CVEs

131,087 total · page 1425 of 2,622

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-35631	Microsoft Win32K	Hig	0.51	7.8	0.07	Dec 12, 2023	Win32k Elevation of Privilege Vulnerability
CVE-2023-35630	Microsoft Internet Connection Sharing	Hig	0.58	8.8	0.06	Dec 12, 2023	Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35628	Microsoft MSHTML Platform	Hig	0.60	8.1	0.93	Dec 12, 2023	Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-35624	Microsoft Azure Connected Machine Agent	Hig	0.48	7.3	0.01	Dec 12, 2023	Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2023-35622	Microsoft Windows DNS	Hig	0.49	7.5	0.02	Dec 12, 2023	Windows DNS Spoofing Vulnerability
CVE-2023-35621	Microsoft Dynamics 365	Hig	0.49	7.5	0.02	Dec 12, 2023	Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
CVE-2023-21740	Microsoft Windows Media	Hig	0.51	7.8	0.01	Dec 12, 2023	Windows Media Remote Code Execution Vulnerability
CVE-2023-28465	Hapifhir Hl7 Fhir Core	Hig	0.42	7.5	0.01	Dec 12, 2023	The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by the attacker. NOTE:…
CVE-2020-10676	Rancher Rancher	Hig	0.57	8.8	0.01	Dec 12, 2023	In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project.
CVE-2018-16153	Apereo Opencast	Hig	0.42	7.5	0.01	Dec 12, 2023	An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.
CVE-2015-8314	Heartcombo Devise	Hig	0.42	7.5	0.01	Dec 12, 2023	The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access.
CVE-2009-4123	Jruby Jruby Openssl	Hig	0.49	7.5	0.01	Dec 12, 2023	The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
CVE-2023-46455	Gl Inet AR300M	Hig	0.53	7.5	0.47	Dec 12, 2023	In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.
CVE-2020-28369	Etrust Privilege Management For Windows	Hig	0.51	7.8	0.00	Dec 12, 2023	In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.
CVE-2020-12614	Etrust Privilege Management For Windows	Hig	0.51	7.8	0.00	Dec 12, 2023	An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is…
CVE-2020-12612	Etrust Privilege Management For Windows	Hig	0.51	7.8	0.00	Dec 12, 2023	An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevate, it can typically be found within the Program Files (x86) folder and therefore uses the %ProgramFiles(x86)% environment variable. However, when this same…
CVE-2020-12615	Etrust Privilege Management For Windows	Hig	0.51	7.8	0.00	Dec 12, 2023	An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary…
CVE-2023-49692	Siemens Foundation SCALANCE M804PB	Hig	0.47	7.2	0.01	Dec 12, 2023	A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router…
CVE-2023-49691	Siemens Foundation SCALANCE M804PB	Hig	0.47	7.2	0.01	Dec 12, 2023	A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router…
CVE-2023-48428	SINEC INS SINEC INS	Hig	0.47	7.2	0.01	Dec 12, 2023	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service…
CVE-2023-48427	Siemens Foundation Sinec Ins	Hig	0.53	8.1	0.00	Dec 12, 2023	A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to…
CVE-2023-46285	Siemens Foundation Opcenter Quality	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46284	Siemens Foundation Opcenter Quality	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46283	Siemens Foundation Opcenter Quality	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46282	Siemens Foundation Opcenter Quality	Hig	0.46	7.1	0.00	Dec 12, 2023	A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46281	Siemens Foundation Opcenter Quality	Hig	0.46	7.1	0.01	Dec 12, 2023	A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46156	Siemens Foundation Simatic S7 1500 CPU Firmware	Hig	0.49	7.5	0.01	Dec 12, 2023	Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.
CVE-2023-38380	Siemens Foundation SIMATIC CP 1242-7 V2	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS…
CVE-2022-47375	Siemens Foundation SIPLUS S7-400 CPU 414-3 PN/DP	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-47374	Siemens Foundation SIPLUS S7-400 CPU 414-3 PN/DP	Hig	0.49	7.5	0.01	Dec 12, 2023	A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2023-49713	Jtekt Electronics Corporation HMI GC-A2 series	Hig	0.49	7.5	0.01	Dec 12, 2023	Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2023-49143	Jtekt Electronics Corporation HMI GC-A2 series	Hig	0.49	7.5	0.01	Dec 12, 2023	Denial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2023-49140	Jtekt Electronics Corporation HMI GC-A2 series	Hig	0.49	7.5	0.01	Dec 12, 2023	Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2023-41963	Jtekt Electronics Corporation HMI GC-A2 series	Hig	0.49	7.5	0.01	Dec 12, 2023	Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2022-42784	Siemens Foundation LOGO!	Hig	0.49	7.6	0.00	Dec 12, 2023	A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3),…
CVE-2023-48677	Acronis Cyber Protect Home Office	Hig	0.51	7.8	0.00	Dec 12, 2023	Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build…
CVE-2023-45316	Mattermost Mattermost	Hig	0.47	7.3	0.00	Dec 12, 2023	Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a telemetry run ID, allowing an attacker to use a path traversal payload that points to a different endpoint leading to a CSRF attack.
