İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2023: sömürülen ve yeni ciddi CVE kayıtları

162 kayıt · 9 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2023-48842
    40Planlayın

    D-Link Go-RT-AC750 revA_v101b03 was discovered to contain a command injection vulnerability via the service parameter at hedwig.cgi.

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    dlink · go-rt-ac750 firmware1 Ara 2023

  • CVE-2023-4460
    21İzleyin

    Uploading SVG, WEBP and ICO files <= 1.2.1 - Author+ Stored XSS via SVG

    OrtaCVSS 5,4Kavram kanıtıEPSS %1

    uploading svg\, webp and ico files project · uploading svg\, webp and ico files4 Ara 2023

  • CVE-2023-6063
    60Bu hafta

    WP Fastest Cache < 1.2.2 - Unauthenticated SQL Injection

    YüksekCVSS 7,5SilahlaştırılmışEPSS %73

    wpfastestcache · wp fastest cache4 Ara 2023

  • CVE-2023-40084
    31İzleyin

    In run of MDnsSdListener.cpp, there is a possible memory corruption due to a use after free.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android4 Ara 2023

  • CVE-2023-40459
    31İzleyin

    Improper input leads to DoS

    YüksekCVSS 7,5Kavram kanıtıEPSS %2

    sierrawireless · aleos4 Ara 2023

  • CVE-2023-45777
    31İzleyin

    In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to launch arbitrary activities using system privil

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android4 Ara 2023

  • CVE-2023-45779
    31İzleyin

    In the APEX module framework of AOSP, there is a possible malicious update to platform components due to improperly used crypto.

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    google · android4 Ara 2023

  • CVE-2023-49285
    56Planlayın

    Denial of Service in HTTP Message Processing in Squid

    YüksekCVSS 7,5İstismar yokEPSS %88

    squid-cache · squid4 Ara 2023

  • CVE-2023-49286
    33İzleyin

    Denial of Service in Helper Process management

    YüksekCVSS 7,5İstismar yokEPSS %10

    squid-cache · squid4 Ara 2023

  • CVE-2023-49293
    24İzleyin

    Cross-site Scripting in `server.transformIndexHtml` via URL payload in vite

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    vitejs · vite4 Ara 2023

  • CVE-2023-5808
    26İzleyin

    System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products are susceptible to unintended information disclosure vi

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    hitachi · vantara hitachi network attached storage4 Ara 2023

  • CVE-2023-28588
    30İzleyin

    Integer Overflow or Wraparound in Bluetooth Host

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    qualcomm · apq8017 firmware4 Ara 2023

  • CVE-2023-33063
    61Bu hafta

    Use After Free in DSP Services

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    qualcomm · 315 5g iot modem firmware4 Ara 2023

  • CVE-2023-33106
    61Bu hafta

    Use of Out-of-range Pointer Offset in Graphics

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    qualcomm · ar8035 firmware4 Ara 2023

  • CVE-2023-33107
    61Bu hafta

    Integer Overflow or Wraparound in Graphics Linux

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0

    qualcomm · 315 5g iot modem firmware4 Ara 2023

  • CVE-2023-43472
    41Planlayın

    An issue in MLFlow versions 2.8.1 and before allows a remote attacker to obtain sensitive information via a crafted request to REST API.

    YüksekCVSS 7,5Kavram kanıtıEPSS %36

    lfprojects · mlflow5 Ara 2023

  • CVE-2023-49070
    68Bu hafta

    Pre-auth RCE in Apache Ofbiz 18.12.09 due to XML-RPC still present

    KritikCVSS 9,8SilahlaştırılmışEPSS %95

    apache · ofbiz5 Ara 2023

  • CVE-2023-6448
    70Bu hafta

    Unitronics VisiLogic uses a default administrative password

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %2

    unitronics · vision1210 firmware5 Ara 2023

  • CVE-2023-44221
    81Hemen

    Improper neutralization of special elements in the SMA100 SSL-VPN management interface allows a remote authenticated attacker with administr

    YüksekCVSS 7,2KEVSilahlaştırılmışEPSS %76

    sonicwall · sma 200 firmware5 Ara 2023

  • CVE-2023-22522
    39İzleyin

    This Template Injection vulnerability allows an authenticated attacker, including one with anonymous access, to inject unsafe user input int

    YüksekCVSS 8,8İstismar yokEPSS %12

    atlassian · confluence data center6 Ara 2023

  • CVE-2023-22523
    38İzleyin

    This vulnerability, if exploited, allows an attacker to perform privileged RCE (Remote Code Execution) on machines with the Assets Discovery

    YüksekCVSS 8,8İstismar yokEPSS %11

    atlassian · assets discovery cloud6 Ara 2023

  • CVE-2023-22524
    46Planlayın

    Certain versions of the Atlassian Companion App for MacOS were affected by a remote code execution vulnerability.

