Yayın tarihine göre
Mayıs 2023: sömürülen ve yeni ciddi CVE kayıtları
109 kayıt · 8 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
Sayfa 2 / 2
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
42Planlayın | CVE-2023-2936İstismar yok | Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted google · chrome · CWE-843 | Yüksek8,8 | — | %23,0 | 30 May 2023 |
39İzleyin | CVE-2023-34220İstismar yok | In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possiblejetbrains · teamcity · CWE-79 | Orta5,4 | — | %61,4 | 31 May 2023 |
39İzleyin | CVE-2023-34225İstismar yok | In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possiblejetbrains · teamcity · CWE-79 | Orta5,4 | — | %60,7 | 31 May 2023 |
44Planlayın | CVE-2022-35748İstismar yok | HTTP.sys Denial of Service Vulnerabilitymicrosoft · windows server 2012 | Yüksek7,5 | — | %47,2 | 31 May 2023 |
34İzleyin | CVE-2022-35756İstismar yok | Windows Kerberos Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1507 | Yüksek7,8 | — | %11,3 | 31 May 2023 |
48Planlayın | CVE-2023-33735İstismar yok | D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter idlink · dir-846 firmware | Kritik9,8 | — | %31,5 | 31 May 2023 |
37İzleyin | CVE-2022-35742İstismar yok | Microsoft Outlook Denial of Service Vulnerabilitymicrosoft · 365 apps | Yüksek7,5 | — | %22,2 | 31 May 2023 |
38İzleyin | CVE-2023-28651İstismar yok | Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.contec · conprosys hmi system · CWE-79 | Orta4,8 | — | %62,4 | 31 May 2023 |
40Planlayın | CVE-2023-29154İstismar yok | SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.contec · conprosys hmi system · CWE-89 | Yüksek7,2 | — | %41,4 | 31 May 2023 |
- CVE-2023-293642Planlayın
Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted
YüksekCVSS 8,8İstismar yokEPSS %23google · chrome30 May 2023
- CVE-2023-3422039İzleyin
In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible
OrtaCVSS 5,4İstismar yokEPSS %61jetbrains · teamcity31 May 2023
- CVE-2023-3422539İzleyin
In JetBrains TeamCity before 2023.05 stored XSS in the NuGet feed page was possible
OrtaCVSS 5,4İstismar yokEPSS %60jetbrains · teamcity31 May 2023
- CVE-2022-3574844Planlayın
HTTP.sys Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %47microsoft · windows server 201231 May 2023
- CVE-2022-3575634İzleyin
Windows Kerberos Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %11microsoft · windows 10 150731 May 2023
- CVE-2023-3373548Planlayın
D-Link DIR-846 v1.00A52 was discovered to contain a remote command execution (RCE) vulnerability via the tomography_ping_address parameter i
KritikCVSS 9,8İstismar yokEPSS %31dlink · dir-846 firmware31 May 2023
- CVE-2022-3574237İzleyin
Microsoft Outlook Denial of Service Vulnerability
YüksekCVSS 7,5İstismar yokEPSS %22microsoft · 365 apps31 May 2023
- CVE-2023-2865138İzleyin
Cross-site scripting vulnerability exists in CONPROSYS HMI System (CHS) versions prior to 3.5.3.
OrtaCVSS 4,8İstismar yokEPSS %62contec · conprosys hmi system31 May 2023
- CVE-2023-2915440Planlayın
SQL injection vulnerability exists in the CONPROSYS HMI System (CHS) versions prior to 3.5.3.
YüksekCVSS 7,2İstismar yokEPSS %41contec · conprosys hmi system31 May 2023