CVE-2023-32xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
895 records · Page 9 of 9
Compiler removal of buffer clearing in sli_crypto_transparent_aead_decrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
UpdatedCompiler removal of buffer clearing in sli_crypto_transparent_aead_encrypt_tag in Silicon Labs Gecko Platform SDK v4.2.1 and earlier results in key material duplication to RAM.
Updated- CVE-2023-32095: WordPress Rename Media Files Plugin <= 1.0.1 is vulnerable to Remote Code Execution (RCE) 9.9 Critical
Improper Control of Generation of Code ('Code Injection') vulnerability in Milan Dinić Rename Media Files.This issue affects Rename Media Files: from n/a through 1.0.1.
Updated Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extended Post Status: from n/a through 1.0.19.
UpdatedCross-Site Request Forgery (CSRF) vulnerability in Criss Swaim TPG Redirect plugin <= 1.0.7 versions.
UpdatedCross-Site Request Forgery (CSRF) vulnerability in PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles plugin <= 6.0.9.0 versions.
UpdatedCross-Site Request Forgery (CSRF) vulnerability in POEditor plugin <= 0.9.4 versions.
UpdatedPega platform clients who are using versions 6.1 through 7.3.1 may be utilizing default credentials
Updated- CVE-2023-32089: CVE-2023-32089 4.6 Medium
Pega Platform versions 8.1 to 8.8.2 are affected by an XSS issue with Pin description
Updated - CVE-2023-32088: CVE-2023-32088 4.6 Medium
Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with ad-hoc case creation
Updated - CVE-2023-32087: CVE-2023-32087 4.6 Medium
Pega Platform versions 8.1 to Infinity 23.1.0 are affected by an XSS issue with task creation
Updated This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Updated · Rejected recordMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
UpdatedHTTP.sys Denial of Service Vulnerability
UpdatedMicrosoft Failover Cluster Information Disclosure Vulnerability
Updatedetcd is a distributed key-value store for the data of a distributed system. Prior to versions 3.4.26 and 3.5.9, the LeaseTimeToLive API allows access to key names (not value) associated to a lease when `Keys` parameter is true, even a user doesn't have read permission to the keys. The impact is limited to a cluster which enables auth (RBAC). Versions 3.4.26 and 3.5.9 fix this issue. There are no k
UpdatedVert.x STOMP is a vert.x implementation of the STOMP specification that provides a STOMP server and client. From versions 3.1.0 until 3.9.16 and 4.0.0 until 4.4.2, a Vert.x STOMP server processes client STOMP frames without checking that the client send an initial CONNECT frame replied with a successful CONNECTED frame. The client can subscribe to a destination or publish message without prior aut
UpdatedWings is the server control plane for Pterodactyl Panel. A vulnerability affecting versions prior to 1.7.5 and versions 1.11.0 prior to 1.11.6 impacts anyone running the affected versions of Wings. This vulnerability can be used to gain access to the host system running Wings if a user is able to modify an server's install script or the install script executes code supplied by the user (either th
UpdatedNetmaker makes networks with WireGuard. A Mass assignment vulnerability was found in versions prior to 0.17.1 and 0.18.6 that allows a non-admin user to escalate privileges to those of an admin user. The issue is patched in 0.17.1 and fixed in 0.18.6. If Users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched u
UpdatedNetmaker makes networks with WireGuard. An Insecure Direct Object Reference (IDOR) vulnerability was found in versions prior to 0.17.1 and 0.18.6 in the user update function. By specifying another user's username, it was possible to update the other user's password. The issue is patched in 0.17.1 and fixed in 0.18.6. If Users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1`
UpdatedNetmaker makes networks with WireGuard. Prior to versions 0.17.1 and 0.18.6, hardcoded DNS key usage has been found in Netmaker allowing unauth users to interact with DNS API endpoints. The issue is patched in 0.17.1 and fixed in 0.18.6. If users are using 0.17.1, they should run `docker pull gravitl/netmaker:v0.17.1` and `docker-compose up -d`. This will switch them to the patched users. If user
Updatedin-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the files read is `.in_totorc` which is a hidden file in the directory in which in-toto is run. If an attack
UpdatedThe Customer Management Framework (CMF) for Pimcore adds functionality for customer data management. In `pimcore/customer-management-framework-bundle` prior to version 3.3.9, business logic errors are possible in the `Conditions` tab since the counter can be a negative number. This vulnerability is capable of the unlogic in the counter value in the Conditions tab. Users should update to version 3.
