CVE-2023-30xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
638 records · Page 1 of 7
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow an attacker to cause a denial of service due to uncontrolled resource consumption. IBM X-Force ID: 254651.
UpdatedIBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254649.
UpdatedIBM Security Access Manager Docker 10.0.0.0 through 10.0.7.1 could allow a local user to obtain root access due to improper access controls. IBM X-Force ID: 254638.
UpdatedIBM Cognos Analytics 11.1.7, 11.2.4, and 12.0.0 could be vulnerable to information leakage due to unverified sources in messages sent between Windows objects of different origins. IBM X-Force ID: 254290.
UpdatedIBM Aspera Faspex 4.0 through 4.4.2 and 5.0 through 5.0.5 could allow a malicious actor to bypass IP whitelist restrictions using a specially crafted HTTP request. IBM X-Force ID: 254268.
UpdatedIBM QRadar SIEM 7.5.0 uses weaker than expected cryptographic algorithms that could allow an attacker to decrypt highly sensitive information. IBM X-Force ID: 254138
UpdatedIBM Cloud Pak for Security (CP4S) 1.9.0.0 through 1.9.2.0 could allow an attacker with a valid API key for one tenant to access data from another tenant's account. IBM X-Force ID: 254136.
UpdatedIBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 11.1 and 11.5 is vulnerable to denial of service with a specially crafted query. IBM X-Force ID: 254037.
UpdatedIBM i 7.2, 7.3, 7.4, and 7.5 could allow a remote attacker to execute CL commands as QUSER, caused by an exploitation of DDM architecture. IBM X-Force ID: 254036.
UpdatedIBM Performance Tools for i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain all object access to the host operating system. IBM X-Force ID: 254017.
UpdatedThe IBM i 7.2, 7.3, 7.4, and 7.5 product Facsimile Support for i contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 254016.
Updated- CVE-2023-30987: IBM Db2 denial of service 5.3 Medium
IBM Db2 for Linux, UNIX and Windows (includes Db2 Connect Server) 10.5, 11.1, and 11.5 is vulnerable to denial of service with a specially crafted query on certain databases. IBM X-Force ID: 253440.
Updated A vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain a memory corruption vulnerability while parsing specially crafted STP files. This could allow an attacker to execute code in the context of the current process. (ZDI-CAN-19561)
UpdatedA vulnerability has been identified in Solid Edge SE2023 (All versions < V223.0 Update 3), Solid Edge SE2023 (All versions < V223.0 Update 2). Affected applications contain an out of bounds read past the end of an allocated buffer while parsing a specially crafted OBJ file. This vulnerability could allow an attacker to disclose sensitive information. (ZDI-CAN-19426)
UpdatedGotham Gaia application was found to be exposing multiple unauthenticated endpoints.
UpdatedGotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authenticated user to read arbitrary files on the file system.
UpdatedThe Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpoints.
Updated- CVE-2023-30968: Stored XSS in gaia 6.8 Medium
One of Gotham Gaia services was found to be vulnerable to a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker to bypass CSP and get a persistent cross site scripting payload on the stack.
Updated Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowing an unauthenticated user to read arbitrary files on the file system.
UpdatedA security defect was discovered in Foundry Frontend which enabled users to perform Stored XSS attacks in Slate if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.229.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
UpdatedThe Gotham Cerberus service was found to have a stored cross-site scripting (XSS) vulnerability that could have allowed an attacker with access to Gotham to launch attacks against other users. This vulnerability is resolved in Cerberus 100.230704.0-27-g031dd58 .
UpdatedPalantir Gotham was found to be vulnerable to a bug where under certain circumstances, the frontend could have applied an incorrect classification to a newly created property or link.
UpdatedA security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
UpdatedIn Apollo change requests, comments added by users could contain a javascript URI link that when rendered will result in an XSS that require user interaction.