CVE-2023-41623	Emlog Emlog	Hig	0.47	7.2	0.01	Dec 12, 2023	Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.
CVE-2023-48641	Archer Archer Platform	Hig	0.49	7.5	0.00	Dec 12, 2023	Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user…
CVE-2023-41119	Enterprisedb Postgres Advanced Server	Hig	0.57	8.8	0.01	Dec 12, 2023	An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the function _dbms_aq_move_to_exception_queue that may be used to elevate a user's…
CVE-2023-41118	Enterprisedb Postgres Advanced Server	Hig	0.57	8.8	0.01	Dec 12, 2023	An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It may allow an authenticated user to bypass authorization requirements and access underlying…
CVE-2023-41117	Enterprisedb Postgres Advanced Server	Hig	0.57	8.8	0.01	Dec 12, 2023	An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately…
CVE-2023-6709	Mlflow Mlflow	Hig	0.50	8.8	0.01	Dec 12, 2023	Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
CVE-2023-6542	Emarsys SDK for Android	Hig	0.46	7.1	0.00	Dec 12, 2023	Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to…
CVE-2023-49580	SAP Gui For Windows	Hig	0.47	7.3	0.00	Dec 12, 2023	SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the…
CVE-2023-42926	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42912	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42911	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42910	Apple Inc. macOS	Hig	0.57	8.8	0.01	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42909	Apple Inc. macOS	Hig	0.51	7.8	0.00	Dec 12, 2023	Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.

CVE-2023-35631HigDec 12, 2023
Microsoft
Win32K
risk 0.51cvss 7.8epss 0.07
Win32k Elevation of Privilege Vulnerability
CVE-2023-35630HigDec 12, 2023
Microsoft
Internet Connection Sharing
risk 0.58cvss 8.8epss 0.06
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
CVE-2023-35628HigDec 12, 2023
Microsoft
MSHTML Platform
risk 0.60cvss 8.1epss 0.93
Windows MSHTML Platform Remote Code Execution Vulnerability
CVE-2023-35624HigDec 12, 2023
Microsoft
Azure Connected Machine Agent
risk 0.48cvss 7.3epss 0.01
Azure Connected Machine Agent Elevation of Privilege Vulnerability
CVE-2023-35622HigDec 12, 2023
Microsoft
Windows DNS
risk 0.49cvss 7.5epss 0.02
Windows DNS Spoofing Vulnerability
CVE-2023-35621HigDec 12, 2023
Microsoft
Dynamics 365
risk 0.49cvss 7.5epss 0.02
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
CVE-2023-21740HigDec 12, 2023
Microsoft
Windows Media
risk 0.51cvss 7.8epss 0.01
Windows Media Remote Code Execution Vulnerability
CVE-2023-28465HigDec 12, 2023
Hapifhir
Hl7 Fhir Core
risk 0.42cvss 7.5epss 0.01
The package-decompression feature in HL7 (Health Level 7) FHIR Core Libraries before 5.6.106 allows attackers to copy arbitrary files to certain directories via directory traversal, if an allowed directory name is a substring of the directory name chosen by the attacker. NOTE:…
CVE-2020-10676HigDec 12, 2023
Rancher
Rancher
risk 0.57cvss 8.8epss 0.01
In Rancher 2.x before 2.6.13 and 2.7.x before 2.7.4, an incorrectly applied authorization check allows users who have certain access to a namespace to move that namespace to a different project.
CVE-2018-16153HigDec 12, 2023
Apereo
Opencast
risk 0.42cvss 7.5epss 0.01
An issue was discovered in Apereo Opencast 4.x through 10.x before 10.6. It sends system digest credentials during authentication attempts to arbitrary external services in some situations.
CVE-2015-8314HigDec 12, 2023
Heartcombo
Devise
risk 0.42cvss 7.5epss 0.01
The Devise gem before 3.5.4 for Ruby mishandles Remember Me cookies for sessions, which may allow an adversary to obtain unauthorized persistent application access.
CVE-2009-4123HigDec 12, 2023
Jruby
Jruby Openssl
risk 0.49cvss 7.5epss 0.01
The jruby-openssl gem before 0.6 for JRuby mishandles SSL certificate validation.
