Lista CVE - 2023 / Luglio
Visualizzazione 601 - 700 di 2295 CVE per Luglio 2023 (Pagina 7 di 23)
| ID CVE | Data | Titolo |
|---|---|---|
| CVE-2023-1183 | 2023-07-10 | Arbitrary file write |
| CVE-2023-28986 | 2023-07-10 | WordPress Affiliates Manager Plugin <= 2.9.20 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-32250 | 2023-07-10 | Session race condition remote code execution vulnerability |
| CVE-2023-32254 | 2023-07-10 | Tree connection race condition remote code execution vulnerability |
| CVE-2023-23993 | 2023-07-10 | WordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-28995 | 2023-07-10 | WordPress Configurable Tag Cloud Plugin <= 5.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-23787 | 2023-07-10 | WordPress Premmerce Redirect Manager Plugin <= 1.0.9 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-36691 | 2023-07-10 | WordPress WebwinkelKeur Plugin <= 3.24 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-35912 | 2023-07-10 | WordPress Potent Donations for WooCommerce Plugin <= 1.1.9 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-37392 | 2023-07-10 | WordPress WP Dummy Content Generator Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-37277 | 2023-07-10 | XWiki Platform vulnerable to cross-site request forgery (CSRF) via the REST API |
| CVE-2023-23348 | 2023-07-10 | HCL Launch is vulnerable to sensitive information disclosure |
| CVE-2016-15034 | 2023-07-10 | Dynacase Webdesk freedomrss_search.php freedomrss_search sql injection |
| CVE-2023-26590 | 2023-07-10 | Floating point exception in src/aiff.c |
| CVE-2023-32627 | 2023-07-10 | Floating point exception in src/voc.c |
| CVE-2023-34318 | 2023-07-10 | Heap-buffer-overflow in src/hcom.c |
| CVE-2023-3599 | 2023-07-10 | SourceCodester Best Fee Management System Add User admin_class.php save_user access control |
| CVE-2023-34347 | 2023-07-10 | Delta Electronics InfraSuite Device Master Deserialization of Untrusted Data |
| CVE-2023-34316 | 2023-07-10 | Delta Electronics InfraSuite Device Master Improper Access Control |
| CVE-2023-30765 | 2023-07-10 | Delta Electronics InfraSuite Device Master Improper Access Control |
| CVE-2023-3605 | 2023-07-10 | PHPGurukul Online Shopping Portal Registration Page excessive authentication |
| CVE-2023-34432 | 2023-07-10 | Heap-buffer-overflow in src/formats_i.c |
| CVE-2023-3606 | 2023-07-10 | TamronOS ping os command injection |
| CVE-2023-24486 | 2023-07-10 | Local user access to a system where another user is utilizing a vulnerable version of Citrix Workspace App for Linux to launch published desktops and applications |
| CVE-2023-24488 | 2023-07-10 | Cross site scripting |
| CVE-2023-24487 | 2023-07-10 | Arbitrary file read |
| CVE-2023-22835 | 2023-07-10 | Denial of Service in Foundry Issues |
| CVE-2023-3607 | 2023-07-10 | kodbox WebConsole Plug-In webconsole.php.txt Execute os command injection |
| CVE-2023-30963 | 2023-07-10 | Stored XSS in Foundry Slate Query Dropdown menu |
| CVE-2023-30960 | 2023-07-10 | Insecure Direct Object Reference (IDOR) in Foundry job-tracker |
| CVE-2023-24490 | 2023-07-10 | Users with only access to launch VDA applications can launch an unauthorized desktop |
| CVE-2023-30956 | 2023-07-10 | IDOR in Foundry Comments allows retrieval of attachments |
| CVE-2023-24489 | 2023-07-10 | A vulnerability has been discovered in the customer-managed ShareFile storage... |
| CVE-2023-3608 | 2023-07-10 | Ruijie BCR810W Tracert Page os command injection |
| CVE-2020-20118 | 2023-07-11 | Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a... |
| CVE-2022-48521 | 2023-07-11 | An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x... |
| CVE-2023-26861 | 2023-07-11 | SQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before... |
| CVE-2023-29984 | 2023-07-11 | Null pointer dereference vulnerability exists in multiple vendors MFPs and... |
| CVE-2023-31818 | 2023-07-11 | An issue found in Marukyu Line v.13.4.1 allows a remote... |
| CVE-2023-34561 | 2023-07-11 | A buffer overflow in the level parsing code of RobTop... |
| CVE-2023-36293 | 2023-07-11 | SQL injection vulnerability in wmanager v.1.0.7 and before allows a... |
| CVE-2023-37174 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in... |
| CVE-2023-37189 | 2023-07-11 | A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of... |
| CVE-2023-37190 | 2023-07-11 | A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6... |
| CVE-2023-37191 | 2023-07-11 | A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6... |
| CVE-2023-37596 | 2023-07-11 | Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows... |
| CVE-2023-37597 | 2023-07-11 | Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows... |
| CVE-2023-37656 | 2023-07-11 | WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via... |
