CVE-2023-33xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
686 records · Page 6 of 7
Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. This issue has been fixed in version 4.4.7.
UpdatedCraft is a CMS for creating custom digital experiences on the web. A malformed RSS feed can deliver an XSS payload. This issue was patched in version 4.4.6.
UpdatedCraft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Old CVE fixed the XSS in label HTML but didn’t fix it when clicking save. This issue was patched in version 4.4.6.
UpdatedEmby Server is a user-installable home media server which stores and organizes a user's media files of virtually any format and makes them available for viewing at home and abroad on a broad range of client devices. This vulnerability may allow administrative access to an Emby Server system, depending on certain user account settings. By spoofing certain headers which are intended for interoperati
Updatedntpd-rs is an NTP implementation written in Rust. ntpd-rs does not validate the length of NTS cookies in received NTP packets to the server. An attacker can crash the server by sending a specially crafted NTP packet containing a cookie shorter than what the server expects. The server also crashes when it is not configured to handle NTS packets. The issue was caused by improper slice indexing. The
UpdatedKyverno is a policy engine designed for Kubernetes. Kyverno seccomp control can be circumvented. Users of the podSecurity `validate.podSecurity` subrule in Kyverno 1.9.2 and 1.9.3 are vulnerable. This issue was patched in version 1.9.4.
UpdatedSealos is an open source cloud operating system distribution based on the Kubernetes kernel. In versions of Sealos prior to 4.2.1-rc4 an improper configuration of role based access control (RBAC) permissions resulted in an attacker being able to obtain cluster control permissions, which could control the entire cluster deployed with Sealos, as well as hundreds of pods and other resources within th
UpdatedPomerium is an identity and context-aware access proxy. With specially crafted requests, incorrect authorization decisions may be made by Pomerium. This issue has been patched in versions 0.17.4, 0.18.1, 0.19.2, 0.20.1, 0.21.4 and 0.22.2.
UpdatedOmni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths of the note's attachments were not properly validated, allowing malicious or compromised applications in the same device to force Omni-notes to copy files from i
UpdatedHighlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when a password html input is switched to `type="text"` via a javascript "Show Password" button. This differs from the expected behavior which always obfuscates `type="password"` inputs. A customer may assume that switching to `type="text"` would also not record this input; hence, th
UpdatedZulip is an open-source team collaboration tool with unique topic-based threading that combines the best of email and chat to make remote work productive and delightful. The main development branch of Zulip Server from May 2, 2023 and later, including beta versions 7.0-beta1 and 7.0-beta2, is vulnerable to a cross-site scripting vulnerability in tooltips on the message feed. An attacker who can se
UpdatedDjango-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests are signed by AWS and are verified by django_ses, however the verification of this signature was found
UpdatedNextcloud Mail is a mail app in Nextcloud. A blind SSRF attack allowed to send GET requests to services running in the same web server. It is recommended that the Mail app is update to version 3.02, 2.2.5 or 1.15.3.
Updated- CVE-2023-33183: Error in calendar when booking an appointment reveals the full path of the website 2.6 Low
Calendar app for Nextcloud easily sync events from various devices with your Nextcloud. Some internal paths of the website are disclosed when the SMTP server is unavailable. It is recommended that the Calendar app is updated to 3.5.5 or 4.2.3
Updated Contacts app for Nextcloud easily syncs contacts from various devices with your Nextcloud and allows editing. The unsanitized SVG is converted to a JavaScript blob (in memory data) that the Avatar can't render. Due to this constellation the missing sanitization does not seem to be exploitable. It is recommended that the Contacts app is upgraded to 5.0.3 or 4.2.4
UpdatedXibo is a content management system (CMS). Starting in version 3.0.0 and prior to version 3.3.5, some API routes will print a stack trace when called with missing or invalid parameters revealing sensitive information about the locations of paths that the server is using. Users should upgrade to version 3.3.5, which fixes this issue. There are no known workarounds aside from upgrading.
Updated- CVE-2023-33180: Sensitive Information Disclosure abusing SQL Injection in Xibo CMS display map 6.5 Medium
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.2 in the `/display/map` API route inside the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `bounds` parameter. Users should upgrade to version 3.3.5, which fixes this issue. The
Updated - CVE-2023-33179: Sensitive Information Disclosure abusing SQL Injection in Xibo CMS nameFilter 6.5 Medium
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered starting in version 3.2.0 and prior to version 3.3.5 in the `nameFilter` function used throughout the CMS. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values for logical operators. Users should upgrade to version 3.3.5 which fixes this issue. There
Updated - CVE-2023-33178: Sensitive Information Disclosure abusing SQL Injection in Xibo CMS dataset filter 6.5 Medium
Xibo is a content management system (CMS). An SQL injection vulnerability was discovered in the `/dataset/data/{id}` API route inside the CMS starting in version 1.4.0 and prior to versions 2.3.17 and 3.3.5. This allows an authenticated user to exfiltrate data from the Xibo database by injecting specially crafted values in to the `filter` parameter. Values allowed in the filter parameter are check
Updated Xibo is a content management system (CMS). A path traversal vulnerability exists in the Xibo CMS whereby a specially crafted zip file can be uploaded to the CMS via the layout import function by an authenticated user which would allow creation of files outside of the CMS library directory as the webserver user. This can be used to upload a PHP webshell inside the web root directory and achieve rem
UpdatedBigBlueButton is an open source virtual classroom designed to help teachers teach and learners learn. In affected versions are affected by a Server-Side Request Forgery (SSRF) vulnerability. In an `insertDocument` API request the user is able to supply a URL from which the presentation should be downloaded. This URL was being used without having been successfully validated first. An update to the
UpdatedToUI is a Python package for creating user interfaces (websites and desktop apps) from HTML. ToUI is using Flask-Caching (SimpleCache) to store user variables. Websites that use `Website.user_vars` property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1.