UpdatedA security defect was identified in Foundry Frontend that enabled users to potentially conduct DOM XSS attacks if Foundry's CSP were to be bypassed. This defect was resolved with the release of Foundry Frontend 6.225.0.
UpdatedA security defect was identified in Foundry Comments that enabled a user to discover the contents of an attachment submitted to another comment if they knew the internal UUID of the target attachment. This defect was resolved with the release of Foundry Comments 2.267.0.
UpdatedA security defect was identified in Foundry workspace-server that enabled a user to bypass an authorization check and view settings related to 'Developer Mode'. This enabled users with insufficient privilege the ability to view and interact with Developer Mode settings in a limited capacity. A fix was deployed with workspace-server 7.7.0.
UpdatedThe Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.
UpdatedA security defect was discovered in Foundry Issues that enabled users to create convincing phishing links by editing the request sent when creating an Issue. This defect was resolved in Frontend release 6.228.0 .
Updated- CVE-2023-30951: CVE-2023-30951 6.3 Medium
The Foundry Magritte plugin rest-source was found to be vulnerable to an an XML external Entity attack (XXE).
Updated - CVE-2023-30950: CVE-2023-30950 6.5 Medium
The foundry campaigns service was found to be vulnerable to an unauthenticated information disclosure in a rest endpoint
Updated - CVE-2023-30949: CVE-2023-30949 4.3 Medium
A missing origin validation in Slate sandbox could be exploited by a malicious user to modify the page's content, which could lead to phishing attacks.
Updated A security defect in Foundry's Comments functionality resulted in the retrieval of attachments to comments not being gated by additional authorization checks. This could enable an authenticated user to inject a prior discovered attachment UUID into other arbitrary comments to discover it's content. This defect was fixed in Foundry Comments 2.249.0, and a patch was rolled out to affected Foundry e
UpdatedA security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have access to and consequently could not see, they could query Foundry's Notification API and receive metadata about the issue including the RID of the issue, severity, internal UUID of the author, and the user-defined title of the issue.
Updated- CVE-2023-30945: CVE-2023-30945 9.8 Critical
Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.
Updated - CVE-2023-30944: Moodle: minor sql injection risk in external wiki method for listing pages 5.6 Medium
The vulnerability was found Moodle which exists due to insufficient sanitization of user-supplied data in external Wiki method for listing pages. A remote attacker can send a specially crafted request to the affected application and execute limited SQL commands within the application database.
Updated The vulnerability was found Moodle which exists because the application allows a user to control path of the older to create in TinyMCE loaders. A remote user can send a specially crafted HTTP request and create arbitrary folders on the system.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
UpdatedIn telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn messaging service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
UpdatedIn DMService, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
UpdatedIn email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn email service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Updated- CVE-2023-30912: CVE-2023-30912 7.2 High
A remote code execution issue exists in HPE OneView.
Updated HPE Integrated Lights-Out 5, and Integrated Lights-Out 6 using iLOrest may cause denial of service.
UpdatedHPE MSA Controller prior to version IN210R004 could be remotely exploited to allow inconsistent interpretation of HTTP requests.
UpdatedA remote authentication bypass issue exists in some OneView APIs.
UpdatedA remote authentication bypass issue exists in a OneView API.
Updated- CVE-2023-30906: The vulnerability could be locally exploited to allow escalation of privilege. 7.5 High
The vulnerability could be locally exploited to allow escalation of privilege.
Updated The MC990 X and UV300 RMC component has and inadequate default configuration that could be exploited to obtain enhanced privilege.
UpdatedA security vulnerability in HPE Insight Remote Support may result in the local disclosure of privileged LDAP information.
UpdatedHP-UX could be exploited locally to create a Denial of Service (DoS) when any physical interface is configured with IPv6/inet6.
UpdatedA privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affected installations.
