10 October 2023

7 results · Clear filters · Feed

• High 7.8
  CVE-2023-36723 Public exploit

  Windows Container Manager Service Elevation of Privilege Vulnerability

  Windows Container Manager Service Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023
• High 7.8
  CVE-2023-41772 Public exploit EPSS 13%

  Win32k Elevation of Privilege Vulnerability

  Win32k Elevation of Privilege Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023
• Critical 9.7
  CVE-2023-34992 Public exploit Scanner template EPSS 82%

  A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet …

  Fortinet FortiSIEM Network devices
  Oct 10, 2023
• Critical 9.4
  CVE-2023-4966 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Unauthenticated sensitive information disclosure

  Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

  Citrix NetScaler ADC  NetScaler Gateway Network devices
  Oct 10, 2023

  KEV Oct 18, 2023
• Medium 5.5
  CVE-2023-43786 Public exploit

  Libx11: stack exhaustion from infinite recursion in putsubimage()

  A vulnerability was found in libX11 due to an infinite loop within the PutSubImage() function. This flaw allows a local user to consume all available system resources and cause a denial of service condition.

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine
  Oct 10, 2023
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• Medium 5.4
  CVE-2023-44763 Public exploit

  ConcreteCMS vulnerable to Stored Cross-site Scripting

  Concrete CMS v9.2.1 is affected by an Arbitrary File Upload vulnerability via a Thumbnail file upload, which allows Cross-Site Scripting (XSS). NOTE: the vendor's position is that a customer is supposed to know that "pdf" should be excluded from the allowed f…

  concrete5/concrete5 Packagist
  Oct 10, 2023