CVEs published July 11, 2023
275 CVEs were published on July 11, 2023: 17 critical, 121 high. 5 are now in CISA KEV.
- Published
- 275
- Critical
- 17
- High
- 121
- Medium
- 111
- Low
- 3
- Unrated
- 23
- Now in CISA KEV
- 5
- Fix available
- 147
Most affected products
- Microsoft Windows
- 80
- Microsoft Windows Server
- 15
- Siemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- 13
- Siemens Tecnomatix Plant Simulation
- 6
- Zoom Video Communications Zoom Rooms for Windows
- 5
- Microsoft SharePoint Enterprise Server · Microsoft SharePoi…
- 4
- Microsoft Windows Server · Microsoft Windows
- 4
- bluemark ds230
- 3
- Microsoft Office · Microsoft 365 Apps for Enterprise
- 3
- SAP_SE SAP Enable Now
- 3
Critical 17
- CVE-2023-24492 A vulnerability has been discovered in the Citrix Secure Access client for Ubuntu which, if exploited, could allow an attacker to remotely Citrix Secure Access client for Ubuntu
- CVE-2023-36825Orchid Deserialization of Untrusted Data vulnerability leads to Remote Code Executionorchidsoftware platform · orchid/platform
- CVE-2023-32057Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35367Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35366Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35365Windows Routing and Remote Access Service (RRAS) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-33150Microsoft Office Security Feature Bypass VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-2746Rockwell Automation Enhanced HIM Vulnerable to Cross-Site Request Forgery AttackRockwell Automation Enhanced HIM
- CVE-2023-36755A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36754A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36753A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36752A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36751A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36750A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-29130A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5).Siemens SIMATIC CN
- CVE-2023-31191Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovationsbluemark ds230
- CVE-2023-36922OS command injection vulnerability in SAP ECC and SAP S/4HANA (IS-OIL)SAP_SE SAP ECC and SAP S/4HANA
High 121
- CVE-2023-24491 A vulnerability has been discovered in the Citrix Secure Access client for Windows which, if exploited, could allow an attacker with accCitrix Secure Access client for Windows
- CVE-2023-3127Improper Authentication in iSTARSensormatic Electronics, a subsidiary of Johnson Controls i…
- CVE-2023-36884Windows Search Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35333MediaWiki PandocUpload Extension Remote Code Execution VulnerabilityMicrosoft PandocUpload
- CVE-2023-34089Decidim Cross-site Scripting vulnerability in the processes filterdecidim · decidim-core
- CVE-2023-34090Decidim vulnerable to sensitive data disclosuredecidim · decidim-meetings
- CVE-2023-32693Decidim Cross-site Scripting vulnerability in the external link redirectionsdecidim · decidim-core
- CVE-2023-37271RestrictedPython vulnerable to arbitrary code execution via stack frame sandbox escapezopefoundation RestrictedPython · restrictedpython
- CVE-2023-36538Improper access control in Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilegeZoom Video Communications Zoom Rooms for Windows
- CVE-2023-36537Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of priZoom Video Communications Zoom Rooms for Windows
- CVE-2023-36536 Untrusted search path in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalaZoom Video Communications Zoom Rooms for Windows
- CVE-2023-34119Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalZoom Video Communications Zoom Rooms for Windows
- CVE-2023-36867Visual Studio Code GitHub Pull Requests and Issues Extension Remote Code Execution VulnerabilityMicrosoft Visual Studio Code - GitHub Pull Requests and Iss…
- CVE-2023-35374Paint 3D Remote Code Execution VulnerabilityMicrosoft Paint
- CVE-2023-35335Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-35312Microsoft VOLSNAP.SYS Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35311Microsoft Outlook Security Feature Bypass VulnerabilityMicrosoft 365 Apps for Enterprise · Microsoft Office LTSC +2
- CVE-2023-35309Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35305Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35304Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35303USB Audio Class System Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35302Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35300Remote Procedure Call Runtime Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35299Windows Common Log File System Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35298HTTP.sys Denial of Service VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-35297Windows Pragmatic General Multicast (PGM) Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32084HTTP.sys Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32056Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32054Volume Shadow Copy Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32053Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-33171Microsoft Dynamics 365 (on-premises) Cross-site Scripting VulnerabilityMicrosoft Dynamics 365 (on-premises)