Updateduser_oidc app is an OpenID Connect user backend for Nextcloud. Authentication can be broken/bypassed in user_oidc app. It is recommended that the Nextcloud user_oidc app is upgraded to 1.3.2
UpdatedWWBN AVideo is an open source video platform. In versions 12.4 and prior, a command injection vulnerability exists at `plugin/CloneSite/cloneClient.json.php` which allows Remote Code Execution if you CloneSite Plugin. This is a bypass to the fix for CVE-2023-30854, which affects WWBN AVideo up to version 12.3. This issue is patched in commit 1df4af01f80d56ff2c4c43b89d0bac151e7fb6e3.
UpdatedTuleap is an open source tool for end to end traceability of application and system developments. Tuleap Community Edition prior to version 14.8.99.60 and Tuleap Enterprise edition prior to 14.8-3 and 14.7-7, the logs of the triggered Jenkins job URLs are not properly escaped. A malicious Git administrator can setup a malicious Jenkins hook to make a victim, also a Git administrator, execute uncon
Updated- CVE-2023-32071: XWiki Platform vulnerable to RXSS via editor parameter - importinline template 9.1 Critical
XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible to execute javascript with the right of any user by leading him to a special URL on the wiki targeting a page which contains an attachment. This has been patched in XWiki 15.0-rc-1, 14.10.4, and 14.4.8. The easiest possible workaround is to edit file `
Updated - CVE-2023-32070: Improper Neutralization of Script in Attributes in XWiki (X)HTML renderers 9.1 Critical
XWiki Platform is a generic wiki platform. Prior to version 14.6-rc-1, HTML rendering didn't check for dangerous attributes/attribute values. This allowed cross-site scripting (XSS) attacks via attributes and link URLs, e.g., supported in XWiki syntax. This has been patched in XWiki 14.6-rc-1. There are no known workarounds apart from upgrading to a fixed version.
Updated - CVE-2023-32069: XWiki Platform privilege escalation (PR)/RCE from account through class sheet 10.0 Critical
XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user to execute anything with the right of the author of the XWiki.ClassSheet document. This has been patched in XWiki 15.0-rc-1 and 14.10.4. There are no known workarounds.
Updated XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions prior to 14.10.4 it's possible to exploit well known parameters in XWiki URLs to perform redirection to untrusted site. This vulnerability was partially fixed in the past for XWiki 12.10.7 and 13.3RC1 but there is still the possibility to force specific URLs to skip some checks, e.g
Updatedc-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful shutdown of the connection. This issue has been patched in version 1.19.1.
UpdatedTime Tracker is an open source time tracking system. The week view plugin in Time Tracker versions 1.22.11.5782 and prior was not escaping titles for notes in week view table. Because of that, it was possible for a logged in user to enter notes with elements of JavaScript. Such script could then be executed in user browser on subsequent requests to week view. This issue is fixed in version 1.22.12
UpdatedOroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be received by Order ID. This issue is patched in version 5.0.11 and 5.1.1.
UpdatedOroCommerce package with customer portal and non authenticated visitor website base features. Back-office users can access information about Customer and Customer User menus, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in version 5.0.11 and 5.1.1.
UpdatedOroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access information from any call event, bypassing ACL security restrictions due to insufficient security checks. This issue has been patched in version 5.0.4 and 5.1.1.
UpdatedOroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing ACL security restrictions due to insufficient security checks. This vulnerability has been patched in version 5.1.1.
UpdatedDiscourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, the lack of restrictions on the iFrame tag makes it easy for an attacker to exploit the vulnerability and hide subsequent comments from other users. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of
UpdatedDHIS2 Core contains the service layer and Web API for DHIS2, an information system for data capture. Starting in the 2.35 branch and prior to versions 2.36.13, 2.37.8, 2.38.2, and 2.39.0, when the Category Option Combination Sharing settings are configured to control access to specific tracker program events or program stages, the `/trackedEntityInstances` and `/events` API endpoints may include a
UpdatedVyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, internal calls with default arguments are compiled incorrectly. Depending on the number of arguments provided in the call, the defaults are added not right-to-left, but left-to-right. If the types are incompatible, typechecking is bypassed. The ability to pass kwargs to internal functions is an un
UpdatedVyper is a Pythonic smart contract language for the Ethereum virtual machine. Prior to version 0.3.8, due to missing overflow check for loop variables, by assigning the iterator of a loop to a variable, it is possible to overflow the type of the latter. The issue seems to happen only in loops of type `for i in range(a, a + N)` as in loops of type `for i in range(start, stop)` and `for i in range(s
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedWindows Server Update Service (WSUS) Elevation of Privilege Vulnerability
UpdatedActive Template Library Elevation of Privilege Vulnerability
UpdatedVolume Shadow Copy Elevation of Privilege Vulnerability
UpdatedWindows Installer Elevation of Privilege Vulnerability
UpdatedMicrosoft Power Apps (online) Spoofing Vulnerability
UpdatedRaw Image Extension Remote Code Execution Vulnerability
UpdatedWindows Installer Elevation of Privilege Vulnerability
UpdatedWindows SmartScreen Security Feature Bypass Vulnerability
UpdatedPaint 3D Remote Code Execution Vulnerability
UpdatedWindows MSHTML Platform Elevation of Privilege Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedWindows Remote Desktop Security Feature Bypass Vulnerability
UpdatedOLE Automation Information Disclosure Vulnerability
UpdatedWindows Update Orchestrator Service Information Disclosure Vulnerability
UpdatedMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
UpdatedMicrosoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
UpdatedMicrosoft ODBC Driver Remote Code Execution Vulnerability
Updated- CVE-2023-32037: Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability 6.5 Medium
Windows Layer-2 Bridge Network Driver Information Disclosure Vulnerability
Updated Remote Procedure Call Runtime Denial of Service Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedMicrosoft Failover Cluster Remote Code Execution Vulnerability
Updated.NET and Visual Studio Elevation of Privilege Vulnerability
UpdatedMicrosoft Exchange Server Remote Code Execution Vulnerability
Updated.NET and Visual Studio Denial of Service Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SQL OLE DB Remote Code Execution Vulnerability
UpdatedMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
UpdatedMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
UpdatedMicrosoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
UpdatedMicrosoft Power Apps Spoofing Vulnerability
UpdatedWindows Server Service Security Feature Bypass Vulnerability
UpdatedWindows SMB Witness Service Security Feature Bypass Vulnerability
UpdatedWindows DNS Spoofing Vulnerability
UpdatedWindows Kernel Information Disclosure Vulnerability
UpdatedWindows Hello Remote Code Execution Vulnerability
UpdatedMicrosoft PostScript Printer Driver Remote Code Execution Vulnerability
UpdatedWindows Installer Information Disclosure Vulnerability
Updated- CVE-2023-32015: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 9.8 Critical
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Updated - CVE-2023-32014: Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability 9.8 Critical
Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability
Updated Windows Hyper-V Denial of Service Vulnerability
UpdatedWindows Container Manager Service Elevation of Privilege Vulnerability
UpdatedWindows iSCSI Discovery Service Denial of Service Vulnerability
UpdatedWindows Bus Filter Driver Elevation of Privilege Vulnerability
Updated- CVE-2023-32009: Windows Collaborative Translation Framework Elevation of Privilege Vulnerability 8.8 High
Windows Collaborative Translation Framework Elevation of Privilege Vulnerability
Updated Windows Resilient File System (ReFS) Remote Code Execution Vulnerability
Updated** UNSUPPORTED WHEN ASSIGNED ** The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable. With an authentication filter, this checks whether a user has access permissions to view or modify the application. If ACLs are enabled, a code path in HttpSecurityFilter can allow someone to perform impersonation by providing an arbitrary user name. A malicious
UpdatedThe use of `module.constructor.createRequire()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
UpdatedA vulnerability has been identified in Node.js version 20, affecting users of the experimental permission model when the --allow-fs-read flag is used with a non-* argument. This flaw arises from an inadequate permission model that fails to restrict file stats through the `fs.statfs` API. As a result, malicious actors can retrieve stats from files that they do not have explicit read access to. Th
UpdatedA vulnerability has been discovered in Node.js version 20, specifically within the experimental permission model. This flaw relates to improper handling of Buffers in file system APIs causing a traversal path to bypass when verifying file permissions. This vulnerability affects all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the
Updated`fs.mkdtemp()` and `fs.mkdtempSync()` can be used to bypass the permission model check using a path traversal attack. This flaw arises from a missing check in the fs.mkdtemp() API and the impact is a malicious actor could create an arbitrary directory. This vulnerability affects all users using the experimental permission model in Node.js 20. Please note that at the time this CVE was issued, the
UpdatedThe use of `Module._load()` can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x and, 20.x. Please note that at the time this CVE was issued, the policy is an experimental feature of Node.js.
UpdatedWe issued this CVE pre-maturely, as we have subsequently realized that this issue points out a problem that there really is no safe measures around or protections for.
Updated · Rejected recordA Cross-Site Scripting (XSS) vulnerability found in UniFi Network (Version 7.3.83 and earlier) allows a malicious actor with Site Administrator credentials to escalate privileges by persuading an Administrator to visit a malicious web page.
Updated