İçeriğe atla
Noroxi

Yayın tarihine göre

Haziran 2023: sömürülen ve yeni ciddi CVE kayıtları

100 kayıt · 17 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2023-32707
    59Planlayın

    ‘edit_user’ Capability Privilege Escalation

    YüksekCVSS 8,8SilahlaştırılmışEPSS %79

    splunk · splunk1 Haz 2023

  • CVE-2023-32714
    45Planlayın

    Path Traversal in Splunk App for Lookup File Editing

    YüksekCVSS 8,1İstismar yokEPSS %42

    splunk · splunk1 Haz 2023

  • CVE-2022-45938
    50Planlayın

    An issue was discovered in Comcast Defined Technologies microeisbss through 2021.

    KritikCVSS 9,0İstismar yokEPSS %45

    xfinity · comcast defined technologies microeisbss2 Haz 2023

  • CVE-2023-34362
    99Hemen

    In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    progress · moveit cloud2 Haz 2023

  • CVE-2023-30149
    44Planlayın

    SQL injection vulnerability in the City Autocomplete (cityautocomplete) module from ebewe.net for PrestaShop, prior to version 1.8.12 (for P

    KritikCVSS 9,8İstismar yokEPSS %16

    ebewe · city autocomplete2 Haz 2023

  • CVE-2023-3096
    31İzleyin

    KylinSoft kylin-software-properties changedSource access control

    YüksekCVSS 7,8İstismar yokEPSS %0

    kylinos · kylin-software-properties5 Haz 2023

  • CVE-2023-3079
    76Bu hafta

    Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %37

    google · chrome5 Haz 2023

  • CVE-2023-2833
    40Planlayın

    ReviewX <= 1.6.13 - Arbitrary Usermeta Update to Authenticated (Subscriber+) Privilege Escalation

    YüksekCVSS 8,8Kavram kanıtıEPSS %17

    wpdeveloper · reviewx6 Haz 2023

  • CVE-2023-33381
    35İzleyin

    A command injection vulnerability was found in the ping functionality of the MitraStar GPT-2741GNAC router (firmware version AR_g5.8_110WVN0

    YüksekCVSS 7,2Kavram kanıtıEPSS %22

    mitrastar · gpt-2741gnac firmware6 Haz 2023

  • CVE-2023-33532
    44Planlayın

    There is a command injection vulnerability in the Netgear R6250 router with Firmware Version 1.0.4.48.

    KritikCVSS 9,8İstismar yokEPSS %16

    netgear · r6250 firmware6 Haz 2023

  • CVE-2023-0921
    42Planlayın

    Allocation of Resources Without Limits or Throttling in GitLab

    OrtaCVSS 4,3İstismar yokEPSS %84

    gitlab · gitlab6 Haz 2023

  • CVE-2023-2801
    21İzleyin

    Grafana is an open-source platform for monitoring and observability.

    OrtaCVSS 5,3İstismar yokEPSS %0

    grafana · grafana6 Haz 2023

  • CVE-2023-33781
    44Planlayın

    An issue in D-Link DIR-842V2 v1.0.3 allows attackers to execute arbitrary commands via importing a crafted file.

    YüksekCVSS 8,8Kavram kanıtıEPSS %31

    dlink · dir-842v2 firmware6 Haz 2023

  • CVE-2023-33782
    46Planlayın

    D-Link DIR-842V2 v1.0.3 was discovered to contain a command injection vulnerability via the iperf3 diagnostics function.