    KritikCVSS 9,8Kavram kanıtıEPSS %24

    atlassian · companion6 Ara 2023

  • CVE-2023-49897
    80Hemen

    An OS command injection vulnerability exists in AE1021PE firmware version 2.0.9 and earlier and AE1021 firmware version 2.0.9 and earlier.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %50

    fxc · ae1021 firmware6 Ara 2023

  • CVE-2023-48849
    39İzleyin

    Ruijie EG Series Routers version EG_3.0(1)B11P216 and before allows unauthenticated attackers to remotely execute arbitrary code due to inco

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    ruijie · rg-eg1000c firmware6 Ara 2023

  • CVE-2023-39539
    31İzleyin

    Failure when uploading a Logo image file

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    ami · aptio v6 Ara 2023

  • CVE-2023-48123
    55Planlayın

    An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafte

    YüksekCVSS 8,8Kavram kanıtıEPSS %67

    netgate · pfsense6 Ara 2023

  • CVE-2023-6568
    24İzleyin

    Reflected XSS via Content-Type Header in mlflow/mlflow

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    lfprojects · mlflow7 Ara 2023

  • CVE-2023-43102
    24İzleyin

    An issue was discovered in Zimbra Collaboration (ZCS) before 10.0.4.

    OrtaCVSS 6,1İstismar yokEPSS %0

    zimbra · collaboration7 Ara 2023

  • CVE-2023-50164
    63Bu hafta

    Apache Struts: File upload component had a directory traversal vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %80

    apache · struts7 Ara 2023

  • CVE-2022-45362
    39İzleyin

    WordPress Paytm Payment Gateway Plugin <= 2.7.0 is vulnerable to Server Side Request Forgery (SSRF)

    OrtaCVSS 6,5Kavram kanıtıEPSS %41

    paytm · payment gateway7 Ara 2023

  • CVE-2023-46974
    21İzleyin

    Cross Site Scripting vulnerability in Best Courier Management System v.1.000 allows a remote attacker to execute arbitrary code via a crafte

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    mayurik · courier management system7 Ara 2023

  • CVE-2023-6579
    46Planlayın

    osCommerce POST Parameter shopping-cart sql injection

    KritikCVSS 9,8İstismar yokEPSS %24

    oscommerce · oscommerce7 Ara 2023

  • CVE-2023-45866
    27İzleyin

    Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and

    OrtaCVSS 6,3Kavram kanıtıEPSS %7

    google · android8 Ara 2023

  • CVE-2023-47565
    87Hemen

    An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x.

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %73

    qnap · qvr firmware8 Ara 2023

  • CVE-2023-6612
    48Planlayın

    Totolink X5000R cstecgi.cgi setWizardCfg os command injection

    KritikCVSS 9,8İstismar yokEPSS %30

    totolink · x5000r firmware8 Ara 2023

  • CVE-2023-6654
    35İzleyin

    PHPEMS Session Data session.cls.php deserialization

    YüksekCVSS 8,8Kavram kanıtıEPSS %1

    phpems · phpems10 Ara 2023

  • CVE-2023-6655
    40Planlayın

    Hongjing e-HR Login Interface loadhistroyorgtree sql injection

    KritikCVSS 9,8Kavram kanıtıEPSS %3

    hrp2000 · e-hr10 Ara 2023

  • CVE-2023-50465
    21İzleyin

    A stored cross-site scripting (XSS) vulnerability exists in Monica (aka MonicaHQ) 4.0.0 via an SVG document uploaded by an authenticated use

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    monicahq · monica10 Ara 2023

  • CVE-2023-49964
    45Planlayın

    An issue was discovered in Hyland Alfresco Community Edition through 7.2.0.

