İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2023: sömürülen ve yeni ciddi CVE kayıtları

133 kayıt · 19 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2023-5322
    40Planlayın

    D-Link DAR-7000 edit_manageadmin.php sql injection

    YüksekCVSS 8,8İstismar yokEPSS %16

    dlink · dar-7000 firmware1 Eki 2023

  • CVE-2023-4211
    52Planlayın

    Mali GPU Kernel Driver Allows Improper GPU Memory Processing Operations

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %1

    arm · 5th gen gpu architecture kernel driver1 Eki 2023

  • CVE-2023-5350
    37İzleyin

    SQL Injection in salesagility/suitecrm

    KritikCVSS 9,1SilahlaştırılmışEPSS %2

    salesagility · suitecrm3 Eki 2023

  • CVE-2023-44974
    45Planlayın

    An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via

    KritikCVSS 9,8İstismar yokEPSS %20

    emlog · emlog3 Eki 2023

  • CVE-2023-4911
    80Hemen

    Glibc: buffer overflow in ld.so leading to privilege escalation

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %63

    gnu · glibc3 Eki 2023

  • CVE-2023-5375
    34İzleyin

    Open Redirect in mosparo/mosparo

    OrtaCVSS 6,1Kavram kanıtıEPSS %34

    mosparo · mosparo4 Eki 2023

  • CVE-2023-43261
    49Planlayın

    An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components

    YüksekCVSS 7,5Kavram kanıtıEPSS %63

    milesight · ur5x firmware4 Eki 2023

  • CVE-2023-22515
    99Hemen

    Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknow

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    atlassian · confluence data center4 Eki 2023

  • CVE-2023-27121
    31İzleyin

    A cross-site scripting (XSS) vulnerability in the component /framework/cron/action/humanize of Pleasant Solutions Pleasant Password Server v

    OrtaCVSS 6,1İstismar yokEPSS %22

    pleasantsolutions · pleasant password server4 Eki 2023

  • CVE-2023-42824
    61Bu hafta

    The issue was addressed with improved checks.

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %1

    apple · ipados4 Eki 2023

  • CVE-2023-5399
    50Planlayın

    A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause tamperin

    KritikCVSS 9,8İstismar yokEPSS %35

    schneider-electric · spacelogic c-bus toolkit4 Eki 2023

  • CVE-2023-44386
    21İzleyin

    Incorrect request error handling triggers server crash in Vapor

    OrtaCVSS 5,3İstismar yokEPSS %0

    vapor · vapor5 Eki 2023

  • CVE-2023-44860
    37İzleyin

    An issue in NETIS SYSTEMS N3Mv2 v.1.0.1.865 allows a remote attacker to cause a denial of service via the authorization component in the HTT

    YüksekCVSS 7,5İstismar yokEPSS %22

    netis-systems · n3m firmware6 Eki 2023

  • CVE-2023-45363
    37İzleyin

    An issue was discovered in ApiPageSet.php in MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1.

    YüksekCVSS 7,5İstismar yokEPSS %23

    mediawiki · mediawiki9 Eki 2023

  • CVE-2023-43641
    40Planlayın

    libcue vulnerable to out-of-bounds array access

    YüksekCVSS 8,8İstismar yokEPSS %17

    lipnitsk · libcue9 Eki 2023

  • CVE-2023-44959
    42Planlayın

    An issue found in D-Link DSL-3782 v.1.03 and before allows remote authenticated users to execute arbitrary code as root via the Router IP Ad

    YüksekCVSS 8,8İstismar yokEPSS %22

    dlink · dsl-3782 firmware9 Eki 2023

  • CVE-2023-44487
    90Hemen

    The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    siemens · simatic s7-1500 cpu 1518f-4 pn\/dp mfp firmware10 Eki 2023

  • CVE-2023-4966
    90Hemen

    Unauthenticated sensitive information disclosure

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99

    citrix · netscaler application delivery controller10 Eki 2023

  • CVE-2023-30803
    45Planlayın

    Sangfor Next-Gen Application Firewall Authentication Bypass

    KritikCVSS 9,8İstismar yokEPSS %20

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2023-30805
    58Planlayın

    Sangfor Next-Gen Application Firewall Login Un Param Command Injection

    KritikCVSS 9,8İstismar yokEPSS %64

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2023-30806
    58Planlayın

    Sangfor Next-Gen Application Firewall PHPSESSID Command Injection

    KritikCVSS 9,8İstismar yokEPSS %64

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2023-34992
    64Bu hafta

    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet allows attacker to e

    KritikCVSS 9,8Kavram kanıtıEPSS %81

    fortinet · fortisiem10 Eki 2023

  • CVE-2023-34993
    45Planlayın

    A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.

    KritikCVSS 9,8Kavram kanıtıEPSS %21

    fortinet · fortiwlm10 Eki 2023

  • CVE-2023-36563
    58Planlayın

    Microsoft WordPad Information Disclosure Vulnerability

    OrtaCVSS 5,5KEVSilahlaştırılmışEPSS %20

    microsoft · windows 10 150710 Eki 2023

  • CVE-2023-36584
    52Planlayın

    Windows Mark of the Web Security Feature Bypass Vulnerability

    OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %3

    microsoft · windows 10 150710 Eki 2023

  • CVE-2023-36606
    51Planlayın

    Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %69

    microsoft · windows 1010 Eki 2023

  • CVE-2023-38171
    51Planlayın

    Microsoft QUIC Denial of Service Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %71

    microsoft · .net10 Eki 2023

  • CVE-2023-41763
    78Bu hafta

    Skype for Business Elevation of Privilege Vulnerability

    OrtaCVSS 5,3KEVSilahlaştırılmışEPSS %90

    microsoft · skype for business server10 Eki 2023

  • CVE-2023-41772
    35İzleyin

    Win32k Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %13

    microsoft · windows 10 180910 Eki 2023

  • CVE-2023-30804
    39İzleyin

    Sangfor Next-Gen Application Firewall Authenticated File Disclosure

    OrtaCVSS 6,9İstismar yokEPSS %38

    sangfor · next-gen application firewall10 Eki 2023

  • CVE-2023-32645
    56Planlayın

    A leftover debug code vulnerability exists in the httpd debug credentials functionality of Yifan YF325 v1.0_20221108.

    KritikCVSS 9,8İstismar yokEPSS %55

    yifanwireless · yf325 firmware11 Eki 2023

  • CVE-2023-43661
    50Planlayın

    Cachet vulnerable to Authenticated Remote Code Execution

    YüksekCVSS 8,8İstismar yokEPSS %51

    all-three · cachet11 Eki 2023

  • CVE-2023-45138
    60Bu hafta

    Change Request Application vulnerable to XSS and remote code execution through change request title

    KritikCVSS 9,6İstismar yokEPSS %71

    xwiki · change request12 Eki 2023

  • CVE-2023-29464
    40Planlayın

    Rockwell Automation FactoryTalk Linx Vulnerable to Denial-of-Service and Information Disclosure

    KritikCVSS 9,1İstismar yokEPSS %14

    rockwellautomation · factorytalk linx13 Eki 2023

  • CVE-2023-45852
    44Planlayın

    In Vitogate 300 2.1.3.0, /cgi-bin/vitogate.cgi allows an unauthenticated attacker to bypass authentication and execute arbitrary commands vi

    KritikCVSS 9,8Kavram kanıtıEPSS %15

    viessmann · vitogate 300 firmware13 Eki 2023

  • CVE-2023-5591
    33İzleyin

    SQL Injection in librenms/librenms

    OrtaCVSS 6,5İstismar yokEPSS %23

    librenms · librenms15 Eki 2023

  • CVE-2023-20198
    100Hemen

    Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    cisco · ios xe16 Eki 2023

  • CVE-2023-5003
    38İzleyin

    Active Directory Integration < 4.1.10 - Unauthenticated Log Disclosure

    YüksekCVSS 7,5Kavram kanıtıEPSS %26

    miniorange · active directory integration \/ ldap integration16 Eki 2023

  • CVE-2023-45375
    46Planlayın

    In the module "PireosPay" (pireospay) before version 1.7.10 from 01generator.com for PrestaShop, a guest can perform SQL injection via `Pire

    YüksekCVSS 8,8Kavram kanıtıEPSS %38

    01generator · pireospay17 Eki 2023

  • CVE-2023-44693
    43Planlayın

    D-Link Online behavior audit gateway DAR-7000 V31R02B1413C is vulnerable to SQL Injection via /importexport.php.