    YüksekCVSS 8,8Kavram kanıtıEPSS %35

    dlink · dir-842v2 firmware6 Haz 2023

  • CVE-2020-36708
    59Planlayın

    Epsilon Framework Themes (Various Versions) - Function Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %65

    colorlib · activello6 Haz 2023

  • CVE-2021-4374
    44Planlayın

    WordPress Automatic Plugin <= 3.53.2 - Unauthenticated Arbitrary Options Update

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    valvepress · wordpress automatic plugin6 Haz 2023

  • CVE-2023-3124
    42Planlayın

    Elementor Pro <= 3.11.6 - Authenticated(Subscriber+) Privilege Escalation via update_page_option

    YüksekCVSS 8,8Kavram kanıtıEPSS %22

    elementor · elementor pro6 Haz 2023

  • CVE-2023-33538
    77Bu hafta

    TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %41

    tp-link · tl-wr940n firmware7 Haz 2023

  • CVE-2023-20887
    98Hemen

    Aria Operations for Networks contains a command injection vulnerability.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    vmware · aria operations for networks7 Haz 2023

  • CVE-2023-20888
    60Bu hafta

    Aria Operations for Networks contains an authenticated deserialization vulnerability.

    YüksekCVSS 8,8Kavram kanıtıEPSS %82

    vmware · vrealize network insight7 Haz 2023

  • CVE-2023-20889
    54Planlayın

    Aria Operations for Networks contains an information disclosure vulnerability.

    YüksekCVSS 7,5Kavram kanıtıEPSS %79

    vmware · vrealize network insight7 Haz 2023

  • CVE-2023-2442
    50Planlayın

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 15.11 before 15.11.7, all versions starting from 16.0 befo

    OrtaCVSS 5,4İstismar yokEPSS %96

    gitlab · gitlab7 Haz 2023

  • CVE-2023-2986
    52Planlayın

    Abandoned Cart Lite for WooCommerce <= 5.15.1 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    tychesoftwares · abandoned cart lite for woocommerce7 Haz 2023

  • CVE-2023-34096
    54Planlayın

    Thruk has Path Traversal Vulnerability in panorama.pm

    YüksekCVSS 8,8Kavram kanıtıEPSS %62

    thruk · thruk8 Haz 2023

  • CVE-2023-32749
    39İzleyin

    Pydio Cells allows users by default to create so-called external users in order to share files with them.

    YüksekCVSS 8,8Kavram kanıtıEPSS %14

    pydio · cells8 Haz 2023

  • CVE-2023-0992
    52Planlayın

    Shield Security <= 17.0.17 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1İstismar yokEPSS %93

    getshieldsecurity · shield security9 Haz 2023

  • CVE-2023-2249
    53Planlayın

    wpForo Forum <= 2.1.7 - Authenticated (Subscriber+) Local File Include, Server-Side Request Forgery, and PHAR Deserialization via file_get_contents

    YüksekCVSS 8,8İstismar yokEPSS %60

    gvectors · wpforo forum9 Haz 2023

  • CVE-2023-0342
    21İzleyin

    MongoDB Ops Manager may disclose sensitive information in Diagnostic Archive

    OrtaCVSS 5,3SilahlaştırılmışEPSS %0

    mongodb · ops manager server9 Haz 2023

  • CVE-2023-32731
    30İzleyin

    Information leak in gRPC

    YüksekCVSS 7,5İstismar yokEPSS %0

    grpc · grpc9 Haz 2023

  • CVE-2023-35036
    40Planlayın

    In Progress MOVEit Transfer before 2021.0.7 (13.0.7), 2021.1.5 (13.1.5), 2022.0.5 (14.0.5), 2022.1.6 (14.1.6), and 2023.0.2 (15.0.2), SQL in

    KritikCVSS 9,1İstismar yokEPSS %12

    progress · moveit transfer11 Haz 2023

  • CVE-2023-35042
    52Planlayın

    GeoServer 2, in some configurations, allows remote attackers to execute arbitrary code via java.lang.Runtime.getRuntime().exec in wps:Litera

    KritikCVSS 9,8İstismar yokEPSS %44

    geoserver · geoserver12 Haz 2023

  • CVE-2023-3206
    36İzleyin

    Chengdu VEC40G denial of service

    YüksekCVSS 7,5İstismar yokEPSS %18

    feiyuxing · vec40g firmware12 Haz 2023

  • CVE-2023-34468
    54Planlayın

    Apache NiFi: Potential Code Injection with Database Services using H2

    YüksekCVSS 8,8SilahlaştırılmışEPSS %61

    apache · nifi12 Haz 2023

  • CVE-2023-33625
    49Planlayın

    D-Link DIR-600 Hardware Version B5, Firmware Version 2.18 was discovered to contain a command injection vulnerability via the ST parameter i

