İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2023: sömürülen ve yeni ciddi CVE kayıtları

168 kayıt · 11 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2023-4197
    46Planlayın

    Dolibarr ERP CRM (<= 18.0.1) Improper Input Sanitization Authenticated RCE

    YüksekCVSS 8,8Kavram kanıtıEPSS %35

    dolibarr · dolibarr erp\/crm1 Kas 2023

  • CVE-2023-1718
    37İzleyin

    Bitrix24 Denial-of-Service (DoS) via Improper File Stream Access

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    bitrix24 · bitrix241 Kas 2023

  • CVE-2023-1719
    40Planlayın

    Bitrix24 Insecure Global Variable Extraction

    KritikCVSS 9,8Kavram kanıtıEPSS %4

    bitrix24 · bitrix241 Kas 2023

  • CVE-2023-20048
    44Planlayın

    A vulnerability in the web services interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attac

    KritikCVSS 9,9Kavram kanıtıEPSS %15

    cisco · secure firewall management center1 Kas 2023

  • CVE-2023-5178
    38İzleyin

    Kernel: use after free in nvmet_tcp_free_crypto in nvme

    YüksekCVSS 8,8Kavram kanıtıEPSS %9

    linux · linux kernel1 Kas 2023

  • CVE-2023-46695
    45Planlayın

    An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7.

    YüksekCVSS 7,5İstismar yokEPSS %49

    djangoproject · django2 Kas 2023

  • CVE-2023-46954
    39İzleyin

    SQL Injection vulnerability in Relativity ODA LLC RelativityOne v.12.1.537.3 Patch 2 and earlier allows a remote attacker to execute arbitra

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    relativity · relativityone2 Kas 2023

  • CVE-2023-31102
    48Planlayın

    Ppmd7.c in 7-Zip before 23.00 allows an integer underflow and invalid read operation via a crafted 7Z archive.

    YüksekCVSS 7,8İstismar yokEPSS %55

    7-zip · 7-zip3 Kas 2023

  • CVE-2023-34259
    37İzleyin

    Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow /wlmdeu%2f%2e%2e%2f%2e%2e directory traversal to read arbitrary files on the

    OrtaCVSS 4,9Kavram kanıtıEPSS %60

    kyocera · d-copia253mf plus firmware3 Kas 2023

  • CVE-2023-34260
    52Planlayın

    Kyocera TASKalfa 4053ci printers through 2VG_S000.002.561 allow a denial of service (service outage) via /wlmdeu%2f%2e%2e%2f%2e%2e followed

    YüksekCVSS 7,5İstismar yokEPSS %73

    kyocera · d-copia253mf plus firmware3 Kas 2023

  • CVE-2023-46847
    54Planlayın

    Squid: denial of service in http digest authentication

    YüksekCVSS 7,5İstismar yokEPSS %78

    squid-cache · squid3 Kas 2023

  • CVE-2023-46848
    33İzleyin

    Squid: denial of service in ftp

    YüksekCVSS 7,5İstismar yokEPSS %10

    squid-cache · squid3 Kas 2023

  • CVE-2023-3277
    40Planlayın

    MStore API <= 4.10.7 - Unauthorized Account Access and Privilege Escalation

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    inspireui · mstore api3 Kas 2023

  • CVE-2023-41652
    39İzleyin

    WordPress RSVPMarker Plugin <= 10.6.6 is vulnerable to SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    carrcommunications · rsvpmaker3 Kas 2023

  • CVE-2022-45805
    40Planlayın

    WordPress Paytm Payment Gateway Plugin <= 2.7.3 is vulnerable to SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    paytm · payment gateway3 Kas 2023

  • CVE-2023-46404
    40Planlayın

    PCRS <= 3.11 (d0de1e) “Questions” page and “Code editor” page are vulnerable to remote code execution (RCE) by escaping Python sandboxing.