CVE-2023-46455HigDec 12, 2023
Gl Inet
AR300M
risk 0.53cvss 7.5epss 0.47
In GL.iNET GL-AR300M routers with firmware v4.3.7 it is possible to write arbitrary files through a path traversal attack in the OpenVPN client file upload functionality.
CVE-2020-28369HigDec 12, 2023
Etrust
Privilege Management For Windows
risk 0.51cvss 7.8epss 0.00
In BeyondTrust Privilege Management for Windows (aka PMfW) through 5.7, a SYSTEM installation causes Cryptbase.dll to be loaded from the user-writable location %WINDIR%\Temp.
CVE-2020-12614HigDec 12, 2023
Etrust
Privilege Management For Windows
risk 0.51cvss 7.8epss 0.00
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. If the publisher criteria is selected, it defines the name of a publisher that must be present in the certificate (and also requires that the certificate is valid). If an Add Admin token is…
CVE-2020-12612HigDec 12, 2023
Etrust
Privilege Management For Windows
risk 0.51cvss 7.8epss 0.00
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When specifying a program to elevate, it can typically be found within the Program Files (x86) folder and therefore uses the %ProgramFiles(x86)% environment variable. However, when this same…
CVE-2020-12615HigDec 12, 2023
Etrust
Privilege Management For Windows
risk 0.51cvss 7.8epss 0.00
An issue was discovered in BeyondTrust Privilege Management for Windows through 5.6. When adding the Add Admin token to a process, and specifying that it runs at medium integrity with the user owning the process, this security token can be stolen and applied to arbitrary…
CVE-2023-49692HigDec 12, 2023
Siemens Foundation
SCALANCE M804PB
risk 0.47cvss 7.2epss 0.01
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V7.2.2), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V7.2.2), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V7.2.2), SCALANCE M812-1 ADSL-Router…
CVE-2023-49691HigDec 12, 2023
Siemens Foundation
SCALANCE M804PB
risk 0.47cvss 7.2epss 0.01
A vulnerability has been identified in RUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2) (All versions < V8.0), RUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2) (All versions < V8.0), SCALANCE M804PB (6GK5804-0AP00-2AA2) (All versions < V8.0), SCALANCE M812-1 ADSL-Router…
CVE-2023-48428HigDec 12, 2023
SINEC INS
SINEC INS
risk 0.47cvss 7.2epss 0.01
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). The radius configuration mechanism of affected products does not correctly check uploaded certificates. A malicious admin could upload a crafted certificate resulting in a denial-of-service…
CVE-2023-48427HigDec 12, 2023
Siemens Foundation
Sinec Ins
risk 0.53cvss 8.1epss 0.00
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 2). Affected products do not properly validate the certificate of the configured UMC server. This could allow an attacker to intercept credentials that are sent to the UMC server as well as to…
CVE-2023-46285HigDec 12, 2023
Siemens Foundation
Opcenter Quality
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46284HigDec 12, 2023
Siemens Foundation
Opcenter Quality
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46283HigDec 12, 2023
Siemens Foundation
Opcenter Quality
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46282HigDec 12, 2023
Siemens Foundation
Opcenter Quality
risk 0.46cvss 7.1epss 0.00
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46281HigDec 12, 2023
Siemens Foundation
Opcenter Quality
risk 0.46cvss 7.1epss 0.01
A vulnerability has been identified in Opcenter Execution Foundation (All versions < V2407), Opcenter Quality (All versions < V2312), SIMATIC PCS neo (All versions < V4.1), SINEC NMS (All versions < V2.0 SP1), Totally Integrated Automation Portal (TIA Portal) V14 (All versions),…
CVE-2023-46156HigDec 12, 2023
Siemens Foundation
Simatic S7 1500 CPU Firmware
risk 0.49cvss 7.5epss 0.01
Affected devices improperly handle specially crafted packets sent to port 102/tcp. This could allow an attacker to create a denial of service condition. A restart is needed to restore normal operations.
