May 2023

8 results · Clear filters · Feed

• High 8.6
  CVE-2023-32315 Exploited Public exploit Scanner template EPSS 100%

  Openfire administration console authentication bypass

  Openfire is an XMPP server licensed under the Open Source Apache License. Openfire's administrative console, a web-based application, was found to be vulnerable to a path traversal attack via the setup environment. This permitted an unauthenticated user to us…

  igniterealtime Openfire org.igniterealtime.openfire:xmppserver openfire Alpine Maven
  May 26, 2023

  KEV Aug 24, 2023
• Critical 9.4
  CVE-2023-2868 Exploited Public exploit EPSS 87%

  Remote Code injection in Barracuda Email Security Gateway

  A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions 5.1.3.001-9.2.0.006. The vulnerability arises out of a failure to comprehensively sanitize the processing of .tar f…

  Barracuda Networks Barracuda Email Security Gateway
  May 24, 2023

  KEV May 26, 2023
• Critical 9.8
  CVE-2023-33246 Exploited Public exploit Scanner template EPSS 97%

  Apache RocketMQ: Possible remote code execution vulnerability when using the update configuration function

  For RocketMQ versions 5.1.0 and below, under certain conditions, there is a risk of remote command execution.  Several components of RocketMQ, including NameServer, Broker, and Controller, are leaked on the extranet and lack permission verification, an attack…

  Apache Software Foundation Apache RocketMQ org.apache.rocketmq:rocketmq-broker org.apache.rocketmq:rocketmq-namesrv Maven
  May 24, 2023

  KEV Sep 6, 2023
• Critical 9.8
  CVE-2023-33009 Exploited EPSS 28%

  A buffer overflow vulnerability in the notification function in Zyxel ATP series firmware versions 4.60 through 5.36 Pa…

  Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
  May 24, 2023

  KEV Jun 5, 2023
• Critical 9.8
  CVE-2023-33010 Exploited EPSS 29%

  A buffer overflow vulnerability in the ID processing function in Zyxel ATP series firmware versions 4.32 through 5.36 P…

  Zyxel USG FLEX series firmware ATP series firmware VPN series Firmware Network devices
  May 24, 2023

  KEV Jun 5, 2023
• High 7.8
  CVE-2023-29336 Exploited Public exploit EPSS 41%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2016 Windows Server 2016 (Server Core installation) Windows 10 Version 1607 Windows
  May 9, 2023

  KEV May 9, 2023
• High 7.2
  CVE-2023-24955 Exploited · Ransomware Public exploit EPSS 85%

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Microsoft SharePoint Server Remote Code Execution Vulnerability

  Microsoft Microsoft SharePoint Server 2019 Microsoft SharePoint Enterprise Server 2016 Microsoft SharePoint Server Subscription Edition
  May 9, 2023

  KEV Mar 26, 2024
• Medium 4.4
  CVE-2023-21492 Exploited

  Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypas…

  Samsung Mobile Samsung Mobile Devices
  May 4, 2023

  KEV May 19, 2023