İçeriğe atla
Noroxi

Yayın tarihine göre

Mart 2023: sömürülen ve yeni ciddi CVE kayıtları

95 kayıt · 15 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2023-20032
    48Planlayın

    On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the HFS+ partition file p

    KritikCVSS 9,8İstismar yokEPSS %29

    clamav · clamav1 Mar 2023

  • CVE-2022-36021
    40Planlayın

    Redis string pattern matching can be abused to achieve Denial of Service

    OrtaCVSS 5,5İstismar yokEPSS %59

    redis · redis1 Mar 2023

  • CVE-2023-0507
    26İzleyin

    Grafana is an open-source platform for monitoring and observability.

    OrtaCVSS 5,4İstismar yokEPSS %15

    grafana · grafana1 Mar 2023

  • CVE-2023-26477
    61Bu hafta

    org.xwiki.platform:xwiki-platform-flamingo-theme-ui Eval Injection vulnerability

    KritikCVSS 9,8İstismar yokEPSS %74

    xwiki · xwiki2 Mar 2023

  • CVE-2023-0084
    33İzleyin

    Metform Elementor Contact Form Builder <= 3.1.2 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %28

    wpmet · metform elementor contact form builder2 Mar 2023

  • CVE-2023-26475
    54Planlayın

    XWiki Platform vulnerable to Remote Code Execution in Annotations

    YüksekCVSS 8,8İstismar yokEPSS %63

    xwiki · xwiki2 Mar 2023

  • CVE-2023-0656
    42Planlayın

    A Stack-based buffer overflow vulnerability in the SonicOS allows a remote unauthenticated attacker to cause Denial of Service (DoS), which

    YüksekCVSS 7,5Kavram kanıtıEPSS %41

    sonicwall · sonicos2 Mar 2023

  • CVE-2023-1162
    43Planlayın

    DrayTek Vigor 2960 Web Management Interface mainfunction.cgi command injection

    YüksekCVSS 8,8İstismar yokEPSS %26

    draytek · vigor 2960 firmware3 Mar 2023

  • CVE-2022-45551
    46Planlayın

    An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command t

    KritikCVSS 9,8İstismar yokEPSS %23

    zbt · we1626 firmware3 Mar 2023

  • CVE-2023-20078
    42Planlayın

    Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities

    KritikCVSS 9,8İstismar yokEPSS %10

    cisco · ip phone 6871 firmware3 Mar 2023

  • CVE-2023-20079
    33İzleyin

    Cisco IP Phone 6800, 7800, 7900, and 8800 Series Web UI Vulnerabilities

    YüksekCVSS 7,5İstismar yokEPSS %10

    cisco · ip phone 6871 firmware3 Mar 2023

  • CVE-2021-36393
    55Planlayın

    In Moodle, an SQL injection risk was identified in the library fetching a user's recent courses.

    KritikCVSS 9,8Kavram kanıtıEPSS %52

    moodle · moodle6 Mar 2023

  • CVE-2023-24734
    45Planlayın

    An arbitrary file upload vulnerability in the camera_upload.php component of PMB v7.4.6 allows attackers to execute arbitrary code via a cra

    KritikCVSS 9,8İstismar yokEPSS %20

    sigb · pmb6 Mar 2023

  • CVE-2023-26601
    40Planlayın

    Zoho ManageEngine ServiceDesk Plus through 14104, Asset Explorer through 6987, ServiceDesk Plus MSP before 14000, and Support Center Plus be

    YüksekCVSS 7,5İstismar yokEPSS %34

    zohocorp · manageengine assetexplorer6 Mar 2023

  • CVE-2019-8720
    65Bu hafta

    A vulnerability was found in WebKit.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %1

    webkitgtk · webkitgtk6 Mar 2023

  • CVE-2023-25690
    64Bu hafta

    Apache HTTP Server: HTTP request splitting with mod_rewrite and mod_proxy

    KritikCVSS 9,8Kavram kanıtıEPSS %84

    apache · http server7 Mar 2023

  • CVE-2022-41328
    61Bu hafta

    A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 th

    YüksekCVSS 7,1KEVSilahlaştırılmışEPSS %10

    fortinet · fortios7 Mar 2023

  • CVE-2023-24775
    45Planlayın

    Funadmin v3.2.0 was discovered to contain a SQL injection vulnerability via the selectFields parameter at \member\Member.php.