CVE-2023-38380HigDec 12, 2023
Siemens Foundation
SIMATIC CP 1242-7 V2
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC CP 1242-7 V2 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 (incl. SIPLUS variants) (All versions < V3.4.29), SIMATIC CP 1243-1 DNP3 (incl. SIPLUS variants) (All versions), SIMATIC CP 1243-1 IEC (incl. SIPLUS…
CVE-2022-47375HigDec 12, 2023
Siemens Foundation
SIPLUS S7-400 CPU 414-3 PN/DP
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2022-47374HigDec 12, 2023
Siemens Foundation
SIPLUS S7-400 CPU 414-3 PN/DP
risk 0.49cvss 7.5epss 0.01
A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CPU 414-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 414F-3 PN/DP V7 (All versions), SIMATIC S7-400 CPU 416-3 PN/DP V7 (All versions),…
CVE-2023-49713HigDec 12, 2023
Jtekt Electronics Corporation
HMI GC-A2 series
risk 0.49cvss 7.5epss 0.01
Denial-of-service (DoS) vulnerability exists in NetBIOS service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2023-49143HigDec 12, 2023
Jtekt Electronics Corporation
HMI GC-A2 series
risk 0.49cvss 7.5epss 0.01
Denial-of-service (DoS) vulnerability exists in rfe service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2023-49140HigDec 12, 2023
Jtekt Electronics Corporation
HMI GC-A2 series
risk 0.49cvss 7.5epss 0.01
Denial-of-service (DoS) vulnerability exists in commplex-link service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2023-41963HigDec 12, 2023
Jtekt Electronics Corporation
HMI GC-A2 series
risk 0.49cvss 7.5epss 0.01
Denial-of-service (DoS) vulnerability exists in FTP service of HMI GC-A2 series. If a remote unauthenticated attacker sends a specially crafted packets to specific ports, a denial-of-service (DoS) condition may occur.
CVE-2022-42784HigDec 12, 2023
Siemens Foundation
LOGO!
risk 0.49cvss 7.6epss 0.00
A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All versions >= V8.3), LOGO! 230RCE (6ED1052-1FB08-0BA1) (All versions >= V8.3), LOGO! 230RCEo (6ED1052-2FB08-0BA1) (All versions >= V8.3),…
CVE-2023-48677HigDec 12, 2023
Acronis
Cyber Protect Home Office
risk 0.51cvss 7.8epss 0.00
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build…
CVE-2023-45316HigDec 12, 2023
Mattermost
Mattermost
risk 0.47cvss 7.3epss 0.00
Mattermost fails to validate if a relative path is passed in /plugins/playbooks/api/v0/telemetry/run/<telem_run_id> as a telemetry run ID, allowing an attacker to use a path traversal payload that points to a different endpoint leading to a CSRF attack.
CVE-2023-41623HigDec 12, 2023
Emlog
Emlog
risk 0.47cvss 7.2epss 0.01
Emlog version pro2.1.14 was discovered to contain a SQL injection vulnerability via the uid parameter at /admin/media.php.
CVE-2023-48641HigDec 12, 2023
Archer
Archer Platform
risk 0.49cvss 7.5epss 0.00
Archer Platform 6.x before 6.14 P1 HF2 (6.14.0.1.2) contains an insecure direct object reference vulnerability. An authenticated malicious user in a multi-instance installation could potentially exploit this vulnerability by manipulating application resource references in user…
CVE-2023-41119HigDec 12, 2023
Enterprisedb
Postgres Advanced Server
risk 0.57cvss 8.8epss 0.01
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contains the function _dbms_aq_move_to_exception_queue that may be used to elevate a user's…
CVE-2023-41118HigDec 12, 2023
Enterprisedb
Postgres Advanced Server
risk 0.57cvss 8.8epss 0.01
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It may allow an authenticated user to bypass authorization requirements and access underlying…
CVE-2023-41117HigDec 12, 2023
Enterprisedb
Postgres Advanced Server
risk 0.57cvss 8.8epss 0.01
An issue was discovered in EnterpriseDB Postgres Advanced Server (EPAS) before 11.21.32, 12.x before 12.16.20, 13.x before 13.12.16, 14.x before 14.9.0, and 15.x before 15.4.0. It contain packages, standalone packages, and functions that run SECURITY DEFINER but are inadequately…
CVE-2023-6709HigDec 12, 2023
Mlflow
Mlflow
risk 0.50cvss 8.8epss 0.01
Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
CVE-2023-6542HigDec 12, 2023
Emarsys
SDK for Android
risk 0.46cvss 7.1epss 0.00
Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to…
CVE-2023-49580HigDec 12, 2023
SAP
Gui For Windows
risk 0.47cvss 7.3epss 0.00
SAP GUI for Windows and SAP GUI for Java - versions SAP_BASIS 755, SAP_BASIS 756, SAP_BASIS 757, SAP_BASIS 758, allow an unauthenticated attacker to access information which would otherwise be restricted and confidential. In addition, this vulnerability allows the…
CVE-2023-42926HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42912HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42911HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42910HigDec 12, 2023
Apple Inc.
macOS
risk 0.57cvss 8.8epss 0.01
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.
CVE-2023-42909HigDec 12, 2023
Apple Inc.
macOS
risk 0.51cvss 7.8epss 0.00
Multiple memory corruption issues were addressed with improved input validation. This issue is fixed in macOS Sonoma 14.2. Processing a maliciously crafted file may lead to unexpected app termination or arbitrary code execution.