    KritikCVSS 9,9Kavram kanıtıEPSS %1

    utoronto · pcrs3 Kas 2023

  • CVE-2023-46980
    39İzleyin

    An issue in Best Courier Management System v.1.0 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted sc

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    mayurik · best courier management system3 Kas 2023

  • CVE-2023-23368
    45Planlayın

    QTS, QuTS hero, QuTScloud

    KritikCVSS 9,8İstismar yokEPSS %18

    qnap · qts3 Kas 2023

  • CVE-2023-23369
    43Planlayın

    QTS, Multimedia Console, and Media Streaming add-on

    KritikCVSS 9,8İstismar yokEPSS %14

    qnap · qts3 Kas 2023

  • CVE-2022-3172
    33İzleyin

    Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF)

    YüksekCVSS 8,2Kavram kanıtıEPSS %2

    kubernetes · apiserver3 Kas 2023

  • CVE-2022-44569
    31İzleyin

    A locally authenticated attacker with low privileges can bypass authentication due to insecure inter-process communication.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    ivanti · automation3 Kas 2023

  • CVE-2023-47253
    43Planlayın

    Qualitor through 8.20 allows remote attackers to execute arbitrary code via PHP code in the html/ad/adpesquisasql/request/processVariavel.ph

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    qualitor · qualitor6 Kas 2023

  • CVE-2023-4699
    36İzleyin

    Arbitrary Command Execution Vulnerability in Mitsubishi Electric proprietary protocol communication of multiple FA products

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    mitsubishielectric · fx3u-32mt\/es firmware6 Kas 2023

  • CVE-2023-45657
    39İzleyin

    WordPress Nexter Theme <= 2.0.3 is vulnerable to SQL Injection

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    posimyth · nexter6 Kas 2023

  • CVE-2023-5968
    19İzleyin

    Password hash in response body after username update

    OrtaCVSS 4,9Kavram kanıtıEPSS %0

    mattermost · mattermost6 Kas 2023

  • CVE-2023-45827
    39İzleyin

    Prototype Pollution vulnerability in @clickbar/dot-diver

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    clickbar · dot-diver6 Kas 2023

  • CVE-2023-46731
    66Bu hafta

    Remote code execution through the section parameter in Administration as guest in XWiki Platform

    KritikCVSS 9,8İstismar yokEPSS %88

    xwiki · xwiki6 Kas 2023

  • CVE-2023-46732
    25İzleyin

    Reflected Cross-site scripting through revision parameter in content menu in XWiki Platform

    OrtaCVSS 6,1Kavram kanıtıEPSS %2

    xwiki · xwiki6 Kas 2023

  • CVE-2023-5777
    39İzleyin

    Weintek EasyBuilder Pro Use of Hard-coded Credentials

    KritikCVSS 9,8İstismar yokEPSS %0

    weintek · easybuilder pro6 Kas 2023

  • CVE-2023-46998
    24İzleyin

    Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    bootboxjs · bootbox7 Kas 2023

  • CVE-2023-47102
    21İzleyin

    UrBackup Server 2.5.31 allows brute-force enumeration of user accounts because a failure message confirms that a username is not valid.

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    urbackup · urbackup server7 Kas 2023

  • CVE-2023-38547
    45Planlayın

    A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection Veeam ONE uses to access its

    KritikCVSS 9,8İstismar yokEPSS %18

    veeam · one7 Kas 2023

  • CVE-2023-38548
    21İzleyin

    A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of

    OrtaCVSS 4,3İstismar yokEPSS %11

    veeam · one7 Kas 2023

  • CVE-2023-38549
    27İzleyin

    A vulnerability in Veeam ONE allows an unprivileged user who has access to the Veeam ONE Web Client the ability to acquire the NTLM hash of

    OrtaCVSS 5,4İstismar yokEPSS %19

    veeam · one7 Kas 2023

  • CVE-2023-41723
    21İzleyin

    A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule.