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    funadmin · funadmin7 Mar 2023

  • CVE-2023-27482
    62Bu hafta

    homeassistant is an open source home automation tool.

    KritikCVSS 10,0Kavram kanıtıEPSS %72

    home-assistant · home-assistant8 Mar 2023

  • CVE-2023-25573
    45Planlayın

    Improper access control to download file in metersphere

    YüksekCVSS 7,5Kavram kanıtıEPSS %51

    metersphere · metersphere9 Mar 2023

  • CVE-2023-0050
    49Planlayın

    An issue has been discovered in GitLab affecting all versions starting from 13.7 before 15.7.8, all versions starting from 15.8 before 15.8.

    OrtaCVSS 5,4İstismar yokEPSS %92

    gitlab · gitlab9 Mar 2023

  • CVE-2023-27853
    45Planlayın

    NETGEAR Nighthawk WiFi6 Router prior to V1.0.10.94 contains a format string vulnerability in a SOAP service that could allow an attacker to

    KritikCVSS 9,8İstismar yokEPSS %19

    netgear · rax30 firmware10 Mar 2023

  • CVE-2022-44574
    49Planlayın

    An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on

    YüksekCVSS 7,5İstismar yokEPSS %62

    ivanti · avalanche10 Mar 2023

  • CVE-2023-27532
    84Hemen

    Vulnerability in Veeam Backup & Replication component allows encrypted credentials stored in the configuration database to be obtained.

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %81

    veeam · veeam backup \& replication10 Mar 2023

  • CVE-2023-24033
    49Planlayın

    The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 baseband modem chipsets do not properly chec

    KritikCVSS 9,8İstismar yokEPSS %32

    samsung · exynos modem 5300 firmware13 Mar 2023

  • CVE-2022-31474
    49Planlayın

    WordPress BackupBuddy Plugin 8.5.8.0-8.7.4.1 is vulnerable to Directory Traversal

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    ithemes · backupbuddy13 Mar 2023

  • CVE-2023-27063
    39İzleyin

    Tenda V15V1.0 V15.11.0.14(1521_3190_1058) was discovered to contain a buffer overflow vulnerability via the DNSDomainName parameter in the f

    KritikCVSS 9,8İstismar yokEPSS %1

    tenda · w15e firmware13 Mar 2023

  • CVE-2023-25279
    48Planlayın

    OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload.

    KritikCVSS 9,8İstismar yokEPSS %30

    dlink · dir-820l firmware13 Mar 2023

  • CVE-2022-39214
    38İzleyin

    Authenticated users of Combodo iTop can take over any account

    YüksekCVSS 7,5İstismar yokEPSS %25

    combodo · itop14 Mar 2023

  • CVE-2023-23383
    22İzleyin

    Service Fabric Explorer Spoofing Vulnerability

    OrtaCVSS 4,7İstismar yokEPSS %11

    microsoft · azure service fabric14 Mar 2023

  • CVE-2023-23397
    98Hemen

    Microsoft Outlook Elevation of Privilege Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    microsoft · 365 apps14 Mar 2023

  • CVE-2023-24880
    70Bu hafta

    Windows SmartScreen Security Feature Bypass Vulnerability

    OrtaCVSS 4,4KEVSilahlaştırılmışEPSS %78

    microsoft · windows 10 160714 Mar 2023

  • CVE-2023-28343
    64Bu hafta

    OS command injection affects Altenergy Power Control Software C1.2.5 via shell metacharacters in the index.php/management/set_timezone timez

    KritikCVSS 9,8Kavram kanıtıEPSS %84

    apsystems · energy communication unit firmware14 Mar 2023

  • CVE-2023-27598
    30İzleyin

    OpenSIPS has vulnerability in the parse_via() function

    YüksekCVSS 7,5İstismar yokEPSS %0

    opensips · opensips15 Mar 2023

  • CVE-2023-1389
    95Hemen

    TP-Link Archer AX21 (AX1800) firmware versions before 1.1.4 Build 20230219 contained a command injection vulnerability in the country form o

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    tp-link · archer ax21 firmware15 Mar 2023