    KritikCVSS 9,8SilahlaştırılmışEPSS %33

    dlink · dir-600 firmware12 Haz 2023

  • CVE-2023-34941
    28İzleyin

    A stored cross-site scripting (XSS) vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execut

    OrtaCVSS 5,4İstismar yokEPSS %23

    asus · rt-n10lx firmware12 Haz 2023

  • CVE-2023-27997
    95Hemen

    A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below,

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %85

    fortinet · fortiproxy13 Haz 2023

  • CVE-2023-33919
    42Planlayın

    A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).

    YüksekCVSS 7,2İstismar yokEPSS %47

    siemens · cpci85 firmware13 Haz 2023

  • CVE-2023-33568
    34İzleyin

    An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer fil

    YüksekCVSS 7,5SilahlaştırılmışEPSS %14

    dolibarr · dolibarr erp\/crm13 Haz 2023

  • CVE-2023-20867
    49Planlayın

    VMware Tools Authentication Bypass Vulnerability

    DüşükCVSS 3,9KEVSilahlaştırılmışEPSS %13

    vmware · tools13 Haz 2023

  • CVE-2023-3215
    39İzleyin

    Use after free in WebRTC in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a cra

    YüksekCVSS 8,8İstismar yokEPSS %13

    google · chrome13 Haz 2023

  • CVE-2023-3217
    39İzleyin

    Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a craf

    YüksekCVSS 8,8İstismar yokEPSS %13

    google · chrome13 Haz 2023

  • CVE-2023-3224
    57Planlayın

    Code Injection in nuxt/nuxt

    KritikCVSS 9,8İstismar yokEPSS %58

    nuxt · nuxt13 Haz 2023

  • CVE-2023-29357
    99Hemen

    Microsoft SharePoint Server Elevation of Privilege Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    microsoft · sharepoint server13 Haz 2023

  • CVE-2023-29360
    69Bu hafta

    Microsoft Streaming Service Elevation of Privilege Vulnerability

    YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %21

    microsoft · windows 10 160713 Haz 2023

  • CVE-2023-32029
    47Planlayın

    Microsoft Excel Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %53

    microsoft · 365 apps13 Haz 2023

  • CVE-2023-33133
    44Planlayın

    Microsoft Excel Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %44

    microsoft · 365 apps13 Haz 2023

  • CVE-2023-3001
    41Planlayın

    A CWE-502: Deserialization of Untrusted Data vulnerability exists in the Dashboard module that could cause an interpretation of malicious p

    YüksekCVSS 7,8İstismar yokEPSS %31

    schneider-electric · igss dashboard14 Haz 2023

  • CVE-2023-34747
    45Planlayın

    File upload vulnerability in ujcms 6.0.2 via /api/backend/core/web-file-upload/upload.

    KritikCVSS 9,8İstismar yokEPSS %20

    ujcms · ujcms14 Haz 2023

  • CVE-2023-28310
    40Planlayın

    Microsoft Exchange Server Remote Code Execution Vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %25

    microsoft · exchange server14 Haz 2023

  • CVE-2023-32031
    59Planlayın

    Microsoft Exchange Server Remote Code Execution Vulnerability

    YüksekCVSS 8,8Kavram kanıtıEPSS %81

    microsoft · exchange server14 Haz 2023

  • CVE-2023-34800
    48Planlayın

    D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at genacgi_main.

    KritikCVSS 9,8İstismar yokEPSS %29

    dlink · go-rt-ac750 firmware15 Haz 2023

  • CVE-2023-28810
    20İzleyin

    Some access control/intercom products have unauthorized modification of device network configuration vulnerabilities.

