Lista CVE 2023/7xxx

CVE nel gruppo: 7xxx

CVE-2023-7043 (N/A)

CVE-2023-7044 (Unquoted path privilege vulnerability in ESET products for Windows)

CVE-2023-7045 (N/A)

CVE-2023-7046 (Cross-Site Request Forgery (CSRF) in GitLab)

CVE-2023-7047 (N/A)

CVE-2023-7048 (N/A)

CVE-2023-7049 (N/A)

CVE-2023-7050 (Custom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode)

CVE-2023-7051 (PHPGurukul Online Notes Sharing System profile.php cross site scripting)

CVE-2023-7052 (PHPGurukul Online Notes Sharing System manage-notes.php cross-site request forgery)

CVE-2023-7053 (PHPGurukul Online Notes Sharing System profile.php cross-site request forgery)

CVE-2023-7054 (PHPGurukul Online Notes Sharing System signup.php weak password)

CVE-2023-7055 (PHPGurukul Online Notes Sharing System add-notes.php unrestricted upload)

CVE-2023-7056 (PHPGurukul Online Notes Sharing System Contact Information profile.php access control)

CVE-2023-7057 (code-projects Faculty Management System subjects.php cross site scripting)

CVE-2023-7058 (code-projects Faculty Management System yearlevel.php cross site scripting)

CVE-2023-7059 (SourceCodester Simple Student Attendance System path traversal)

CVE-2023-7060 (SourceCodester School Visitor Log e-Book log-book.php cross site scripting)

CVE-2023-7061 (Missing Security Control in Zephyr OS IP Packet Handling)

CVE-2023-7062 (Advanced File Manager Shortcode <= 2.5.3 - Authenticated (Contributor+) Arbitrary File Upload)

CVE-2023-7063 (Advanced File Manager Shortcodes <= 2.4 - Authenticated (Contributor+) Directory Traversal)

CVE-2023-7064 (N/A)

CVE-2023-7065 (N/A)

CVE-2023-7066 (N/A)

CVE-2023-7067 (Siemens Teamcenter Visualization and JT2Go Out-of-bounds Read)

CVE-2023-7068 (N/A)

CVE-2023-7069 (N/A)

CVE-2023-7070 (N/A)

CVE-2023-7071 (N/A)

CVE-2023-7072 (N/A)

CVE-2023-7073 (N/A)

CVE-2023-7074 (Auto Featured Image (Auto Post Thumbnail) <= 4.0.0 - Authenticated (Author+) Server-Side Request Forgery)

CVE-2023-7075 (WP Social Bookmark Menu <= 1.2 - Settings Update via CSRF)

CVE-2023-7076 (code-projects Point of Sales and Inventory Management System checkout.php cross site scripting)

CVE-2023-7077 (slawkens MyAAC bugtracker.php cross site scripting)

CVE-2023-7078 (N/A)

CVE-2023-7079 (Server-Side Request Forgery (SSRF) in Miniflare)

CVE-2023-7080 (Arbitrary remote file read in Wrangler dev server)

CVE-2023-7081 (Arbitrary remote code execution within wrangler dev Workers sandbox)

CVE-2023-7082 (SQLi in PosTahsil’s Online Payment System)

CVE-2023-7083 (WP All Import < 3.7.3 - Admin+ Arbitrary File Upload to RCE)

CVE-2023-7084 (Voting Record <= 2.0 - Settings Update to Stored XSS via CSRF)

CVE-2023-7085 (Voting Record <= 2.0 - Subscriber+ Stored XSS)

CVE-2023-7089 (Scalable Vector Graphics (SVG) <= 3.4 - Author+ Stored XSS via SVG)

CVE-2023-7090 (Easy SVG Allow <= 1.0 - Author+ Stored XSS via SVG)

CVE-2023-7091 (Sudo: improper handling of ipa_hostname leads to privilege mismanagement)

CVE-2023-7092 (Dreamer CMS uploadFile unrestricted upload)

CVE-2023-7093 (Uniway UW-302VP Admin Web Interface wlan_basic_set.cgi cross-site request forgery)

CVE-2023-7094 (KylinSoft kylin-system-updater com.kylin.systemupgrade Service UpgradeStrategiesDbus.py os command injection)

CVE-2023-7095 (Netentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosure)

CVE-2023-7096 (Totolink A7100RU HTTP POST Request main buffer overflow)

CVE-2023-7097 (code-projects Faculty Management System crud.php sql injection)

CVE-2023-7098 (code-projects Water Billing System addbill.php sql injection)

CVE-2023-7099 (icret EasyImages hide.php path traversal)

CVE-2023-7100 (PHPGurukul Nipah Virus Testing Management System bwdates-report-result.php sql injection)

CVE-2023-7101 (PHPGurukul Restaurant Table Booking System bwdates-report-details.php sql injection)

CVE-2023-7102 (Arbitrary Code Execution (ACE) Vulnerability)

CVE-2023-7103 (Remote Code Execution (RCE) Vulnerability)

CVE-2023-7104 (Authentication Bypass in ZKSoftware’s UFace 5)

CVE-2023-7105 (SQLite SQLite3 make alltest sqlite3session.c sessionReadRecord heap-based overflow)