February 2023

10 results · Clear filters · Feed

• High 8.8
  CVE-2023-23529 Exploited

  A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.…

  Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu
  Feb 27, 2023

  KEV Feb 14, 2023
• Critical 9.8
  CVE-2022-47986 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  IBM Aspera Faspex code execution

  IBM Aspera Faspex 4.4.2 Patch Level 1 and earlier could allow a remote attacker to execute arbitrary code on the system, caused by a YAML deserialization flaw. By sending a specially crafted obsolete API call, an attacker could exploit this vulnerability to e…

  IBM Aspera Faspex
  Feb 17, 2023

  KEV Feb 21, 2023
• Medium 5.3
  CVE-2023-23752 Exploited Public exploit Scanner template EPSS 100%

  [20230201] - Core - Improper access check in webservice endpoints

  An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

  Joomla! Project Joomla! CMS Web / CMS
  Feb 16, 2023

  KEV Jan 8, 2024
• High 7.8
  CVE-2023-21823 Exploited Public exploit

  Windows Graphics Component Remote Code Execution Vulnerability

  Windows Graphics Component Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Android iOS
  Feb 14, 2023

  KEV Feb 14, 2023
• High 7.8
  CVE-2023-23376 Exploited · Ransomware EPSS 11%

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Windows Common Log File System Driver Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 14, 2023

  KEV Feb 14, 2023
• High 7.3
  CVE-2023-21715 Exploited EPSS 12%

  Microsoft Publisher Security Feature Bypass Vulnerability

  Microsoft Publisher Security Feature Bypass Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise
  Feb 14, 2023

  KEV Feb 14, 2023
• High 8.8
  CVE-2023-21529 Exploited · Ransomware EPSS 59%

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Exchange Server Remote Code Execution Vulnerability

  Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2013 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12
  Feb 14, 2023

  KEV Apr 13, 2026
• Critical 9.8
  CVE-2023-25717 Exploited Scanner template EPSS 98%

  Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrate…

  Feb 13, 2023

  KEV May 12, 2023
• Critical 9.8
  CVE-2022-24990 Exploited · Ransomware Public exploit Scanner template EPSS 83%

  TerraMaster NAS 4.2.29 and earlier allows remote attackers to discover the administrative password by sending "User-Age…

  Feb 7, 2023

  KEV Feb 10, 2023
• High 7.2
  CVE-2023-0669 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Fortra GoAnywhere MFT License Response Servlet Command Injection

  Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability in the License Response Servlet due to deserializing an arbitrary attacker-controlled object. This issue was patched in version 7.1.2.

  Fortra GoAnywhere MFT
  Feb 6, 2023

  KEV Feb 10, 2023