    YüksekCVSS 8,8Kavram kanıtıEPSS %34

    hyland · alfresco content services11 Ara 2023

  • CVE-2023-6538
    26İzleyin

    System Management Unit (SMU) versions prior to 14.8.7825.01, used to manage Hitachi Vantara NAS products is susceptible to unintended information disclosure via

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    hitachi · system management unit firmware11 Ara 2023

  • CVE-2023-49494
    24İzleyin

    DedeCMS v5.7.111 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component select_media_post_wangEdi

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    dedecms · dedecms11 Ara 2023

  • CVE-2023-50245
    39İzleyin

    OpenEXR-viewer memory overflow vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    afichet · openexr viewer11 Ara 2023

  • CVE-2023-5536
    25İzleyin

    A feature in LXD (LP#1829071), affects the default configuration of Ubuntu Server which allows privileged users in the lxd group to escalate

    OrtaCVSS 6,4Kavram kanıtıEPSS %0

    canonical · ubuntu linux11 Ara 2023

  • CVE-2023-41623
    28İzleyin

    Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.

    YüksekCVSS 7,2Kavram kanıtıEPSS %0

    emlog · emlog12 Ara 2023

  • CVE-2023-46454
    46Planlayın

    In GL.iNET GL-AR300M routers with firmware v4.3.7, it is possible to inject arbitrary shell commands through a crafted package name in the p

    KritikCVSS 9,8Kavram kanıtıEPSS %23

    gl-inet · gl-ar300m firmware12 Ara 2023

  • CVE-2023-46455
    44Planlayın

    In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN cli

    YüksekCVSS 7,5Kavram kanıtıEPSS %46

    gl-inet · gl-ar300m firmware12 Ara 2023

  • CVE-2023-46456
    46Planlayın

    In GL.iNET GL-AR300M routers with firmware 3.216 it is possible to inject arbitrary shell commands through the OpenVPN client file upload fu

    KritikCVSS 9,8İstismar yokEPSS %24

    gl-inet · gl-ar300m firmware12 Ara 2023

  • CVE-2023-28465
    30İzleyin

    The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to cer

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    hapifhir · hl7 fhir core12 Ara 2023

  • CVE-2023-35628
    60Bu hafta

    Windows MSHTML Platform Remote Code Execution Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %92

    microsoft · windows 10 150712 Ara 2023

  • CVE-2023-36003
    30İzleyin

    XAML Diagnostics Elevation of Privilege Vulnerability

    YüksekCVSS 7,3Kavram kanıtıEPSS %2

    microsoft · windows 10 150712 Ara 2023

  • CVE-2023-36005
    39İzleyin

    Windows Telephony Server Elevation of Privilege Vulnerability

    YüksekCVSS 8,1İstismar yokEPSS %23

    microsoft · windows 10 150712 Ara 2023

  • CVE-2023-36019
    34İzleyin

    Microsoft Power Platform Connector Spoofing Vulnerability

    YüksekCVSS 7,4İstismar yokEPSS %15

    microsoft · azure logic apps12 Ara 2023

  • CVE-2023-43364
    40Planlayın

    main.py in Searchor before 2.4.2 uses eval on CLI input, which may cause unexpected code execution.

    KritikCVSS 9,8Kavram kanıtıEPSS %2

    arjunsharda · searchor12 Ara 2023

  • CVE-2023-50252
    46Planlayın

    php-svg-lib unsafe attributes merge when parsing `use` tag

    KritikCVSS 9,8İstismar yokEPSS %23

    dompdf · php-svg-lib12 Ara 2023

  • CVE-2023-35636
    31İzleyin

    Microsoft Outlook Information Disclosure Vulnerability

    OrtaCVSS 6,5Kavram kanıtıEPSS %17

    microsoft · 365 apps12 Ara 2023

  • CVE-2023-6710
    22İzleyin

    Mod_cluster/mod_proxy_cluster: stored cross site scripting

    OrtaCVSS 5,4Kavram kanıtıEPSS %2

    modcluster · mod proxy cluster12 Ara 2023

  • CVE-2022-22942
    40Planlayın

    The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other

    YüksekCVSS 7,8SilahlaştırılmışEPSS %2

    vmware · photon os13 Ara 2023

  • CVE-2023-6379
    25İzleyin

    Cross-site Scripting in Alkacon Software OpenCms

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    alkacon · opencms13 Ara 2023

  • CVE-2023-6380
    24İzleyin

    Open Redirect in Alkacon Software OpenCms

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    alkacon · opencms13 Ara 2023

  • CVE-2023-34194
    30İzleyin

    StringEqual in TiXmlDeclaration::Parse in tinyxmlparser.cpp in TinyXML through 2.6.2 has a reachable assertion (and application exit) via a

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    tinyxml project · tinyxml13 Ara 2023

