CVEs published May 8 to May 14, 2023
846 CVEs were published May 8 to May 14, 2023, 78 of them critical. CISA added 8 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 846
- Critical
- 78
- Added to CISA KEV
- 8
- Busiest day
- Tue, May 9 (252)
- Quietest day
- Sat, May 13 (0)
- May 8, 2023185 CVEs · 27 critical
- May 9, 2023252 CVEs · 15 critical
- May 10, 2023209 CVEs · 11 critical
- May 11, 202399 CVEs · 14 critical
- May 12, 202390 CVEs · 11 critical
- May 13, 20230 CVEs
- May 14, 202311 CVEs
Added to CISA KEV 8
- CVE-2023-29336Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2010-3904The rds_page_copy_user function in net/rds/page.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before
- CVE-2014-0196The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the "LECHO
- CVE-2015-5317The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name inorg.jenkins-ci.main:jenkins-core
- CVE-2016-3427Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to aff
- CVE-2016-8735Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x beforeApache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2021-3560It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestorpolkit
- CVE-2023-25717Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin