Menu

Star on GitHub · 3.2k

2023

28,815 vulnerabilities published in 2023.

Results

9,773 of 28,815· Page 47/196
8.8
CVE-2023-36577

Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability

7.3
CVE-2023-36575

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36574

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36573

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36572

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36571

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

7.3
CVE-2023-36570

Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability

8.4
CVE-2023-36569

Microsoft Office Elevation of Privilege Vulnerability

7.0
CVE-2023-36568

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

7.5
CVE-2023-36567

Windows Deployment Services Information Disclosure Vulnerability

7.0
CVE-2023-36565

Microsoft Office Graphics Elevation of Privilege Vulnerability

7.3
CVE-2023-36561

Azure DevOps Server Elevation of Privilege Vulnerability

7.8
CVE-2023-36557

PrintHTML API Remote Code Execution Vulnerability

7.5
CVE-2023-36438

Windows TCP/IP Information Disclosure Vulnerability

7.8
CVE-2023-36436

Windows MSHTML Platform Remote Code Execution Vulnerability

7.5
CVE-2023-36435

Microsoft QUIC Denial of Service Vulnerability

7.5
CVE-2023-36431

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

7.8
CVE-2023-36420

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8
CVE-2023-36419

Azure HDInsight Apache Oozie Workflow Scheduler XXE Elevation of Privilege Vulnerability

7.8
CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

7.8
CVE-2023-36417

Microsoft SQL OLE DB Remote Code Execution Vulnerability

8.8
CVE-2023-36415

Azure Identity SDK Remote Code Execution Vulnerability

8.8
CVE-2023-36414

Azure Identity SDK Remote Code Execution Vulnerability

7.5
CVE-2023-29348

Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability

7.8
CVE-2023-42788

An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in

8.1
CVE-2023-41841

An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belongin

7.1
CVE-2023-41838

An improper neutralization of special elements used in an os command ('os command injection') in FortiManager 7.4.0 and

8.5
CVE-2023-41679

An improper access control vulnerability [CWE-284] in FortiManager management interface 7.2.0 through 7.2.2, 7.0.0 throu

7.5
CVE-2023-40718

A interpretation conflict in Fortinet IPS Engine versions 7.321, 7.166 and 6.158 allows attacker to evade IPS features v

8.8
CVE-2023-36556

An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 throu

8.8
CVE-2023-36549

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

7.5
CVE-2023-36478

Eclipse Jetty provides a web server and servlet container. In versions 11.0.0 through 11.0.15, 10.0.0 through 10.0.15, a

8.8
CVE-2023-34989

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34988

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34987

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34986

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

8.8
CVE-2023-34985

A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM versio

7.8
CVE-2023-25607

An improper neutralization of special elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78 ] in

7.5
CVE-2020-27213

An issue was discovered in Ethernut Nut/OS 5.1. The code that generates Initial Sequence Numbers (ISNs) for TCP connecti

7.8
CVE-2023-43896

A buffer overflow in Macrium Reflect 8.1.7544 and below allows attackers to escalate privileges or execute arbitrary cod

7.5
CVE-2023-5499

Information exposure vulnerability in Shenzhen Reachfar v28, the exploitation of which could allow a remote attacker to

7.5
CVE-2023-44487KEV

The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many

7.3
CVE-2023-5450

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an at

7.4
CVE-2023-45226

The BIG-IP SPK TMM (Traffic Management Module) f5-debug-sidecar and f5-debug-sshd containers contains hardcoded credent

7.8
CVE-2023-43787

A vulnerability was found in libX11 due to an integer overflow within the XCreateImage() function. This flaw allows a lo

8.7
CVE-2023-43746

When running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance m

7.8
CVE-2023-43611

The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installati

7.2
CVE-2023-42768

When a non-admin user has been assigned an administrator role via an iControl REST PUT request and later the user's rol

7.5
CVE-2023-41085

When IPSec is configured on a Virtual Server, undisclosed traffic can cause TMM to terminate.  Note: Software versions

7.5
CVE-2023-40542

When TCP Verified Accept is enabled on a TCP profile that is configured on a Virtual Server, undisclosed requests can ca

Test your stack for 2023issues

CyberStrike tests your own apps and APIs, then verifies each finding before you see it.