- CVE-2023-33170ASP.NET and Visual Studio Security Feature Bypass VulnerabilityMicrosoft Visual Studio · Microsoft .NET +14
- CVE-2023-33163Windows Network Load Balancing Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-33161Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft 365 Apps for E… +1
- CVE-2023-33160Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-33159Microsoft SharePoint Server Spoofing VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-33158Microsoft Excel Remote Code Execution VulnerabilityMicrosoft Office 2019 for Mac · Microsoft 365 Apps for E… +3
- CVE-2023-33157Microsoft SharePoint Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-33155Windows Cloud Files Mini Filter Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-33154Windows Partition Management Driver Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-33134Microsoft SharePoint Server Remote Code Execution VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2023-33127.NET and Visual Studio Elevation of Privilege VulnerabilityMicrosoft .NET · Microsoft Visual Studio +4
- CVE-2023-29347Windows Admin Center Spoofing VulnerabilityMicrosoft Windows Admin Center
- CVE-2023-21526Windows Netlogon Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-36874Windows Error Reporting Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35364Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35363Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35362Windows Clip Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35361Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35360Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35358Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35357Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35356Windows Kernel Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35353Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35352Windows Remote Desktop Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2023-35350Windows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-35347Microsoft Install Service Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-35343Windows Geolocation Service Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35342Windows Image Acquisition Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35340Windows CNG Key Isolation Service Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35339Windows CryptoAPI Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-35338Windows Peer Name Resolution Protocol Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-35337Win32k Elevation of Privilege VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-35330Windows Extended Negotiation Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-35328Windows Transaction Manager Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35325Windows Print Spooler Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-35323Windows OLE Remote Code Execution VulnerabilityMicrosoft Windows Server · Microsoft Windows
- CVE-2023-35322Windows Deployment Services Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-35320Connected User Experiences and Telemetry Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-35317Windows Server Update Service (WSUS) Elevation of Privilege VulnerabilityMicrosoft Windows Server
- CVE-2023-35315Windows Layer-2 Bridge Network Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-35313Windows Online Certificate Status Protocol (OCSP) SnapIn Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-32051Raw Image Extension Remote Code Execution VulnerabilityMicrosoft Raw Image Extension
- CVE-2023-32050Windows Installer Elevation of Privilege VulnerabilityMicrosoft Windows Server 2008 Service Pack · Microsoft W… +1
- CVE-2023-32049Windows SmartScreen Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-32047Paint 3D Remote Code Execution VulnerabilityMicrosoft Paint
- CVE-2023-32046Windows MSHTML Platform Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32045Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32044Microsoft Message Queuing (MSMQ) Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32038Microsoft ODBC Driver Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2023-33152Microsoft ActiveX Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-33149Microsoft Office Graphics Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-33148Microsoft Office Elevation of Privilege VulnerabilityMicrosoft Office 2013 Click-to-Run · Microsoft Office +1
