Vulnerabilities (CVE)

Total 419331 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-43017 1 Ibm 1 Security Verify Access 2026-06-17 N/A 8.2 HIGH
IBM Security Verify Access 10.0.0.0 through 10.0.6.1 could allow a privileged user to install a configuration file that could allow remote access. IBM X-Force ID: 266155.
CVE-2023-43016 1 Ibm 2 Security Verify Access, Security Verify Access Docker 2026-06-17 N/A 7.3 HIGH
IBM Security Access Manager Container (IBM Security Verify Access Appliance 10.0.0.0 through 10.0.6.1 and IBM Security Verify Access Docker 10.0.0.0 through 10.0.6.1) could allow a remote user to log into the server due to a user account with an empty password. IBM X-Force ID: 266154.
CVE-2023-43015 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2026-06-17 N/A 5.4 MEDIUM
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064.
CVE-2023-43014 1 Projectworlds 1 Asset Management System 2026-06-17 N/A 8.8 HIGH
Asset Management System v1.0 is vulnerable to an Authenticated SQL Injection vulnerability on the 'first_name' and 'last_name' parameters of user.php page, allowing an authenticated attacker to dump all the contents of the database contents.
CVE-2023-43013 1 Projectworlds 1 Asset Management System 2026-06-17 N/A 9.8 CRITICAL
Asset Management System v1.0 is vulnerable to an unauthenticated SQL Injection vulnerability on the 'email' parameter of index.php page, allowing an external attacker to dump all the contents of the database contents and bypass the login control.
CVE-2023-42983 1 Apple 1 Macos 2026-06-17 N/A 6.4 MEDIUM
Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVE-2023-42982 1 Apple 1 Macos 2026-06-17 N/A 6.4 MEDIUM
Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVE-2023-42981 1 Apple 1 Macos 2026-06-17 N/A 5.4 MEDIUM
Processing a file may lead to a denial-of-service or potentially disclose memory contents. This issue is fixed in macOS 14. The issue was addressed with improved checks.
CVE-2023-42977 1 Apple 3 Ipad Os, Iphone Os, Macos 2026-06-17 N/A 7.8 HIGH
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to break out of its sandbox.
CVE-2023-42974 1 Apple 4 Ipad Os, Ipados, Iphone Os and 1 more 2026-06-17 N/A 7.0 HIGH
A race condition was addressed with improved state handling. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-42973 1 Apple 2 Ipados, Iphone Os 2026-06-17 N/A 4.0 MEDIUM
Private Browsing tabs may be accessed without authentication. This issue is fixed in iOS 17 and iPadOS 17. The issue was addressed with improved UI.
CVE-2023-42970 1 Apple 6 Ipados, Iphone Os, Macos and 3 more 2026-06-17 N/A 8.8 HIGH
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10, tvOS 17, Safari 17. Processing web content may lead to arbitrary code execution.
CVE-2023-42969 1 Apple 3 Ipados, Iphone Os, Macos 2026-06-17 N/A 3.3 LOW
An app may be able to break out of its sandbox. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. The issue was addressed with improved handling of caches.
CVE-2023-42962 1 Apple 2 Ipados, Iphone Os 2026-06-17 N/A 7.5 HIGH
This issue was addressed with improved checks This issue is fixed in iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3. A remote attacker may be able to cause a denial-of-service.
CVE-2023-42961 1 Apple 3 Ipados, Iphone Os, Macos 2026-06-17 N/A 6.3 MEDIUM
A path handling issue was addressed with improved validation. This issue is fixed in iOS 17 and iPadOS 17, iOS 16.7 and iPadOS 16.7, macOS Sonoma 14, macOS Ventura 13.6, macOS Monterey 12.7. A sandboxed process may be able to circumvent sandbox restrictions.
CVE-2023-42959 1 Apple 1 Macos 2026-06-17 N/A 7.0 HIGH
A race condition was addressed with improved state handling. This issue is fixed in macOS Sonoma 14. An app may be able to execute arbitrary code with kernel privileges.
CVE-2023-42958 1 Apple 1 Macos 2026-06-17 N/A 7.8 HIGH
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.4. An app may be able to gain elevated privileges.
CVE-2023-42957 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-06-17 N/A 3.3 LOW
A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14, watchOS 10. An app may be able to read sensitive location information.
CVE-2023-42956 1 Apple 4 Ipados, Iphone Os, Macos and 1 more 2026-06-17 N/A 6.5 MEDIUM
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service.
CVE-2023-42955 1 Claris 1 Filemaker Server 2026-06-17 N/A 4.9 MEDIUM
Claris International has successfully resolved an issue of potentially exposing password information to front-end websites when signed in to the Admin Console with an administrator role. This issue has been fixed in FileMaker Server 20.3.1 by eliminating the send of Admin Role passwords in the Node.js socket.