    OrtaCVSS 4,3Kavram kanıtıEPSS %10

    hikvision · ds-k1t804af firmware15 Haz 2023

  • CVE-2023-35708
    68Bu hafta

    In Progress MOVEit Transfer before 2021.0.8 (13.0.8), 2021.1.6 (13.1.6), 2022.0.6 (14.0.6), 2022.1.7 (14.1.7), and 2023.0.3 (15.0.3), a SQL

    KritikCVSS 9,8Kavram kanıtıEPSS %96

    progress · moveit transfer16 Haz 2023

  • CVE-2023-30625
    61Bu hafta

    rudder-server vulnerable to SQL Injection

    YüksekCVSS 8,8SilahlaştırılmışEPSS %85

    rudderstack · rudder-server16 Haz 2023

  • CVE-2023-34659
    43Planlayın

    jeecg-boot 3.5.0 and 3.5.1 have a SQL injection vulnerability the id parameter of the /jeecg-boot/jmreport/show interface.

    KritikCVSS 9,8Kavram kanıtıEPSS %12

    jeecg · jeecg boot16 Haz 2023

  • CVE-2023-35813
    65Bu hafta

    Multiple Sitecore products allow remote code execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %86

    sitecore · experience commerce17 Haz 2023

  • CVE-2023-3306
    46Planlayın

    Ruijie RG-EW1200G Admin Password app.09df2a9e44ab48766f5f.js access control

    KritikCVSS 9,8İstismar yokEPSS %23

    ruijie · rg-ew1200g firmware18 Haz 2023

  • CVE-2023-27992
    94Hemen

    The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware vers

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %82

    zyxel · nas326 firmware19 Haz 2023

  • CVE-2023-2533
    74Bu hafta

    PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %28

    papercut · papercut mf20 Haz 2023

  • CVE-2023-34600
    46Planlayın

    Adiscon LogAnalyzer v4.1.13 and before is vulnerable to SQL Injection.

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    adiscon · loganalyzer20 Haz 2023

  • CVE-2023-35166
    54Planlayın

    Privilege escalation (PR) from account through TipsPanel

    YüksekCVSS 8,8İstismar yokEPSS %62

    xwiki · xwiki20 Haz 2023

  • CVE-2023-35885
    61Bu hafta

    CloudPanel 2 before 2.3.1 has insecure file-manager cookie authentication.

    KritikCVSS 9,8Kavram kanıtıEPSS %74

    mgt-commerce · cloudpanel20 Haz 2023

  • CVE-2023-34563
    43Planlayın

    netgear R6250 Firmware Version 1.0.4.48 is vulnerable to Buffer Overflow after authentication.

    KritikCVSS 9,8İstismar yokEPSS %13

    netgear · r6250 firmware20 Haz 2023

  • CVE-2023-33584
    43Planlayın

    Sourcecodester Enrollment System Project V1.0 is vulnerable to SQL Injection (SQLI) attacks, which allow an attacker to manipulate the SQL q

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    enrollment system project · enrollment system21 Haz 2023

  • CVE-2023-24261
    34İzleyin

    A vulnerability in GL.iNET GL-E750 Mudi before firmware v3.216 allows authenticated attackers to execute arbitrary code via a crafted POST r

    YüksekCVSS 7,2İstismar yokEPSS %18

    gl-inet · gl-e750 firmware21 Haz 2023

  • CVE-2023-33405
    33İzleyin

    Blogengine.net 3.3.8.0 and earlier is vulnerable to Open Redirect.

    OrtaCVSS 6,1Kavram kanıtıEPSS %31

    blogengine · blogengine.net21 Haz 2023

  • CVE-2023-29708
    34İzleyin

    An issue was discovered in /cgi-bin/adm.cgi in WavLink WavRouter version RPT70HA1.x, allows attackers to force a factory reset via crafted p

    YüksekCVSS 7,5İstismar yokEPSS %14

    wavlink · wavrouter app22 Haz 2023

  • CVE-2023-20894
    49Planlayın

    The VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol.

