Archive

12 September 2023

Vulnerabilities first published on this day (UTC), newest first.

← August 2023 2023 / September /12 October 2023 →

All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

Medium 5.9

CVE-2023-4813 Public exploit

Glibc: potential use-after-free in gaih_inet()

A flaw has been identified in glibc. In an uncommon situation, the gaih_inet function may use memory that has been freed, resulting in an application crash. This issue is only exploitable when the getaddrinfo function is called and the hosts database in /etc/…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux

Sep 12, 2023
Critical 9.9

CVE-2023-3710 Public exploit Scanner template EPSS 49%

Printer web page invalid command execution

Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM (Printer web page modules) allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to…

Honeywell RP2f/RP4f PC23/43, PD43 PX4ie/6ie ICS / OT

Sep 12, 2023
High 8.0

CVE-2023-36745 Public exploit EPSS 76%

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Exchange Server Remote Code Execution Vulnerability

Microsoft Microsoft Exchange Server 2016 Cumulative Update 23 Microsoft Exchange Server 2019 Cumulative Update 12 Microsoft Exchange Server 2019 Cumulative Update 13

Sep 12, 2023
High 7.8

CVE-2023-36802 Exploited Public exploit EPSS 28%

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows

Sep 12, 2023
KEV Sep 12, 2023
High 8.8

CVE-2023-38146 Public exploit EPSS 37%

Windows Themes Remote Code Execution Vulnerability

Windows Themes Remote Code Execution Vulnerability

Microsoft Windows 11 version 22H2 Windows 11 version 21H2 Windows

Sep 12, 2023
High 8.8

CVE-2023-4863 Exploited Public exploit EPSS 100%

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet

Sep 12, 2023
KEV Sep 13, 2023
High 8.2

CVE-2022-48474 Public exploit

Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Send…

Control de Ciber Control de Ciber

Sep 12, 2023
High 8.2

CVE-2022-4896 Public exploit

Cyber Control, in its 1.650 version, is affected by a vulnerability in the generation on the server of pop-up windows w…

Control de Ciber Control de Ciber

Sep 12, 2023