Browse CVEs

MEDIUM 6.5 CVE-2023-36706 Windows Deployment Services Information Disclosure Vulnerability Windows Server 2008 Patch available Fix from $1,6002023-10-10 HIGH 7.5 CVE-2023-36707 Windows Deployment Services Denial of Service Vulnerability Windows Server 2012 Patch available Fix from $1,9502023-10-10 HIGH 7.5 CVE-2023-36585 Windows upnphost.dll Denial of Service Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.17763.4974+ Fix from $1,9502023-10-10 MEDIUM 5.5 CVE-2023-36563 KEVEPSS 21% Microsoft WordPad Information Disclosure Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $1,6002023-10-10 MEDIUM 6.5 CVE-2023-36566 Microsoft Common Data Model SDK Denial of Service Vulnerability Common Data Model Sdk 1.7.4+ Fix from $1,6002023-10-10 CRITICAL 9.8 CVE-2023-35349 Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability Windows 10 1507 10.0.10240.20232 / 10.0.14393.6351+ Fix from $2,3002023-10-10 CRITICAL 9.8 CVE-2023-32485 Dell SmartFabric Storage Software version 1.3 and lower contain an improper input validation vulnerability. A remote unauthenticated attacker may exp… Smartfabric Storage Software 1.4.0+ Fix from $2,3002023-10-05 MEDIUM 6.5 CVE-2023-43073 Dell SmartFabric Storage Software v1.4 (and earlier) contains an Improper Input Validation vulnerability in RADIUS configuration. An authenticated re… Smartfabric Storage Software 1.4.1+ Fix from $1,6002023-10-05 HIGH 7.8 CVE-2023-43799 Altair is a GraphQL Client. Prior to version 5.2.5, the Altair GraphQL Client Desktop Application does not sanitize external URLs before passing them… Altair 5.2.5+ Fix from $1,9502023-10-04 CRITICAL 9.8 CVE-2023-36619 Atos Unify OpenScape Session Border Controller through V10 R3.01.03 allows execution of administrative scripts by unauthenticated users. Session Border Controller No fix yet Fix from $2,3002023-10-04 HIGH 8.1 CVE-2023-42449 Hydra is the two-layer scalability solution for Cardano. Prior to version 0.13.0, it is possible for a malicious head initializer to extract one or m… Hydra 0.13.0+ Fix from $1,9502023-10-04 CRITICAL 9.1 CVE-2023-38701 Hydra is the layer-two scalability solution for Cardano. Users of the Hydra head protocol send the UTxOs they wish to commit into the Hydra head firs… Hydra 0.12.0+ Fix from $2,3002023-10-04 HIGH 8.2 CVE-2023-39191 An improper input validation flaw was found in the eBPF subsystem in the Linux kernel. The issue occurs due to a lack of proper validation of dynamic… Linux Kernel 6.3+ Fix from $1,9502023-10-04 HIGH 8.1 CVE-2023-42448 Hydra is the layer-two scalability solution for Cardano. Prior to version 0.13.0, the specification states that the contestation period in the datum … Hydra 0.13.0+ Fix from $1,9502023-10-04 CRITICAL 9.8 CVE-2023-22515 KEVEPSS 99% Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnera… Confluence Data Center 8.3.3 / 8.4.3+ Fix from $2,3002023-10-04 HIGH 7.4 CVE-2023-4586 A vulnerability was found in the Hot Rod client. This security issue occurs as the Hot Rod client does not enable hostname validation when using TLS,… Data Grid Mitigation only Fix from $1,9502023-10-04 HIGH 7.8 CVE-2023-30690 Improper input validation vulnerability in Duo prior to SMR Oct-2023 Release 1 allows local attackers to launch privileged activities. Android Mitigation only Fix from $1,9502023-10-04 MEDIUM 6.5 CVE-2023-42508 JFrog Artifactory prior to version 7.66.0 is vulnerable to specific endpoint abuse with a specially crafted payload, which can lead to unauthenticate… Artifactory 7.66.0+ Fix from $1,6002023-10-03 HIGH 7.8 CVE-2023-24853 Memory Corruption in HLOS while registering for key provisioning notify. Ar8035 Firmware No fix yet Fix from $1,9502023-10-03 HIGH 8.2 CVE-2023-22382 Weak configuration in Automotive while VM is processing a listener request from TEE. Apq8064au Firmware No fix yet Fix from $1,9502023-10-03 HIGH 7.5 CVE-2023-3769 Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would al… Ingepac Fc5066 Firmware Mitigation only Fix from $1,9502023-10-02 HIGH 7.5 CVE-2023-3768 Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would al… Ingepac Da3451 Firmware Mitigation only Fix from $1,9502023-10-02 MEDIUM 6.7 CVE-2023-32826 In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-10-02 MEDIUM 6.7 CVE-2023-32827 In camera middleware, there is a possible out of bounds write due to a missing input validation. This could lead to local escalation of privilege wit… Android Mitigation only Fix from $1,6002023-10-02 HIGH 7.5 CVE-2023-32820 In wlan firmware, there is a possible firmware assertion due to improper input handling. This could lead to remote denial of service with no addition… Linux Kernel Mitigation only Fix from $1,9502023-10-02 HIGH 8.8 CVE-2023-20231 A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform an injection attack against an affect… Ios Xe Mitigation only Fix from $1,9502023-09-27 HIGH 8.8 CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 allows an authenticated user with access/modify privilege on the Log component to empty out ar… Opencart after 4.0.2.2 Fix from $1,9502023-09-27 HIGH 7.5 CVE-2023-41300 Vulnerability of parameters not being strictly verified in the PMS module. Successful exploitation of this vulnerability may cause the system to rest… Emui No fix yet Fix from $1,9502023-09-25 HIGH 7.5 CVE-2023-41303 Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock … Emui Mitigation only Fix from $1,9502023-09-25 CRITICAL 9.8 CVE-2022-48605 Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and… Emui No fix yet Fix from $2,3002023-09-25