October 2023

4 results · Clear filters · Feed

• High 7.2
  CVE-2023-20273 Exploited Public exploit EPSS 93%

  A vulnerability in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to inject …

  Cisco Cisco IOS XE Software iOS Network devices
  Oct 24, 2023

  KEV Oct 23, 2023
• High 7.5
  CVE-2023-44487 Exploited Public exploit EPSS 100%

  HTTP/2 Stream Cancellation Attack

  The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.

  nodejs golang go kubescape Debian Ubuntu Azure Linux Alpine Wolfi Maven Go SwiftURL
  Oct 10, 2023

  KEV Oct 10, 2023
• High 7.8
  CVE-2023-42824 Exploited Public exploit

  The issue was addressed with improved checks. This issue is fixed in iOS 16.7.1 and iPadOS 16.7.1. A local attacker may…

  Apple iOS and iPadOS iOS
  Oct 4, 2023

  KEV Oct 5, 2023
• High 7.8
  CVE-2023-4911 Exploited Public exploit EPSS 64%

  Glibc: buffer overflow in ld.so leading to privilege escalation

  A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binar…

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Wolfi
  Oct 3, 2023

  KEV Nov 21, 2023