July 2023

15 results · Clear filters · Feed

• Medium 6.1
  CVE-2023-37580 Exploited Scanner template EPSS 49%

  Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client.

  Jul 31, 2023

  KEV Jul 27, 2023
• Medium 5.5
  CVE-2023-38606 Exploited

  This issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.6.8, iOS 15.7.8 and i…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Jul 26, 2023

  KEV Jul 26, 2023
• High 8.8
  CVE-2023-37450 Exploited EPSS 19%

  The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6…

  Apple macOS iOS and iPadOS watchOS macOS iOS Browsers Debian Ubuntu
  Jul 26, 2023

  KEV Jul 13, 2023
• Critical 10.0
  CVE-2023-35078 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or r…

  ivanti Endpoint Manager Mobile Network devices
  Jul 25, 2023

  KEV Jul 25, 2023
• Critical 9.8
  CVE-2023-38203 Exploited · Ransomware Scanner template EPSS 97%

  Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE

  Adobe ColdFusion versions 2018u17 (and earlier), 2021u7 (and earlier) and 2023u1 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not require user in…

  Adobe ColdFusion
  Jul 20, 2023

  KEV Jan 8, 2024
• Critical 9.8
  CVE-2023-3519 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Unauthenticated remote code execution

  Citrix NetScaler ADC  NetScaler Gateway Network devices
  Jul 19, 2023

  KEV Jul 19, 2023
• Critical 9.8
  CVE-2023-29300 Exploited · Ransomware Scanner template EPSS 100%

  Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution

  Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by a Deserialization of Untrusted Data vulnerability that could result in Arbitrary code execution. Exploitation of this issue does not requir…

  Adobe ColdFusion
  Jul 12, 2023

  KEV Jan 8, 2024
• High 7.5
  CVE-2023-29298 Exploited Scanner template EPSS 100%

  Adobe ColdFusion Improper Access Control Security feature bypass

  Adobe ColdFusion versions 2018u16 (and earlier), 2021u6 (and earlier) and 2023.0.0.330468 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to a…

  Adobe ColdFusion
  Jul 12, 2023

  KEV Jul 20, 2023
• High 7.5
  CVE-2023-36884 Exploited · Ransomware Public exploit EPSS 99%

  Windows Search Remote Code Execution Vulnerability

  Windows Search Remote Code Execution Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 11, 2023

  KEV Jul 17, 2023
• High 8.8
  CVE-2023-35311 Exploited EPSS 16%

  Microsoft Outlook Security Feature Bypass Vulnerability

  Microsoft Outlook Security Feature Bypass Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
  Jul 11, 2023

  KEV Jul 11, 2023
• High 7.8
  CVE-2023-36874 Exploited Public exploit EPSS 44%

  Windows Error Reporting Service Elevation of Privilege Vulnerability

  Windows Error Reporting Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 11, 2023

  KEV Jul 11, 2023
• High 8.8
  CVE-2023-32049 Exploited

  Windows SmartScreen Security Feature Bypass Vulnerability

  Windows SmartScreen Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 11, 2023

  KEV Jul 11, 2023
• High 7.8
  CVE-2023-32046 Exploited

  Windows MSHTML Platform Elevation of Privilege Vulnerability

  Windows MSHTML Platform Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Jul 11, 2023

  KEV Jul 11, 2023
• Critical 9.8
  CVE-2023-24489 Exploited Public exploit Scanner template EPSS 97%

  A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, cou…

  Citrix Citrix ShareFile Storage Zones Controller Network devices
  Jul 10, 2023

  KEV Aug 16, 2023
• Critical 9.0
  CVE-2023-34192 Exploited Scanner template EPSS 77%

  Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary c…

  Jul 6, 2023

  KEV Feb 25, 2025