| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2023-22629 | Hig | 0.61 | 8.8 | 0.12 | Feb 14, 2023 | An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem. | ||
| CVE-2023-21822 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2023-21820 | Hig | 0.48 | 7.4 | 0.01 | Feb 14, 2023 | Windows Distributed File System (DFS) Remote Code Execution Vulnerability | ||
| CVE-2023-21819 | Hig | 0.51 | 7.5 | 0.31 | Feb 14, 2023 | Windows Secure Channel Denial of Service Vulnerability | ||
| CVE-2023-21818 | Hig | 0.52 | 7.5 | 0.43 | Feb 14, 2023 | Windows Secure Channel Denial of Service Vulnerability | ||
| CVE-2023-21817 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Windows Kerberos Elevation of Privilege Vulnerability | ||
| CVE-2023-21816 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Windows Active Directory Domain Services API Denial of Service Vulnerability | ||
| CVE-2023-21813 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Windows Secure Channel Denial of Service Vulnerability | ||
| CVE-2023-21812 | Hig | 0.51 | 7.8 | 0.03 | Feb 14, 2023 | Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||
| CVE-2023-21811 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Windows iSCSI Service Denial of Service Vulnerability | ||
| CVE-2023-21809 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Microsoft Defender for Endpoint Security Feature Bypass Vulnerability | ||
| CVE-2023-21806 | Hig | 0.53 | 8.2 | 0.01 | Feb 14, 2023 | Power BI Report Server Spoofing Vulnerability | ||
| CVE-2023-21805 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Windows MSHTML Platform Remote Code Execution Vulnerability | ||
| CVE-2023-21804 | Hig | 0.51 | 7.8 | 0.00 | Feb 14, 2023 | Windows Graphics Component Elevation of Privilege Vulnerability | ||
| CVE-2023-21802 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Windows Media Remote Code Execution Vulnerability | ||
| CVE-2023-21801 | Hig | 0.51 | 7.8 | 0.00 | Feb 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | ||
| CVE-2023-21800 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Windows Installer Elevation of Privilege Vulnerability | ||
| CVE-2023-21799 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21798 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2023-21797 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft ODBC Driver Remote Code Execution Vulnerability | ||
| CVE-2023-21777 | Hig | 0.57 | 8.7 | 0.00 | Feb 14, 2023 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | ||
| CVE-2023-21718 | Hig | 0.51 | 7.8 | 0.01 | Feb 14, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21717 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft SharePoint Server Elevation of Privilege Vulnerability | ||
| CVE-2023-21715 | Hig | 0.60 | 7.3 | 0.12 | KEV | Feb 14, 2023 | Microsoft Publisher Security Feature Bypass Vulnerability | |
| CVE-2023-21713 | Hig | 0.57 | 8.8 | 0.02 | Feb 14, 2023 | Microsoft SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21710 | Hig | 0.47 | 7.2 | 0.08 | Feb 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2023-21707 | Hig | 0.64 | 8.8 | 0.80 | Feb 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2023-21706 | Hig | 0.58 | 8.8 | 0.04 | Feb 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | ||
| CVE-2023-21705 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21704 | Hig | 0.51 | 7.8 | 0.00 | Feb 14, 2023 | Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21702 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Windows iSCSI Service Denial of Service Vulnerability | ||
| CVE-2023-21701 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability | ||
| CVE-2023-21700 | Hig | 0.49 | 7.5 | 0.02 | Feb 14, 2023 | Windows iSCSI Discovery Service Denial of Service Vulnerability | ||
| CVE-2023-21695 | Hig | 0.49 | 7.5 | 0.01 | Feb 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability | ||
| CVE-2023-21691 | Hig | 0.49 | 7.5 | 0.01 | Feb 14, 2023 | Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability | ||
| CVE-2023-21688 | Hig | 0.51 | 7.8 | 0.04 | Feb 14, 2023 | NT OS Kernel Elevation of Privilege Vulnerability | ||
| CVE-2023-21686 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21685 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-21684 | Hig | 0.57 | 8.8 | 0.01 | Feb 14, 2023 | Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability | ||
| CVE-2023-21568 | Hig | 0.48 | 7.3 | 0.01 | Feb 14, 2023 | Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability | ||
| CVE-2023-21564 | Hig | 0.46 | 7.1 | 0.01 | Feb 14, 2023 | Azure DevOps Server Cross-Site Scripting Vulnerability | ||
| CVE-2023-21529 | Hig | 0.80 | 8.8 | 0.59 | KEV | Feb 14, 2023 | Microsoft Exchange Server Remote Code Execution Vulnerability | |
| CVE-2023-21528 | Hig | 0.51 | 7.8 | 0.00 | Feb 14, 2023 | Microsoft SQL Server Remote Code Execution Vulnerability | ||
| CVE-2023-25567 | Hig | 0.49 | 7.5 | 0.01 | Feb 14, 2023 | GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can trigger an… | ||
| CVE-2023-25566 | Hig | 0.00 | 7.5 | 0.01 | Feb 14, 2023 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridden causing an… | ||
| CVE-2023-25565 | Hig | 0.00 | 7.5 | 0.01 | Feb 14, 2023 | GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` buffers contain a… | ||
| CVE-2023-22939 | Hig | 0.53 | 8.1 | 0.01 | Feb 14, 2023 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their browser and only… | ||
| CVE-2023-22935 | Hig | 0.53 | 8.1 | 0.01 | Feb 14, 2023 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their… | ||
| CVE-2023-22934 | Hig | 0.48 | 7.3 | 0.01 | Feb 14, 2023 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands using a saved search job. The vulnerability requires an authenticated user to craft the saved job and a… | ||
| CVE-2023-22933 | Hig | 0.52 | 8.0 | 0.01 | Feb 14, 2023 | In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the ‘layoutPanel’ attribute in the ‘module’ tag’. |
- risk 0.61cvss 8.8epss 0.12
An issue was discovered in TitanFTP through 1.94.1205. The move-file function has a path traversal vulnerability in the newPath parameter. An authenticated attacker can upload any file and then move it anywhere on the server's filesystem.