    OrtaCVSS 4,3İstismar yokEPSS %12

    veeam · one7 Kas 2023

  • CVE-2023-42283
    39İzleyin

    Blind SQL injection in api_id parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL query

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    tyk · tyk7 Kas 2023

  • CVE-2023-42284
    39İzleyin

    Blind SQL injection in api_version parameter in Tyk Gateway version 5.0.3 allows attacker to access and dump the database via a crafted SQL

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    tyk · tyk7 Kas 2023

  • CVE-2023-4842
    21İzleyin

    Social Sharing Plugin - Social Warfare <= 4.4.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    warfareplugins · social warfare7 Kas 2023

  • CVE-2023-41425
    60Bu hafta

    Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted scrip

    OrtaCVSS 6,1SilahlaştırılmışEPSS %54

    wondercms · wondercms7 Kas 2023

  • CVE-2023-46501
    36İzleyin

    An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin pass

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    boltwire · boltwire7 Kas 2023

  • CVE-2023-45857
    26İzleyin

    An issue discovered in Axios 1.5.1 inadvertently reveals the confidential XSRF-TOKEN stored in cookies by including it in the HTTP header X-

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    axios · axios8 Kas 2023

  • CVE-2023-3959
    54Planlayın

    Zavio IP Camera Stack-Based Buffer Overflow

    KritikCVSS 9,8İstismar yokEPSS %48

    zavio · cf7500 firmware8 Kas 2023

  • CVE-2023-4249
    43Planlayın

    Zavio IP Camera Stack-Based Buffer Overflow

    KritikCVSS 9,8İstismar yokEPSS %12

    zavio · cf7500 firmware8 Kas 2023

  • CVE-2021-43609
    36İzleyin

    An issue was discovered in Spiceworks Help Desk Server before 1.3.3.

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    spiceworks · help desk server8 Kas 2023

  • CVE-2023-37790
    21İzleyin

    Jaspersoft Clarity PPM version 14.3.0.298 was discovered to contain an arbitrary file upload vulnerability via the Profile Picture Upload fu

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    broadcom · clarity8 Kas 2023

  • CVE-2023-47248
    43Planlayın

    PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

    KritikCVSS 9,8Kavram kanıtıEPSS %14

    apache · pyarrow9 Kas 2023

  • CVE-2023-5546
    21İzleyin

    Moodle: stored xss in quiz grading report via user id number

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    moodle · moodle9 Kas 2023

  • CVE-2023-39796
    41Planlayın

    SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via

    KritikCVSS 9,8Kavram kanıtıEPSS %6

    wbce · wbce cms10 Kas 2023

  • CVE-2023-47246
    99Hemen

    In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat we

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98

    sysaid · sysaid10 Kas 2023

  • CVE-2023-45806
    21İzleyin

    Discourse vulnerable to DoS via Regexp Injection in Full Name

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    discourse · discourse10 Kas 2023

  • CVE-2023-47119
    24İzleyin

    HTML injection in oneboxed links

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    discourse · discourse10 Kas 2023

  • CVE-2023-47108
    31İzleyin

    DoS vulnerability in otelgrpc (uncontrolled resource consumption) due to unbound cardinality metrics

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    opentelemetry · opentelemetry10 Kas 2023

  • CVE-2023-47129
    39İzleyin

    Statamic CMS remote code execution via front-end form uploads

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    statamic · statamic10 Kas 2023

  • CVE-2022-45835
    41Planlayın

    WordPress PhonePe Payment Solutions Plugin <= 1.0.15 is vulnerable to Server Side Request Forgery (SSRF)

    YüksekCVSS 7,5Kavram kanıtıEPSS %37

    phonepe · phonepe12 Kas 2023

  • CVE-2023-47117
    31İzleyin

    Object Relational Mapper Leak Vulnerability in Filtering Task in Label Studio

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    humansignal · label studio13 Kas 2023

  • CVE-2023-46014
    22İzleyin

    SQL Injection vulnerability in hospitalLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'hemail'

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-46015
    24İzleyin

    Cross Site Scripting (XSS) vulnerability in index.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via 'msg' param

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-46016
    24İzleyin

    Cross Site Scripting (XSS) in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'search' parameter in t

