| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-34984 | Hig | 0.49 | 7.5 | 0.01 | Sep 13, 2023 | A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests. | ||
| CVE-2023-29183 | Hig | 0.52 | 8.0 | 0.01 | Sep 13, 2023 | An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow… | ||
| CVE-2022-35849 | Hig | 0.51 | 7.8 | 0.00 | Sep 13, 2023 | An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized… | ||
| CVE-2023-41081 | Hig | 0.42 | 7.5 | 0.02 | Sep 13, 2023 | Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied… | ||
| CVE-2023-26369 | Hig | 0.63 | 7.8 | 0.07 | KEV | Sep 13, 2023 | Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue… | |
| CVE-2023-4916 | Hig | 0.57 | 8.8 | 0.00 | Sep 13, 2023 | The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to… | ||
| CVE-2023-4213 | Hig | 0.57 | 8.8 | 0.01 | Sep 13, 2023 | The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system… | ||
| CVE-2023-4153 | Hig | 0.57 | 8.8 | 0.01 | Sep 13, 2023 | The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to a missing capability check on the 'w3dev_save_ban_user_settings_callback' function. This makes it possible for authenticated attackers, with minimal… | ||
| CVE-2023-4928 | Hig | 0.00 | 7.2 | 0.01 | Sep 13, 2023 | SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1. | ||
| CVE-2023-4921 | Hig | 0.51 | 7.8 | 0.00 | Sep 12, 2023 | A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the… | ||
| CVE-2023-4918 | Hig | 0.57 | 8.8 | 0.01 | Sep 12, 2023 | A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. All users and clients with proper rights… | ||
| CVE-2023-39215 | Hig | 0.46 | 7.1 | 0.01 | Sep 12, 2023 | Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access. | ||
| CVE-2023-39201 | Hig | 0.47 | 7.2 | 0.00 | Sep 12, 2023 | Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access. | ||
| CVE-2023-21521 | Hig | 0.47 | 7.2 | 0.01 | Sep 12, 2023 | An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on… | ||
| CVE-2023-38164 | Hig | 0.49 | 7.6 | 0.01 | Sep 12, 2023 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2023-38163 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows Defender Attack Surface Reduction Security Feature Bypass | ||
| CVE-2023-38162 | Hig | 0.50 | 7.5 | 0.11 | Sep 12, 2023 | DHCP Server Service Denial of Service Vulnerability | ||
| CVE-2023-38161 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows GDI Elevation of Privilege Vulnerability | ||
| CVE-2023-38156 | Hig | 0.47 | 7.2 | 0.02 | Sep 12, 2023 | Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability | ||
| CVE-2023-38155 | Hig | 0.46 | 7.0 | 0.01 | Sep 12, 2023 | Azure DevOps Server Remote Code Execution Vulnerability | ||
| CVE-2023-38150 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-38149 | Hig | 0.49 | 7.5 | 0.04 | Sep 12, 2023 | Windows TCP/IP Denial of Service Vulnerability | ||
| CVE-2023-38148 | Hig | 0.58 | 8.8 | 0.08 | Sep 12, 2023 | Internet Connection Sharing (ICS) Remote Code Execution Vulnerability | ||
| CVE-2023-38147 | Hig | 0.57 | 8.8 | 0.01 | Sep 12, 2023 | Windows Miracast Wireless Display Remote Code Execution Vulnerability | ||
| CVE-2023-38146 | Hig | 0.63 | 8.8 | 0.37 | Sep 12, 2023 | Windows Themes Remote Code Execution Vulnerability | ||
| CVE-2023-38144 | Hig | 0.51 | 7.8 | 0.03 | Sep 12, 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2023-38143 | Hig | 0.51 | 7.8 | 0.03 | Sep 12, 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2023-38142 | Hig | 0.51 | 7.8 | 0.06 | Sep 12, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-38141 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-38139 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-36886 | Hig | 0.49 | 7.6 | 0.01 | Sep 12, 2023 | Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability | ||
| CVE-2023-36805 | Hig | 0.46 | 7.0 | 0.02 | Sep 12, 2023 | Windows MSHTML Platform Security Feature Bypass Vulnerability | ||
| CVE-2023-36804 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Windows GDI Elevation of Privilege Vulnerability | ||
| CVE-2023-36802 | Hig | 0.65 | 7.8 | 0.28 | KEV | Sep 12, 2023 | Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability | |
| CVE-2023-36800 | Hig | 0.49 | 7.6 | 0.01 | Sep 12, 2023 | Dynamics Finance and Operations Cross-site Scripting Vulnerability | ||
| CVE-2023-36796 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2023-36794 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2023-36793 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2023-36792 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Visual Studio Remote Code Execution Vulnerability | ||
| CVE-2023-36788 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | .NET Framework Remote Code Execution Vulnerability | ||
| CVE-2023-36773 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | 3D Builder Remote Code Execution Vulnerability | ||
| CVE-2023-36772 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | 3D Builder Remote Code Execution Vulnerability | ||
| CVE-2023-36771 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | 3D Builder Remote Code Execution Vulnerability | ||
| CVE-2023-36770 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | 3D Builder Remote Code Execution Vulnerability | ||
| CVE-2023-36766 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Microsoft Excel Information Disclosure Vulnerability | ||
| CVE-2023-36765 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | Microsoft Office Elevation of Privilege Vulnerability | ||
| CVE-2023-36764 | Hig | 0.57 | 8.8 | 0.02 | Sep 12, 2023 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | ||
| CVE-2023-36763 | Hig | 0.49 | 7.5 | 0.02 | Sep 12, 2023 | Microsoft Outlook Information Disclosure Vulnerability | ||
