CWE-345

658 vulnerabilities with CWE-345

CVE-2023-38831 HIGH KEV

WinRAR CVE-2023-38831 Exploit

CVSS 7.8

CVE-2023-22955 HIGH

AudioCodes 445HD 405HD C450HD Firmware < 3.4.4.1000 - Insufficient Firmware Validation

CVSS 7.8

CVE-2023-36541 HIGH

Zoom Desktop Client for Windows <5.14.5 - Privilege Escalation

CVSS 8.0

CVE-2023-4177 LOW

EmpowerID < 7.205.0.0 - Information Disclosure in Multi-Factor Authentication Code Handler

CVSS 2.6

CVE-2023-36139 CRITICAL

PHPJabbers Cleaning Business Software 1.0 - RCE

CVSS 9.8

CVE-2023-36134 CRITICAL

PHP Jabbers Class Scheduling System 1.0 - RCE

CVSS 9.8

CVE-2023-3749 HIGH

VideoEdge < 6.1.1 - Local Configuration File Tampering

CVSS 7.1

CVE-2023-36858 HIGH

BIG-IP Edge Client - Info Disclosure

CVSS 7.1

CVE-2023-2314 MEDIUM

Google Chrome <111.0.5563.64 - CSRF

CVSS 6.5

CVE-2023-37920 HIGH

certifi >=2015.4.28 <2023.7.22 - Insufficient Verification of Data Authenticity

CVSS 7.5

CVE-2023-30562 MEDIUM

BD Alaris Guardrails Editor < 12.1.2 - Insufficient Verification of Data Authenticity in GRE Dataset File

CVSS 6.7

CVE-2023-30559 MEDIUM

BD Alaris 8015 PCU Firmware < 12.1.3 - Unauthenticated Firmware Update Package Tampering

CVSS 5.2

CVE-2023-25178 CRITICAL

Honeywell C300 Firmware 501.1-501.6hf8 - Remote Code Execution via Malicious Firmware Load

CVSS 9.8

CVE-2023-37264 LOW

Tekton Pipelines >= 0.35.0 - Insufficient Verification of Data Authenticity in ChildStatusReference

CVSS 3.7

CVE-2023-3325 HIGH

CMS Commander < 2.287 - Unauthenticated Authorization Bypass via Insufficient Cryptographic Signature

CVSS 8.1

CVE-2023-30759 HIGH

Ricoh Printer Driver Packager NX 1.0.02-1.1.25 - Unauthenticated Arbitrary Code Execution via Modified Driver Package

CVSS 7.8

CVE-2023-2897 LOW

Brizy Page Builder <2.4.18 - Info Disclosure

CVSS 3.7

CVE-2023-2866 HIGH

Advantech WebAccess <8.4.5 - Code Injection

CVSS 7.3

CVE-2023-3028 HIGH

HopeChart HQT-401 - Unauthenticated RCE

CVSS 8.6

CVE-2023-2987 CRITICAL

Wordapp <= 1.6.0 - Unauthenticated Authorization Bypass via Cryptographic Signature Weakness

CVSS 9.8

CVE-2023-28386 HIGH

Snap One OvrC Pro <7.2 - Code Execution

CVSS 8.6

CVE-2023-32993 MEDIUM

Jenkins SAML Single Sign On Plugin < 2.0.2 - Insufficient Verification of Data Authenticity via SAML Metadata Retrieval

CVSS 4.8

CVE-2023-31502 HIGH

Altenergy Power Control Software C1.2.5 - RCE

CVSS 7.2

CVE-2023-28863 CRITICAL

AMI MegaRAC SPx12-SPx13 - Info Disclosure

CVSS 9.1

CVE-2023-27748 CRITICAL

BlackVue DR750-2CH LTE 1.012_2022.10.26 - Insufficient Firmware Authenticity Verification

CVSS 9.8