| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-24867 | Hig | 0.57 | 8.8 | 0.01 | Mar 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | ||
| CVE-2023-24864 | Hig | 0.57 | 8.8 | 0.01 | Mar 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability | ||
| CVE-2023-24861 | Hig | 0.46 | 7.0 | 0.00 | Mar 14, 2023 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2023-24859 | Hig | 0.49 | 7.5 | 0.02 | Mar 14, 2023 | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability | ||
| CVE-2023-24858 | Hig | 0.49 | 7.5 | 0.01 | Mar 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | ||
| CVE-2023-24856 | Hig | 0.49 | 7.5 | 0.01 | Mar 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability | ||
| CVE-2023-23423 | Hig | 0.51 | 7.8 | 0.01 | Mar 14, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-23422 | Hig | 0.51 | 7.8 | 0.01 | Mar 14, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-23421 | Hig | 0.51 | 7.8 | 0.01 | Mar 14, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-23420 | Hig | 0.51 | 7.8 | 0.01 | Mar 14, 2023 | Windows Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-23419 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | ||
| CVE-2023-23418 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability | ||
| CVE-2023-23417 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | Windows Partition Management Driver Elevation of Privilege Vulnerability | ||
| CVE-2023-23416 | Hig | 0.51 | 7.8 | 0.08 | Mar 14, 2023 | Windows Cryptographic Services Remote Code Execution Vulnerability | ||
| CVE-2023-23414 | Hig | 0.46 | 7.1 | 0.00 | Mar 14, 2023 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability | ||
| CVE-2023-23413 | Hig | 0.57 | 8.8 | 0.01 | Mar 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | ||
| CVE-2023-23412 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | Windows Accounts Picture Elevation of Privilege Vulnerability | ||
| CVE-2023-23410 | Hig | 0.51 | 7.8 | 0.08 | Mar 14, 2023 | Windows HTTP.sys Elevation of Privilege Vulnerability | ||
| CVE-2023-23407 | Hig | 0.46 | 7.1 | 0.00 | Mar 14, 2023 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability | ||
| CVE-2023-23406 | Hig | 0.57 | 8.8 | 0.01 | Mar 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | ||
| CVE-2023-23405 | Hig | 0.53 | 8.1 | 0.01 | Mar 14, 2023 | Remote Procedure Call Runtime Remote Code Execution Vulnerability | ||
| CVE-2023-23404 | Hig | 0.53 | 8.1 | 0.01 | Mar 14, 2023 | Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability | ||
| CVE-2023-23403 | Hig | 0.57 | 8.8 | 0.01 | Mar 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | ||
| CVE-2023-23402 | Hig | 0.51 | 7.8 | 0.01 | Mar 14, 2023 | Windows Media Remote Code Execution Vulnerability | ||
| CVE-2023-23401 | Hig | 0.51 | 7.8 | 0.01 | Mar 14, 2023 | Windows Media Remote Code Execution Vulnerability | ||
| CVE-2023-23400 | Hig | 0.47 | 7.2 | 0.01 | Mar 14, 2023 | Windows DNS Server Remote Code Execution Vulnerability | ||
| CVE-2023-23399 | Hig | 0.54 | 7.8 | 0.03 | Mar 14, 2023 | Microsoft Excel Remote Code Execution Vulnerability | ||
| CVE-2023-23398 | Hig | 0.46 | 7.1 | 0.01 | Mar 14, 2023 | Microsoft Excel Spoofing Vulnerability | ||
| CVE-2023-23393 | Hig | 0.46 | 7.0 | 0.00 | Mar 14, 2023 | Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability | ||
| CVE-2023-23388 | Hig | 0.57 | 8.8 | 0.02 | Mar 14, 2023 | Windows Bluetooth Driver Elevation of Privilege Vulnerability | ||
| CVE-2023-23385 | Hig | 0.46 | 7.0 | 0.00 | Mar 14, 2023 | Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability | ||
| CVE-2023-23383 | Hig | 0.54 | 8.2 | 0.12 | Mar 14, 2023 | Service Fabric Explorer Spoofing Vulnerability | ||
| CVE-2022-39216 | Hig | 0.48 | 7.4 | 0.01 | Mar 14, 2023 | Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1. | ||
| CVE-2023-1299 | Hig | 0.48 | 7.4 | 0.01 | Mar 14, 2023 | HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1. | ||
| CVE-2023-27463 | Hig | 0.57 | 8.8 | 0.01 | Mar 14, 2023 | A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database. | ||
| CVE-2023-27406 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of… | ||
| CVE-2023-27405 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code… | ||
| CVE-2023-27404 | Hig | 0.51 | 7.8 | 0.03 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of… | ||
| CVE-2023-27403 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the… | ||
| CVE-2023-27402 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code… | ||
| CVE-2023-27401 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code… | ||
| CVE-2023-27400 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code… | ||
| CVE-2023-27399 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code… | ||
| CVE-2023-27398 | Hig | 0.51 | 7.8 | 0.00 | Mar 14, 2023 | A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code… | ||
| CVE-2023-27893 | Hig | 0.57 | 8.8 | 0.01 | Mar 14, 2023 | An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) - versions 2088_1_700, 2008_1_710, 740, can use a vulnerable interface to execute an application function to… | ||
| CVE-2023-27501 | Hig | 0.57 | 8.7 | 0.01 | Mar 14, 2023 | SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available… | ||
