Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: December 2023

162 records · 9 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

  • CVE-2023-48842
    40Plan

    D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    dlink · go-rt-ac750 firmwareDec 1, 2023

  • CVE-2023-4460
    21Monitor

    Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG

    MediumCVSS 5.4Proof of conceptEPSS 1%

    uploading svg\, webp and ico files project · uploading svg\, webp and ico filesDec 4, 2023

  • CVE-2023-6063
    60This week

    WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection

    HighCVSS 7.5WeaponizedEPSS 73%

    wpfastestcache · wp fastest cacheDec 4, 2023

  • CVE-2023-40084
    31Monitor

    In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free.

    HighCVSS 7.8Proof of conceptEPSS 0%

    google · androidDec 4, 2023

  • CVE-2023-40459
    31Monitor

    Improper input leads to DoS

    HighCVSS 7.5Proof of conceptEPSS 2%

    sierrawireless · aleosDec 4, 2023

  • CVE-2023-45777
    31Monitor

    In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privil

    HighCVSS 7.8Proof of conceptEPSS 0%

    google · androidDec 4, 2023

  • CVE-2023-45779
    31Monitor

    In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto.

    HighCVSS 7.8Proof of conceptEPSS 0%

    google · androidDec 4, 2023

  • CVE-2023-49285
    56Plan

    Denial of Service in HTTP Message Processing in Squid

    HighCVSS 7.5No exploitEPSS 88%

    squid-cache · squidDec 4, 2023

  • CVE-2023-49286
    33Monitor

    Denial of Service in Helper Process management

    HighCVSS 7.5No exploitEPSS 10%

    squid-cache · squidDec 4, 2023

  • CVE-2023-49293
    24Monitor

    Cross-site Scripting in `server.transformIndexHtml` via URL payload in vite

    MediumCVSS 6.1Proof of conceptEPSS 0%

    vitejs · viteDec 4, 2023

  • CVE-2023-5808
    26Monitor

    System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure vi

    MediumCVSS 6.5Proof of conceptEPSS 0%

    hitachi · vantara hitachi network attached storageDec 4, 2023

  • CVE-2023-28588
    30Monitor

    Integer Overflow or Wraparound in Bluetooth Host

    HighCVSS 7.5Proof of conceptEPSS 0%

    qualcomm · apq8017 firmwareDec 4, 2023

  • CVE-2023-33063
    61This week

    Use After Free in DSP Services

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    qualcomm · 315 5g iot modem firmwareDec 4, 2023

  • CVE-2023-33106
    61This week

    Use of Out-of-range Pointer Offset in Graphics

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    qualcomm · ar8035 firmwareDec 4, 2023

  • CVE-2023-33107
    61This week

    Integer Overflow or Wraparound in Graphics Linux

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    qualcomm · 315 5g iot modem firmwareDec 4, 2023

  • CVE-2023-43472
    41Plan

    An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.

    HighCVSS 7.5Proof of conceptEPSS 36%

    lfprojects · mlflowDec 5, 2023

  • CVE-2023-49070
    68This week

    Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

    CriticalCVSS 9.8WeaponizedEPSS 95%

    apache · ofbizDec 5, 2023

  • CVE-2023-6448
    70This week

    Unitronics VisiLogic uses a default administrative password

    CriticalCVSS 9.8KEVWeaponizedEPSS 2%

    unitronics · vision1210 firmwareDec 5, 2023

  • CVE-2023-44221
    81Now

    Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administr

    HighCVSS 7.2KEVWeaponizedEPSS 76%

    sonicwall · sma 200 firmwareDec 5, 2023

  • CVE-2023-22522
    39Monitor

    This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input int

    HighCVSS 8.8No exploitEPSS 12%

    atlassian · confluence data centerDec 6, 2023

  • CVE-2023-22523
    38Monitor

    This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery

    HighCVSS 8.8No exploitEPSS 11%

    atlassian · assets discovery cloudDec 6, 2023

  • CVE-2023-22524
    46Plan

    Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability.

    CriticalCVSS 9.8Proof of conceptEPSS 24%

    atlassian · companionDec 6, 2023

  • CVE-2023-49897
    80Now

    An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier.

    HighCVSS 8.8KEVWeaponizedEPSS 50%

    fxc · ae1021 firmwareDec 6, 2023

  • CVE-2023-48849
    39Monitor

    Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitrary code due to inco

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    ruijie · rg-eg1000c firmwareDec 6, 2023

  • CVE-2023-39539
    31Monitor

    Failure when uploading a Logo image file

    HighCVSS 7.8Proof of conceptEPSS 0%

    ami · aptio vDec 6, 2023

  • CVE-2023-48123
    55Plan

    An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafte

    HighCVSS 8.8Proof of conceptEPSS 67%

    netgate · pfsenseDec 6, 2023

  • CVE-2023-6568
    24Monitor

    Reflected XSS via Content-Type Header in mlflow/mlflow

    MediumCVSS 6.1Proof of conceptEPSS 1%

    lfprojects · mlflowDec 7, 2023

  • CVE-2023-43102
    24Monitor

    An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4.

