9 May 2023

9 results · Clear filters · Feed

• Medium 6.7
  CVE-2023-24932 Public exploit EPSS 12%

  Secure Boot Security Feature Bypass Vulnerability

  Secure Boot Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 9, 2023
• High 7.8
  CVE-2023-29343 Public exploit

  SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

  SysInternals Sysmon for Windows Elevation of Privilege Vulnerability

  Microsoft Windows Sysmon Windows
  May 9, 2023
• High 7.8
  CVE-2023-29336 Exploited Public exploit EPSS 41%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows
  May 9, 2023

  KEV May 9, 2023
• Medium 6.5
  CVE-2023-29324 Public exploit

  Windows MSHTML Platform Security Feature Bypass Vulnerability

  Windows MSHTML Platform Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  May 9, 2023
• High 7.2
  CVE-2023-24955 Exploited · Ransomware Public exploit EPSS 85%

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  May 9, 2023

  KEV Mar 26, 2024
• Critical 9.1
  CVE-2023-31126 Public exploit

  Improper Neutralization of Invalid Characters in Data Attribute Names in org.xwiki.commons:xwiki-commons-xml

  `org.xwiki.commons:xwiki-commons-xml` is an XML library used by the open-source wiki platform XWiki. The HTML sanitizer, introduced in version 14.6-rc-1, allows the injection of arbitrary HTML code and thus cross-site scripting via invalid data attributes. Th…

  xwiki xwiki-commons org.xwiki.commons:xwiki-commons-xml Maven
  May 9, 2023
• High 7.3
  CVE-2023-2594 Public exploit

  SourceCodester Food Ordering Management System Registration sql injection

  A vulnerability, which was classified as critical, was found in SourceCodester Food Ordering Management System 1.0. Affected is an unknown function of the component Registration. The manipulation of the argument username leads to sql injection. It is possible…

  SourceCodester Food Ordering Management System
  May 9, 2023
• High 7.2
  CVE-2023-28128 Public exploit EPSS 84%

  An unrestricted upload of file with dangerous type vulnerability exists in Avalanche versions 6.3.x and below that coul…

  May 9, 2023
• High 7.1
  CVE-2023-2591 Public exploit

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in nilsteampassnet/teampass

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitHub repository nilsteampassnet/teampass prior to 3.0.7.

  nilsteampassnet nilsteampassnet/teampass nilsteampassnet/teampass Packagist
  May 9, 2023