    KritikCVSS 9,8İstismar yokEPSS %13

    dlink · dar-7000 firmware17 Eki 2023

  • CVE-2023-39456
    48Planlayın

    Apache Traffic Server: Malformed http/2 frames can cause an abort

    YüksekCVSS 7,5İstismar yokEPSS %60

    apache · traffic server17 Eki 2023

  • CVE-2023-38545
    63Bu hafta

    This flaw makes curl overflow a heap based buffer in the SOCKS5 proxy handshake.

    KritikCVSS 9,8Kavram kanıtıEPSS %78

    haxx · libcurl18 Eki 2023

  • CVE-2023-45727
    61Bu hafta

    Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %3

    northgrid · proself18 Eki 2023

  • CVE-2023-5631
    74Bu hafta

    Stored XSS vulnerability in Roundcube

    OrtaCVSS 5,4KEVSilahlaştırılmışEPSS %75

    roundcube · webmail18 Eki 2023

  • CVE-2023-5642
    44Planlayın

    Advantech R-SeeNet Unauthenticated Read/Write

    KritikCVSS 9,8İstismar yokEPSS %16

    advantech · r-seenet18 Eki 2023

  • CVE-2023-46229
    48Planlayın

    LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an

    YüksekCVSS 8,8Kavram kanıtıEPSS %44

    langchain · langchain19 Eki 2023

  • CVE-2023-5204
    32İzleyin

    AI ChatBot <= 4.8.9 - Unauthenticated SQL Injection via qc_wpbo_search_response

    YüksekCVSS 7,5Kavram kanıtıEPSS %6

    quantumcloud · wpbot19 Eki 2023

  • CVE-2023-34050
    17İzleyin

    Spring AMQP Deserialization Vulnerability

    OrtaCVSS 4,3Kavram kanıtıEPSS %1

    vmware · spring advanced message queuing protocol19 Eki 2023

  • CVE-2023-35180
    43Planlayın

    SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %27

    solarwinds · access rights manager19 Eki 2023

  • CVE-2023-46042
    46Planlayın

    An issue in GetSimpleCMS v.3.4.0a allows a remote attacker to execute arbitrary code via a crafted payload to the phpinfo().

    KritikCVSS 9,8İstismar yokEPSS %22

    get-simple · getsimplecms19 Eki 2023

  • CVE-2023-45277
    30İzleyin

    Yamcs 5.8.6 is vulnerable to directory traversal (issue 1 of 2).

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    spaceapplications · yamcs19 Eki 2023

  • CVE-2023-45826
    27İzleyin

    Authenticated SQL Injection in leantime

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    leantime · leantime19 Eki 2023

  • CVE-2023-45992
    38İzleyin

    A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, una

    KritikCVSS 9,6Kavram kanıtıEPSS %0

    commscope · ruckus cloudpath enrollment system19 Eki 2023

  • CVE-2023-43341
    24İzleyin

    Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload in

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    evo · evolution cms19 Eki 2023

  • CVE-2023-43342
    21İzleyin

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    opensolution · quick cms19 Eki 2023

  • CVE-2023-43344
    21İzleyin

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    opensolution · quick cms19 Eki 2023

  • CVE-2023-43359
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the P

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple19 Eki 2023

  • CVE-2023-43875
    24İzleyin

    Multiple Cross-Site Scripting (XSS) vulnerabilities in installation of Subrion CMS v.4.2.1 allows a local attacker to execute arbitrary web

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    intelliants · subrion cms19 Eki 2023

  • CVE-2023-41898
    31İzleyin

    Arbitrary URL load in Android WebView in `MyActivity.kt` in Home Assistant Companion for Android

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    home-assistant · home assistant companion19 Eki 2023

