CVE-2023-36xxx records
Browse official CVE Program records with vulnerability descriptions, affected products, CVSS scores and source references. Browse by the year and numeric range in each CVE ID; publication and update dates appear on each record.
699 records · Page 4 of 7
An issue was discovered in the Boomerang Parental Control application through 13.83 for Android. The child can use Safe Mode to remove all restrictions temporarily or uninstall the application without the parents noticing.
UpdatedAn issue was discovered in the Boomerang Parental Control application before 13.83 for Android. The app is missing the android:allowBackup="false" attribute in the manifest. This allows the user to backup the internal memory of the app to a PC. This gives the user access to the API token that is used to authenticate requests to the API.
UpdatedAtos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users.
UpdatedAtos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of OS commands as root user by low-privileged authenticated users.
UpdatedA ReDoS issue was discovered in the URI component before 0.12.2 for Ruby. The URI parser mishandles invalid URLs that have specific characters. There is an increase in execution time for parsing strings to URI objects with rfc2396_parser.rb and rfc3986_parser.rb. NOTE: this issue exists becuse of an incomplete fix for CVE-2023-28755. Version 0.10.3 is also a fixed version.
UpdatedDirectory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an attacker to write arbitrary files in the application's private directory. Additionally, by using a malicious intent, the attacker may redirect the server's responses (containing sensitive information) to third-party applications by using a custom-crafted deeplink scheme.
Updated- CVE-2023-36611: CVE-2023-36611 6.5 Medium
The affected TBox RTUs allow low privilege users to access software security tokens of higher privilege. This could allow an attacker with “user” privileges to access files requiring higher privileges by establishing an SSH session and providing the other tokens.
Updated - CVE-2023-36610: CVE-2023-36610 5.9 Medium
The affected TBox RTUs generate software security tokens using insufficient entropy. The random seed used to generate the software tokens is not initialized correctly, and other parts of the token are generated using predictable time-based values. An attacker with this knowledge could successfully brute force the token and authenticate themselves.
Updated - CVE-2023-36609: CVE-2023-36609 7.2 High
The affected TBox RTUs run OpenVPN with root privileges and can run user defined configuration scripts. An attacker could set up a local OpenVPN server and push a malicious script onto the TBox host to acquire root privileges.
Updated - CVE-2023-36608: CVE-2023-36608 6.5 Medium
The affected TBox RTUs store hashed passwords using MD5 encryption, which is an insecure encryption algorithm.
Updated - CVE-2023-36607: CVE-2023-36607 Unscored
The affected TBox RTUs are missing authorization for running some API commands. An attacker running these commands could reveal sensitive information such as software versions and web server file contents.
Updated Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedWindows Named Pipe Filesystem Elevation of Privilege Vulnerability
UpdatedWindows TCP/IP Denial of Service Vulnerability
UpdatedWindows TCP/IP Denial of Service Vulnerability
UpdatedMicrosoft WDAC ODBC Driver Remote Code Execution Vulnerability
UpdatedRemote Procedure Call Information Disclosure Vulnerability
UpdatedWindows Graphics Component Elevation of Privilege Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedWindows upnphost.dll Denial of Service Vulnerability
UpdatedWindows Mark of the Web Security Feature Bypass Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Denial of Service Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Updated- CVE-2023-36577: Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability 8.8 High
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Updated Windows Kernel Information Disclosure Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
UpdatedMicrosoft Office Elevation of Privilege Vulnerability
UpdatedMicrosoft Office Click-To-Run Elevation of Privilege Vulnerability
UpdatedWindows Deployment Services Information Disclosure Vulnerability
UpdatedMicrosoft Common Data Model SDK Denial of Service Vulnerability
UpdatedMicrosoft Office Graphics Elevation of Privilege Vulnerability
UpdatedWindows Search Security Feature Bypass Vulnerability
UpdatedMicrosoft WordPad Information Disclosure Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Elevation of Privilege Vulnerability
UpdatedAzure DevOps Server Elevation of Privilege Vulnerability
UpdatedASP.NET Security Feature Bypass Vulnerability
UpdatedMicrosoft Edge (Chromium-based) Spoofing Vulnerability
UpdatedASP.NET Core Security Feature Bypass Vulnerability
UpdatedPrintHTML API Remote Code Execution Vulnerability
UpdatedAn incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an authenticated attacker to login on other users accounts from the same web domain via crafted HTTP or HTTPs requests.
UpdatedAn improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via the SAML and Security Fabric components.
UpdatedA improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.0 through 6.4.13, 6.2 all versions allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
UpdatedA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests.
UpdatedA exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows attacker to information disclosure via a crafted http request.
UpdatedA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
UpdatedA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
UpdatedA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
UpdatedA improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
UpdatedDO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
Updated · Rejected recordApache Airflow, versions before 2.6.3, has a vulnerability where an authenticated user can use crafted input to make the current request hang. It is recommended to upgrade to a version that is not affected
Updated- CVE-2023-36542: Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources 8.8 High
Apache NiFi 0.0.2 through 1.22.0 include Processors and Controller Services that support HTTP URL references for retrieving drivers, which allows an authenticated and authorized user to configure a location that enables custom code execution. The resolution introduces a new Required Permission for referencing remote resources, restricting configuration of these components to privileged users. The
Updated Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access.
UpdatedUntrusted search path in the installer for Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
UpdatedExposure of information intended to be encrypted by some Zoom clients may lead to disclosure of sensitive information.
UpdatedImproper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
UpdatedImproper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of privilege via local access.
UpdatedUntrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access.
UpdatedClient-side enforcement of server-side security in Zoom clients before 5.14.10 may allow an authenticated user to enable information disclosure via network access.