| CVE-2023-37657 | 2023-07-11 | TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS). |
| CVE-2023-37658 | 2023-07-11 | fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS). File... |
| CVE-2023-37659 | 2023-07-11 | xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE). |
| CVE-2023-37765 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in... |
| CVE-2023-37766 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in... |
| CVE-2023-37767 | 2023-07-11 | GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in... |
| CVE-2023-36163 | 2023-07-11 | Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a... |
| CVE-2023-2079 | 2023-07-11 | The "Buy Me a Coffee – Button and Widget Plugin"... |
| CVE-2023-2078 | 2023-07-11 | The "Buy Me a Coffee – Button and Widget Plugin"... |
| CVE-2023-31405 | 2023-07-11 | Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer) |
| CVE-2023-33987 | 2023-07-11 | Request smuggling and request concatenation in SAP Web Dispatcher |
| CVE-2023-33988 | 2023-07-11 | Cross-Site Scripting vulnerability in SAP Enable Now |
| CVE-2023-33989 | 2023-07-11 | Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON) |
| CVE-2023-33990 | 2023-07-11 | Denial of Service (DoS) vulnerability in SAP SQL Anywhere |
| CVE-2023-33992 | 2023-07-11 | Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA |
| CVE-2023-35870 | 2023-07-11 | Improper Access Control in SAP S/4HANA (Manage Journal Entry Template) |
| CVE-2023-35871 | 2023-07-11 | Memory Corruption vulnerability in SAP Web Dispatcher |
| CVE-2023-35872 | 2023-07-11 | Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool) |
| CVE-2023-35873 | 2023-07-11 | Missing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench) |
| CVE-2023-35874 | 2023-07-11 | Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP Platform |
| CVE-2023-36917 | 2023-07-11 | Password Change rate limit bypass in SAP BusinessObjects Business Intelligence Platform |
| CVE-2023-36918 | 2023-07-11 | Cross-Site Scripting vulnerability in SAP Enable Now |
| CVE-2023-36919 | 2023-07-11 | Information Disclosure in SAP Enable Now |
| CVE-2023-36921 | 2023-07-11 | Header Injection in SAP Solution Manager (Diagnostic Agent) |
| CVE-2023-36922 | 2023-07-11 | OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL) |
| CVE-2023-36924 | 2023-07-11 | Log Injection vulnerability in SAP ERP Defense Forces and Public Security |
| CVE-2023-36925 | 2023-07-11 | Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent) |
| CVE-2023-23792 | 2023-07-11 | WordPress Swatchly – WooCommerce Variation Swatches for Products Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-23803 | 2023-07-11 | WordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-23791 | 2023-07-11 | WordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-23731 | 2023-07-11 | WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-25051 | 2023-07-11 | WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-24421 | 2023-07-11 | WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-25487 | 2023-07-11 | WordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-23704 | 2023-07-11 | WordPress Comments Ratings Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-23997 | 2023-07-11 | WordPress Database Collation Fix Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-25468 | 2023-07-11 | WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2022-45823 | 2023-07-11 | WordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-35781 | 2023-07-11 | WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-1936 | 2023-07-11 | Exposure of Private Personal Information to an Unauthorized Actor in GitLab |
| CVE-2023-36517 | 2023-07-11 | WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-35774 | 2023-07-11 | WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-35913 | 2023-07-11 | WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-34015 | 2023-07-11 | WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF) |
| CVE-2023-29156 | 2023-07-11 | Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations |
| CVE-2023-31190 | 2023-07-11 | Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovations |
| CVE-2023-31191 | 2023-07-11 | Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovations |
| CVE-2023-23777 | 2023-07-11 | An improper neutralization of special elements used in an OS... |
| CVE-2022-22302 | 2023-07-11 | A clear text storage of sensitive information (CWE-312) vulnerability in... |
| CVE-2022-29561 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All... |
| CVE-2022-29562 | 2023-07-11 | A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All... |
| CVE-2022-31810 | 2023-07-11 | A vulnerability has been identified in SiPass integrated (All versions... |