  • CVE-2023-43340
    20İzleyin

    Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload inject

    OrtaCVSS 5,2Kavram kanıtıEPSS %0

    evo · evolution cms19 Eki 2023

  • CVE-2023-43345
    34İzleyin

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    opensolution · quick cms19 Eki 2023

  • CVE-2023-34051
    52Planlayın

    VMware Aria Operations for Logs contains an authentication bypass vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %44

    vmware · aria operations for logs20 Eki 2023

  • CVE-2023-40361
    31İzleyin

    SECUDOS Qiata (DOMOS OS) 4.13 has Insecure Permissions for the previewRm.sh daily cronjob.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    secudos · qiata20 Eki 2023

  • CVE-2023-5070
    26İzleyin

    Social Media Share Buttons & Social Sharing Icons <= 2.8.5 - Information Exposure

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    ultimatelysocial · social media share buttons \& social sharing icons20 Eki 2023

  • CVE-2023-43353
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the e

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple20 Eki 2023

  • CVE-2023-43354
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the P

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple20 Eki 2023

  • CVE-2023-43355
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the p

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple20 Eki 2023

  • CVE-2023-43356
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the G

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple20 Eki 2023

  • CVE-2023-43357
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the T

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple20 Eki 2023

  • CVE-2023-43346
    21İzleyin

    Cross-site scripting (XSS) vulnerability in opensolution Quick CMS v.6.7 allows a local attacker to execute arbitrary code via a crafted scr

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    opensolution · quick cms20 Eki 2023

  • CVE-2023-38192
    24İzleyin

    An issue was discovered in SuperWebMailer 9.00.0.01710.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    superwebmailer · superwebmailer20 Eki 2023

  • CVE-2023-38194
    24İzleyin

    An issue was discovered in SuperWebMailer 9.00.0.01710.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    superwebmailer · superwebmailer20 Eki 2023

  • CVE-2023-46003
    21İzleyin

    I-doit pro 25 and below is vulnerable to Cross Site Scripting (XSS) via index.php.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    i-doit · i-doit20 Eki 2023

  • CVE-2023-5683
    44Planlayın

    Byzoro Smart S85F Management Platform importconf.php os command injection

    KritikCVSS 9,8İstismar yokEPSS %17

    byzoro · smart s85f firmware21 Eki 2023

  • CVE-2023-5684
    63Bu hafta

    Byzoro Smart S85F Management Platform importexport.php os command injection

    KritikCVSS 9,8İstismar yokEPSS %78

    byzoro · smart s85f firmware21 Eki 2023

  • CVE-2023-5702
    30İzleyin

    Viessmann Vitogate 300 direct request

    OrtaCVSS 6,5Kavram kanıtıEPSS %14

    viessmann · vitogate 300 firmware22 Eki 2023

  • CVE-2023-43622
    51Planlayın

    Apache HTTP Server: DoS in HTTP/2 with initial windows size 0

    YüksekCVSS 7,5Kavram kanıtıEPSS %70

    apache · http server23 Eki 2023

  • CVE-2023-45802
    24İzleyin

    Apache HTTP Server: HTTP/2 stream memory not reclaimed right away on RST

    OrtaCVSS 5,9Kavram kanıtıEPSS %3

    apache · http server23 Eki 2023

  • CVE-2023-46127
    32İzleyin

    Frappe vulnerable to HTML injection by any Desk user

    OrtaCVSS 5,4İstismar yokEPSS %36

    frappe · frappe23 Eki 2023

  • CVE-2023-37635
    39İzleyin

    UVDesk Community Skeleton v1.1.1 allows unauthenticated attackers to perform brute force attacks on the login page to gain access to the app

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    uvdesk · community-skeleton23 Eki 2023

  • CVE-2023-45966
    30İzleyin

    umputun remark42 version 1.12.1 and before has a Blind Server-Side Request Forgery (SSRF) vulnerability.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    remark42 · remark4223 Eki 2023

  • CVE-2023-43358
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the T

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple23 Eki 2023

  • CVE-2023-44760
    19İzleyin

    Multiple Cross Site Scripting (XSS) vulnerabilities in Concrete CMS v.9.2.1 allow an attacker to execute arbitrary code via a crafted script