- CVE-2023-21756Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-34118Improper privilege management in Zoom Rooms for Windows before version 5.14.5 may allow an authenticated user to enable an escalation of priZoom Video Communications Zoom Rooms for Windows
- CVE-2023-34116Improper input validation in the Zoom Desktop Client for Windows before version 5.15.0 may allow an unauthorized user to enable an escalatioZoom Video Communications Zoom Desktop Client for Windows
- CVE-2022-23447An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-22] in FortiExtender management interfaFortinet FortiExtender
- CVE-2023-3354Improper i/o watch removal in tls handshake can lead to remote unauthenticated denial of serviceqemu · Red Hat Enterprise Linux +2
- CVE-2023-36824Heap overflow in COMMAND GETKEYS and ACL evaluation in Redisredis
- CVE-2023-3627Cross-Site Request Forgery (CSRF) in salesagility/suitecrm-coresalesagility/suitecrm-core
- CVE-2023-3617SourceCodester Best POS Management System Login Page admin_class.php sql injectionSourceCodester Best POS Management System
- CVE-2023-2072Rockwell Automation PowerMonitor 1000 Cross-Site Scripting VulnerabilityRockwell Automation PowerMonitor
- CVE-2023-36690WordPress WPLMS Theme < 4.900 is vulnerable to Cross Site Request Forgery (CSRF)VibeThemes WPLMS
- CVE-2023-3269Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversalkernel · Red Hat Enterprise Linux +1
- CVE-2023-23671WordPress Layer Slider Plugin <= 1.1.9.7 is vulnerable to Cross Site Request Forgery (CSRF)Muneeb Layer Slider
- CVE-2023-37376A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-37375A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-37374A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-37248A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-37247A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-37246A vulnerability has been identified in Tecnomatix Plant Simulation V2201 (All versions < V2201.0008), Tecnomatix Plant Simulation V2302 (AllSiemens Tecnomatix Plant Simulation
- CVE-2023-36749A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36521A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (AlSiemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4
- CVE-2023-36390A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36389A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-36386A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-35921A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (AlSiemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4
- CVE-2023-35920A vulnerability has been identified in SIMATIC MV540 H (All versions < V3.3.4), SIMATIC MV540 S (All versions < V3.3.4), SIMATIC MV550 H (AlSiemens SIMATIC MV540 H · Siemens SIMATIC MV540 S +4
- CVE-2023-29131A vulnerability has been identified in SIMATIC CN 4100 (All versions < V2.5).Siemens SIMATIC CN
- CVE-2022-31810A vulnerability has been identified in SiPass integrated (All versions < V2.90.3.8).Siemens SiPass integrated
- CVE-2022-29561A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2023-23777An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiWeb version 7.0Fortinet FortiWeb
- CVE-2023-31190Missing TLS (HTTPS) certificate validation during firmware update in DroneScout ds230 Remote ID receiver from BlueMark Innovationsbluemark ds230
- CVE-2023-36925Unauthenticated blind SSRF in SAP Solution Manager (Diagnostics agent)SAP_SE SAP Solution Manager
- CVE-2023-36921Header Injection in SAP Solution Manager (Diagnostic Agent)SAP_SE SAP Solution Manager
- CVE-2023-35871Memory Corruption vulnerability in SAP Web DispatcherSAP_SE SAP Web Dispatcher
- CVE-2023-33990Denial of Service (DoS) vulnerability in SAP SQL AnywhereSAP_SE SAP SQL Anywhere
- CVE-2023-33989Directory Traversal vulnerability in SAP NetWeaver (BI CONT ADD ON)SAP_SE SAP NetWeaver
- CVE-2023-33987Request smuggling and request concatenation in SAP Web DispatcherSAP_SE SAP Web Dispatcher
- CVE-2023-2078Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Missing Authorizationbuymeacoffee Buy Me a Coffee – Button and Widget Plugin
- CVE-2023-2079Buy Me a Coffee – Button and Widget Plugin <= 3.7 - Cross-Site Request Forgerybuymeacoffee Buy Me a Coffee – Button and Widget Plugin
Medium, low and unrated 137
- CVE-2023-23756Extension - advcomsys.com - XSS in oneVote component for Joomla <= 1.7.0advcomsys.com oneVote component for Joomla
- CVE-2023-29406Insufficient sanitization of Host header in net/httpGo standard library net/http · stdlib
- CVE-2023-20575 A potential power side-channel vulnerability in some AMD processors may allow an authenticated attacker to use the power reporting function1st Gen AMD EPYC™ Processors · 2nd Gen AMD EPYC™ Process… +2
- CVE-2023-37280Pimcore admin UI vulnerable to Cross-site Scripting in two factor authentication setup pagepimcore admin-ui-classic-bundle · pimcore/admin-ui-classic-…
