September 2023

22 results · Clear filters · Feed

• High 8.8
  CVE-2023-5217 Exploited Public exploit EPSS 49%

  Electron affected by libvpx's heap buffer overflow in vp8 encoding

  Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

  Google Chrome libvpx chromium Browsers Debian Ubuntu Alpine npm
  Sep 28, 2023

  KEV Oct 2, 2023
• Medium 6.6
  CVE-2023-20109 Exploited

  A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Sof…

  Cisco Cisco IOS XE Software IOS iOS Network devices
  Sep 27, 2023

  KEV Oct 10, 2023
• Critical 10.0
  CVE-2023-40044 Exploited · Ransomware Public exploit Scanner template EPSS 90%

  WS_FTP Server Ad Hoc Transfer Module .NET Deserialization Vulnerability

  In WS_FTP Server versions prior to 8.7.4 and 8.8.2, a pre-authenticated attacker could leverage a .NET deserialization vulnerability in the Ad Hoc Transfer module to execute remote commands on the underlying WS_FTP Server operating system.

  Progress Software WS_FTP Server
  Sep 27, 2023

  KEV Oct 5, 2023
• Medium 5.3
  CVE-2023-36851 Exploited

  Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

  A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php th…

  Juniper Networks Junos OS Network devices
  Sep 26, 2023

  KEV Nov 13, 2023
• Medium 6.1
  CVE-2023-43770 Exploited Public exploit EPSS 64%

  Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craf…

  roundcube roundcube Debian Ubuntu
  Sep 22, 2023

  KEV Feb 12, 2024
• High 8.8
  CVE-2023-41993 Exploited Public exploit EPSS 24%

  The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead t…

  Apple macOS qtwebkit-source qtwebkit-opensource-src macOS Debian Ubuntu Wolfi
  Sep 21, 2023

  KEV Sep 25, 2023
• High 7.8
  CVE-2023-41992 Exploited Public exploit EPSS 12%

  The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, mac…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 21, 2023

  KEV Sep 25, 2023
• Medium 5.5
  CVE-2023-41991 Exploited Public exploit EPSS 13%

  A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A ma…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 21, 2023

  KEV Sep 25, 2023
• Critical 9.8
  CVE-2023-42793 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  In JetBrains TeamCity before 2023.05.4 authentication bypass leading to RCE on TeamCity Server was possible

  JetBrains TeamCity
  Sep 19, 2023

  KEV Oct 4, 2023
• High 7.2
  CVE-2023-41179 Exploited

  A vulnerability in the 3rd party AV uninstaller module contained in Trend Micro Apex One (on-prem and SaaS), Worry-Free…

  Trend Micro Trend Micro Apex One Trend Micro Worry-Free Business Security Trend Micro Worry-Free Business Security Services
  Sep 19, 2023

  KEV Sep 21, 2023
• High 7.5
  CVE-2023-38205 Exploited Scanner template EPSS 100%

  ColdFusion Bypass - Vulnerability disclosure in ColdFusion | BYPASS CVE-2023-29298

  Adobe ColdFusion versions 2018u18 (and earlier), 2021u8 (and earlier) and 2023u2 (and earlier) are affected by an Improper Access Control vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to access the…

  Adobe ColdFusion
  Sep 14, 2023

  KEV Jul 20, 2023
• High 7.8
  CVE-2023-26369 Exploited

  [Google Project Zero] Adobe Acrobat DC OOBW 0-day actively exploited in the wild

  Acrobat Reader versions 23.003.20284 (and earlier), 20.005.30516 (and earlier) and 20.005.30514 (and earlier) are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation o…

  Adobe Acrobat Reader
  Sep 13, 2023

  KEV Sep 14, 2023
• Medium 6.5
  CVE-2023-36761 Exploited EPSS 20%

  Microsoft Word Information Disclosure Vulnerability

  Microsoft Word Information Disclosure Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
  Sep 12, 2023

  KEV Sep 12, 2023
• High 7.8
  CVE-2023-36802 Exploited Public exploit EPSS 28%

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Streaming Service Proxy Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 12, 2023

  KEV Sep 12, 2023
• High 8.8
  CVE-2023-4863 Exploited Public exploit EPSS 100%

  libwebp: OOB write in BuildHuffmanTable

  Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet
  Sep 12, 2023

  KEV Sep 13, 2023
• High 7.8
  CVE-2023-41990 Exploited

  The issue was addressed with improved handling of caches. This issue is fixed in tvOS 16.3, iOS 16.3 and iPadOS 16.3, m…

  Apple macOS iOS and iPadOS watchOS macOS iOS
  Sep 11, 2023

  KEV Jan 8, 2024
• High 8.8
  CVE-2023-35674 Exploited Public exploit

  In onCreate of WindowState.java, there is a possible way to launch a background activity due to a logic error in the co…

  Google Android Android
  Sep 11, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2023-39780 Exploited Public exploit EPSS 40%

  On ASUS RT-AX55 3.0.0.4.386.51598 devices, authenticated attackers can perform OS command injection via the /start_appl…

  ASUS RT-AX55
  Sep 11, 2023

  KEV Jun 2, 2025
• High 7.8
  CVE-2023-41064 Exploited Public exploit EPSS 53%

  A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 16.6.1 and iPadOS 16.6.…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 7, 2023

  KEV Sep 11, 2023
• High 7.8
  CVE-2023-41061 Exploited

  A validation issue was addressed with improved logic. This issue is fixed in watchOS 9.6.2, iOS 16.6.1 and iPadOS 16.6.…

  Apple iOS and iPadOS watchOS iOS
  Sep 7, 2023

  KEV Sep 11, 2023
• Medium 5.0
  CVE-2023-20269 Exploited · Ransomware EPSS 27%

  A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepowe…

  Cisco Cisco Firepower Threat Defense Software Cisco Adaptive Security Appliance (ASA) Software Network devices
  Sep 6, 2023

  KEV Sep 13, 2023
• High 8.8
  CVE-2023-4762 Exploited Public exploit EPSS 41%

  Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a…

  Google Chrome chromium qt5-qtwebengine Browsers Debian Alpine
  Sep 5, 2023

  KEV Feb 6, 2024