    MediumCVSS 6.1No exploitEPSS 0%

    zimbra · collaborationDec 7, 2023

  • CVE-2023-50164
    63This week

    Apache Struts: File upload component had a directory traversal vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 80%

    apache · strutsDec 7, 2023

  • CVE-2022-45362
    39Monitor

    WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)

    MediumCVSS 6.5Proof of conceptEPSS 41%

    paytm · payment gatewayDec 7, 2023

  • CVE-2023-46974
    21Monitor

    Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafte

    MediumCVSS 5.4Proof of conceptEPSS 0%

    mayurik · courier management systemDec 7, 2023

  • CVE-2023-6579
    46Plan

    osCommerce POST Parameter shopping-cart sql injection

    CriticalCVSS 9.8No exploitEPSS 24%

    oscommerce · oscommerceDec 7, 2023

  • CVE-2023-45866
    27Monitor

    Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and

    MediumCVSS 6.3Proof of conceptEPSS 7%

    google · androidDec 8, 2023

  • CVE-2023-47565
    87Now

    An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x.

    HighCVSS 8.8KEVWeaponizedEPSS 73%

    qnap · qvr firmwareDec 8, 2023

  • CVE-2023-6612
    48Plan

    Totolink X5000R cstecgi.cgi setWizardCfg os command injection

    CriticalCVSS 9.8No exploitEPSS 30%

    totolink · x5000r firmwareDec 8, 2023

  • CVE-2023-6654
    35Monitor

    PHPEMS Session Data session.cls.php deserialization

    HighCVSS 8.8Proof of conceptEPSS 1%

    phpems · phpemsDec 10, 2023

  • CVE-2023-6655
    40Plan

    Hongjing e-HR Login Interface loadhistroyorgtree sql injection

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    hrp2000 · e-hrDec 10, 2023

  • CVE-2023-50465
    21Monitor

    A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated use

    MediumCVSS 5.4Proof of conceptEPSS 0%

    monicahq · monicaDec 10, 2023

  • CVE-2023-49964
    45Plan

    An issue was discovered in Hyland Alfresco Community Edition through 7.2.0.

    HighCVSS 8.8Proof of conceptEPSS 34%

    hyland · alfresco content servicesDec 11, 2023

  • CVE-2023-6538
    26Monitor

    System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via

    MediumCVSS 6.5Proof of conceptEPSS 1%

    hitachi · system management unit firmwareDec 11, 2023

  • CVE-2023-49494
    24Monitor

    DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEdi

    MediumCVSS 6.1Proof of conceptEPSS 1%

    dedecms · dedecmsDec 11, 2023

  • CVE-2023-50245
    39Monitor

    OpenEXR-viewer memory overflow vulnerability

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    afichet · openexr viewerDec 11, 2023

  • CVE-2023-5536
    25Monitor

    A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate

    MediumCVSS 6.4Proof of conceptEPSS 0%

    canonical · ubuntu linuxDec 11, 2023

  • CVE-2023-41623
    28Monitor

    Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.

    HighCVSS 7.2Proof of conceptEPSS 0%

    emlog · emlogDec 12, 2023

  • CVE-2023-46454
    46Plan

    In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the p

    CriticalCVSS 9.8Proof of conceptEPSS 23%

    gl-inet · gl-ar300m firmwareDec 12, 2023

  • CVE-2023-46455
    44Plan

    In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN cli

    HighCVSS 7.5Proof of conceptEPSS 46%

    gl-inet · gl-ar300m firmwareDec 12, 2023

  • CVE-2023-46456
    46Plan

    In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload fu

    CriticalCVSS 9.8No exploitEPSS 24%

    gl-inet · gl-ar300m firmwareDec 12, 2023

  • CVE-2023-28465
    30Monitor

    The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to cer

    HighCVSS 7.5Proof of conceptEPSS 1%

    hapifhir · hl7 fhir coreDec 12, 2023

  • CVE-2023-35628
    60This week

    Windows MSHTML Platform Remote Code Execution Vulnerability

    HighCVSS 8.1No exploitEPSS 92%

    microsoft · windows 10 1507Dec 12, 2023

  • CVE-2023-36003
    30Monitor

    XAML Diagnostics Elevation of Privilege Vulnerability

    HighCVSS 7.3Proof of conceptEPSS 2%

    microsoft · windows 10 1507Dec 12, 2023

  • CVE-2023-36005
    39Monitor

    Windows Telephony Server Elevation of Privilege Vulnerability

    HighCVSS 8.1No exploitEPSS 23%

    microsoft · windows 10 1507Dec 12, 2023

  • CVE-2023-36019
    34Monitor

    Microsoft Power Platform Connector Spoofing Vulnerability

    HighCVSS 7.4No exploitEPSS 15%

    microsoft · azure logic appsDec 12, 2023

  • CVE-2023-43364
    40Plan

    main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    arjunsharda · searchorDec 12, 2023

