9 May 2023

15 results · Clear filters · Feed

• Critical 9.8
  CVE-2021-46760

  A malicious or compromised UApp or ABL can send a malformed system call to the bootloader, which may result in an out-o…

  AMD 3rd Gen AMD Ryzen™ Threadripper™ Processors “Castle Peak” HEDT Ryzen™ Threadripper™ PRO Processors “Castle Peak” WS
  May 9, 2023
• Critical 9.1
  CVE-2021-46756

  Insufficient validation of inputs in SVC_MAP_USER_STACK in the ASP (AMD Secure Processor) bootloader may allow an attac…

  AMD 3rd Gen AMD EPYC™ Processors 2nd Gen AMD EPYC™ Processors Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne”
  May 9, 2023
• Critical 9.1
  CVE-2021-46753

  Failure to validate the length fields of the ASP (AMD Secure Processor) sensor fusion hub headers may allow an attacker…

  AMD Ryzen™ 5000 Series Mobile processors with Radeon™ Graphics “Cezanne” Ryzen™ 5000 Series Mobile Processors with Radeon™ Graphics “Lucienne” Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics “Pollock”
  May 9, 2023
• Critical 9.8
  CVE-2023-20520

  Improper access control settings in ASP Bootloader may allow an attacker to corrupt the return address causing a stack-…

  AMD 3rd Gen AMD EPYC™ 2nd Gen AMD EPYC™ 1st Gen AMD EPYC™
  May 9, 2023
• Critical 9.8
  CVE-2021-26379

  Insufficient input validation of mailbox data in the SMU may allow an attacker to coerce the SMU to corrupt SMRAM, pote…

  AMD 3rd Gen AMD EPYC™ 2nd Gen AMD EPYC™
  May 9, 2023
• Critical 9.8
  CVE-2023-24943

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Windows Pragmatic General Multicast (PGM) Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 9, 2023
• Critical 9.8
  CVE-2023-24941 EPSS 95%

  Windows Network File System Remote Code Execution Vulnerability

  Windows Network File System Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  May 9, 2023
• Critical 9.1
  CVE-2023-32071 EPSS 70%

  XWiki Platform vulnerable to RXSS via editor parameter - importinline template

  XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible to execute javascript with the right of any user by leading him to a special URL on the wiki targeting a page w…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-distribution-war Maven
  May 9, 2023
• Critical 10.0
  CVE-2023-32069

  XWiki Platform privilege escalation (PR)/RCE from account through class sheet

  XWiki Platform is a generic wiki platform. Starting in version 3.3-milestone-2 and prior to versions 14.10.4 and 15.0-rc-1, it's possible for a user to execute anything with the right of the author of the XWiki.ClassSheet document. This has been patched in XW…

  xwiki xwiki-platform org.xwiki.platform:xwiki-platform-test-ui Maven
  May 9, 2023
• Critical 9.1
  CVE-2023-31126 Public exploit

  Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml

  `org.xwiki.commons:xwiki-commons-xml` is an XML library used by the open-source wiki platform XWiki. The HTML sanitizer, introduced in version 14.6-rc-1, allows the injection of arbitrary HTML code and thus cross-site scripting via invalid data attributes. Th…

  xwiki xwiki-commons org.xwiki.commons:xwiki-commons-xml Maven
  May 9, 2023
• Critical 9.9
  CVE-2023-30899

  A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video …

  Siemens Siveillance Video 2021 R2 Siveillance Video 2022 R2 Siveillance Video 2023 R1 ICS / OT
  May 9, 2023
• Critical 9.9
  CVE-2023-30898

  A vulnerability has been identified in Siveillance Video 2020 R2 (All versions < V20.2 HotfixRev14), Siveillance Video …

  Siemens Siveillance Video 2022 R1 Siveillance Video 2022 R3 Siveillance Video 2020 R3 ICS / OT
  May 9, 2023
• Critical 9.9
  CVE-2023-27407

  A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). The web based management of affected dev…

  Siemens SCALANCE LPE9403 ICS / OT
  May 9, 2023
• Critical 9.1
  CVE-2023-28762

  Information Disclosure in SAP BusinessObjects Intelligence Platform

  SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker with administrator privileges to get the login token of any logged-in BI user over the network without any user interaction. The attacker can impersonate …

  SAP SAP BusinessObjects Intelligence Platform
  May 9, 2023
• Critical 9.8
  CVE-2023-28316

  A security vulnerability has been discovered in the implementation of 2FA on the rocket.chat platform, where other acti…

  May 9, 2023