CVE-Datenbank
Archiv bekannter Schwachstellen (CVEs) mit CVSS-Wert, Schweregrad, betroffenen Produkten und Herstellern. Nach Jahr und Schweregrad filterbar.
- CVE-2023-33246Kritisch9.8
For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution. Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attacker can exploit this vulnerability by using the update configuration function to execute commands as the system users that RocketMQ is running as. Additionally, an attacker can achieve the same effect by forging the RocketMQ protocol content. To prevent these attacks, users are recommended to upgrade to version 5.1.1 or above for using RocketMQ 5.x or 4.9.6 or above for using RocketMQ 4.x .
- CVE-2023-33010Kritisch9.8
A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 Patch 1, USG FLEX series firmware versions 4.50 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.25 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.25 through 5.36 Patch 1, VPN series firmware versions 4.30 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.25 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
- CVE-2023-33009Kritisch9.8
A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Patch 1, USG FLEX series firmware versions 4.60 through 5.36 Patch 1, USG FLEX 50(W) firmware versions 4.60 through 5.36 Patch 1, USG20(W)-VPN firmware versions 4.60 through 5.36 Patch 1, VPN series firmware versions 4.60 through 5.36 Patch 1, ZyWALL/USG series firmware versions 4.60 through 4.73 Patch 1, could allow an unauthenticated attacker to cause denial-of-service (DoS) conditions and even a remote code execution on an affected device.
- CVE-2023-29336Hoch7.8
Win32k Elevation of Privilege Vulnerability
- CVE-2023-24955Hoch7.2
Microsoft SharePoint Server Remote Code Execution Vulnerability
- CVE-2023-21492Mittel4.4
Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR.
- CVE-2023-29552Hoch7.5
The Service Location Protocol (SLP, RFC 2608) allows an unauthenticated, remote attacker to register arbitrary services. This could allow the attacker to use spoofed UDP traffic to conduct a denial-of-service attack with a significant amplification factor.
- CVE-2023-28771Kritisch9.8
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.
- CVE-2023-27524Hoch8.9
Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRET_KEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset administrators who have changed the default value for SECRET_KEY config. All superset installations should always set a unique secure random SECRET_KEY. Your SECRET_KEY is used to securely sign all session cookies and encrypting sensitive information on the database. Add a strong SECRET_KEY to your `superset_config.py` file like: SECRET_KEY = <YOUR_OWN_RANDOM_GENERATED_SECRET_KEY> Alternatively you can set it with `SUPERSET_SECRET_KEY` environment variable.
- CVE-2023-27351Hoch7.5
Diese Schwachstelle ermöglicht es entfernten Angreifern, die Authentifizierung auf betroffenen Installationen von PaperCut NG 22.0.5 (Build 63914) zu umgehen. Zur Ausnutzung dieser Schwachstelle ist keine Authentifizierung erforderlich. Der spezifische Fehler befindet sich in der Klasse SecurityRequestFilter. Das Problem resultiert aus einer fehlerhaften Implementierung des Authentifizierungsalgorithmus. Ein Angreifer kann diese Schwachstelle ausnutzen, um die Authentifizierung auf dem System zu umgehen. War ZDI-CAN-19226.
- CVE-2023-27350Kritisch9.8
Diese Schwachstelle ermöglicht es Remote-Angreifern, die Authentifizierung auf betroffenen Installationen von PaperCut NG 22.0.5 (Build 63914) zu umgehen. Zur Ausnutzung dieser Schwachstelle ist keine Authentifizierung erforderlich. Der spezifische Fehler befindet sich innerhalb der SetupCompleted-Klasse. Das Problem resultiert aus einer fehlerhaften Zugriffskontrolle. Ein Angreifer kann diese Schwachstelle ausnutzen, um die Authentifizierung zu umgehen und beliebigen Code im Kontext von SYSTEM auszuführen. War ZDI-CAN-18987.
- CVE-2023-22894Mittel4.9
Strapi bis einschließlich 4.5.5 ermöglicht es Angreifern (mit Zugriff auf das Admin-Panel), durch Ausnutzen des Abfragefilters sensible Benutzerdaten aufzudecken. Der Angreifer kann Benutzer nach Spalten filtern, die sensible Informationen enthalten, und aus API-Antworten einen Wert ableiten. Wenn der Angreifer über Super-Admin-Zugriff verfügt, kann dies ausgenutzt werden, um den Passwort-Hash und das Passwort-Reset-Token aller Benutzer aufzudecken. Wenn der Angreifer Zugriff auf das Admin-Panel eines Kontos hat, das berechtigt ist, auf den Benutzernamen und die E-Mail-Adresse von API-Benutzern mit einer Rolle mit geringeren Berechtigungen (z. B. Editor oder Author) zuzugreifen, kann dies ausgenutzt werden, um sensible Informationen zu allen API-Benutzern, jedoch nicht zu anderen Admin-Konten, aufzudecken.
- CVE-2023-2136Kritisch9.6
Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
- CVE-2023-2033Hoch8.8
Type confusion in V8 in Google Chrome prior to 112.0.5615.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2023-20118Mittel6.5
A vulnerability in the web-based management interface of Cisco Small Business Routers RV016, RV042, RV042G, RV082, RV320, and RV325 Routers could allow an authenticated, remote attacker to execute arbitrary commands on an affected device. This vulnerability is due to improper validation of user input within incoming HTTP packets. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web-based management interface. A successful exploit could allow the attacker to gain root-level privileges and access unauthorized data. To exploit this vulnerability, an attacker would need to have valid administrative credentials on the affected device. Cisco has not and will not release software updates that address this vulnerability. However, administrators may disable the affected feature as described in the Workarounds ["#workarounds"] section. {{value}} ["%7b%7bvalue%7d%7d"])}]]
- CVE-2023-28252Hoch7.8
Windows Common Log File System Driver Elevation of Privilege Vulnerability
- CVE-2023-28229Hoch7.0
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability
- CVE-2023-29492Kritisch9.8
Novi Survey before 8.9.43676 allows remote attackers to execute arbitrary code on the server in the context of the service account. This does not provide access to stored survey or response data.
- CVE-2023-28206Hoch8.6
An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited.
- CVE-2023-28205Hoch8.8
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
This product uses the NVD API but is not endorsed or certified by the NVD.