- CVE-2023-3626Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System UpLoadFloodPlanFile UpLoadFloodPlanFile.ashx unrestricted uploadSuncreate Mountain Flood Disaster Prevention Monitoring and…
- CVE-2023-3625Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Write-UploadFile UploadFile.ashx unrestricted uploadSuncreate Mountain Flood Disaster Prevention Monitoring and…
- CVE-2023-36871Azure Active Directory Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-36868Azure Service Fabric on Windows Information Disclosure VulnerabilityMicrosoft Azure Service Fabric 9.0 for Windows · Microsoft…
- CVE-2023-35373Mono Authenticode Validation Spoofing VulnerabilityMicrosoft Mono
- CVE-2023-35310Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-35308Windows MSHTML Platform Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-35306Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-35296Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32085Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32083Microsoft Failover Cluster Information Disclosure VulnerabilityMicrosoft Windows Server
- CVE-2023-32055Active Template Library Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2023-32052Microsoft Power Apps (online) Spoofing VulnerabilityMicrosoft Power Apps
- CVE-2023-33164Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-33162Microsoft Excel Information Disclosure VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise +1
- CVE-2023-33156Microsoft Defender Elevation of Privilege VulnerabilityMicrosoft Malware Protection Engine
- CVE-2023-36872VP9 Video Extensions Information Disclosure VulnerabilityMicrosoft VP9 Video Extensions
- CVE-2023-35351Windows Active Directory Certificate Services (AD CS) Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-35348Active Directory Federation Service Security Feature Bypass VulnerabilityMicrosoft Windows Server
- CVE-2023-35346Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-35345Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-35344Windows DNS Server Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-35341Microsoft DirectMusic Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-35336Windows MSHTML Platform Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-35332Windows Remote Desktop Protocol Security Feature BypassMicrosoft Windows
- CVE-2023-35331Windows Local Security Authority (LSA) Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-35329Windows Authentication Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-35326Windows CDP User Components Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-35324Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-35321Windows Deployment Services Denial of Service VulnerabilityMicrosoft Windows Server
- CVE-2023-35319Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-35318Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-35316Remote Procedure Call Runtime Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-35314Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32043Windows Remote Desktop Security Feature Bypass VulnerabilityMicrosoft Windows
- CVE-2023-32042OLE Automation Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32041Windows Update Orchestrator Service Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32040Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32039Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32037Windows Layer-2 Bridge Network Driver Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-32035Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32034Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-32033Microsoft Failover Cluster Remote Code Execution VulnerabilityMicrosoft Windows Server
- CVE-2023-33174Windows Cryptographic Information Disclosure VulnerabilityMicrosoft Windows
- CVE-2023-33173Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-33172Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-33169Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-33168Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-33167Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-33166Remote Procedure Call Runtime Denial of Service VulnerabilityMicrosoft Windows
- CVE-2023-33165Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft SharePoint Server
- CVE-2023-33153Microsoft Outlook Remote Code Execution VulnerabilityMicrosoft Office · Microsoft 365 Apps for Enterprise
- CVE-2023-33151Microsoft Outlook Spoofing VulnerabilityMicrosoft Office LTSC · Microsoft 365 Apps for Enterprise +2
- CVE-2023-3624Nesote Inout Blockchain FiatExchanger POST Parameter update_marketboxslider sql injectionNesote Inout Blockchain FiatExchanger
- CVE-2023-34117Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via locZoom Video Communications Zoom Client SDK
- CVE-2023-25606An improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager mFortinet FortiManager · Fortinet FortiAnalyzer