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    concretecms · concrete cms23 Eki 2023

  • CVE-2022-3699
    32İzleyin

    A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to

    YüksekCVSS 7,8SilahlaştırılmışEPSS %4

    lenovo · diagnostics25 Eki 2023

  • CVE-2023-20273
    86Hemen

    A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject commands with the pri

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %92

    cisco · ios xe25 Eki 2023

  • CVE-2023-34048
    99Hemen

    VMware vCenter Server Out-of-Bounds Write Vulnerability

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    vmware · vcenter server25 Eki 2023

  • CVE-2023-34446
    24İzleyin

    iTop XSS vulnerability on pages/preferences.php

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    combodo · itop25 Eki 2023

  • CVE-2023-36085
    24İzleyin

    The sisqualWFM 7.1.319.103 thru 7.1.319.111 for Android, has a host header injection vulnerability in its "/sisqualIdentityServer/core/" end

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    sisqualwfm · sisqualwfm25 Eki 2023

  • CVE-2023-37908
    38İzleyin

    org.xwiki.rendering:xwiki-rendering-xml Improper Neutralization of Invalid Characters in Identifiers in Web Pages vulnerability

    KritikCVSS 9,6Kavram kanıtıEPSS %1

    xwiki · xwiki-rendering25 Eki 2023

  • CVE-2023-38041
    28İzleyin

    A logged in user may elevate its permissions by abusing a Time-of-Check to Time-of-Use (TOCTOU) race condition.

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    ivanti · secure access client25 Eki 2023

  • CVE-2023-43360
    21İzleyin

    Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the T

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    cmsmadesimple · cms made simple25 Eki 2023

  • CVE-2023-43795
    60Bu hafta

    WPS Server Side Request Forgery in GeoServer

    KritikCVSS 9,8Kavram kanıtıEPSS %68

    osgeo · geoserver25 Eki 2023

  • CVE-2023-44767
    19İzleyin

    A File upload vulnerability in RiteCMS 3.0 allows a local attacker to upload a SVG file with XSS content.

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    ritecms · ritecms25 Eki 2023

  • CVE-2023-44769
    21İzleyin

    A Cross-Site Scripting (XSS) vulnerability in Zenario CMS v.9.4.59197 allows a local attacker to execute arbitrary code via a crafted script

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    tribalsystems · zenario25 Eki 2023

  • CVE-2023-46136
    30İzleyin

    Werkzeug vulnerable to high resource usage when parsing multipart/form-data containing a large part with CR/LF character at the beginning

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    palletsprojects · werkzeug25 Eki 2023

  • CVE-2023-46347
    54Planlayın

    In the module "Step by Step products Pack" (ndk_steppingpack) version 1.5.6 and before from NDK Design for PrestaShop, a guest can perform S

    KritikCVSS 9,8Kavram kanıtıEPSS %49

    ndkdesign · ndk steppingpack25 Eki 2023

  • CVE-2023-46370
    44Planlayın

    Tenda W18E V16.01.0.8(1576) has a command injection vulnerability via the hostName parameter in the formSetNetCheckTools function.

    KritikCVSS 9,8İstismar yokEPSS %18

    tenda · w18e firmware25 Eki 2023

  • CVE-2023-46371
    39İzleyin

    TP-Link device TL-WDR7660 2.0.30 and TL-WR886N 2.0.12 has a stack overflow vulnerability via the function upgradeInfoJsonToBin.

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    tp-link · tl-wdr7660 firmware25 Eki 2023

  • CVE-2023-46574
    59Planlayın

    An issue in TOTOLINK A3700R v.9.1.2u.6165_20211012 allows a remote attacker to execute arbitrary code via the FileName parameter of the Uplo

    KritikCVSS 9,8Kavram kanıtıEPSS %65

    totolink · a3700r firmware25 Eki 2023

  • CVE-2023-40404
    31İzleyin

    A use-after-free issue was addressed with improved memory management.

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    apple · macos25 Eki 2023