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-46017
    22İzleyin

    SQL Injection vulnerability in receiverLogin.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via 'remail'

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-46018
    22İzleyin

    SQL injection vulnerability in receiverReg.php in Code-Projects Blood Bank 1.0 \allows attackers to run arbitrary SQL commands via 'remail'

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-46019
    24İzleyin

    Cross Site Scripting (XSS) vulnerability in abs.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'error' p

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-46020
    24İzleyin

    Cross Site Scripting (XSS) in updateprofile.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary code via the 'rename', 're

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-46021
    22İzleyin

    SQL Injection vulnerability in cancel.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary commands via the 'reqid' paramet

    OrtaCVSS 5,5Kavram kanıtıEPSS %0

    code-projects · blood bank13 Kas 2023

  • CVE-2023-47684
    24İzleyin

    WordPress Essential Grid Plugin <= 3.1.0 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    themepunch · essential grid13 Kas 2023

  • CVE-2023-42325
    38İzleyin

    Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted url to the sta

    OrtaCVSS 5,4İstismar yokEPSS %57

    netgate · pfsense14 Kas 2023

  • CVE-2023-42327
    38İzleyin

    Cross Site Scripting (XSS) vulnerability in Netgate pfSense v.2.7.0 allows a remote attacker to gain privileges via a crafted URL to the get

    OrtaCVSS 5,4İstismar yokEPSS %55

    netgate · pfsense14 Kas 2023

  • CVE-2023-42326
    54Planlayın

    An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php

    YüksekCVSS 8,8Kavram kanıtıEPSS %64

    netgate · pfsense14 Kas 2023

  • CVE-2023-45878
    58Planlayın

    GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authenticati

    KritikCVSS 9,8Kavram kanıtıEPSS %63

    gibbonedu · gibbon14 Kas 2023

  • CVE-2023-34991
    48Planlayın

    A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and

    KritikCVSS 9,8İstismar yokEPSS %28

    fortinet · fortiwlm14 Kas 2023

  • CVE-2023-36017
    43Planlayın

    Windows Scripting Engine Memory Corruption Vulnerability

    YüksekCVSS 8,8İstismar yokEPSS %25

    microsoft · windows 10 150714 Kas 2023

  • CVE-2023-36025
    91Hemen

    Windows SmartScreen Security Feature Bypass Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %88

    microsoft · windows 10 150714 Kas 2023

  • CVE-2023-36033
    64Bu hafta

    Windows DWM Core Library Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %10

    microsoft · windows 10 180914 Kas 2023

  • CVE-2023-36035
    58Planlayın

    Microsoft Exchange Server Spoofing Vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %86

    microsoft · exchange server14 Kas 2023

  • CVE-2023-36036
    66Bu hafta

    Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %16

    microsoft · windows 10 150714 Kas 2023

  • CVE-2023-36039
    54Planlayın

    Microsoft Exchange Server Spoofing Vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %72

    microsoft · exchange server14 Kas 2023

  • CVE-2023-36041
    48Planlayın

    Microsoft Excel Remote Code Execution Vulnerability

    YüksekCVSS 7,8İstismar yokEPSS %56

    microsoft · 365 apps14 Kas 2023

  • CVE-2023-36050
    44Planlayın

    Microsoft Exchange Server Spoofing Vulnerability

    YüksekCVSS 8,0İstismar yokEPSS %39

    microsoft · exchange server14 Kas 2023

  • CVE-2023-36052
    40Planlayın

    Azure CLI REST Command Information Disclosure Vulnerability

    YüksekCVSS 8,6İstismar yokEPSS %21

    microsoft · azure command-line interface14 Kas 2023

  • CVE-2023-36397
    44Planlayın

    Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

    KritikCVSS 9,8İstismar yokEPSS %17

    microsoft · windows 10 150714 Kas 2023

  • CVE-2023-36407
    32İzleyin

    Windows Hyper-V Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows 11 21h214 Kas 2023

