Lista CVE - 2023 / Luglio
Visualizzazione 201 - 300 di 2295 CVE per Luglio 2023 (Pagina 3 di 23)
| ID CVE | Data | Titolo |
|---|---|---|
| CVE-2023-35001 | 2023-07-05 | Linux Kernel nftables Out-Of-Bounds Read/Write Vulnerability |
| CVE-2023-34107 | 2023-07-05 | GLPI vulnerable to unauthorized access to KnowbaseItem data |
| CVE-2023-34244 | 2023-07-05 | GLPI vulnerable to reflected XSS in search pages |
| CVE-2023-34457 | 2023-07-05 | MechanicalSoup vulnerable to malicious web server reading arbitrary files on client using file input inside HTML form |
| CVE-2023-35924 | 2023-07-05 | GLPI vulnerable to SQL injection via inventory agent request |
| CVE-2023-35936 | 2023-07-05 | Arbitrary file write is possible in Pandoc when using PDF output or --extract-media with untrusted input |
| CVE-2023-35939 | 2023-07-05 | GLPI vulnerable to unauthorized access to Dashboard data |
| CVE-2023-35940 | 2023-07-05 | GLPI vulnerable to unauthenticated access to Dashboard data |
| CVE-2023-36808 | 2023-07-05 | GLPI vulnerable to SQL injection through Computer Virtual Machine information |
| CVE-2023-36458 | 2023-07-05 | 1Panel vulnerable to ommand injection when entering the container terminal |
| CVE-2023-36457 | 2023-07-05 | 1Panel vulnerable to command injection when adding container repositories |
| CVE-2023-36809 | 2023-07-05 | Kiwi TCMS's misconfigured HTTP headers allow stored XSS execution with Firefox |
| CVE-2023-36813 | 2023-07-05 | Kanboard Authenticated SQL Injections vulnerability |
| CVE-2023-36821 | 2023-07-05 | Uptime Kuma vulnerable to authenticated remote code execution via malicious plugin installation |
| CVE-2023-36822 | 2023-07-05 | Uptime Kuma authenticated path traversal via plugin repository name may lead to unavailability or data loss |
| CVE-2023-36827 | 2023-07-05 | Fides vulnerable to Path Traversal in Webserver API |
| CVE-2023-36828 | 2023-07-05 | Statamic's Antlers sanitizer cannot effectively sanitize malicious SVG |
| CVE-2020-21861 | 2023-07-06 | File upload vulnerability in DuxCMS 2.1 allows attackers to execute... |
| CVE-2020-21862 | 2023-07-06 | Directory traversal vulnerability in DuxCMS 2.1 allows attackers to delete... |
| CVE-2020-22336 | 2023-07-06 | An issue was discovered in pdfcrack 0.17 thru 0.18, allows... |
| CVE-2021-46896 | 2023-07-06 | Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a... |
| CVE-2022-46080 | 2023-07-06 | Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution... |
| CVE-2023-24256 | 2023-07-06 | An issue in the com.nextev.datastatistic component of NIO EC6 Aspen... |
| CVE-2023-27225 | 2023-07-06 | A cross-site scripting (XSS) vulnerability in User Registration & Login... |
| CVE-2023-29381 | 2023-07-06 | An issue in Zimbra Collaboration (ZCS) v.8.8.15 and v.9.0 allows... |
| CVE-2023-29382 | 2023-07-06 | An issue in Zimbra Collaboration ZCS v.8.8.15 and v.9.0 allows... |
| CVE-2023-29656 | 2023-07-06 | An improper authorization vulnerability in Darktrace mobile app (Android) prior... |
| CVE-2023-29824 | 2023-07-06 | A use-after-free issue was discovered in Py_FindObjects() function in SciPy... |
| CVE-2023-30195 | 2023-07-06 | In the module "Detailed Order" (lgdetailedorder) in version up to... |
| CVE-2023-30319 | 2023-07-06 | Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/LoginServlet.java... |
| CVE-2023-30320 | 2023-07-06 | Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/chatWindow.java... |
| CVE-2023-30321 | 2023-07-06 | Cross Site Scripting (XSS) vulnerability in textMessage field in /src/chatbotapp/LoginServlet.java... |
| CVE-2023-30322 | 2023-07-06 | Cross Site Scripting (XSS) vulnerability in username field in /src/chatbotapp/chatWindow.java... |