  • CVE-2023-28461
    89Hemen

    Array Networks Array AG Series and vxAG (9.4.0.481 and earlier) allow remote code execution.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %68

    arraynetworks · arrayos ag15 Mar 2023

  • CVE-2023-25280
    98Hemen

    OS Command injection vulnerability in D-Link DIR820LA1_FW105B03 allows attackers to escalate privileges to root via a crafted payload with t

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %97

    dlink · dir-820l firmware15 Mar 2023

  • CVE-2022-43604
    43Planlayın

    An out-of-bounds write vulnerability exists in the GetAttributeList attribute_count_request functionality of EIP Stack Group OpENer developm

    KritikCVSS 9,8İstismar yokEPSS %14

    opener project · opener16 Mar 2023

  • CVE-2022-43605
    43Planlayın

    An out-of-bounds write vulnerability exists in the SetAttributeList attribute_count_request functionality of EIP Stack Group OpENer developm

    KritikCVSS 9,8İstismar yokEPSS %14

    opener project · opener16 Mar 2023

  • CVE-2023-1454
    50Planlayın

    jeecg-boot qurestSql sql injection

    KritikCVSS 9,8Kavram kanıtıEPSS %35

    jeecg · jeecg boot17 Mar 2023

  • CVE-2023-27253
    62Bu hafta

    A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbi

    YüksekCVSS 8,8SilahlaştırılmışEPSS %89

    netgate · pfsense17 Mar 2023

  • CVE-2023-0631
    53Planlayın

    Paid Memberships Pro < 2.9.12 - Subscriber+ SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %60

    strangerstudios · paid memberships pro20 Mar 2023

  • CVE-2023-28425
    40Planlayın

    Specially crafted MSETNX command can lead to denial-of-service

    OrtaCVSS 5,5İstismar yokEPSS %58

    redis · redis20 Mar 2023

  • CVE-2022-43663
    43Planlayın

    An integer conversion vulnerability exists in the SORBAx64.dll RecvPacket functionality of WellinTech KingHistorian 35.01.00.05.

    KritikCVSS 9,8İstismar yokEPSS %14

    wellintech · kinghistorian20 Mar 2023

  • CVE-2022-45124
    34İzleyin

    An information disclosure vulnerability exists in the User authentication functionality of WellinTech KingHistorian 35.01.00.05.

    YüksekCVSS 7,5İstismar yokEPSS %13

    wellintech · kinghistorian20 Mar 2023

  • CVE-2023-27842
    36İzleyin

    Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    extplorer · extplorer21 Mar 2023

  • CVE-2023-26497
    45Planlayın

    An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto

    KritikCVSS 9,8İstismar yokEPSS %21

    samsung · exynos modem 5300 firmware21 Mar 2023

  • CVE-2023-24709
    43Planlayın

    An issue found in Paradox Security Systems IPR512 allows attackers to cause a denial of service via the login.html and login.xml parameters.

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    paradox · ipr512 firmware21 Mar 2023

  • CVE-2023-27855
    43Planlayın

    Rockwell Automation ThinManager ThinServer Path Traversal Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %13

    rockwellautomation · thinmanager21 Mar 2023

  • CVE-2023-27856
    53Planlayın

    Rockwell Automation ThinManager ThinServer Path Traversal Download

    YüksekCVSS 7,5SilahlaştırılmışEPSS %77

    rockwellautomation · thinmanager21 Mar 2023

  • CVE-2023-28725
    42Planlayın

    General Bytes Crypto Application Server (CAS) 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute a

    KritikCVSS 9,1İstismar yokEPSS %20

    generalbytes · crypto application server21 Mar 2023

  • CVE-2023-27857
    36İzleyin

    Rockwell Automation ThinManager ThinServer Heap-Based Buffer Overflow

    YüksekCVSS 7,5İstismar yokEPSS %18

    rockwellautomation · thinmanager21 Mar 2023

  • CVE-2023-1578
    54Planlayın

    SQL Injection in pimcore/pimcore

    YüksekCVSS 8,8İstismar yokEPSS %62

    pimcore · pimcore22 Mar 2023

  • CVE-2023-0386
    63Bu hafta

    A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %7

    linux · linux kernel22 Mar 2023

  • CVE-2023-28432
    85Hemen

    Minio Information Disclosure in Cluster Deployment

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %83

    minio · minio22 Mar 2023

  • CVE-2023-28434
    67Bu hafta

    MinIO is vulnerable to privilege escalation on Linux/MacOS

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %7

    minio · minio22 Mar 2023

  • CVE-2023-28662
    52Planlayın

    The Gift Cards (Gift Vouchers and Packages) WordPress Plugin, version <= 4.3.1, is affected by an unauthenticated SQL injection vulnerabilit

