Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

28,815· Page 142/577
7.0
CVE-2023-36565

Microsoft Office Graphics Elevation of Privilege Vulnerability

6.5
CVE-2023-36564

Windows Search Security Feature Bypass Vulnerability

6.5
CVE-2023-36563KEV

Microsoft WordPad Information Disclosure Vulnerability

7.3
CVE-2023-36561

Azure DevOps Server Elevation of Privilege Vulnerability

7.8
CVE-2023-36557

PrintHTML API Remote Code Execution Vulnerability

7.5
CVE-2023-36438

Windows TCP/IP Information Disclosure Vulnerability

7.8
CVE-2023-36436

Windows MSHTML Platform Remote Code Execution Vulnerability

7.5
CVE-2023-36435

Microsoft QUIC Denial of Service Vulnerability

9.8
CVE-2023-36434

Windows IIS Server Elevation of Privilege Vulnerability

6.5
CVE-2023-36433

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

7.5
CVE-2023-36431

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

6.5
CVE-2023-36429

Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability

7.8
CVE-2023-36420

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8
CVE-2023-36419

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

7.8
CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

7.8
CVE-2023-36417

Microsoft SQL OLE DB Remote Code Execution Vulnerability

6.1
CVE-2023-36416

Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability

8.8
CVE-2023-36415

Azure Identity SDK Remote Code Execution Vulnerability

8.8
CVE-2023-36414

Azure Identity SDK Remote Code Execution Vulnerability

9.8
CVE-2023-35349

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.5
CVE-2023-29348

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

3.1
CVE-2023-5496

A vulnerability was found in Translator PoqDev Add-On 1.0.11 on Firefox. It has been rated as problematic. This issue af

6.3
CVE-2023-5495

A vulnerability was found in QDocs Smart School 6.4.1. It has been classified as critical. This affects an unknown part

5.3
CVE-2023-44399

ZITADEL provides identity infrastructure. In versions 2.37.2 and prior, ZITADEL administrators can enable a setting call

4.3
CVE-2023-44249

An authorization bypass through user-controlled key [CWE-639] vulnerability in Fortinet FortiManager version 7.4.0 and b

7.8
CVE-2023-42788

An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in

6.5
CVE-2023-42787

A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet FortiManager version 7.4.0 and bef

5.3
CVE-2023-42782

A insufficient verification of data authenticity vulnerability [CWE-345] in FortiAnalyzer version 7.4.0 and below 7.2.3

8.1
CVE-2023-41841

An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belongin

7.1
CVE-2023-41838

An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and

8.5
CVE-2023-41679

An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 throu

5.3
CVE-2023-41675

A use after free vulnerability [CWE-416] in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and For

7.5
CVE-2023-40718

A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features v

3.3
CVE-2023-37939

An exposure of sensitive information to an unauthorized actor vulnerability [CWE-200] in FortiClient for Windows 7.2.0,

6.5
CVE-2023-37935

A use of GET request method with sensitive query strings vulnerability in Fortinet FortiOS 7.0.0 - 7.0.12, 7.2.0 - 7.2.5

3.5
CVE-2023-36637

An improper neutralization of input during web page generation vulnerability [CWE-79] in FortiMail version 7.2.0 through

8.8
CVE-2023-36556

An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 throu

3.9
CVE-2023-36555

An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allow

9.8
CVE-2023-36550

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-36549

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

9.8
CVE-2023-36548

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

9.8
CVE-2023-36547

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

7.5
CVE-2023-36478

Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, a

9.8
CVE-2023-34993

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

10.0
CVE-2023-34992

A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet

8.8
CVE-2023-34989

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34988

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34987

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34986

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34985

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.