  • CVE-2023-50252
    46Plan

    php-svg-lib unsafe attributes merge when parsing `use` tag

    CriticalCVSS 9.8No exploitEPSS 23%

    dompdf · php-svg-libDec 12, 2023

  • CVE-2023-35636
    31Monitor

    Microsoft Outlook Information Disclosure Vulnerability

    MediumCVSS 6.5Proof of conceptEPSS 17%

    microsoft · 365 appsDec 12, 2023

  • CVE-2023-6710
    22Monitor

    Mod_cluster/mod_proxy_cluster: stored cross site scripting

    MediumCVSS 5.4Proof of conceptEPSS 2%

    modcluster · mod proxy clusterDec 12, 2023

  • CVE-2022-22942
    40Plan

    The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other

    HighCVSS 7.8WeaponizedEPSS 2%

    vmware · photon osDec 13, 2023

  • CVE-2023-6379
    25Monitor

    Cross-site Scripting in Alkacon Software OpenCms

    MediumCVSS 6.1Proof of conceptEPSS 1%

    alkacon · opencmsDec 13, 2023

  • CVE-2023-6380
    24Monitor

    Open Redirect in Alkacon Software OpenCms

    MediumCVSS 6.1Proof of conceptEPSS 1%

    alkacon · opencmsDec 13, 2023

  • CVE-2023-34194
    30Monitor

    StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a

    HighCVSS 7.5Proof of conceptEPSS 1%

    tinyxml project · tinyxmlDec 13, 2023

  • CVE-2023-43813
    44Plan

    glpi Authenticated SQL Injection

    HighCVSS 8.8No exploitEPSS 30%

    glpi-project · glpiDec 13, 2023

  • CVE-2023-46727
    59Plan

    GLPI SQL injection through inventory agent request

    CriticalCVSS 9.8No exploitEPSS 67%

    glpi-project · glpiDec 13, 2023

  • CVE-2023-50443
    18Monitor

    Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can

    MediumCVSS 4.6No exploitEPSS 0%

    primx · cryhodDec 13, 2023

  • CVE-2023-41621
    24Monitor

    A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php.

    MediumCVSS 6.1Proof of conceptEPSS 1%

    emlog · emlogDec 13, 2023

  • CVE-2023-31546
    53Plan

    Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.

    CriticalCVSS 9.6Proof of conceptEPSS 49%

    dedebiz · dedebizDec 13, 2023

  • CVE-2023-45184
    30Monitor

    IBM i Access Client Solutions

    HighCVSS 7.5Proof of conceptEPSS 1%

    ibm · i access client solutionsDec 13, 2023

  • CVE-2023-48084
    49Plan

    Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.

    CriticalCVSS 9.8Proof of conceptEPSS 33%

    nagios · nagios xiDec 14, 2023

  • CVE-2023-48085
    62This week

    Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.