  • CVE-2023-43813
    44Planlayın

    glpi Authenticated SQL Injection

    YüksekCVSS 8,8İstismar yokEPSS %30

    glpi-project · glpi13 Ara 2023

  • CVE-2023-46727
    59Planlayın

    GLPI SQL injection through inventory agent request

    KritikCVSS 9,8İstismar yokEPSS %67

    glpi-project · glpi13 Ara 2023

  • CVE-2023-50443
    18İzleyin

    Encrypted disks created by PRIMX CRYHOD for Windows before Q.2020.4 (ANSSI qualification submission) or CRYHOD for Windows before 2023.5 can

    OrtaCVSS 4,6İstismar yokEPSS %0

    primx · cryhod13 Ara 2023

  • CVE-2023-41621
    24İzleyin

    A Cross Site Scripting (XSS) vulnerability was discovered in Emlog Pro v2.1.14 via the component /admin/store.php.

    OrtaCVSS 6,1Kavram kanıtıEPSS %1

    emlog · emlog13 Ara 2023

  • CVE-2023-31546
    53Planlayın

    Cross Site Scripting (XSS) vulnerability in DedeBIZ v6.0.3 allows attackers to run arbitrary code via the search feature.

    KritikCVSS 9,6Kavram kanıtıEPSS %49

    dedebiz · dedebiz13 Ara 2023

  • CVE-2023-45184
    30İzleyin

    IBM i Access Client Solutions

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    ibm · i access client solutions13 Ara 2023

  • CVE-2023-48084
    49Planlayın

    Nagios XI before version 5.11.3 was discovered to contain a SQL injection vulnerability via the bulk modification tool.

    KritikCVSS 9,8Kavram kanıtıEPSS %33

    nagios · nagios xi14 Ara 2023

  • CVE-2023-48085
    62Bu hafta

    Nagios XI before version 5.11.3 was discovered to contain a remote code execution (RCE) vulnerability via the component command_test.php.

    KritikCVSS 9,8İstismar yokEPSS %75

    nagios · nagios xi14 Ara 2023

  • CVE-2023-45182
    26İzleyin

    IBM i Access Client Solutions information disclosure

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    ibm · i access client solutions14 Ara 2023

  • CVE-2023-45185
    35İzleyin

    IBM i Access Client Solutions code execution

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    ibm · i access client solutions14 Ara 2023

  • CVE-2023-6572
    33İzleyin

    Command Injection in gradio-app/gradio

    YüksekCVSS 8,1Kavram kanıtıEPSS %1

    gradio project · gradio14 Ara 2023

  • CVE-2022-45365
    39İzleyin

    WordPress Stock Ticker Plugin <= 3.23.2 is vulnerable to Cross Site Scripting (XSS)

    OrtaCVSS 6,1Kavram kanıtıEPSS %49

    urosevic · stock ticker14 Ara 2023

  • CVE-2023-50564
    44Planlayın

    An arbitrary file upload vulnerability in the component /inc/modules_install.php of Pluck-CMS v4.7.18 allows attackers to execute arbitrary

    YüksekCVSS 8,8Kavram kanıtıEPSS %29

    pluck-cms · pluck14 Ara 2023

  • CVE-2023-6595
    21İzleyin

    WhatsUp Gold Unauthenticated Access to an API Endpoint

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    progress · whatsup gold14 Ara 2023

  • CVE-2023-50269
    47Planlayın

    SQUID-2023:10 Denial of Service in HTTP Request parsing

    YüksekCVSS 7,5İstismar yokEPSS %57

    squid-cache · squid14 Ara 2023

  • CVE-2023-49294
    44Planlayın

    Asterisk Path Traversal vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %45

    digium · asterisk14 Ara 2023

  • CVE-2023-6702
    48Planlayın

    Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted

    YüksekCVSS 8,8Kavram kanıtıEPSS %44

    google · chrome14 Ara 2023

  • CVE-2023-6831
    33İzleyin

    Path Traversal: '\..\filename' in mlflow/mlflow

    YüksekCVSS 8,1Kavram kanıtıEPSS %3

    lfprojects · mlflow14 Ara 2023

  • CVE-2023-6837
    32İzleyin

    Incorrect Authorization in Multiple WSO2 Products via Federated Authentication with JIT Provisioning Leading to User Impersonation

    YüksekCVSS 8,2İstismar yokEPSS %0

    wso2 · api manager15 Ara 2023

  • CVE-2023-6553
    68Bu hafta

    Backup Migration <= 1.3.7 - Unauthenticated Remote Code Execution

    KritikCVSS 9,8SilahlaştırılmışEPSS %97

    backupbliss · backup migration15 Ara 2023

  • CVE-2023-50917
    60Bu hafta

    MajorDoMo (aka Major Domestic Module) before 0662e5e allows command execution via thumb.php shell metacharacters.