    KritikCVSS 9,8İstismar yokEPSS %33

    vmware · vcenter server22 Haz 2023

  • CVE-2023-29711
    60Bu hafta

    An incorrect access control issue was discovered in Interlink PSG-5124 version 1.0.4, allows attackers to execute arbitrary code via crafted

    KritikCVSS 9,8İstismar yokEPSS %70

    interlink · psg-5124 firmware22 Haz 2023

  • CVE-2023-32571
    49Planlayın

    Dynamic Linq 1.0.7.10 through 1.2.25 before 1.3.0 allows attackers to execute arbitrary code and commands when untrusted input to methods in

    KritikCVSS 9,8Kavram kanıtıEPSS %34

    dynamic-linq · linq22 Haz 2023

  • CVE-2023-36355
    49Planlayın

    TP-Link TL-WR940N V4 was discovered to contain a buffer overflow via the ipStart parameter at /userRpm/WanDynamicIpV6CfgRpm.

    KritikCVSS 9,9Kavram kanıtıEPSS %31

    tp-link · tl-wr940n firmware22 Haz 2023

  • CVE-2023-33299
    46Planlayın

    A deserialization of untrusted data in Fortinet FortiNAC below 7.2.1, below 9.4.3, below 9.2.8 and all earlier versions of 8.x allows attack

    KritikCVSS 9,8İstismar yokEPSS %24

    fortinet · fortinac23 Haz 2023

  • CVE-2023-30258
    67Bu hafta

    Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenti

    KritikCVSS 9,8SilahlaştırılmışEPSS %94

    magnussolution · magnusbilling23 Haz 2023

  • CVE-2023-35150
    55Planlayın

    XWiki Platform vulnerable to privilege escalation (PR) from view right via Invitation application

    YüksekCVSS 8,0İstismar yokEPSS %77

    xwiki · xwiki23 Haz 2023

  • CVE-2023-28204
    60Bu hafta

    An out-of-bounds read was addressed with improved input validation.

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %14

    apple · safari23 Haz 2023

  • CVE-2023-32373
    69Bu hafta

    A use-after-free issue was addressed with improved memory management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %12

    apple · safari23 Haz 2023

  • CVE-2023-32409
    69Bu hafta

    The issue was addressed with improved bounds checks.

    YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %16

    apple · safari23 Haz 2023

  • CVE-2023-32434
    76Bu hafta

    An integer overflow was addressed with improved input validation.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %51

    apple · ipados23 Haz 2023

  • CVE-2023-32435
    72Bu hafta

    A memory corruption issue was addressed with improved state management.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %22

    apple · safari23 Haz 2023

  • CVE-2023-32439
    72Bu hafta

    A type confusion issue was addressed with improved checks.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %23

    apple · safari23 Haz 2023

  • CVE-2023-3388
    49Planlayın

    Beautiful Cookie Consent Banner <= 2.10.1 - Unauthenticated Stored Cross-Site Scripting

    OrtaCVSS 6,1Kavram kanıtıEPSS %84

    beautiful-cookie-banner · beautiful cookie consent banner23 Haz 2023

  • CVE-2023-36661
    31İzleyin

    Shibboleth XMLTooling before 3.2.4, as used in OpenSAML and Shibboleth Service Provider, allows SSRF via a crafted KeyInfo element.

    YüksekCVSS 7,5SilahlaştırılmışEPSS %2

    shibboleth · xmltooling25 Haz 2023

  • CVE-2023-30261
    49Planlayın

    Command Injection vulnerability in OpenWB 1.6 and 1.7 allows remote attackers to run arbitrary commands via crafted GET request.

