Vulnerabilities
Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.
| ID | Title | |
|---|---|---|
| CVE-2023-33161 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2023-33148 |
|
Microsoft Office Elevation of Privilege Vulnerability
Microsoft Office Elevation of Privilege Vulnerability
|
| CVE-2023-33149 |
|
Microsoft Office Graphics Remote Code Execution Vulnerability
Microsoft Office Graphics Remote Code Execution Vulnerability
|
| CVE-2023-33152 |
|
Microsoft ActiveX Remote Code Execution Vulnerability
Microsoft ActiveX Remote Code Execution Vulnerability
|
| CVE-2023-33158 |
|
Microsoft Excel Remote Code Execution Vulnerability
Microsoft Excel Remote Code Execution Vulnerability
|
| CVE-2023-31818 |
|
Vulnerability in marukyu (CVE-2023-31818)
vulnerability in marukyu (CVE-2023-31818). Confidential information can be exposed externally.
|
| CVE-2023-3617 |
|
SQL Injection in sqli (CVE-2023-3617)
SQL injection in sqli (CVE-2023-3617). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-32046 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2023-32046)
vulnerability in Microsoft windows (CVE-2023-32046). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-32049 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2023-32049)
vulnerability in Microsoft windows (CVE-2023-32049). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-35311 KEV |
|
[KEV] Vulnerability in Microsoft outlook (CVE-2023-35311)
vulnerability in Microsoft outlook (CVE-2023-35311). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-36874 KEV |
|
[KEV] Vulnerability in Microsoft windows (CVE-2023-36874)
vulnerability in Microsoft windows (CVE-2023-36874). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2022-31199 KEV |
|
[KEV] Unsafe Deserialization in Netwrix auditor (CVE-2022-31199)
vulnerability in Netwrix auditor (CVE-2022-31199). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-3271 |
|
Vulnerability in sick (CVE-2023-3271)
vulnerability in sick (CVE-2023-3271). Confidential information can be exposed externally.
|
| CVE-2023-3272 |
|
Vulnerability in sick (CVE-2023-3272)
vulnerability in sick (CVE-2023-3272). Confidential information can be exposed externally.
|
| CVE-2023-3273 |
|
Vulnerability in sick (CVE-2023-3273)
vulnerability in sick (CVE-2023-3273). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-35696 |
|
Vulnerability in sick (CVE-2023-35696)
vulnerability in sick (CVE-2023-35696). Confidential information can be exposed externally.
|
| CVE-2021-29256 KEV |
|
[KEV] Use-After-Free in Arm :unknown: (CVE-2021-29256)
vulnerability in Arm :unknown: (CVE-2021-29256). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited. Mitigation: upgrade to `SoCVersion:2023-07-05` or later.
|
| CVE-2022-42175 |
|
Vulnerability in soluslabs (CVE-2022-42175)
vulnerability in soluslabs (CVE-2022-42175). Successful exploitation can lead to full system takeover.
|
| CVE-2022-27405 |
|
Out-of-Bounds Read in platform/external/freetype (CVE-2022-27405)
vulnerability in platform/external/freetype (CVE-2022-27405). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `13:2023-07-01` or later.
|
| CVE-2023-36144 |
|
Vulnerability in intelbras (CVE-2023-36144)
vulnerability in intelbras (CVE-2023-36144). Confidential information can be exposed externally.
|
| CVE-2023-37306 |
|
Vulnerability in misp-project (CVE-2023-37306)
vulnerability in misp-project (CVE-2023-37306). Confidential information can be exposed externally.
|
| CVE-2023-35176 |
|
Vulnerability in dos (CVE-2023-35176)
vulnerability in dos (CVE-2023-35176). Successful exploitation can lead to full system takeover.
|
| CVE-2023-35177 |
|
Out-of-Bounds Write in hp (CVE-2023-35177)
out-of-bounds write in hp (CVE-2023-35177). Successful exploitation can lead to full system takeover.
|
| CVE-2023-35178 |
|
Vulnerability in hp (CVE-2023-35178)
vulnerability in hp (CVE-2023-35178). Successful exploitation can lead to full system takeover.
|
| CVE-2023-36143 |
|
OS Command Injection in maxprintisp (CVE-2023-36143)
OS command injection in maxprintisp (CVE-2023-36143). Successful exploitation can lead to full system takeover.