UpdatedPath traversal in Zoom Desktop Client for Windows before 5.14.7 may allow an unauthenticated user to enable an escalation of privilege via network access.
UpdatedUncontrolled resource consumption in Zoom SDKs before 5.14.7 may allow an unauthenticated user to enable a denial of service via network access.
UpdatedBuffer overflow in Zoom Clients before 5.14.5 may allow an unauthenticated user to enable a denial of service via network access.
Updated- CVE-2023-36531: WordPress LiquidPoll plugin <= 3.3.68 - Broken Access Control vulnerability 4.3 Medium
Missing Authorization vulnerability in LiquidPoll LiquidPoll – Advanced Polls for Creators and Brands allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LiquidPoll – Advanced Polls for Creators and Brands: from n/a through 3.3.68.
Updated Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Smartypants SP Project & Document Manager plugin <= 4.67 versions.
UpdatedImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Favethemes Houzez - Real Estate WordPress Theme allows SQL Injection.This issue affects Houzez - Real Estate WordPress Theme: from n/a through 1.3.4.
UpdatedMissing Authorization vulnerability in FeedbackWP kk Star Ratings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects kk Star Ratings: from n/a through 5.4.3.
Updated- CVE-2023-36527: WordPress Post to CSV by BestWebSoft Plugin <= 1.4.0 is vulnerable to CSV Injection 4.7 Medium
Improper Neutralization of Formula Elements in a CSV File vulnerability in BestWebSoft Post to CSV by BestWebSoft.This issue affects Post to CSV by BestWebSoft: from n/a through 1.4.0.
Updated Missing Authorization vulnerability in Inqsys Technology Duplicate Post Page Menu & Custom Post Type allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Duplicate Post Page Menu & Custom Post Type: from n/a through 2.4.1.
UpdatedImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPJobBoard allows Blind SQL Injection.This issue affects WPJobBoard: from n/a through 5.9.0.
Updated- CVE-2023-36523: WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure 5.3 Medium
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gopi Ramasamy Email download link.This issue affects Email download link: from n/a through 3.7.
Updated Cross-Site Request Forgery (CSRF) vulnerability in WePupil Quiz Expert plugin <= 1.5.0 versions.
UpdatedA vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (All versions < V3.3.4), SIMATIC MV550 S (All versions < V3.3.4), SIMATIC MV560 U (All versions < V3.3.4), SIMATIC MV560 X (All versions < V3.3.4). The result synchronization server of the affected products contains a vulnerability that may lead to a denial of s
UpdatedAuthorization Bypass Through User-Controlled Key vulnerability in MarketingFire Editorial Calendar.This issue affects Editorial Calendar: from n/a through 3.7.12.
Updated- CVE-2023-36519: WordPress SW Product Bundles plugin <= 2.0.15 - Broken Access Control vulnerability 5.4 Medium
Missing Authorization vulnerability in wpthemego SW Product Bundles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SW Product Bundles: from n/a through 2.0.15.
Updated Missing Authorization vulnerability in Hugh Lashbrooke Post Hit Counter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Hit Counter: from n/a through 1.3.2.
UpdatedCross-Site Request Forgery (CSRF) vulnerability in Kevon Adonis WP Abstracts plugin <= 2.6.2 versions.
UpdatedMissing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.
UpdatedMissing Authorization vulnerability in ThimPress LearnPress.This issue affects LearnPress: from n/a through 4.2.3.
UpdatedCross-Site Request Forgery (CSRF) vulnerability in WooCommerce Shipping Multiple Addresses plugin <= 3.8.5 versions.
UpdatedCross-Site Request Forgery (CSRF) vulnerability in WooCommerce AutomateWoo plugin <= 5.7.5 versions.
Updated- CVE-2023-36512: WordPress AutomateWoo plugin <= 5.7.5 - Broken Access Control vulnerability 6.5 Medium
Missing Authorization vulnerability in Woo AutomateWoo.This issue affects AutomateWoo: from n/a through 5.7.5.
Updated Cross-Site Request Forgery (CSRF) vulnerability in WooCommerce WooCommerce Order Barcodes plugin <= 1.6.4 versions.
UpdatedMissing Authorization vulnerability in Reservation Diary ReDi Restaurant Reservation allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ReDi Restaurant Reservation: from n/a through 23.0211.
UpdatedMissing Authorization vulnerability in Suresh Chand CHP Ads Block Detector allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CHP Ads Block Detector: from n/a through 3.9.5.
UpdatedImproper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in BestWebSoft Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress contact-form-to-db allows SQL Injection.This issue affects Contact Form to DB by BestWebSoft – Messages Database Plugin For WordPress: from n/a through 1.7.1.
Updated- CVE-2023-36507: WordPress BookingPress Plugin <= 1.0.64 is vulnerable to Sensitive Data Exposure 5.3 Medium
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Repute Infosystems BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin.This issue affects BookingPress – Appointment Booking Calendar Plugin and Online Scheduling Plugin: from n/a through 1.0.64.
Updated Missing Authorization vulnerability in YITH YITH WooCommerce Waiting List allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects YITH WooCommerce Waiting List: from n/a through 2.13.0.
Updated- CVE-2023-36505: WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion 6.8 Medium
Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affects Ninja Forms Contact Form : from n/a through 3.6.24.
Updated - CVE-2023-36504: WordPress BBS e-Popup plugin <= 2.4.5 - Broken Access Control vulnerability 6.5 Medium
Missing Authorization vulnerability in BBS e-Theme BBS e-Popup.This issue affects BBS e-Popup: from n/a through 2.4.5.
Updated