(yesterday)
(1)
(2)
(-)
(-)
(-)
(-)
(-)
(-)
(-)
(-)
(-)
(-)
(16)
(-)
(-)
(-)
(-)
(-)
(-)
(-)
| RANK (yesterday) |
NAME | HEAT SCORE | DESCRIPTION |
|---|---|---|---|
| 👑➡️ (1) | CVE-2023-23397 | 93 | Microsoft Outlook Elevation of Privilege Vulnerability |
| 2➡️ (2) | CVE-2023-23415 | 31 | Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability |
| 3 (-) | CVE-2022-41099 | 25 | BitLocker Security Feature Bypass Vulnerability. |
| 4 (-) | CVE-2022-48425 | 22 | In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs. |
| 5 (-) | CVE-2022-48424 | 21 | In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur. |
| 6 (-) | CVE-2022-48423 | 20 | In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur. |
| 7 (-) | CVE-2023-21608 | 20 | Adobe Acrobat Reader versions 22.003.20282 (and earlier), 22.003.20281 (and earlier) and 20.005.30418 (and earlier) are affected by a Use After Free vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file. |
| 8 (-) | CVE-2022-48422 | 19 | ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located. |
| 9 (-) | CVE-2023-26905 | 15 | An issue was discovered in Alphaware - Simple E-Commerce System v1.0. There is a SQL injection that can directly issue instructions to the background database system via /alphaware/details.php?id. |
| 10 (-) | CVE-2023-26806 | 15 | Tenda W20E v15.11.0.6(US_W20EV4.0br_v15.11.0.6(1068_1546_841 is vulnerable to Buffer Overflow via function formSetSysTime, |
| 11 (-) | CVE-2023-28617 | 13 | org-babel-execute:latex in ob-latex.el in Org Mode through 9.6.1 for GNU Emacs allows attackers to execute arbitrary commands via a file name or directory name that contains shell metacharacters. |
| 12 (-) | CVE-2021-46877 | 12 | jackson-databind 2.10.x through 2.12.x before 2.12.6 and 2.13.x before 2.13.1 allows attackers to cause a denial of service (2 GB transient heap usage per read) in uncommon situations involving JsonNode JDK serialization. |
| 13⬆️ (16) | CVE-2023-21036 | 12 | N/A |
| 14 (-) | CVE-2023-26805 | 12 | Tenda W20E v15.11.0.6 (US_W20EV4.0br_v15.11.0.6(1068_1546_841)_CN_TDC) is vulnerable to Buffer Overflow via function formIPMacBindModify. |
| 15 (-) | CVE-2023-1496 | 12 | Cross-site Scripting (XSS) - Reflected in GitHub repository imgproxy/imgproxy prior to 3.14.0. |
| 16 (-) | CVE-2023-1498 | 12 | A vulnerability classified as critical has been found in code-projects Responsive Hotel Site 1.0. Affected is an unknown function of the file messages.php of the component Newsletter Log Handler. The manipulation of the argument title leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-223398 is the identifier assigned to this vulnerability. |
| 17 (-) | CVE-2023-1501 | 11 | A vulnerability, which was classified as critical, was found in RockOA 2.3.2. This affects the function runAction of the file acloudCosAction.php.SQL. The manipulation of the argument fileid leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223401 was assigned to this vulnerability. |
| 18 (-) | CVE-2023-1499 | 11 | A vulnerability classified as critical was found in code-projects Simple Art Gallery 1.0. Affected by this vulnerability is an unknown functionality of the file adminHome.php. The manipulation of the argument reach_city leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223399. |
| 19 (-) | CVE-2023-1497 | 10 | A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script 1.0. It has been rated as critical. This issue affects some unknown processing of the file uploaderm.php. The manipulation of the argument submit leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223397 was assigned to this vulnerability. |
| 20 (-) | CVE-2023-1500 | 10 | A vulnerability, which was classified as problematic, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file adminHome.php. The manipulation of the argument about_info leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223400. |