| CVE-2023-30323 | 2023-07-06 | SQL Injection vulnerability in username field in /src/chatbotapp/chatWindow.java in Payatu... |
| CVE-2023-30325 | 2023-07-06 | SQL Injection vulnerability in textMessage parameter in /src/chatbotapp/chatWindow.java in wliang6... |
| CVE-2023-30326 | 2023-07-06 | Cross Site Scripting (XSS) vulnerability in username field in /WebContent/WEB-INF/lib/chatbox.jsp... |
| CVE-2023-34193 | 2023-07-06 | File Upload vulnerability in Zimbra ZCS 8.8.15 allows an authenticated... |
| CVE-2023-36188 | 2023-07-06 | An issue in langchain v.0.0.64 allows a remote attacker to... |
| CVE-2023-36189 | 2023-07-06 | SQL injection vulnerability in langchain before v0.0.247 allows a remote... |
| CVE-2023-36968 | 2023-07-06 | A SQL Injection vulnerability detected in Food Ordering System v1.0... |
| CVE-2023-36969 | 2023-07-06 | CMS Made Simple v2.2.17 is vulnerable to Remote Command Execution... |
| CVE-2023-36970 | 2023-07-06 | A Cross-site scripting (XSS) vulnerability in CMS Made Simple v2.2.17... |
| CVE-2023-36995 | 2023-07-06 | TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the... |
| CVE-2023-37122 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in Bagecms v3.1.0 allows... |
| CVE-2023-37124 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in the Site Setup... |
| CVE-2023-37125 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in the Management Custom... |
| CVE-2023-37131 | 2023-07-06 | A Cross-Site Request Forgery (CSRF) in the component /public/admin/profile/update.html of... |
| CVE-2023-37132 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in the custom variables... |
| CVE-2023-37133 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in the Column management... |
| CVE-2023-37134 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in the Basic Information... |
| CVE-2023-37135 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in the Image Upload... |
| CVE-2023-37136 | 2023-07-06 | A stored cross-site scripting (XSS) vulnerability in the Basic Website... |
| CVE-2023-37192 | 2023-07-06 | Memory management and protection issues in Bitcoin Core v22 allows... |
| CVE-2023-37454 | 2023-07-06 | An issue was discovered in the Linux kernel through 6.4.2.... |
| CVE-2023-34192 | 2023-07-06 | Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a... |
| CVE-2023-37453 | 2023-07-06 | An issue was discovered in the USB subsystem in the... |
| CVE-2023-3520 | 2023-07-06 | Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in it-novum/openitcockpit |
| CVE-2023-3521 | 2023-07-06 | Cross-site Scripting (XSS) - Reflected in fossbilling/fossbilling |
| CVE-2023-30640 | 2023-07-06 | Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023... |
| CVE-2023-30641 | 2023-07-06 | Improper access control vulnerability in Settings prior to SMR Jul-2023... |
| CVE-2023-30642 | 2023-07-06 | Improper privilege management vulnerability in Galaxy Themes Service prior to... |
| CVE-2023-30643 | 2023-07-06 | Missing authentication vulnerability in Galaxy Themes Service prior to SMR... |
| CVE-2023-30644 | 2023-07-06 | Stack out of bound write vulnerability in CdmaSmsParser of RILD... |
| CVE-2023-30645 | 2023-07-06 | Heap out of bound write vulnerability in IpcRxIncomingCBMsg of RILD... |
| CVE-2023-30646 | 2023-07-06 | Heap out of bound write vulnerability in BroadcastSmsConfig of RILD... |
| CVE-2023-30647 | 2023-07-06 | Heap out of bound write vulnerability in IpcRxUsimPhoneBookCapa of RILD... |
| CVE-2023-30648 | 2023-07-06 | Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to... |
