11 July 2023

12 results · Clear filters · Feed

• Unscored —
  CVE-2023-29406 Public exploit

  Insufficient sanitization of Host header in net/http

  The HTTP/1 client does not fully validate the contents of the Host header. A maliciously crafted Host header can inject additional headers or entire requests. With fix, the HTTP/1 client now refuses to send requests containing an invalid Request.Host or Reque…

  Go standard library net/http katib-suggestion-hyperopt katib-earlystopping Debian Ubuntu Azure Linux Alpine Wolfi Go
  Jul 11, 2023
• High 7.5
  CVE-2023-36884 Exploited · Ransomware Public exploit EPSS 99%

  Windows Search Remote Code Execution Vulnerability

  Windows Search Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 11, 2023

  KEV Jul 17, 2023
• High 7.8
  CVE-2023-36874 Exploited Public exploit EPSS 44%

  Windows Error Reporting Service Elevation of Privilege Vulnerability

  Windows Error Reporting Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 11, 2023

  KEV Jul 11, 2023
• High 7.8
  CVE-2023-35317 Public exploit

  Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

  Windows Server Update Service (WSUS) Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows Server 2022 Windows
  Jul 11, 2023
• High 7.8
  CVE-2023-33148 Public exploit

  Microsoft Office Elevation of Privilege Vulnerability

  Microsoft Office Elevation of Privilege Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
  Jul 11, 2023
• High 7.8
  CVE-2023-3269 Public exploit

  Distros-[dirtyvma] privilege escalation via non-rcu-protected vma traversal

  A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas (VMAs) is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbit…

  Red Hat Fedora Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Linux Debian Ubuntu Azure Linux
  Jul 11, 2023
• Unscored —
  CVE-2023-36163 Public exploit

  Cross Site Scripting vulnerability in IP-DOT BuildaGate v.BuildaGate5 allows a remote attacker to execute arbitrary cod…

  Jul 11, 2023
• Unscored —
  CVE-2023-37596 Public exploit

  Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of …

  Jul 11, 2023
• Unscored —
  CVE-2023-37190 Public exploit

  A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrar…

  Jul 11, 2023
• Unscored —
  CVE-2023-37189 Public exploit

  A stored cross site scripting (XSS) vulnerability in index.php?menu=billing_rates of Issabel PBX version 4 allows attac…

  Jul 11, 2023
• Unscored —
  CVE-2023-37191 Public exploit

  A stored cross-site scripting (XSS) vulnerability in Issabel issabel-pbx v.4.0.0-6 allows attackers to execute arbitrar…

  Jul 11, 2023
• Unscored —
  CVE-2023-37597 Public exploit

  Cross Site Request Forgery (CSRF) vulnerability in issabel-pbx v.4.0.0-6 allows a remote attacker to cause a denial of …

  Jul 11, 2023