September 2023

6 results · Clear filters · Feed

• Medium 6.6
  CVE-2023-20109 Exploited

  A vulnerability in the Cisco Group Encrypted Transport VPN (GET VPN) feature of Cisco IOS Software and Cisco IOS XE Sof…

  Cisco Cisco IOS XE Software IOS iOS Network devices
  Sep 27, 2023

  KEV Oct 10, 2023
• Medium 5.3
  CVE-2023-36851 Exploited

  Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload and download arbitrary files

  A Missing Authentication for Critical Function vulnerability in Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to webauth_operation.php th…

  Juniper Networks Junos OS Network devices
  Sep 26, 2023

  KEV Nov 13, 2023
• Medium 6.1
  CVE-2023-43770 Exploited Public exploit EPSS 64%

  Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with craf…

  roundcube roundcube Debian Ubuntu
  Sep 22, 2023

  KEV Feb 12, 2024
• Medium 5.5
  CVE-2023-41991 Exploited Public exploit EPSS 13%

  A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A ma…

  Apple macOS iOS and iPadOS macOS iOS
  Sep 21, 2023

  KEV Sep 25, 2023
• Medium 6.5
  CVE-2023-36761 Exploited EPSS 20%

  Microsoft Word Information Disclosure Vulnerability

  Microsoft Word Information Disclosure Vulnerability

  Microsoft Microsoft 365 Apps for Enterprise Microsoft Office LTSC 2021 Microsoft Office 2019
  Sep 12, 2023

  KEV Sep 12, 2023
• Medium 5.0
  CVE-2023-20269 Exploited · Ransomware EPSS 27%

  A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepowe…

  Cisco Cisco Firepower Threat Defense Software Cisco Adaptive Security Appliance (ASA) Software Network devices
  Sep 6, 2023

  KEV Sep 13, 2023