- risk 0.51cvss 7.8epss 0.01
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.48cvss 7.4epss 0.01
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
- risk 0.51cvss 7.5epss 0.31
Windows Secure Channel Denial of Service Vulnerability
- risk 0.52cvss 7.5epss 0.43
Windows Secure Channel Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Kerberos Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Active Directory Domain Services API Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows Secure Channel Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.03
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows iSCSI Service Denial of Service Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft Defender for Endpoint Security Feature Bypass Vulnerability
- risk 0.53cvss 8.2epss 0.01
Power BI Report Server Spoofing Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows MSHTML Platform Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Windows Graphics Component Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Media Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.01
Windows Installer Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft ODBC Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft ODBC Driver Remote Code Execution Vulnerability
- risk 0.57cvss 8.7epss 0.00
Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability
- risk 0.51cvss 7.8epss 0.01
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- risk 0.60cvss 7.3epss 0.12
Microsoft Publisher Security Feature Bypass Vulnerability
- risk 0.57cvss 8.8epss 0.02
Microsoft SQL Server Remote Code Execution Vulnerability
- risk 0.47cvss 7.2epss 0.08
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.64cvss 8.8epss 0.80
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.58cvss 8.8epss 0.04
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft SQL Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows iSCSI Service Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Microsoft Protected Extensible Authentication Protocol (PEAP) Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.02
Windows iSCSI Discovery Service Denial of Service Vulnerability
- risk 0.49cvss 7.5epss 0.01
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
Microsoft Protected Extensible Authentication Protocol (PEAP) Information Disclosure Vulnerability
- risk 0.51cvss 7.8epss 0.04
NT OS Kernel Elevation of Privilege Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
- risk 0.57cvss 8.8epss 0.01
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
- risk 0.48cvss 7.3epss 0.01
Microsoft SQL Server Integration Service (VS extension) Remote Code Execution Vulnerability
- risk 0.46cvss 7.1epss 0.01
Azure DevOps Server Cross-Site Scripting Vulnerability
- risk 0.80cvss 8.8epss 0.59
Microsoft Exchange Server Remote Code Execution Vulnerability
- risk 0.51cvss 7.8epss 0.00
Microsoft SQL Server Remote Code Execution Vulnerability
- risk 0.49cvss 7.5epss 0.01
GSS-NTLMSSP, a mechglue plugin for the GSSAPI library that implements NTLM authentication, has an out-of-bounds read when decoding target information prior to version 1.2.0. The length of the `av_pair` is not checked properly for two of the elements which can trigger an…
- risk 0.00cvss 7.5epss 0.01
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, a memory leak can be triggered when parsing usernames which can trigger a denial-of-service. The domain portion of a username may be overridden causing an…
- risk 0.00cvss 7.5epss 0.01
GSS-NTLMSSP is a mechglue plugin for the GSSAPI library that implements NTLM authentication. Prior to version 1.2.0, an incorrect free when decoding target information can trigger a denial of service. The error condition incorrectly assumes the `cb` and `sh` buffers contain a…
- risk 0.53cvss 8.1epss 0.01
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘map’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their browser and only…
- risk 0.53cvss 8.1epss 0.01
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘display.page.search.patterns.sensitivity’ search parameter lets a search bypass SPL safeguards for risky commands. The vulnerability requires a higher privileged user to initiate a request within their…
- risk 0.48cvss 7.3epss 0.01
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, the ‘pivot’ search processing language (SPL) command lets a search bypass SPL safeguards for risky commands using a saved search job. The vulnerability requires an authenticated user to craft the saved job and a…
- risk 0.52cvss 8.0epss 0.01
In Splunk Enterprise versions below 8.1.13, 8.2.10, and 9.0.4, a View allows for Cross-Site Scripting (XSS) in an extensible mark-up language (XML) View through the ‘layoutPanel’ attribute in the ‘module’ tag’.