- CVE-2023-28001An insufficient session expiration in Fortinet FortiOS 7.0.0 - 7.0.12 and 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or cFortinet FortiOS
- CVE-2023-24881Microsoft Teams Information Disclosure VulnerabilityMicrosoft Teams
- CVE-2023-3623Suncreate Mountain Flood Disaster Prevention Monitoring and Early Warning System Duty Module UploadHandler.ashx unrestricted uploadSuncreate Mountain Flood Disaster Prevention Monitoring and…
- CVE-2023-3621IBOS OA Delete Packet delete createDeleteCommand sql injectionIBOS OA
- CVE-2023-3108Kernel: a race condition in crypto module in the function skcipher_recvmsgRed Hat Enterprise Linux
- CVE-2023-3619SourceCodester AC Repair and Services System HTTP POST Request sql injectionSourceCodester AC Repair and Services System
- CVE-2023-3620Cross-site Scripting (XSS) - Stored in amauric/tarteaucitron.jsamauric/tarteaucitron.js · tarteaucitronjs
- CVE-2023-32104WordPress MyCurator Content Curation Plugin <= 3.74 is vulnerable to Cross Site Request Forgery (CSRF)Mark Tilly MyCurator Content Curation
- CVE-2023-35091WordPress WooCommerce Stock Manager Plugin <= 2.10.0 is vulnerable to Cross Site Request Forgery (CSRF)StoreApps Stock Manager for WooCommerce
- CVE-2023-35773WordPress Template Debugger Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)Danny Hearnah - ChubbyNinjaa Template Debugger
- CVE-2023-24417WordPress Worthy – VG WORT Integration für WordPress Plugin <= 1.6.5-6497609 is vulnerable to Cross Site Request Forgery (CSRF)tiggersWelt.net Worthy
- CVE-2023-36522WordPress Quiz Expert – Easy Quiz Maker, Exam and Test Manager Plugin <= 1.5.0 is vulnerable to Cross Site Request Forgery (CSRF)WePupil Quiz Expert
- CVE-2023-25443WordPress Button Generator – easily Button Builder Plugin <= 2.3.5 is vulnerable to Cross Site Request Forgery (CSRF)Wow-Company Button Generator – easily Button Builder
- CVE-2023-34029WordPress Disable WordPress Update Notifications Plugin <= 2.3.3 is vulnerable to Cross Site Request Forgery (CSRF)Prem Tiwari Disable WordPress Update Notifications and auto…
- CVE-2023-25706WordPress Robots.txt optimization plugin <= 1.4.5 is vulnerable to Cross Site Request Forgery (CSRF)Pagup WordPress Robots.txt optimization
- CVE-2023-35044WordPress Securimage-WP Plugin <= 3.6.16 is vulnerable to Cross Site Request Forgery (CSRF)Drew Phillips Securimage-WP
- CVE-2023-1672Race condition exists in the key generation and rotation functionalitytang · Red Hat Enterprise Linux +1
- CVE-2023-34185WordPress NextGen GalleryView Plugin <= 0.5.5 is vulnerable to Cross Site Request Forgery (CSRF)John Brien WordPress NextGen GalleryView
- CVE-2023-35047WordPress All Bootstrap Blocks Plugin <= 1.3.6 is vulnerable to Cross Site Request Forgery (CSRF)AREOI All Bootstrap Blocks
- CVE-2023-35778WordPress Recent Posts Slider Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)Neha Goel Recent Posts Slider
- CVE-2023-35780WordPress Galleria Plugin <= 1.0.3 is vulnerable to Cross Site Request Forgery (CSRF)Andy Whalen Galleria
- CVE-2023-36687WordPress Menubar Plugin <= 5.8.2 is vulnerable to Cross Site Request Forgery (CSRF)Andrea Tarantini Menubar
- CVE-2023-36693WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)Alain Gonzalez WP RSS Images
- CVE-2023-37391WordPress WordPress Mobile Pack Plugin <= 3.4.1 is vulnerable to Cross Site Request Forgery (CSRF)WPMobilePack.com WordPress Mobile Pack – Mobile Plugin for…
- CVE-2023-36748A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2022-29562A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.0), RUGGEDCOM ROX MX5000RE (All versions < V2.16.0), RUGGESiemens RUGGEDCOM ROX MX5000 · Siemens RUGGEDCOM ROX MX5… +9
- CVE-2022-22302A clear text storage of sensitive information (CWE-312) vulnerability in both FortiGate version 6.4.0 through 6.4.1, 6.2.0 through 6.2.9 andFortinet FortiAuthenticator · Fortinet FortiOS
- CVE-2023-29156Denial of Service due to loss of information in DroneScout ds230 Remote ID receiver from BlueMark Innovationsbluemark ds230
- CVE-2023-34015WordPress Advanced Flat rate shipping Woocommerce Plugin <= 1.6.4.4 is vulnerable to Cross Site Request Forgery (CSRF)PI Websolution Conditional shipping & Advanced Flat rate sh…
- CVE-2023-35913WordPress OOPSpam Anti-Spam Plugin <= 1.1.44 is vulnerable to Cross Site Request Forgery (CSRF)OOPSpam Anti-Spam
- CVE-2023-35774WordPress LWS Tools Plugin <= 2.4.1 is vulnerable to Cross Site Request Forgery (CSRF)LWS Tools
- CVE-2023-36517WordPress WP Abstracts Plugin <= 2.6.2 is vulnerable to Cross Site Request Forgery (CSRF)Kevon Adonis WP Abstracts
- CVE-2023-1936Exposure of Private Personal Information to an Unauthorized Actor in GitLabGitLab
- CVE-2023-35781WordPress LWS Cleaner Plugin <= 2.3.0 is vulnerable to Cross Site Request Forgery (CSRF)LWS Cleaner
- CVE-2022-45823WordPress Video Contest WordPress Plugin Plugin <= 3.2 is vulnerable to Cross Site Request Forgery (CSRF)GalleryPlugins Video Contest WordPress Plugin