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    codemenschen · gift vouchers22 Mar 2023

  • CVE-2023-26498
    45Planlayın

    An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, Exynos Auto T51

    KritikCVSS 9,8İstismar yokEPSS %21

    samsung · exynos modem 5300 firmware22 Mar 2023

  • CVE-2023-26496
    45Planlayın

    An issue was discovered in Samsung Baseband Modem Chipset for Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto

    KritikCVSS 9,8İstismar yokEPSS %21

    samsung · exynos modem 5300 firmware22 Mar 2023

  • CVE-2023-26359
    74Bu hafta

    Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %16

    adobe · coldfusion23 Mar 2023

  • CVE-2023-26360
    93Hemen

    Adobe ColdFusion Improper Access Control Arbitrary code execution

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %97

    adobe · coldfusion23 Mar 2023

  • CVE-2023-26361
    37İzleyin

    Adobe ColdFusion Directory Traversal Arbitrary file system read Vulnerability

    OrtaCVSS 4,9İstismar yokEPSS %58

    adobe · coldfusion23 Mar 2023

  • CVE-2023-27034
    57Planlayın

    PrestaShop jmsblog 2.5.5 was discovered to contain a SQL injection vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %58

    joommasters · jms blog23 Mar 2023

  • CVE-2022-42948
    70Bu hafta

    Cobalt Strike 4.7.1 fails to properly escape HTML tags when they are displayed on Swing components.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2

    helpsystems · cobalt strike24 Mar 2023

  • CVE-2023-1177
    60Bu hafta

    Path Traversal: '\..\filename' in mlflow/mlflow

    KritikCVSS 9,8Kavram kanıtıEPSS %69

    lfprojects · mlflow24 Mar 2023

  • CVE-2023-20963
    61Bu hafta

    In WorkSource, there is a possible parcel mismatch.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    google · android24 Mar 2023

  • CVE-2023-26801
    60Bu hafta

    LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a com

    KritikCVSS 9,8İstismar yokEPSS %69

    lb-link · bl-lte300 firmware26 Mar 2023

  • CVE-2023-26802
    54Planlayın

    An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attackers to bypass authe

    KritikCVSS 9,8Kavram kanıtıEPSS %48

    dcnglobal · dcbi-netlog-lab firmware26 Mar 2023

  • CVE-2023-1133
    54Planlayın

    Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contain a vulnerability in which the Device-status service listens on por

    KritikCVSS 9,8SilahlaştırılmışEPSS %50

    deltaww · infrasuite device master27 Mar 2023

  • CVE-2022-48428
    41Planlayın

    In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible

    OrtaCVSS 5,4İstismar yokEPSS %67

    jetbrains · teamcity27 Mar 2023

  • CVE-2023-1380
    33İzleyin

    A slab-out-of-bound read problem was found in brcmf_get_assoc_ies in drivers/net/wireless/broadcom/brcm80211/brcmfmac/cfg80211.c in the Linu

    YüksekCVSS 7,1İstismar yokEPSS %16

    redhat · enterprise linux27 Mar 2023

  • CVE-2023-22249
    37İzleyin

    Adobe Commerce Stored XSS Arbitrary code execution

    OrtaCVSS 4,8İstismar yokEPSS %58

    adobe · commerce27 Mar 2023

  • CVE-2023-0210
    52Planlayın

    A bug affects the Linux kernel’s ksmbd NTLMv2 authentication and is known to crash the OS immediately in Linux-based systems.

    YüksekCVSS 7,5İstismar yokEPSS %71

    linux · linux kernel27 Mar 2023

  • CVE-2023-27394
    44Planlayın

    Osprey Pump Controller version 1.01 is vulnerable an unauthenticated OS command injection vulnerability.

    KritikCVSS 9,8İstismar yokEPSS %17

    propumpservice · osprey pump controller firmware28 Mar 2023

  • CVE-2022-27643
    43Planlayın

    This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR R6700v3 1.0.4.120_10.0.9

    YüksekCVSS 8,8İstismar yokEPSS %25

    netgear · r6400 firmware29 Mar 2023

  • CVE-2022-28685
    36İzleyin

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2111.1802

    YüksekCVSS 7,8İstismar yokEPSS %17

    aveva · aveva edge29 Mar 2023

  • CVE-2022-2560
    59Planlayın

    This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server.