    KritikCVSS 9,8SilahlaştırılmışEPSS %38

    mjdm · majordomo15 Ara 2023

  • CVE-2023-50719
    55Planlayın

    XWiki Platform Solr search discloses password hashes of all users

    YüksekCVSS 7,5Kavram kanıtıEPSS %83

    xwiki · xwiki15 Ara 2023

  • CVE-2023-50720
    39İzleyin

    XWiki Platform Solr search discloses email addresses of users

    OrtaCVSS 5,3Kavram kanıtıEPSS %59

    xwiki · xwiki15 Ara 2023

  • CVE-2023-50721
    59Planlayın

    XWiki Platform RCE from account through SearchAdmin

    YüksekCVSS 8,8İstismar yokEPSS %78

    xwiki · xwiki15 Ara 2023

  • CVE-2023-50965
    39İzleyin

    In MicroHttpServer (aka Micro HTTP Server) through 4398570, _ReadStaticFiles in lib/middleware.c allows a stack-based buffer overflow and po

    KritikCVSS 9,8Kavram kanıtıEPSS %1

    starnight · micro http server16 Ara 2023

  • CVE-2023-6893
    51Planlayın

    Hikvision Intercom Broadcasting System exportrecord.php path traversal

    YüksekCVSS 7,5İstismar yokEPSS %70

    hikvision · intercom broadcast system17 Ara 2023

  • CVE-2023-6895
    66Bu hafta

    Hikvision Intercom Broadcasting System ping.php os command injection

    KritikCVSS 9,8Kavram kanıtıEPSS %89

    hikvision · intercom broadcast system17 Ara 2023

  • CVE-2023-6909
    57Planlayın

    Path Traversal: '\..\filename' in mlflow/mlflow

    YüksekCVSS 7,5Kavram kanıtıEPSS %89

    lfprojects · mlflow18 Ara 2023

  • CVE-2023-6065
    27İzleyin

    Quttera Web Malware Scanner < 3.4.2.1 - Directory Listing to Sensitive Data Exposure

    OrtaCVSS 5,3Kavram kanıtıEPSS %18

    quttera · quttera web malware scanner18 Ara 2023

  • CVE-2023-6289
    17İzleyin

    Swift Performance Lite <= 2.3.6.14 - Unauthenticated Configuration Export

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    swteplugins · swift performance18 Ara 2023

  • CVE-2023-48795
    51Planlayın

    The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypas

    OrtaCVSS 5,9Kavram kanıtıEPSS %93

    ssh · ssh18 Ara 2023

  • CVE-2023-51385
    32İzleyin

    In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or host name has shell metacharacters, and this name is refere

    OrtaCVSS 6,5Kavram kanıtıEPSS %19

    openbsd · openssh18 Ara 2023

  • CVE-2023-44982
    30İzleyin

    WordPress WP Retina 2x Plugin <= 6.4.5 is vulnerable to Sensitive Data Exposure

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    meowapps · perfect images18 Ara 2023

  • CVE-2023-49489
    24İzleyin

    Reflective Cross Site Scripting (XSS) vulnerability in KodExplorer version 4.51, allows attackers to obtain sensitive information and escala

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    kodcloud · kodexplorer19 Ara 2023

  • CVE-2023-6856
    41Planlayın

    The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa VM driver.

    YüksekCVSS 8,8İstismar yokEPSS %20

    mozilla · firefox19 Ara 2023

  • CVE-2023-1514
    30İzleyin

    A vulnerability exists in the component RTU500 Scripting interface.

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    hitachienergy · rtu500 scripting interface19 Ara 2023

  • CVE-2021-22962
    63Bu hafta

    An attacker can send a specially crafted request which could lead to leakage of sensitive data or potentially a resource-based DoS attack.

    KritikCVSS 9,1İstismar yokEPSS %91

    ivanti · avalanche19 Ara 2023

  • CVE-2023-41727
    50Planlayın

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    KritikCVSS 9,8İstismar yokEPSS %36

    ivanti · avalanche19 Ara 2023

  • CVE-2023-46216
    50Planlayın

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    KritikCVSS 9,8İstismar yokEPSS %36

    ivanti · avalanche19 Ara 2023

  • CVE-2023-46217
    50Planlayın

    An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of

    KritikCVSS 9,8İstismar yokEPSS %36

    ivanti · avalanche19 Ara 2023