UpdatedA vulnerability has been identified in SICAM P850 (7KG8500-0AA00-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA00-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA10-2AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-0AA0) (All versions < V3.11), SICAM P850 (7KG8500-0AA30-2AA0) (All versions < V3.11), SICAM P850 (7KG8501-0AA01
UpdatedA vulnerability has been identified in Xpedition Layout Browser (All versions < VX.2.14). Affected application contains a stack overflow vulnerability when parsing a PCB file. An attacker can leverage this vulnerability to execute code in the context of the current process.
UpdatedA vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 Hotfi
UpdatedA vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video 2020 R3 (All versions < V20.3 HotfixRev12), Siveillance Video 2021 R1 (All versions < V21.1 HotfixRev12), Siveillance Video 2021 R2 (All versions < V21.2 HotfixRev8), Siveillance Video 2022 R1 (All versions < V22.1 HotfixRev7), Siveillance Video 2022 R2 (All versions < V22.2 Hotfi
UpdatedA vulnerability has been identified in SIMATIC WinCC (All versions < V7.5.2.13). Affected applications fail to set proper access rights for their installation folder if a non-default installation path was chosen during installation. This could allow an authenticated local attacker to inject arbitrary code and escalate privileges.
UpdatedUnauth. Reflected Cross-Site Scripting (XSS) vulnerability in Maxim Glazunov XML for Google Merchant Center plugin <= 3.0.1 versions.
UpdatedAuth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dave Ross Dave's WordPress Live Search plugin <= 4.8.1 versions.
Updated- CVE-2023-30875: WordPress Logo Scheduler Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in All My Web Needs Logo Scheduler plugin <= 1.2.0 versions.
Updated - CVE-2023-30874: WordPress GPS Plotter Plugin <= 5.1.4 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <= 5.1.4 versions.
Updated Missing Authorization vulnerability in Fahad Mahmood WP Docs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Docs: from n/a through 1.9.8.
Updated- CVE-2023-30872: WordPress BSK Forms Blacklist Plugin <= 3.6.2 is vulnerable to SQL Injection 7.6 High
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BannerSky BSK Forms Blacklist.This issue affects BSK Forms Blacklist: from n/a through 3.6.2.
Updated Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PT Woo Plugins (by Webdados) Stock Exporter for WooCommerce plugin <= 1.1.0 versions.
UpdatedMissing Authorization vulnerability in wooproductimporter Sharkdropship for AliExpress Dropship and Affiliate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Sharkdropship for AliExpress Dropship and Affiliate: from n/a through 2.2.3.
Updated- CVE-2023-30869: WordPress Easy Digital Downloads Plugin 3.1-3.1.1.4.1 is vulnerable to Privilege Escalation 9.8 Critical
Improper Authentication vulnerability in Easy Digital Downloads plugin allows unauth. Privilege Escalation. This issue affects Easy Digital Downloads: from 3.1 through 3.1.1.4.1.
Updated Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Jon Christopher CMS Tree Page View plugin <= 1.6.7 versions.
UpdatedIn the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage. Mitigation: Users are r
UpdatedIn telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn dialer service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
UpdatedIn Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
UpdatedIn Connectivity Service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.
UpdatedFlask is a lightweight WSGI web application framework. When all of the following conditions are met, a response containing data intended for one client may be cached and subsequently sent by the proxy to other clients. If the proxy also caches `Set-Cookie` headers, it may send one client's `session` cookie to other clients. The severity depends on the application's use of the session and the proxy
UpdatedWWBN AVideo is an open source video platform. In AVideo prior to version 12.4, a normal user can make a Meeting Schedule where the user can invite another user in that Meeting, but it does not properly sanitize the malicious characters when creating a Meeting Room. This allows attacker to insert malicious scripts. Since any USER including the ADMIN can see the meeting room that was created by the
UpdatedTriton is a Minecraft plugin for Spigot and BungeeCord that helps you translate your Minecraft server. The CustomPayload packet allows you to execute commands on the spigot/bukkit console. When you enable bungee mode in the config it will enable the bungee bridge and the server will begin to broadcast the 'triton:main' plugin channel. Using this plugin channel you are able to send a payload packet
Updated