  • CVE-2023-36413
    35İzleyin

    Microsoft Office Security Feature Bypass Vulnerability

    OrtaCVSS 6,5İstismar yokEPSS %29

    microsoft · 365 apps14 Kas 2023

  • CVE-2023-36424
    65Bu hafta

    Windows Common Log File System Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %12

    microsoft · windows 10 150714 Kas 2023

  • CVE-2023-36427
    28İzleyin

    Windows Hyper-V Elevation of Privilege Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %1

    microsoft · windows 10 180914 Kas 2023

  • CVE-2023-23583
    31İzleyin

    Sequence of processor instructions leads to unexpected behavior for some Intel(R) Processors may allow an authenticated user to potentially

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    intel · core i3-10100y firmware14 Kas 2023

  • CVE-2023-31320
    30İzleyin

    Improper input validation in the AMD RadeonTM Graphics display driver may allow an attacker to corrupt the display potentially resulting in

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    amd · radeon software14 Kas 2023

  • CVE-2023-47125
    24İzleyin

    By-passing Cross-Site Scripting Protection in HTML Sanitizer

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    typo3 · html sanitizer14 Kas 2023

  • CVE-2023-46022
    31İzleyin

    SQL Injection vulnerability in delete.php in Code-Projects Blood Bank 1.0 allows attackers to run arbitrary SQL commands via the 'bid' param

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    code-projects · blood bank14 Kas 2023

  • CVE-2023-46023
    26İzleyin

    SQL injection vulnerability in addTask.php in Code-Projects Simple Task List 1.0 allows attackers to obtain sensitive information via the 's

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    code-projects · simple task list14 Kas 2023

  • CVE-2023-46024
    30İzleyin

    SQL Injection vulnerability in index.php in phpgurukul Teacher Subject Allocation Management System 1.0 allows attackers to run arbitrary SQ

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    phpgurukul · teacher subject allocation management system14 Kas 2023

  • CVE-2023-46580
    21İzleyin

    Cross-Site Scripting (XSS) vulnerability in Inventory Management V1.0 allows attackers to execute arbitrary code via the pname parameter of

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    code-projects · inventory management14 Kas 2023

  • CVE-2023-35080
    31İzleyin

    A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploi

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    ivanti · secure access client14 Kas 2023

  • CVE-2023-41597
    24İzleyin

    EyouCms v1.6.2 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the component /admin/twitter.php?active_t.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    eyoucms · eyoucms15 Kas 2023

  • CVE-2023-6112
    42Planlayın

    Use after free in Navigation in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a

    YüksekCVSS 8,8İstismar yokEPSS %24

    google · chrome15 Kas 2023

  • CVE-2023-48365
    83Hemen

    Qlik Sense Enterprise for Windows before August 2023 Patch 2 allows unauthenticated remote code execution, aka QB-21683.

    KritikCVSS 9,9KEVSilahlaştırılmışEPSS %47

    qlik · qlik sense15 Kas 2023

  • CVE-2023-43757
    26İzleyin

    Inadequate encryption strength vulnerability in multiple routers provided by ELECOM CO.,LTD.

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    elecom · wrc-2533ghbk2-t firmware16 Kas 2023

  • CVE-2023-6016
    48Planlayın

    H2O Remote Code Execution via POJO Model Import

    KritikCVSS 9,8İstismar yokEPSS %30

    h2o · h2o16 Kas 2023

  • CVE-2023-6018
    53Planlayın

    MLflow Arbitrary File Write

    KritikCVSS 9,8Kavram kanıtıEPSS %47

    lfprojects · mlflow16 Kas 2023

  • CVE-2023-6023
    31İzleyin

    ModelDB Local File Include

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    vertaai · modeldb16 Kas 2023

  • CVE-2023-6019
    61Bu hafta

    Ray Command Injection in cpu_profile Parameter

    KritikCVSS 9,8SilahlaştırılmışEPSS %74

    ray project · ray16 Kas 2023

  • CVE-2023-6021
    41Planlayın

    Ray Log File Local File Include

    YüksekCVSS 7,5Kavram kanıtıEPSS %37

    ray project · ray16 Kas 2023