|
| CVE-2019-17621 KEV |
|
[KEV] OS Command Injection in D-link dir-859-router (CVE-2019-17621)
OS command injection in D-link dir-859-router (CVE-2019-17621). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2019-20500 KEV |
|
[KEV] OS Command Injection in D-link dwl-2600ap-access-point (CVE-2019-20500)
OS command injection in D-link dwl-2600ap-access-point (CVE-2019-20500). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25487 KEV |
|
[KEV] Out-of-Bounds Read in Samsung mobile-devices (CVE-2021-25487)
vulnerability in Samsung mobile-devices (CVE-2021-25487). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25489 KEV |
|
[KEV] Vulnerability in Samsung mobile-devices (CVE-2021-25489)
vulnerability in Samsung mobile-devices (CVE-2021-25489). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25394 KEV |
|
[KEV] Use-After-Free in Samsung mobile-devices (CVE-2021-25394)
vulnerability in Samsung mobile-devices (CVE-2021-25394). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25395 KEV |
|
[KEV] Vulnerability in Samsung mobile-devices (CVE-2021-25395)
vulnerability in Samsung mobile-devices (CVE-2021-25395). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25371 KEV |
|
[KEV] Vulnerability in Samsung mobile-devices (CVE-2021-25371)
vulnerability in Samsung mobile-devices (CVE-2021-25371). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-25372 KEV |
|
[KEV] Out-of-Bounds Write in Samsung mobile-devices (CVE-2021-25372)
out-of-bounds write in Samsung mobile-devices (CVE-2021-25372). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-3390 |
|
Use-After-Free in c (CVE-2023-3390)
vulnerability in c (CVE-2023-3390). Successful exploitation can lead to full system takeover.
|
| CVE-2023-20006 |
|
Vulnerability in dos (CVE-2023-20006)
vulnerability in dos (CVE-2023-20006). Risk of unauthorized operations or information disclosure.
|
| CVE-2023-36664 |
|
Vulnerability in artifex (CVE-2023-36664)
vulnerability in artifex (CVE-2023-36664). Successful exploitation can lead to full system takeover.
|
| CVE-2023-34672 |
|
Vulnerability in elenos (CVE-2023-34672)
vulnerability in elenos (CVE-2023-34672). Successful exploitation can lead to full system takeover.
|
| CVE-2023-34671 |
|
Vulnerability in privilege-escalation (CVE-2023-34671)
vulnerability in privilege-escalation (CVE-2023-34671). Successful exploitation can lead to full system takeover.
|
| CVE-2023-32434 KEV |
|
[KEV] Vulnerability in Apple multiple-products (CVE-2023-32434)
vulnerability in Apple multiple-products (CVE-2023-32434). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-32435 KEV |
|
[KEV] Out-of-Bounds Write in Apple multiple-products (CVE-2023-32435)
out-of-bounds write in Apple multiple-products (CVE-2023-32435). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-32439 KEV |
|
[KEV] Vulnerability in Apple multiple-products (CVE-2023-32439)
vulnerability in Apple multiple-products (CVE-2023-32439). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-20867 KEV |
|
[KEV] Authentication Bypass in Vmware tools (CVE-2023-20867)
authentication bypass in Vmware tools (CVE-2023-20867). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-27992 KEV |
|
[KEV] OS Command Injection in Zyxel multiple-network-attached-storage-nas-devices (CVE-2023-27992)
OS command injection in Zyxel multiple-network-attached-storage-nas-devices (CVE-2023-27992). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2023-31867 |
|
Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.
Sage X3 version 12.14.0.50-0 is vulnerable to CSV Injection.
|
| CVE-2023-20887 KEV |
|
[KEV] Command Injection in Vmware aria-operations-for-networks (CVE-2023-20887)
command injection in Vmware aria-operations-for-networks (CVE-2023-20887). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-35730 KEV |
|
[KEV] Cross-Site Scripting (XSS) in roundcube (CVE-2020-35730)
cross-site scripting in roundcube (CVE-2020-35730). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2020-12641 KEV |
|
[KEV] OS Command Injection in roundcube (CVE-2020-12641)
OS command injection in roundcube (CVE-2020-12641). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2021-44026 KEV |
|
[KEV] SQL Injection in roundcube (CVE-2021-44026)
SQL injection in roundcube (CVE-2021-44026). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2016-9079 KEV |
|
[KEV] Use-After-Free in Mozilla firefox (CVE-2016-9079)
vulnerability in Mozilla firefox (CVE-2016-9079). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|
| CVE-2016-0165 KEV |
|
[KEV] Vulnerability in Microsoft win32k (CVE-2016-0165)
vulnerability in Microsoft win32k (CVE-2016-0165). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
|