CVEs published November 13 to November 19, 2023
722 CVEs were published Nov 13 to Nov 19, 2023, 39 of them critical. CISA added 12 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 722
- Critical
- 39
- Added to CISA KEV
- 12
- Busiest day
- Tue, Nov 14 (337)
- Quietest day
- Sun, Nov 19 (1)
- November 13, 202381 CVEs · 1 critical
- November 14, 2023337 CVEs · 18 critical
- November 15, 202361 CVEs · 1 critical
- November 16, 2023130 CVEs · 11 critical
- November 17, 202371 CVEs · 8 critical
- November 18, 202341 CVEs
- November 19, 20231 CVE
Added to CISA KEV 12
- CVE-2023-36844Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variablesJuniper Networks Junos OS
- CVE-2023-36845Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variableJuniper Networks Junos OS
- CVE-2023-36846Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesJuniper Networks Junos OS
- CVE-2023-36847Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary filesJuniper Networks Junos OS
- CVE-2023-36851Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary filesJuniper Networks Junos OS
- CVE-2023-47246In SysAid On-Premise before 23.3.36, a path traversal vulnerability leads to code execution after an attacker writes a file to the Tomcat we
- CVE-2023-36025Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36033Windows DWM Core Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-36036Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2020-2551Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS Core Components).Oracle WebLogic Server
- CVE-2023-1671A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution Sophos Web Appliance
- CVE-2023-36584Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft Windows