Lista CVE - 2023 / Luglio
Visualizzazione 1801 - 1900 di 2295 CVE per Luglio 2023 (Pagina 19 di 23)
| ID CVE | Data | Titolo |
|---|---|---|
| CVE-2023-28530 | 2023-07-22 | IBM Cognos Analytics cross-site scripting |
| CVE-2023-3247 | 2023-07-22 | Missing error check and insufficient random bytes in HTTP Digest authentication for SOAP |
| CVE-2023-3826 | 2023-07-22 | IBOS OA Interview edit&op=status sql injection |
| CVE-2023-3827 | 2023-07-22 | Bug Finder Listplace Directory Listing Platform HTTP POST Request create cross site scripting |
| CVE-2023-3828 | 2023-07-22 | Bug Finder Listplace Directory Listing Platform Photo coverPhotoUpdate cross site scripting |
| CVE-2023-3829 | 2023-07-22 | Bug Finder ICOGenie Support Ticket create cross site scripting |
| CVE-2023-3830 | 2023-07-22 | Bug Finder SASS BILLER store cross site scripting |
| CVE-2023-3831 | 2023-07-22 | Bug Finder Finounce Ticket create cross site scripting |
| CVE-2023-3832 | 2023-07-22 | Bug Finder Wedding Wonders Ticket create cross site scripting |
| CVE-2023-3833 | 2023-07-22 | Bug Finder Montage Ticket create cross site scripting |
| CVE-2023-3834 | 2023-07-22 | Bug Finder EX-RATE Ticket create cross site scripting |
| CVE-2023-3835 | 2023-07-22 | Bug Finder MineStack Ticket create cross site scripting |
| CVE-2023-3836 | 2023-07-22 | Dahua Smart Park Management unrestricted upload |
| CVE-2023-3837 | 2023-07-22 | DedeBIZ sys_sql_query.php cross site scripting |
| CVE-2023-2430 | 2023-07-23 | A vulnerability was found due to missing lock for IOPOLL... |
| CVE-2023-3838 | 2023-07-23 | DedeBIZ vote_edit.php cross site scripting |
| CVE-2023-3839 | 2023-07-23 | DedeBIZ sys_sql_query.php sql injection |
| CVE-2023-3840 | 2023-07-23 | NxFilter cross site scripting |
| CVE-2023-3841 | 2023-07-23 | NxFilter user.jsp cross-site request forgery |
| CVE-2023-3842 | 2023-07-23 | Pointware EasyInventory Easy2W.exe unquoted search path |
| CVE-2023-3843 | 2023-07-23 | mooSocial mooDating URL question cross site scripting |
| CVE-2023-3844 | 2023-07-23 | mooSocial mooDating URL friends cross site scripting |
| CVE-2023-3845 | 2023-07-23 | mooSocial mooDating URL ajax_invite cross site scripting |
| CVE-2023-3846 | 2023-07-23 | mooSocial mooDating URL pages cross site scripting |
| CVE-2023-3847 | 2023-07-23 | mooSocial mooDating URL users cross site scripting |
| CVE-2023-3848 | 2023-07-23 | mooSocial mooDating URL view cross site scripting |
| CVE-2023-3849 | 2023-07-23 | mooSocial mooDating URL find-a-match cross site scripting |
| CVE-2023-28133 | 2023-07-23 | Local privilege escalation in Check Point Endpoint Security Client (version... |
| CVE-2023-3850 | 2023-07-23 | SourceCodester Lost and Found Information System HTTP POST Request sql injection |
| CVE-2023-3852 | 2023-07-23 | OpenRapid RapidCMS upload.php unrestricted upload |
| CVE-2023-3853 | 2023-07-23 | phpscriptpoint BloodBank page.php cross site scripting |
| CVE-2023-3854 | 2023-07-23 | phpscriptpoint BloodBank POST Parameter search sql injection |
| CVE-2023-3855 | 2023-07-23 | phpscriptpoint JobSeeker search-result.php cross site scripting |
| CVE-2021-39421 | 2023-07-24 | A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers... |
| CVE-2022-28863 | 2023-07-24 | An issue was discovered in Nokia NetAct 22. A remote... |
| CVE-2022-28864 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the... |
| CVE-2022-28865 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the... |
| CVE-2022-28867 | 2023-07-24 | An issue was discovered in Nokia NetAct 22 through the... |
| CVE-2022-30280 | 2023-07-24 | /SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker... |
| CVE-2023-26077 | 2023-07-24 | Atera Agent through 1.8.3.6 on Windows Creates a Temporary File... |
| CVE-2023-37613 | 2023-07-24 | A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4... |
| CVE-2023-26078 | 2023-07-24 | Privilege escalation vulnerability was discovered in Atera Agent 1.8.4.4 and... |
| CVE-2023-3856 | 2023-07-24 | phpscriptpoint Ecommerce blog-single.php cross site scripting |
| CVE-2023-3857 | 2023-07-24 | phpscriptpoint Ecommerce product.php cross site scripting |
| CVE-2023-3858 | 2023-07-24 | phpscriptpoint Car Listing search.php cross site scripting |
| CVE-2023-3859 | 2023-07-24 | phpscriptpoint Car Listing GET Parameter search.php sql injection |
| CVE-2023-3860 | 2023-07-24 | phpscriptpoint Insurance page.php cross site scripting |
| CVE-2023-3861 | 2023-07-24 | phpscriptpoint Insurance search.php cross site scripting |
| CVE-2023-3862 | 2023-07-24 | Travelmate Travelable Trek Management Solution Comment Box cross site scripting |
| CVE-2023-38056 | 2023-07-24 | Code execution via System Configuration |
| CVE-2023-38057 | 2023-07-24 | XSS stored in survey answers |