UpdatedWindows Cryptographic Information Disclosure Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedMicrosoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
UpdatedASP.NET and Visual Studio Security Feature Bypass Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedMicrosoft SharePoint Server Security Feature Bypass Vulnerability
UpdatedRemote Procedure Call Runtime Denial of Service Vulnerability
UpdatedWindows Network Load Balancing Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Information Disclosure Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Remote Code Execution Vulnerability
UpdatedMicrosoft Defender Elevation of Privilege Vulnerability
Updated- CVE-2023-33155: Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability 7.8 High
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
Updated Windows Partition Management Driver Elevation of Privilege Vulnerability
UpdatedMicrosoft Outlook Remote Code Execution Vulnerability
UpdatedMicrosoft ActiveX Remote Code Execution Vulnerability
UpdatedMicrosoft Outlook Spoofing Vulnerability
UpdatedMicrosoft Office Security Feature Bypass Vulnerability
UpdatedMicrosoft Office Graphics Remote Code Execution Vulnerability
UpdatedMicrosoft Office Elevation of Privilege Vulnerability
UpdatedMicrosoft Office Remote Code Execution Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability
UpdatedVisual Studio Code Spoofing Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedMicrosoft SharePoint Server Elevation of Privilege Vulnerability
UpdatedYet Another Reverse Proxy (YARP) Denial of Service Vulnerability
UpdatedMicrosoft OneNote Spoofing Vulnerability
UpdatedVisual Studio Information Disclosure Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedAzure DevOps Server Remote Code Execution Vulnerability
Updated.NET and Visual Studio Elevation of Privilege Vulnerability
UpdatedMicrosoft SharePoint Server Remote Code Execution Vulnerability
UpdatedMicrosoft Excel Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedMicrosoft Outlook Remote Code Execution Vulnerability
UpdatedMicrosoft SharePoint Server Spoofing Vulnerability
UpdatedMicrosoft SharePoint Server Denial of Service Vulnerability
Updated.NET and Visual Studio Remote Code Execution Vulnerability
Updated.NET and Visual Studio Elevation of Privilege Vulnerability
Updated.NET and Visual Studio Remote Code Execution Vulnerability
UpdatedA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications cont
UpdatedA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications cont
UpdatedA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications cont
UpdatedA vulnerability has been identified in JT2Go (All versions < V14.2.0.3), Teamcenter Visualization V13.2 (All versions < V13.2.0.13), Teamcenter Visualization V13.3 (All versions < V13.3.0.10), Teamcenter Visualization V14.0 (All versions < V14.0.0.6), Teamcenter Visualization V14.1 (All versions < V14.1.0.8), Teamcenter Visualization V14.2 (All versions < V14.2.0.3). The affected applications cont
UpdatedMemory corruption in Audio when memory map command is executed consecutively in ADSP.
UpdatedMemory corruption while loading a VM from a signed VM image that is not coherent in the processor cache.
UpdatedMemory corruption while processing Listen Sound Model client payload buffer when there is a request for Listen Sound session get parameter from ST HAL.
UpdatedMemory corruption when HLOS allocates the response payload buffer to copy the data received from ADSP in response to AVCS_LOAD_MODULE command.
UpdatedTransient DOS while parsing ieee80211_parse_mscs_ie in WIN WLAN driver.
UpdatedMemory corruption while processing buffer initialization, when trusted report for certain report types are generated.
UpdatedMemory corruption while running NPU, when NETWORK_UNLOAD and (NETWORK_UNLOAD or NETWORK_EXECUTE_V2) commands are submitted at the same time.
Updated- CVE-2023-33113: Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in Kernel 8.4 High
Memory corruption when resource manager sends the host kernel a reply message with multiple fragments.
Updated Transient DOS when WLAN firmware receives "reassoc response" frame including RIC_DATA element.
UpdatedInformation disclosure when VI calibration state set by ADSP is greater than MAX_FBSP_STATE in the response payload to AFE calibration command.
UpdatedThe session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption.
UpdatedTransient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
UpdatedMemory corruption in Graphics Driver when destroying a context with KGSL_GPU_AUX_COMMAND_TIMELINE objects queued.
UpdatedMemory corruption in Graphics Linux while assigning shared virtual memory region during IOCTL call.
UpdatedMemory corruption while submitting a large list of sync points in an AUX command to the IOCTL_KGSL_GPU_AUX_COMMAND.
UpdatedTransient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number.
UpdatedTransient DOS while processing PDU Release command with a parameter PDU ID out of range.
UpdatedTransient DOS while processing CAG info IE received from NW.
UpdatedTransient DOS while processing DL NAS TRANSPORT message with payload length 0.
UpdatedTransient DOS while processing DL NAS Transport message when message ID is not defined in the 3GPP specification.
UpdatedTransient DOS while processing SMS container of non-standard size received in DL NAS transport in NR.
UpdatedTransient DOS while parsing WPA IES, when it is passed with length more than expected size.
UpdatedTransient DOS in WLAN Firmware while processing a FTMR frame.
UpdatedTransient DOS while processing DL NAS Transport message, as specified in 3GPP 24.501 v16.
UpdatedTransient DOS while processing multiple payload container type with incorrect container length received in DL NAS transport OTA in NR.
UpdatedMemory corruption while running VK synchronization with KASAN enabled.
UpdatedMemory corruption while processing pin reply in Bluetooth, when pin code received from APP layer is greater than expected size.
Updated