    CriticalCVSS 9.8No exploitEPSS 75%

    nagios · nagios xiDec 14, 2023

  • CVE-2023-45182
    26Monitor

    IBM i Access Client Solutions information disclosure

    MediumCVSS 6.5Proof of conceptEPSS 0%

    ibm · i access client solutionsDec 14, 2023

  • CVE-2023-45185
    35Monitor

    IBM i Access Client Solutions code execution

    HighCVSS 8.8Proof of conceptEPSS 0%

    ibm · i access client solutionsDec 14, 2023

  • CVE-2023-6572
    33Monitor

    Command Injection in gradio-app/gradio

    HighCVSS 8.1Proof of conceptEPSS 1%

    gradio project · gradioDec 14, 2023

  • CVE-2022-45365
    39Monitor

    WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1Proof of conceptEPSS 49%

    urosevic · stock tickerDec 14, 2023

  • CVE-2023-50564
    44Plan

    An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary

    HighCVSS 8.8Proof of conceptEPSS 29%

    pluck-cms · pluckDec 14, 2023

  • CVE-2023-6595
    21Monitor

    WhatsUp Gold Unauthenticated Access to an API Endpoint

    MediumCVSS 5.3Proof of conceptEPSS 0%

    progress · whatsup goldDec 14, 2023

  • CVE-2023-50269
    47Plan

    SQUID-2023:10 Denial of Service in HTTP Request parsing

    HighCVSS 7.5No exploitEPSS 57%

    squid-cache · squidDec 14, 2023

  • CVE-2023-49294
    44Plan

    Asterisk Path Traversal vulnerability

    HighCVSS 7.5No exploitEPSS 45%

    digium · asteriskDec 14, 2023

  • CVE-2023-6702
    48Plan

    Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted

    HighCVSS 8.8Proof of conceptEPSS 44%

    google · chromeDec 14, 2023

  • CVE-2023-6831
    33Monitor

    Path Traversal: '\..\filename' in mlflow/mlflow

    HighCVSS 8.1Proof of conceptEPSS 3%

    lfprojects · mlflowDec 14, 2023

  • CVE-2023-6837
    32Monitor

    Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation

    HighCVSS 8.2No exploitEPSS 0%

    wso2 · api managerDec 15, 2023

  • CVE-2023-6553
    68This week

    Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

    CriticalCVSS 9.8WeaponizedEPSS 97%

    backupbliss · backup migrationDec 15, 2023

  • CVE-2023-50917
    60This week

    MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters.

    CriticalCVSS 9.8WeaponizedEPSS 38%

    mjdm · majordomoDec 15, 2023

  • CVE-2023-50719
    55Plan

    XWiki Platform Solr search discloses password hashes of all users

    HighCVSS 7.5Proof of conceptEPSS 83%

    xwiki · xwikiDec 15, 2023

  • CVE-2023-50720
    39Monitor

    XWiki Platform Solr search discloses email addresses of users

    MediumCVSS 5.3Proof of conceptEPSS 59%

    xwiki · xwikiDec 15, 2023

  • CVE-2023-50721
    59Plan

    XWiki Platform RCE from account through SearchAdmin

    HighCVSS 8.8No exploitEPSS 78%

    xwiki · xwikiDec 15, 2023

  • CVE-2023-50965
    39Monitor

    In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and po

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    starnight · micro http serverDec 16, 2023

  • CVE-2023-6893
    51Plan

    Hikvision Intercom Broadcasting System exportrecord.php path traversal

    HighCVSS 7.5No exploitEPSS 70%

    hikvision · intercom broadcast systemDec 17, 2023

  • CVE-2023-6895
    66This week

    Hikvision Intercom Broadcasting System ping.php os command injection

    CriticalCVSS 9.8Proof of conceptEPSS 89%

    hikvision · intercom broadcast systemDec 17, 2023

  • CVE-2023-6909
    57Plan

    Path Traversal: '\..\filename' in mlflow/mlflow

    HighCVSS 7.5Proof of conceptEPSS 89%

    lfprojects · mlflowDec 18, 2023

  • CVE-2023-6065
    27Monitor

    Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure

    MediumCVSS 5.3Proof of conceptEPSS 18%

    quttera · quttera web malware scannerDec 18, 2023

  • CVE-2023-6289
    17Monitor

    Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export

    MediumCVSS 4.3Proof of conceptEPSS 0%

    swteplugins · swift performanceDec 18, 2023

  • CVE-2023-48795
    51Plan

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    MediumCVSS 5.9Proof of conceptEPSS 93%

    ssh · sshDec 18, 2023

  • CVE-2023-51385
    32Monitor

    In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is refere

    MediumCVSS 6.5Proof of conceptEPSS 19%

    openbsd · opensshDec 18, 2023

  • CVE-2023-44982
    30Monitor

    WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5Proof of conceptEPSS 1%

    meowapps · perfect imagesDec 18, 2023

  • CVE-2023-49489
    24Monitor

    Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escala

    MediumCVSS 6.1Proof of conceptEPSS 0%

    kodcloud · kodexplorerDec 19, 2023

  • CVE-2023-6856
    41Plan

    The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver.

    HighCVSS 8.8No exploitEPSS 20%

    mozilla · firefoxDec 19, 2023

  • CVE-2023-1514
    30Monitor

    A vulnerability exists in the component RTU500 Scripting interface.

    HighCVSS 7.5Proof of conceptEPSS 0%

    hitachienergy · rtu500 scripting interfaceDec 19, 2023

  • CVE-2021-22962
    63This week

    An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.

    CriticalCVSS 9.1No exploitEPSS 91%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-41727
    50Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 36%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46216
    50Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 36%

    ivanti · avalancheDec 19, 2023

  • CVE-2023-46217
    50Plan

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    CriticalCVSS 9.8No exploitEPSS 36%

    ivanti · avalancheDec 19, 2023