The archive.

Browse all tracked critical vulnerabilities, including records outside today's brief.

39,219 matching vulnerabilities · Page 509 of 785

Qlik1 vulnerability on this pageMax CVSS 9.9Priority 100KEV 1

CVE-2023-48365 · Qlik Sense

Qlik Sense HTTP Tunneling Vulnerability

KEV · due 3 Feb ransomware use EPSS 48%public exploit SSVC act CVSS 9.9

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2023-45878 · mitre

GibbonEdu Gibbon version 25.0.1 and before allows Arbitrary File Write because rubrics_visualise_saveAjax.phps does not require authentic…

EPSS 63%public exploit CVSS 9.8

CVE-2021-35437 · mitre

SQL injection vulnerability in LMXCMS v.1.4 allows attacker to execute arbitrary code via the TagsAction.class.

EPSS 1.0%public exploit CVSS 9.8

CVE-2023-43902 · mitre

Incorrect access control in the Forgot Your Password function of eMudhra emSigner v2.8.7 allows unauthenticated attackers to access accou…

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-47445 · mitre

Pre-School Enrollment version 1.0 is vulnerable to SQL Injection via the username parameter in preschool/admin/ page.

EPSS 0.8%public exploit CVSS 9.8

CVE-2023-41442 · mitre

An issue in Kloudq Technologies Limited Tor Equip 1.0, Tor Loco Mini 1.0 through 3.1 allows a remote attacker to execute arbitrary code v…

EPSS 1%CVSS 9.8

CVE-2023-43979 · mitre

ETS Soft ybc_blog before v4.4.0 was discovered to contain a SQL injection vulnerability via the component Ybc_blogBlogModuleFrontControll…

EPSS 0.7%CVSS 9.8

Silicon Labs6 vulnerabilities on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2023-25181 · Silicon Labs Gecko Platform

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

EPSS 2%public exploit CVSS 9.8

CVE-2023-27882 · Silicon Labs Gecko Platform

A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

EPSS 2%public exploit CVSS 9.8

CVE-2023-28379 · Silicon Labs Gecko Platform

A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

EPSS 2%public exploit CVSS 9.8

CVE-2023-31247 · Silicon Labs Gecko Platform

A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

EPSS 2%public exploit CVSS 9.8

CVE-2023-28391 · Silicon Labs Gecko Platform

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

EPSS 1%public exploit CVSS 9.8

CVE-2023-24585 · Silicon Labs Gecko Platform

An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

EPSS 1%CVSS 9.8

Shenzhen Youkate Industrial1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2023-6099 · Shenzhen Youkate Industrial Facial Love Cloud Payment System

Shenzhen Youkate Industrial Facial Love Cloud Payment System Account SystemMng.ashx privileges management

EPSS 0.9%public exploit CVSS 9.8

piccolo-orm1 vulnerability on this pageMax CVSS 9.1Priority 50KEV 0

CVE-2023-47128 · piccolo-orm piccolo

piccolo SQL Injection via named transaction savepoints

EPSS 1.0%public exploit CVSS 9.1

prestashop1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2023-47308 · prestashop newsletter_popup_pro

In the module "Newsletter Popup PRO with Voucher/Coupon code" (newsletterpop) before version 2.6.1 from Active Design for PrestaShop, a g…

EPSS 0.7%public exploit CVSS 9.8

Fortinet3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-34991 · Fortinet FortiWLM

A improper neutralization of special elements used in an sql command ('sql injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 a…

EPSS 29%CVSS 9.8

CVE-2023-36553 · Fortinet FortiSIEM

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.…

EPSS 2%CVSS 9.8

CVE-2023-25603 · Fortinet FortiDDoS-F

A permissive cross-domain policy with untrusted domains vulnerability in Fortinet FortiADC 7.1.0 - 7.1.1, FortiDDoS-F 6.3.0 - 6.3.4 and 6…

EPSS 0.4%CVSS 9.1

Microsoft4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2023-36397 · Microsoft Windows 10 Version 1809

Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

EPSS 18%CVSS 9.8

CVE-2023-36049 · Microsoft Microsoft Visual Studio 2022 version 17.2

.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability

EPSS 7%CVSS 9.8

CVE-2023-36028 · Microsoft Windows 10 Version 1809

Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability

EPSS 3%CVSS 9.8

CVE-2023-36018 · Microsoft Jupyter Extension for Visual Studio Code

Visual Studio Code Jupyter Extension Spoofing Vulnerability

EPSS 2%CVSS 9.8

Ivanti2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-39335 · Ivanti EPMM

A security vulnerability has been identified in EPMM Versions 11.10, 11.9 and 11.8 and older allowing an unauthenticated threat actor to…

EPSS 3%CVSS 9.8

CVE-2023-39337 · Ivanti EPMM

A security vulnerability in EPMM Versions 11.10, 11.9 and 11.8 older allows a threat actor with knowledge of an enrolled device identifie…

EPSS 3%CVSS 9.1

yiisoft1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2023-47130 · yiisoft yii