- CVE-2023-25468WordPress Reservation.Studio widget Plugin <= 1.0.11 is vulnerable to Cross Site Request Forgery (CSRF)Reservation.Studio widget
- CVE-2023-23997WordPress Database Collation Fix Plugin <= 1.2.7 is vulnerable to Cross Site Request Forgery (CSRF)Dave Jesch Database Collation Fix
- CVE-2023-23704WordPress Comments Ratings Plugin <= 1.1.6 is vulnerable to Cross Site Request Forgery (CSRF)Pixelgrade Comments Ratings
- CVE-2023-25487WordPress PixTypes Plugin <= 1.4.14 is vulnerable to Cross Site Request Forgery (CSRF)Pixelgrade PixTypes
- CVE-2023-24421WordPress PHP Compatibility Checker Plugin <= 1.5.2 is vulnerable to Cross Site Request Forgery (CSRF)WP Engine PHP Compatibility Checker
- CVE-2023-25051WordPress Comment Reply Notification Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)Denishua Comment Reply Notification
- CVE-2023-23731WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)HasTheme WishSuite
- CVE-2023-23791WordPress HT Menu Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)HasThemes HT Menu
- CVE-2023-23803WordPress JustTables – WooCommerce Product Table Plugin <= 1.4.9 is vulnerable to Cross Site Request Forgery (CSRF)HasThemes JustTables
- CVE-2023-23792WordPress Swatchly – WooCommerce Variation Swatches for Products Plugin <= 1.2.0 is vulnerable to Cross Site Request Forgery (CSRF)HasThemes Swatchly
- CVE-2023-36924Log Injection vulnerability in SAP ERP Defense Forces and Public SecuritySAP_SE SAP ERP Defense Forces and Public Security
- CVE-2023-36919Information Disclosure in SAP Enable NowSAP_SE SAP Enable Now
- CVE-2023-36918Cross-Site Scripting vulnerability in SAP Enable NowSAP_SE SAP Enable Now
- CVE-2023-36917Password Change rate limit bypass in SAP BusinessObjects Business Intelligence PlatformSAP_SE SAP BusinessObjects Business Intelligence Platform
- CVE-2023-35874Improper authentication vulnerability in SAP NetWeaver AS ABAP and ABAP PlatformSAP_SE SAP NetWeaver AS ABAP and ABAP Platform
- CVE-2023-35873Missing Authentication check in SAP NetWeaver Process Integration (Runtime Workbench)SAP_SE SAP NetWeaver Process Integration
- CVE-2023-35872Missing Authentication check in SAP NetWeaver Process Integration (Message Display Tool)SAP_SE SAP NetWeaver Process Integration
- CVE-2023-35870Improper Access Control in SAP S/4HANA (Manage Journal Entry Template)SAP_SE SAP S/4HANA
- CVE-2023-33992Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANASAP_SE SAP Business Warehouse and SAP BW/4HANA
- CVE-2023-33988Cross-Site Scripting vulnerability in SAP Enable NowSAP_SE SAP Enable Now
- CVE-2023-31405Log Injection vulnerability in SAP NetWeaver AS for Java (Log Viewer)SAP_SE SAP NetWeaver AS for Java
- CVE-2020-20118Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to
- CVE-2022-48521An issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2.
- CVE-2023-26861SQL injection vulnerability found in PrestaShop vivawallet v.1.7.10 and before allows a remote attacker to gain privileges via the vivawalle
- CVE-2023-29984Null pointer dereference vulnerability exists in multiple vendors MFPs and printers which implement Debut web server 1.2 or 1.3.
- CVE-2023-31818An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the
- CVE-2023-34561A buffer overflow in the level parsing code of RobTop Games AB Geometry Dash v2.113 allows attackers to execute arbitrary code via entering
- CVE-2023-36163Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary code via a crafted scrip
- CVE-2023-36293SQL injection vulnerability in wmanager v.1.0.7 and before allows a remote attacker to obtain sensitive information via a crafted script to
- CVE-2023-37174GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the dump_isom_scene function at /mp4box/filedum
- CVE-2023-37189A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attackers to execute arbit
- CVE-2023-37190A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML
- CVE-2023-37191A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrary web scripts or HTML
- CVE-2023-37596Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via a crafted
- CVE-2023-37597Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of service via the delet
- CVE-2023-37656WebsiteGuide v0.2 is vulnerable to Remote Command Execution (RCE) via image upload.
- CVE-2023-37657TwoNav v2.0.28-20230624 is vulnerable to Cross Site Scripting (XSS).
- CVE-2023-37658fast-poster v2.15.0 is vulnerable to Cross Site Scripting (XSS).
- CVE-2023-37659xalpha v0.11.4 is vulnerable to Remote Command Execution (RCE).xalpha
- CVE-2023-37765GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_dump_vrml_sffield function at /lib/libgp
- CVE-2023-37766GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the gf_isom_remove_user_data function at /lib/l
- CVE-2023-37767GPAC v2.3-DEV-rev381-g817a848f6-master was discovered to contain a segmentation violation in the BM_ParseIndexValueReplace function at /lib/