| CVE-2023-27498 | Hig | 0.47 | 7.2 | 0.01 | Mar 14, 2023 | SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any… | ||
| CVE-2023-26459 | Hig | 0.48 | 7.4 | 0.00 | Mar 14, 2023 | Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to… | ||
| CVE-2023-27587 | Hig | 0.48 | 7.4 | 0.04 | Mar 13, 2023 | ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates… | ||
| CVE-2023-27581 | Hig | 0.50 | 8.8 | 0.02 | Mar 13, 2023 | github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be… |
- risk 0.57cvss 8.8epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- risk 0.49cvss 7.5epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kernel Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Partition Management Driver Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.08
Windows Cryptographic Services Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.00
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Accounts Picture Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.08
Windows HTTP.sys Elevation of Privilege Vulnerability
- risk 0.46cvss 7.1epss 0.00
Windows Point-to-Point Protocol over Ethernet (PPPoE) Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Remote Procedure Call Runtime Remote Code Execution Vulnerability
- risk 0.53cvss 8.1epss 0.01
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Media Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Media Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.01
Windows DNS Server Remote Code Execution Vulnerability
- risk 0.54cvss 7.8epss 0.03
Microsoft Excel Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.01
Microsoft Excel Spoofing Vulnerability
- risk 0.46cvss 7.0epss 0.00
Windows BrokerInfrastructure Service Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.02
Windows Bluetooth Driver Elevation of Privilege Vulnerability
- risk 0.46cvss 7.0epss 0.00
Windows Point-to-Point Protocol over Ethernet (PPPoE) Elevation of Privilege Vulnerability
- risk 0.54cvss 8.2epss 0.12
Service Fabric Explorer Spoofing Vulnerability
- risk 0.48cvss 7.4epss 0.01
Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, the reset password token is generated without any randomness parameter. This may lead to account takeover. The issue is fixed in versions 2.7.8 and 3.0.2-1.
- risk 0.48cvss 7.4epss 0.01
HashiCorp Nomad and Nomad Enterprise 1.5.0 allow a job submitter to escalate to management-level privileges using workload identity and task API. Fixed in 1.5.1.
- risk 0.57cvss 8.8epss 0.01
A vulnerability has been identified in RUGGEDCOM CROSSBOW (All versions < V5.3). The audit log form of affected applications is vulnerable to SQL injection. This could allow authenticated remote attackers to execute arbitrary SQL queries on the server database.
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code…
- risk 0.51cvss 7.8epss 0.03
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application is vulnerable to stack-based buffer while parsing specially crafted SPP files. An attacker could leverage this vulnerability to execute code in the context of…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains a memory corruption vulnerability while parsing specially crafted SPP files. This could allow an attacker to execute code in the context of the…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected applications contain an out of bounds read past the end of an allocated structure while parsing specially crafted SPP files. This could allow an attacker to execute code…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code…
- risk 0.51cvss 7.8epss 0.00
A vulnerability has been identified in Tecnomatix Plant Simulation (All versions < V2201.0006). The affected application contains an out of bounds write past the end of an allocated buffer while parsing a specially crafted SPP file. This could allow an attacker to execute code…
- risk 0.57cvss 8.8epss 0.01
An attacker authenticated as a user with a non-administrative role and a common remote execution authorization in SAP Solution Manager and ABAP managed systems (ST-PI) - versions 2088_1_700, 2008_1_710, 740, can use a vulnerable interface to execute an application function to…
- risk 0.57cvss 8.7epss 0.01
SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available…
- risk 0.47cvss 7.2epss 0.01
SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any…
- risk 0.48cvss 7.4epss 0.00
Due to improper input controls In SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, an attacker authenticated as a non-administrative user can craft a request which will trigger the application server to…
- risk 0.48cvss 7.4epss 0.04
ReadtoMyShoe, a web app that lets users upload articles and listen to them later, generates an error message containing sensitive information prior to commit 8533b01. If an error occurs when adding an article, the website shows the user an error message. If the error originates…
- risk 0.50cvss 8.8epss 0.02
github-slug-action is a GitHub Action to expose slug value of GitHub environment variables inside of one's GitHub workflow. Starting in version 4.0.0` and prior to version 4.4.1, this action uses the `github.head_ref` parameter in an insecure way. This vulnerability can be…