Unsafe deserialization of user data in yiisoft/yii

EPSS 3%CVSS 9.8

Hewlett Packard Enterprise (HPE)3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-45614 · Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sendi…

EPSS 2%CVSS 9.8

CVE-2023-45615 · Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

There are buffer overflow vulnerabilities in the underlying CLI service that could lead to unauthenticated remote code execution by sendi…

EPSS 2%CVSS 9.8

CVE-2023-45616 · Hewlett Packard Enterprise (HPE) Aruba Access Points: 100 Series; 103 Series; 110 Series; 120 Series; 130 Series; 200 Series; 207 Series; 210 Series; 220 Series; 260 Series; 300 Series; 303 Series; 310 Series; 318 Series Hardened Access Points; 320 Series; 330 Series; 340 Series; 370 Series; 500 Series; 510 Series; 530 Series; 550 Series; 630 Series; 650 Series;

There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code executio…

EPSS 2%CVSS 9.8

OpenVPN1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2023-46850 · OpenVPN OpenVPN 2 (Community)

Use after free in OpenVPN version 2.6.0 to 2.6.6 may lead to undefined behavoir, leaking memory buffers or remote execution when sending…

EPSS 2%CVSS 9.8

statamic1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-47129 · statamic cms

Statamic CMS remote code execution via front-end form uploads

EPSS 1%CVSS 9.8

vmware1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2023-34060 · vmware

VMware Cloud Director Appliance contains an authentication bypass vulnerability in case VMware Cloud Director Appliance was upgraded to 1…

EPSS 1%CVSS 9.8

JFROG1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-5245 · JFROG

Using MLeap for loading a saved model (zip archive) can lead to path traversal/arbitrary file creation and possibly remote code execution.

EPSS 1%CVSS 9.8

Johnson Controls1 vulnerability on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2023-4804 · Johnson Controls Quantum HD Unity Compressor

Quantum HD Unity

EPSS 1%CVSS 10.0

Siemens4 vulnerabilities on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2023-44373 · Siemens RUGGEDCOM RM1224 LTE(4G) EU

Affected devices do not properly sanitize an input field.

EPSS 1%CVSS 9.4

CVE-2023-43504 · Siemens COMOS

A vulnerability has been identified in COMOS (All versions < V10.4.4).

EPSS 0.9%CVSS 9.8

CVE-2023-43505 · Siemens COMOS

A vulnerability has been identified in COMOS (All versions).

EPSS 0.6%CVSS 9.6

CVE-2023-46601 · Siemens COMOS

A vulnerability has been identified in COMOS (All versions).

EPSS 0.5%CVSS 9.6

AMD3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2022-23821 · AMD Ryzen™ 3000 Series Desktop Processors “Matisse”

Improper access control in System Management Mode (SMM) may allow an attacker to write to SPI ROM potentially leading to arbitrary code e…

EPSS 1.0%CVSS 9.8

CVE-2023-20596 · AMD Ryzen™ 5000 Series Desktop Processor with Radeon™ Graphics Formerly codenamed “Cezanne” AM4

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially lea…

EPSS 1%CVSS 9.8

CVE-2022-23820 · AMD Ryzen™ 3000 series Desktop Processors “Matisse"

Failure to validate the AMD SMM communication buffer may allow an attacker to corrupt the SMRAM potentially leading to arbitrary code exe…

EPSS 0.7%CVSS 9.8

Tongda1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2023-6084 · Tongda OA 2017

Tongda OA 2017 delete.php sql injection

EPSS 1.0%CVSS 9.8

discourse1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-47121 · discourse discourse

Discourse SSRF vulnerability in Embedding

EPSS 0.8%CVSS 9.8

intel1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2023-31273 · intel

Protection mechanism failure in some Intel DCM software before version 5.2 may allow an unauthenticated user to potentially enable escala…

EPSS 0.7%CVSS 10.0

Maiwei1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2023-6102 · Maiwei Safety Production Control Platform

Maiwei Safety Production Control Platform unrestricted upload

EPSS 0.8%CVSS 9.8

ethyca1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2023-48224 · ethyca fides

Cryptographically Weak Generation of One-Time Codes for Identity Verification in ethyca-fides

EPSS 1.0%CVSS 9.1

ICSSolution1 vulnerability on this pageMax CVSS 9.4Priority 40KEV 0

CVE-2023-6097 · ICSSolution ICS Business Manager

SQL Injection on ICSSolution ICS Business Manager

EPSS 0.8%CVSS 9.4

salesagility1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2023-6126 · salesagility salesagility/suitecrm

Code Injection in salesagility/suitecrm

EPSS 0.7%CVSS 9.8

ASUSTeK COMPUTER INC.1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2023-47678 · ASUSTeK COMPUTER INC. RT-AC87U

An improper access control vulnerability exists in RT-AC87U all versions.

EPSS 0.7%CVSS 9.1

SAP_SE1 vulnerability on this pageMax CVSS 9.6Priority 37KEV 0

CVE-2023-31403 · SAP_SE SAP Business One

Improper Access Control vulnerability in SAP Business One product installation

EPSS 0.4%CVSS 9.6