| CVE-2023-36762 | Hig | 0.48 | 7.3 | 0.01 | Sep 12, 2023 | Microsoft Word Remote Code Execution Vulnerability | ||
| CVE-2023-36760 | Hig | 0.51 | 7.8 | 0.01 | Sep 12, 2023 | 3D Viewer Remote Code Execution Vulnerability |
- risk 0.49cvss 7.5epss 0.01
A protection mechanism failure in Fortinet FortiWeb 7.2.0 through 7.2.1, 7.0.0 through 7.0.6, 6.4.0 through 6.4.3, 6.3.6 through 6.3.23 allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
- risk 0.52cvss 8.0epss 0.01
An improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability [CWE-79] in FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10 and FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14 GUI may allow…
- risk 0.51cvss 7.8epss 0.00
An improper neutralization of special elements used in an OS command vulnerability [CWE-78] in the management interface of FortiADC 7.1.0 through 7.1.1, 7.0.0 through 7.0.3, 6.2.0 through 6.2.5 and 6.1.0 all versions may allow an authenticated attacker to execute unauthorized…
- risk 0.42cvss 7.5epss 0.02
Important: Authentication Bypass CVE-2023-41081 The mod_jk component of Apache Tomcat Connectors in some circumstances, such as when a configuration included "JkOptions +ForwardDirectories" but the configuration did not provide explicit mounts for all possible proxied…
- risk 0.63cvss 7.8epss 0.07
Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue…
- risk 0.57cvss 8.8epss 0.00
The Login with phone number plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.6. This is due to missing nonce validation on the 'lwp_update_password_action' function. This makes it possible for unauthenticated attackers to…
- risk 0.57cvss 8.8epss 0.01
The Simplr Registration Form Plus+ plugin for WordPress is vulnerable to Insecure Direct Object References in versions up to, and including, 2.4.5. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system…
- risk 0.57cvss 8.8epss 0.01
The BAN Users plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.5.3 due to a missing capability check on the 'w3dev_save_ban_user_settings_callback' function. This makes it possible for authenticated attackers, with minimal…
- risk 0.00cvss 7.2epss 0.01
SQL Injection in GitHub repository instantsoft/icms2 prior to 2.16.1.
- risk 0.51cvss 7.8epss 0.00
A use-after-free vulnerability in the Linux kernel's net/sched: sch_qfq component can be exploited to achieve local privilege escalation. When the plug qdisc is used as a class of the qfq qdisc, sending network packets triggers use-after-free in qfq_dequeue() due to the…
- risk 0.57cvss 8.8epss 0.01
A flaw was found in the Keycloak package, more specifically org.keycloak.userprofile. When a user registers itself through registration flow, the "password" and "password-confirm" field from the form will occur as regular user attributes. All users and clients with proper rights…
- risk 0.46cvss 7.1epss 0.01
Improper authentication in Zoom clients may allow an authenticated user to conduct a denial of service via network access.
- risk 0.47cvss 7.2epss 0.00
Untrusted search path in CleanZoom before file date 07/24/2023 may allow a privileged user to conduct an escalation of privilege via local access.
- risk 0.47cvss 7.2epss 0.01
An SQL Injection vulnerability in the Management Console (Operator Audit Trail) of BlackBerry AtHoc version 7.15 could allow an attacker to potentially read sensitive data from the database, modify database data (Insert/Update/Delete), execute administration operations on…
- risk 0.49cvss 7.6epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Defender Attack Surface Reduction Security Feature Bypass
- risk 0.50cvss 7.5epss 0.11
DHCP Server Service Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GDI Elevation of Privilege Vulnerability
- risk 0.47cvss 7.2epss 0.02
Azure HDInsight Apache Ambari JDBC Injection Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.01
Azure DevOps Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.04
Windows TCP/IP Denial of Service Vulnerability
- risk 0.58cvss 8.8epss 0.08
Internet Connection Sharing (ICS) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Windows Miracast Wireless Display Remote Code Execution Vulnerability
- risk 0.63cvss 8.8epss 0.37
Windows Themes Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.03
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.03
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.06
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.49cvss 7.6epss 0.01
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
- risk 0.46cvss 7.0epss 0.02
Windows MSHTML Platform Security Feature Bypass Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows GDI Elevation of Privilege Vulnerability
- risk 0.65cvss 7.8epss 0.28
Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability
- risk 0.49cvss 7.6epss 0.01
Dynamics Finance and Operations Cross-site Scripting Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Visual Studio Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
.NET Framework Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
3D Builder Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
3D Builder Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
3D Builder Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
3D Builder Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Excel Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Office Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
Microsoft Outlook Information Disclosure Vulnerability
- risk 0.48cvss 7.3epss 0.01
Microsoft Word Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
3D Viewer Remote Code Execution Vulnerability