Browse CVEs

HIGH 7.5 CVE-2022-47185 Improper input validation vulnerability on the range header in Apache Software Foundation Apache Traffic Server.This issue affects Apache Traffic Ser… Traffic Server after 9.2.1 Fix from $1,9502023-08-09 MEDIUM 6.5 CVE-2023-39209 Improper input validation in Zoom Desktop Client for Windows before 5.15.5 may allow an authenticated user to enable an information disclosure via ne… Zoom 5.15.5+ Fix from $1,6002023-08-08 MEDIUM 5.9 CVE-2023-36873 .NET Framework Spoofing Vulnerability .net Framework Patch available Fix from $1,6002023-08-08 HIGH 8.8 CVE-2023-36899EPSS 77% ASP.NET Elevation of Privilege Vulnerability .net Framework Patch available Fix from $1,9502023-08-08 HIGH 7.5 CVE-2023-3894 Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user suppli… Jackson Dataformats Text 2.15.0+ Fix from $1,9502023-08-08 MEDIUM 6.5 CVE-2023-38254 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Windows 10 1507 Patch available Fix from $1,6002023-08-08 HIGH 7.5 CVE-2023-36912 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Windows 10 10.0.10240.20107 / 10.0.14393.6167+ Fix from $1,9502023-08-08 MEDIUM 6.5 CVE-2023-36893 Microsoft Outlook Spoofing Vulnerability 365 Apps Patch available Fix from $1,6002023-08-08 MEDIUM 6.5 CVE-2023-36897 Visual Studio Tools for Office Runtime Spoofing Vulnerability 365 Apps 15.9.56 / 16.11.29+ Fix from $1,6002023-08-08 HIGH 8.8 CVE-2023-35368 Microsoft Exchange Remote Code Execution Vulnerability Exchange Server Patch available Fix from $1,9502023-08-08 MEDIUM 6.5 CVE-2023-35376 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20107 / 10.0.14393.6167+ Fix from $1,6002023-08-08 MEDIUM 6.5 CVE-2023-35377 Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability Windows 10 1507 10.0.10240.20107 / 10.0.14393.6167+ Fix from $1,6002023-08-08 CRITICAL 9.8 CVE-2023-39532 SES is a JavaScript environment that allows safe execution of arbitrary programs in Compartments. In version 0.18.0 prior to 0.18.7, 0.17.0 prior to … Ses 0.13.5 / 0.14.5+ Fix from $2,3002023-08-08 HIGH 7.8 CVE-2023-21627 Memory corruption in Trusted Execution Environment while calling service API with invalid address. Aqt1000 Firmware Mitigation only Fix from $1,9502023-08-08 MEDIUM 6.5 CVE-2023-21647 Information disclosure in Bluetooth when an GATT packet is received due to improper input validation. Qca6390 Firmware Patch available Fix from $1,6002023-08-08 CRITICAL 9.1 CVE-2023-39529 PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete a file from the server by using the Attachm… Prestashop 8.1.1+ Fix from $2,3002023-08-07 CRITICAL 9.1 CVE-2023-39530 PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessa… Prestashop 8.1.1+ Fix from $2,3002023-08-07 CRITICAL 9.8 CVE-2023-38704 import-in-the-middle is a module loading interceptor specifically for ESM modules. The import-in-the-middle loader works by generating a wrapper modu… Import In The Middle 1.4.2+ Fix from $2,3002023-08-07 MEDIUM 5.5 CVE-2023-27373 An issue was discovered in Insyde InsydeH2O with kernel 5.0 through 5.5. Due to insufficient input validation, an attacker can tamper with a runtime-… Insydeh2o Mitigation only Fix from $1,6002023-08-07 MEDIUM 5.3 CVE-2020-26082 A vulnerability in the zip decompression engine of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, re… Asyncos 13.5.2+ Fix from $1,6002023-08-04 CRITICAL 9.8 CVE-2023-38690 matrix-appservice-irc is a Node.js IRC bridge for Matrix. Prior to version 1.0.1, it is possible to craft a command with newlines which would not be … Matrix Irc Bridge 1.0.1+ Fix from $2,3002023-08-04 MEDIUM 6.5 CVE-2023-37549 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with in… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37550 In multiple Codesys products in multiple versions, after successful authentication as a user, specific crafted network communication requests with in… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37552 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with in… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37553 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with in… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37554 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with in… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37555 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with in… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37556 In multiple versions of multiple Codesys products, after successful authentication as a user, specific crafted network communication requests with in… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37558 After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inc… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03 MEDIUM 6.5 CVE-2023-37559 After successful authentication as a user in multiple Codesys products in multiple versions, specific crafted network communication requests with inc… Control For Beaglebone Sl 4.10.0.0+ Fix from $1,6002023-08-03