İçeriğe atla
Noroxi

Yayın tarihine göre

Ekim 2023: sömürülen ve yeni ciddi CVE kayıtları

118 kayıt · 19 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 2 / 2

  • CVE-2023-46818
    40Planlayın

    An issue was discovered in ISPConfig before 3.2.11p1.

    YüksekCVSS 7,2SilahlaştırılmışEPSS %15

    ispconfig · ispconfig27 Eki 2023

  • CVE-2023-46604
    99Hemen

    Apache ActiveMQ, Apache ActiveMQ Legacy OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    apache · activemq27 Eki 2023

  • CVE-2023-35794
    35İzleyin

    An issue was discovered in Cassia Access Controller 2.1.1.2303271039.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    cassianetworks · access controller27 Eki 2023

  • CVE-2023-40127
    13İzleyin

    In multiple locations, there is a possible way to access screenshots due to a confused deputy.

    DüşükCVSS 3,3Kavram kanıtıEPSS %0

    google · android27 Eki 2023

  • CVE-2023-40130
    31İzleyin

    In notifyTimeout of CallRedirectionProcessor, there is a possible permission bypass due to a logic error in the code.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android27 Eki 2023

  • CVE-2023-40133
    22İzleyin

    In multiple locations of DialogFillUi.java, there is a possible way to view another user's images due to a confused deputy.

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    google · android27 Eki 2023

  • CVE-2023-5830
    57Planlayın

    ColumbiaSoft Document Locator WebTools login improper authentication

    KritikCVSS 9,8Kavram kanıtıEPSS %60

    documentlocator · document locator27 Eki 2023

  • CVE-2023-46865
    34İzleyin

    /api/v1/company/upload-logo in CompanyController.php in crater through 6.0.6 allows a superadmin to execute arbitrary PHP code by placing th

    YüksekCVSS 7,2Kavram kanıtıEPSS %20

    craterapp · crater29 Eki 2023

  • CVE-2023-45671
    18İzleyin

    Frigate reflected XSS through `/<camera_name>` API endpoints

    OrtaCVSS 4,7Kavram kanıtıEPSS %1

    frigate · frigate30 Eki 2023

  • CVE-2023-46478
    35İzleyin

    An issue in minCal v.1.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the customer_data parameter.

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    minical · minical30 Eki 2023

  • CVE-2023-5863
    24İzleyin

    Cross-site Scripting (XSS) - Reflected in thorsten/phpmyfaq

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    phpmyfaq · phpmyfaq30 Eki 2023

  • CVE-2023-45996
    35İzleyin

    SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive

    YüksekCVSS 8,8İstismar yokEPSS %1

    slims · senayan library management system31 Eki 2023

  • CVE-2023-46451
    21İzleyin

    Best Courier Management System v1.0 is vulnerable to Cross Site Scripting (XSS) in the change username field.

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    mayurik · best courier management system31 Eki 2023

  • CVE-2023-5412
    26İzleyin

    Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    gopiplus · image horizontal reel scroll slideshow31 Eki 2023

  • CVE-2023-24000
    40Planlayın

    WordPress GamiPress Plugin <= 2.5.7 is vulnerable to SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    gamipress · gamipress31 Eki 2023

  • CVE-2023-5360
    65Bu hafta

    Royal Elementor Addons and Templates < 1.3.79 - Unauthenticated Arbitrary File Upload

    KritikCVSS 9,8SilahlaştırılmışEPSS %86

    royal-elementor-addons · royal elementor addons31 Eki 2023

  • CVE-2023-22518
    99Hemen

    All versions of Confluence Data Center and Server are affected by this unexploited vulnerability.

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    atlassian · confluence data center31 Eki 2023

  • CVE-2023-3676
    39İzleyin

    Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

    YüksekCVSS 8,8İstismar yokEPSS %13

    kubernetes · kubernetes31 Eki 2023