php
- CVE-2023-42327Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the get
- CVE-2023-43900Insecure Direct Object References (IDOR) in eMudhra emSigner v2.8.7 allow authenticated attackers to gain unauthorized access to application
- CVE-2023-43901Incorrect access control in the AdHoc User creation form of eMudhra emSigner v2.8.7 allows unauthenticated attackers to arbitrarily modify u
- CVE-2023-45560An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token.
- CVE-2023-45684Northern.tech CFEngine Enterprise before 3.21.3 allows SQL Injection.
- CVE-2023-45878GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authenticati
- CVE-2023-45879GibbonEdu Gibbon version 25.0.0 allows HTML Injection via an IFRAME element to the Messager component.
- CVE-2023-45880GibbonEdu Gibbon through version 25.0.0 allows Directory Traversal via the report template builder.
- CVE-2023-45881GibbonEdu Gibbon through version 25.0.0 allows /modules/Planner/resources_addQuick_ajaxProcess.php file upload with resultant XSS.
- CVE-2023-46022SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' param
- CVE-2023-46023SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 's
- CVE-2023-46024SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQ
- CVE-2023-46025SQL Injection vulnerability in teacher-info.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to obtain se
- CVE-2023-46026Cross Site Scripting (XSS) vulnerability in profile.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to r
- CVE-2023-46445An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message (RFC 8308) via a man-in-the-middle attack, aka a "asyncssh
- CVE-2023-46446An issue in AsyncSSH before 2.14.1 allows attackers to control the remote end of an SSH client session via packet injection/removal and shelasyncssh
- CVE-2023-46580Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of
- CVE-2023-46581SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary code via the name, uname and email pa
- CVE-2023-46582SQL injection vulnerability in Inventory Management v.1.0 allows a local attacker to execute arbitrary SQL commands via the id paramter in t
- CVE-2023-47262The startup process and device configurations of the Abbott ID NOW device, before v7.1, can be interrupted and/or modified via physical acce
- CVE-2023-47384MP4Box GPAC v2.3-DEV-rev617-g671976fcc-master was discovered to contain a memory leak in the function gf_isom_add_chapter at /isomedia/isom_
- CVE-2023-48020Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/changeStatus.
- CVE-2023-48021Dreamer CMS v4.1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/task/update.
- CVE-2023-48094A cross-site scripting (XSS) vulnerability in CesiumJS v1.111 allows attackers to execute arbitrary code in the context of the victim's brow