10 October 2023

5 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-36563 Exploited EPSS 20%

  Microsoft WordPad Information Disclosure Vulnerability

  Microsoft WordPad Information Disclosure Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023

  KEV Oct 10, 2023
• Medium 5.4
  CVE-2023-36584 Exploited

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Oct 10, 2023

  KEV Nov 16, 2023
• Medium 5.3
  CVE-2023-41763 Exploited Scanner template EPSS 90%

  Skype for Business Elevation of Privilege Vulnerability

  Skype for Business Elevation of Privilege Vulnerability

  Microsoft Skype for Business Server 2015 CU13 Skype for Business Server 2019 CU7
  Oct 10, 2023

  KEV Oct 10, 2023
• Critical 9.4
  CVE-2023-4966 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Unauthenticated sensitive information disclosure

  Sensitive information disclosure in NetScaler ADC and NetScaler Gateway when configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA  virtual server.

  Citrix NetScaler ADC  NetScaler Gateway Network devices
  Oct 10, 2023

  KEV Oct 18, 2023
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023