Database CVE
Archivio delle vulnerabilità note (CVE) con punteggio CVSS, gravità, prodotti e vendor coinvolti. Filtra per anno e severità, collegato ai nostri articoli.
- CVE-2023-5631Media6.1
Roundcube prima di 1.4.15, 1.5.x prima di 1.5.5 e 1.6.x prima di 1.6.4 consente stored XSS tramite un messaggio e-mail HTML con un documento SVG appositamente creato a causa del comportamento di program/lib/Roundcube/rcube_washtml.php. Ciò potrebbe consentire a un attaccante remoto di caricare codice JavaScript arbitrario.
- CVE-2023-45727Alta7.5
Proself Enterprise/Standard Edition Ver5.62 and earlier, Proself Gateway Edition Ver1.65 and earlier, and Proself Mail Sanitize Edition Ver1.08 and earlier allow a remote unauthenticated attacker to conduct XML External Entity (XXE) attacks. By processing a specially crafted request containing malformed XML data, arbitrary files on the server containing account information may be read by the attacker.
- CVE-2023-20598Alta7.8
Una gestione impropria dei privilegi nel driver AMD Radeon™ Graphics potrebbe consentire a un attaccante autenticato di creare una richiesta IOCTL per ottenere il controllo I/O su porte hardware arbitrarie o indirizzi fisici, con conseguente potenziale esecuzione di codice arbitrario.
- CVE-2023-20198Critica10.0
Cisco is providing an update for the ongoing investigation into observed exploitation of the web UI feature in Cisco IOS XE Software. We are updating the list of fixed releases and adding the Software Checker. Our investigation has determined that the actors exploited two previously unknown issues. The attacker first exploited CVE-2023-20198 to gain initial access and issued a privilege 15 command to create a local user and password combination. This allowed the user to log in with normal user access. The attacker then exploited another component of the web UI feature, leveraging the new local user to elevate privilege to root and write the implant to the file system. Cisco has assigned CVE-2023-20273 to this issue. CVE-2023-20198 has been assigned a CVSS Score of 10.0. CVE-2023-20273 has been assigned a CVSS Score of 7.2. Both of these CVEs are being tracked by CSCwh87343.
- CVE-2023-41763Media5.3
Skype for Business Elevation of Privilege Vulnerability
- CVE-2023-36584Media5.4
Windows Mark of the Web Security Feature Bypass Vulnerability
- CVE-2023-36563Media6.5
Microsoft WordPad Information Disclosure Vulnerability
- CVE-2023-4966Critica9.4
Divulgazione di informazioni sensibili in NetScaler ADC e NetScaler Gateway quando configurati come Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) o AAA virtual server.
- CVE-2023-44487Alta7.5
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
- CVE-2023-45208Alta8.8
Un'iniezione di comandi nella funzione parsing_xml_stasurvey all'interno di libcgifunc.so del ripetitore D-Link DAP-X1860 dalla versione 1.00 alla 1.01b05-01 consente agli aggressori (nel raggio del ripetitore) di eseguire comandi shell come root durante la configurazione del ripetitore, tramite un SSID appositamente creato. Inoltre, i nomi di rete contenenti apici singoli (nel raggio del ripetitore) possono causare una negazione del servizio.
- CVE-2023-42824Alta7.8
The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.6.
- CVE-2023-22515Critica9.8
Atlassian è stata informata di un problema segnalato da una manciata di clienti in cui attaccanti esterni potrebbero aver sfruttato una vulnerabilità precedentemente sconosciuta in istanze Confluence Data Center e Server pubblicamente accessibili per creare account amministratore Confluence non autorizzati e accedere alle istanze Confluence. I siti Atlassian Cloud non sono interessati da questa vulnerabilità. Se il tuo sito Confluence è accessibile tramite un dominio atlassian.net, è ospitato da Atlassian e non è vulnerabile a questo problema.
- CVE-2023-4911Alta7.8
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.
- CVE-2023-4211Media5.5
A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory.
- CVE-2023-5217Alta8.8
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- CVE-2023-20109Media6.6
A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker who has administrative control of either a group member or a key server to execute arbitrary code on an affected device or cause the device to crash. This vulnerability is due to insufficient validation of attributes in the Group Domain of Interpretation (GDOI) and G-IKEv2 protocols of the GET VPN feature. An attacker could exploit this vulnerability by either compromising an installed key server or modifying the configuration of a group member to point to a key server that is controlled by the attacker. A successful exploit could allow the attacker to execute arbitrary code and gain full control of the affected system or cause the affected system to reload, resulting in a denial of service (DoS) condition. For more information, see the Details ["#details"] section of this advisory.
- CVE-2023-40044Critica10.0
In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.
- CVE-2023-36851Media5.3
A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php that doesn't require authentication, an attacker is able to upload and download arbitrary files via J-Web, leading to a loss of integrity or confidentiality, which may allow chaining to other vulnerabilities. This issue affects Juniper Networks Junos OS on SRX Series: * 21.2 versions prior to 21.2R3-S8; * 21.4 versions prior to 21.4R3-S6; * 22.1 versions prior to 22.1R3-S5; * 22.2 versions prior to 22.2R3-S3; * 22.3 versions prior to 22.3R3-S2; * 22.4 versions prior to 22,4R2-S2, 22.4R3; * 23.2 versions prior to 23.2R1-S2, 23.2R2.
- CVE-2023-43770Media6.1
Roundcube prima di 1.4.14, 1.5.x prima di 1.5.4 e 1.6.x prima di 1.6.3 consente XSS tramite messaggi e-mail text/plain con link creati appositamente a causa del comportamento di program/lib/Roundcube/rcube_string_replacer.php.
- CVE-2023-41993Alta8.8
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
This product uses the NVD API but is not endorsed or certified by the NVD.