    KritikCVSS 9,1İstismar yokEPSS %77

    enterprisedt · completeftp server29 Mar 2023

  • CVE-2022-36969
    32İzleyin

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of AVEVA Edge 2020 SP2 Patch 0(4201.2

    YüksekCVSS 7,1İstismar yokEPSS %13

    aveva · aveva edge29 Mar 2023

  • CVE-2022-36971
    39İzleyin

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.

    YüksekCVSS 8,8İstismar yokEPSS %14

    ivanti · avalanche29 Mar 2023

  • CVE-2022-36974
    64Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.2.3490.

    KritikCVSS 9,8İstismar yokEPSS %84

    ivanti · avalanche29 Mar 2023

  • CVE-2022-36980
    57Planlayın

    This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche 6.3.2.3490.

    YüksekCVSS 8,1İstismar yokEPSS %82

    ivanti · avalanche29 Mar 2023

  • CVE-2022-36981
    64Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.3.101.

    KritikCVSS 9,8İstismar yokEPSS %83

    ivanti · avalanche29 Mar 2023

  • CVE-2022-36982
    52Planlayın

    This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101.

    YüksekCVSS 7,5İstismar yokEPSS %73

    ivanti · avalanche29 Mar 2023

  • CVE-2022-42424
    58Planlayın

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    YüksekCVSS 8,8İstismar yokEPSS %76

    centreon · centreon29 Mar 2023

  • CVE-2022-42425
    58Planlayın

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    YüksekCVSS 8,8İstismar yokEPSS %76

    centreon · centreon29 Mar 2023

  • CVE-2022-42427
    58Planlayın

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    YüksekCVSS 8,8İstismar yokEPSS %76

    centreon · centreon29 Mar 2023

  • CVE-2022-42429
    58Planlayın

    This vulnerability allows remote attackers to escalate privileges on affected installations of Centreon.

    YüksekCVSS 8,8İstismar yokEPSS %76

    centreon · centreon29 Mar 2023

  • CVE-2022-43634
    45Planlayın

    This vulnerability allows remote attackers to execute arbitrary code on affected installations of Netatalk.

    KritikCVSS 9,8İstismar yokEPSS %18

    netatalk · netatalk29 Mar 2023

  • CVE-2022-43650
    35İzleyin

    This vulnerability allows remote attackers to disclose sensitive information on affected installations of RARLAB WinRAR 6.11.0.0.

    YüksekCVSS 7,1İstismar yokEPSS %23

    rarlab · winrar29 Mar 2023

  • CVE-2023-28502
    57Planlayın

    Stack buffer overflow in UniRPC's udadmin_server service

    KritikCVSS 9,8SilahlaştırılmışEPSS %61

    rocketsoftware · unidata29 Mar 2023

  • CVE-2023-28503
    58Planlayın

    Authentication bypass in UniRPC's udadmin service

    KritikCVSS 9,8SilahlaştırılmışEPSS %62

    rocketsoftware · unidata29 Mar 2023

  • CVE-2023-25076
    59Planlayın

    A buffer overflow vulnerability exists in the handling of wildcard backend hosts of SNIProxy 0.6.0-2 and the master branch (commit: 822bb80d

    KritikCVSS 9,8İstismar yokEPSS %65

    sniproxy project · sniproxy30 Mar 2023

  • CVE-2022-43473
    27İzleyin

    A blind XML External Entity (XXE) vulnerability exists in the Add UCS Device functionality of ManageEngine OpManager 12.6.168.

    OrtaCVSS 5,4İstismar yokEPSS %19

    zohocorp · manageengine opmanager30 Mar 2023

  • CVE-2023-26482
    36İzleyin

    Scope of workflow operations is not validated in nextcloud server

    YüksekCVSS 8,8SilahlaştırılmışEPSS %4

    nextcloud · nextcloud server30 Mar 2023

  • CVE-2023-27159
    41Planlayın

    Appwrite up to v1.2.1 was discovered to contain a Server-Side Request Forgery (SSRF) via the component /v1/avatars/favicon.

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    appwrite · appwrite31 Mar 2023