| CVE-2023-38058 | 2023-07-24 | Tickets can be moved without permissions |
| CVE-2023-38060 | 2023-07-24 | Host header injection by attachments in web service |
| CVE-2023-3417 | 2023-07-24 | Thunderbird allowed the Text Direction Override Unicode Character in filenames.... |
| CVE-2023-2309 | 2023-07-24 | wpForo Forum < 2.1.9 - Reflected Cross-Site Scripting |
| CVE-2023-3344 | 2023-07-24 | Auto Location for WP Job Manager via Google < 1.1 - Admin+ Cross Site Scripting |
| CVE-2023-3248 | 2023-07-24 | All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting |
| CVE-2023-2761 | 2023-07-24 | User Activity Log < 1.6.3 - Admin+ SQL Injection |
| CVE-2023-3863 | 2023-07-24 | Use-after-free in nfc_llcp_find_loca in net/nfc/llcp_core.c |
| CVE-2023-2860 | 2023-07-24 | Out-of-bounds read when setting hmac data |
| CVE-2023-33952 | 2023-07-24 | Kernel: vmwgfx: double free within the handling of vmw_buffer_object objects |
| CVE-2023-38200 | 2023-07-24 | Keylime: registrar is subject to a dos against ssl connections |
| CVE-2023-3567 | 2023-07-24 | Kernel: use after free in vcs_read in drivers/tty/vt/vc_screen.c due to race |
| CVE-2023-3019 | 2023-07-24 | Qemu: e1000e: heap use-after-free in e1000e_write_packet_to_guest() |
| CVE-2023-3748 | 2023-07-24 | Inifinite loop in babld message parsing may cause dos |
| CVE-2023-3384 | 2023-07-24 | Quay: stored cross site scripting |
| CVE-2023-3812 | 2023-07-24 | Kernel: tun: bugs for oversize packet when napi frags enabled in tun_napi_alloc_frags |
| CVE-2023-3750 | 2023-07-24 | Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service |
| CVE-2023-3745 | 2023-07-24 | Imagemagick: heap-buffer-overflow in pushcharpixel() in quantum-private.h |
| CVE-2023-32247 | 2023-07-24 | Session setup memory exhaustion denial-of-service vulnerability |
| CVE-2023-33951 | 2023-07-24 | Kernel: vmwgfx: race condition leading to information disclosure vulnerability |
| CVE-2023-1386 | 2023-07-24 | Qemu: 9pfs: suid/sgid bits not dropped on file write |
| CVE-2023-32258 | 2023-07-24 | Session race condition remote code execution vulnerability |
| CVE-2023-32252 | 2023-07-24 | Session null pointer dereference denial-of-service vulnerability |
| CVE-2023-32257 | 2023-07-24 | Session race condition remote code execution vulnerability |
| CVE-2023-32248 | 2023-07-24 | Tree connection null pointer dereference denial-of-service vulnerability |
| CVE-2023-3640 | 2023-07-24 | Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space |
| CVE-2023-3321 | 2023-07-24 | Code Execution through Writable Mosquitto Configuration File |
| CVE-2023-3322 | 2023-07-24 | Code Execution through overwriting service executable in utilities directory |
| CVE-2023-3323 | 2023-07-24 | Code Execution through overwriting project file on zenon engineering studio system |
| CVE-2023-3324 | 2023-07-24 | Insecure deserialization in zenon internal DLLs |
| CVE-2023-34478 | 2023-07-24 | Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests. |
| CVE-2023-20593 | 2023-07-24 | An issue in “Zen 2” CPUs, under specific microarchitectural circumstances,... |
| CVE-2023-26045 | 2023-07-24 | NodeBB vulnerable to path traversal and code execution via prototype vulnerability |
| CVE-2023-3871 | 2023-07-24 | Campcodes Beauty Salon Management System edit_category.php sql injection |
| CVE-2023-3872 | 2023-07-24 | Campcodes Beauty Salon Management System edit-services.php sql injection |
| CVE-2023-22428 | 2023-07-24 | Improper privilege validation in Command Centre Server allows authenticated operators... |
| CVE-2023-25074 | 2023-07-24 | Competency access levels not enforced in the server |
| CVE-2023-22363 | 2023-07-24 | Access Zone stack overflow |
| CVE-2020-35698 | 2023-07-25 | Thinkific Thinkific Online Course Creation Platform 1.0 is affected by:... |
| CVE-2022-31457 | 2023-07-25 | RTX TRAP v1.0 allows attackers to perform a directory traversal... |
| CVE-2022-31458 | 2023-07-25 | RTX TRAP v1.0 was discovered to be vulnerable to host... |
| CVE-2022-46898 | 2023-07-25 | An issue was discovered in Vocera Report Server and Voice... |
| CVE-2022-46899 | 2023-07-25 | An issue was discovered in Vocera Report Server and Voice... |
| CVE-2022-46900 | 2023-07-25 | An issue was discovered in Vocera Report Server and Voice... |
| CVE-2022-46901 | 2023-07-25 | An issue was discovered in Vocera Report Server and Voice... |
| CVE-2022-46902 | 2023-07-25 | An issue was discovered in Vocera Report Server and Voice... |
| CVE-2023-32231 | 2023-07-25 | An issue was discovered in Vasion PrinterLogic Client for Windows... |
| CVE-2023-32232 | 2023-07-25 | An issue was discovered in Vasion PrinterLogic Client for Windows... |
| CVE-2023-33777 | 2023-07-25 | An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows... |