    KritikCVSS 9,8İstismar yokEPSS %31

    openwb · openwb26 Haz 2023

  • CVE-2023-33404
    47Planlayın

    An Unrestricted Upload vulnerability, due to insufficient validation on UploadControlled.cs file, in BlogEngine.Net version 3.3.8.0 and earl

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    blogengine · blogengine.net26 Haz 2023

  • CVE-2023-3420
    52Planlayın

    Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8İstismar yokEPSS %56

    google · chrome26 Haz 2023

  • CVE-2023-32521
    56Planlayın

    A path traversal exists in a specific service dll of Trend Micro Mobile Security (Enterprise) 9.8 SP5 which could allow an unauthenticated r

    KritikCVSS 9,1İstismar yokEPSS %66

    trendmicro · mobile security26 Haz 2023

  • CVE-2023-2068
    51Planlayın

    File Manager Advanced Shortcode <= 2.3.2 - Unauthenticated Remote Code Execution through shortcode

    KritikCVSS 9,8SilahlaştırılmışEPSS %39

    advancedfilemanager · file manager advanced shortcode27 Haz 2023

  • CVE-2023-2877
    42Planlayın

    Formidable Forms < 6.3.1 - Subscriber+ Remote Code Execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %22

    strategy11 · formidable forms27 Haz 2023

  • CVE-2023-21237
    52Planlayın

    In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %0

    google · android28 Haz 2023

  • CVE-2023-3450
    43Planlayın

    Ruijie RG-BCR860 Network Diagnostic Page os command injection

    YüksekCVSS 7,2Kavram kanıtıEPSS %50

    ruijie · rg-bcr860 firmware28 Haz 2023

  • CVE-2023-2982
    53Planlayın

    WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.6.4 - Authentication Bypass

    KritikCVSS 9,8Kavram kanıtıEPSS %46

    miniorange · wordpress social login and register \(discord\, google\, twitter\, linkedin\)28 Haz 2023

  • CVE-2023-34598
    53Planlayın

    Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files present in the inst

    KritikCVSS 9,8Kavram kanıtıEPSS %47

    gibbonedu · gibbon29 Haz 2023

  • CVE-2023-26613
    48Planlayın

    An OS command injection vulnerability in D-Link DIR-823G firmware version 1.02B05 allows unauthorized attackers to execute arbitrary operati

    KritikCVSS 9,8İstismar yokEPSS %31

    dlink · dir-823g firmware29 Haz 2023

  • CVE-2023-31222
    44Planlayın

    Medtronic Paceart MSMQ Deserialization of Untrusted Data

    YüksekCVSS 8,8İstismar yokEPSS %28

    medtronic · paceart optima29 Haz 2023

  • CVE-2023-36469
    60Bu hafta

    Code injection through NotificationRSSService in XWiki Platform

    YüksekCVSS 8,8İstismar yokEPSS %82

    xwiki · xwiki29 Haz 2023

  • CVE-2023-36347
    40Planlayın

    A broken authentication mechanism in the endpoint excel.php of POS Codekop v2.0 allows unauthenticated attackers to download selling data.

    YüksekCVSS 7,5Kavram kanıtıEPSS %34

    codekop · codekop29 Haz 2023

  • CVE-2023-36144
    41Planlayın

    An authentication bypass in Intelbras Switch SG 2404 MR in firmware 1.00.54 allows an unauthenticated attacker to download the backup file o

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    intelbras · sg 2404 mr firmware30 Haz 2023

  • CVE-2023-36812
    44Planlayın

    Remote Code Execution in OpenTSDB

    KritikCVSS 9,8SilahlaştırılmışEPSS %16

    opentsdb · opentsdb30 Haz 2023

  • CVE-2023-28324
    43Planlayın

    A improper input validation vulnerability exists in Ivanti Endpoint Manager 2022 and below that could allow privilege escalation or remote c

    KritikCVSS 9,8SilahlaştırılmışEPSS %12

    ivanti · endpoint manager30 Haz 2023

  • CVE-2023-28364
    24İzleyin

    An Open Redirect vulnerability exists prior to version 1.52.117, where the built-in QR scanner in Brave Browser Android navigated to scanned

    OrtaCVSS 6,1İstismar yokEPSS %0

    brave · browser30 Haz 2023