| CVE-2023-30649 | 2023-07-06 | Heap out of bound write vulnerability in RmtUimNeedApdu of RILD... |
| CVE-2023-30650 | 2023-07-06 | Out of bounds read and write in callrunTspCmd of sysinput... |
| CVE-2023-30651 | 2023-07-06 | Out of bounds read and write in callgetTspsysfs of sysinput... |
| CVE-2023-30652 | 2023-07-06 | Out of bounds read and write in callrunTspCmdNoRead of sysinput... |
| CVE-2023-30653 | 2023-07-06 | Out of bounds read and write in enableTspDevice of sysinput... |
| CVE-2023-30655 | 2023-07-06 | Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023... |
| CVE-2023-30656 | 2023-07-06 | Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023... |
| CVE-2023-30657 | 2023-07-06 | Improper input validation vulnerability in EnhancedAttestationResult prior to SMR Jul-2023... |
| CVE-2023-30658 | 2023-07-06 | Improper input validation vulnerability in DataProfile prior to SMR Jul-2023... |
| CVE-2023-30659 | 2023-07-06 | Improper input validation vulnerability in Transaction prior to SMR Jul-2023... |
| CVE-2023-30660 | 2023-07-06 | Exposure of Sensitive Information vulnerability in getDefaultChipId in UwbAospAdapterService prior... |
| CVE-2023-30661 | 2023-07-06 | Exposure of Sensitive Information vulnerability in getChipInfos in UwbAospAdapterService prior... |
| CVE-2023-30662 | 2023-07-06 | Exposure of Sensitive Information vulnerability in getChipIds in UwbAospAdapterService prior... |
| CVE-2023-30663 | 2023-07-06 | Improper input validation vulnerability in OemPersonalizationSetLock in libsec-ril prior to... |
| CVE-2023-30664 | 2023-07-06 | Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023... |
| CVE-2023-30665 | 2023-07-06 | Improper input validation vulnerability in OnOemServiceMode in libsec-ril prior to... |
| CVE-2023-30666 | 2023-07-06 | Improper input validation vulnerability in DoOemImeiSetPreconfig in libsec-ril prior to... |
| CVE-2023-30667 | 2023-07-06 | Improper access control in Audio system service prior to SMR... |
| CVE-2023-30668 | 2023-07-06 | Out-of-bounds Write in BuildOemSecureSimLockResponse of libsec-ril prior to SMR Jul-2023... |
| CVE-2023-30669 | 2023-07-06 | Out-of-bounds Write in DoOemFactorySendFactoryTestResult of libsec-ril prior to SMR Jul-2023... |
| CVE-2023-30670 | 2023-07-06 | Out-of-bounds Write in BuildIpcFactoryDeviceTestEvent of libsec-ril prior to SMR Jul-2023... |
| CVE-2023-30671 | 2023-07-06 | Logic error in package installation via adb command prior to... |
| CVE-2023-30672 | 2023-07-06 | Improper privilege management vulnerability in Samsung Smart Switch for Windows... |
| CVE-2023-30673 | 2023-07-06 | Improper validation of integrity check vulnerability in Smart Switch PC... |
| CVE-2023-30674 | 2023-07-06 | Improper configuration in Samsung Internet prior to version 21.0.0.41 allows... |
| CVE-2023-30675 | 2023-07-06 | Improper authentication in Samsung Pass prior to version 4.2.03.1 allows... |
| CVE-2023-30676 | 2023-07-06 | Improper access control vulnerability in Samsung Pass prior to version... |
| CVE-2023-30677 | 2023-07-06 | Improper access control vulnerability in Samsung Pass prior to version... |
| CVE-2023-30678 | 2023-07-06 | Potential zip path traversal vulnerability in Calendar application prior to... |
| CVE-2023-26138 | 2023-07-06 | All versions of the package drogonframework/drogon are vulnerable to CRLF... |
| CVE-2023-26137 | 2023-07-06 | All versions of the package drogonframework/drogon are vulnerable to HTTP... |
| CVE-2023-3523 | 2023-07-06 | Out-of-bounds Read in gpac/gpac |
| CVE-2022-48508 | 2023-07-06 | Inappropriate authorization vulnerability in the system apps. Successful exploitation of... |