| CVE-2023-41064 Known exploited | High 7.8 | A buffer overflow issue was addressed with improved memory handling. Assigned by apple | Sep 7, 2023 |
| CVE-2023-41061 Known exploited | High 7.8 | A validation issue was addressed with improved logic. Assigned by apple | Sep 7, 2023 |
| CVE-2023-20269 Known exploited | Medium 5.0 | A vulnerability in the remote access VPN feature of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an unauthenticated, remote attacker… Assigned by cisco | Sep 6, 2023 |
| CVE-2023-4762 Known exploited | High 8.8 | Type Confusion in V8 in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Assigned by Chrome | Sep 5, 2023 |
| CVE-2023-4346 Known exploited | High 7.5 | KNX devices that use KNX Connection Authorization and support Option 1 are, depending on the implementation, vulnerable to being locked and users being unable to reset them to gain access to the devi… Assigned by icscert | Aug 29, 2023 |
| CVE-2023-41266 Known exploited | High 8.2 | A path traversal vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, and August… Assigned by mitre | Aug 29, 2023 |
| CVE-2023-41265 Known exploited | Critical 9.6 | An HTTP Request Tunneling vulnerability found in Qlik Sense Enterprise for Windows for versions May 2023 Patch 3 and earlier, February 2023 Patch 7 and earlier, November 2022 Patch 10 and earlier, an… Assigned by mitre | Aug 29, 2023 |
| CVE-2023-38831 Known exploited | High 7.8 | RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. Assigned by mitre | Aug 23, 2023 |
| CVE-2023-38035 Known exploited | Critical 9.8 | A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due… Assigned by hackerone | Aug 21, 2023 |
| CVE-2023-36846 Known exploited | Medium 5.3 | Junos OS: SRX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Assigned by juniper | Aug 17, 2023 |
| CVE-2023-36845 Known exploited | Critical 9.8 | Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable Assigned by juniper | Aug 17, 2023 |
| CVE-2023-36844 Known exploited | Medium 5.3 | Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables Assigned by juniper | Aug 17, 2023 |
| CVE-2023-36847 Known exploited | Medium 5.3 | Junos OS: EX Series: A vulnerability in J-Web allows an unauthenticated attacker to upload arbitrary files Assigned by juniper | Aug 17, 2023 |
| CVE-2023-35082 Known exploited | Critical 10.0 | An authentication bypass vulnerability in Ivanti EPMM 11.10 and older, allows unauthorized users to access restricted functionality or resources of the application without proper authentication. Assigned by hackerone | Aug 15, 2023 |
| CVE-2022-48503 Known exploited | High 8.8 | The issue was addressed with improved bounds checks. Assigned by apple | Aug 14, 2023 |
| CVE-2023-38180 Known exploited | High 7.5 | .NET and Visual Studio Denial of Service Vulnerability Assigned by microsoft | Aug 8, 2023 |
| CVE-2023-35081 Known exploited | High 7.2 | A path traversal vulnerability in Ivanti EPMM versions (11.10.x < 11.10.0.3, 11.9.x < 11.9.1.2 and 11.8.x < 11.8.1.2) allows an authenticated administrator to write arbitrary files onto the appliance. Assigned by hackerone | Aug 3, 2023 |
| CVE-2023-38950 Known exploited | High 7.5 | A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. Assigned by mitre | Aug 3, 2023 |
| CVE-2023-37580 Known exploited | Medium 6.1 | Zimbra Collaboration (ZCS) 8 before 8.8.15 Patch 41 allows XSS in the Zimbra Classic Web Client. Assigned by mitre | Jul 31, 2023 |
| CVE-2023-38606 Known exploited | Medium 5.5 | This issue was addressed with improved state management. Assigned by apple | Jul 26, 2023 |
| CVE-2023-37450 Known exploited | High 8.8 | The issue was addressed with improved checks. Assigned by apple | Jul 26, 2023 |
| CVE-2023-35078 Known exploited | Critical 10.0 | An authentication bypass vulnerability in Ivanti EPMM allows unauthorized users to access restricted functionality or resources of the application without proper authentication. Assigned by hackerone | Jul 25, 2023 |
| CVE-2023-38203 Known exploited | Critical 9.8 | Analysis CVE-2023-29300 Bypass: Adobe ColdFusion Pre-Auth RCE Assigned by adobe | Jul 20, 2023 |
| CVE-2023-3519 Known exploited | Critical 9.8 | Unauthenticated remote code execution Assigned by Citrix | Jul 19, 2023 |
| CVE-2023-29300 Known exploited | Critical 9.8 | Adobe ColdFusion Deserialization of Untrusted Data Arbitrary code execution Assigned by adobe | Jul 12, 2023 |
| CVE-2023-29298 Known exploited | High 7.5 | Adobe ColdFusion Improper Access Control Security feature bypass Assigned by adobe | Jul 12, 2023 |
| CVE-2023-36884 Known exploited | High 7.5 | Windows Search Remote Code Execution Vulnerability Assigned by microsoft | Jul 11, 2023 |
| CVE-2023-35311 Known exploited | High 8.8 | Microsoft Outlook Security Feature Bypass Vulnerability Assigned by microsoft | Jul 11, 2023 |
| CVE-2023-36874 Known exploited | High 7.8 | Windows Error Reporting Service Elevation of Privilege Vulnerability Assigned by microsoft | Jul 11, 2023 |
| CVE-2023-32049 Known exploited | High 8.8 | Windows SmartScreen Security Feature Bypass Vulnerability Assigned by microsoft | Jul 11, 2023 |
| CVE-2023-32046 Known exploited | High 7.8 | Windows MSHTML Platform Elevation of Privilege Vulnerability Assigned by microsoft | Jul 11, 2023 |
| CVE-2023-24489 Known exploited | Critical 9.8 | A vulnerability has been discovered in the customer-managed ShareFile storage zones controller which, if exploited, could allow an unauthenticated attacker to remotely compromise the customer-managed… Assigned by Citrix | Jul 10, 2023 |
| CVE-2023-34192 Known exploited | Critical 9.0 | Cross Site Scripting vulnerability in Zimbra ZCS v.8.8.15 allows a remote authenticated attacker to execute arbitrary code via a crafted script to the /h/autoSaveDraft function. Assigned by mitre | Jul 6, 2023 |
| CVE-2023-21237 Known exploited | Medium 6.2 | In applyRemoteView of NotificationContentInflater.java, there is a possible way to hide foreground service notification due to misleading or insufficient UI. Assigned by google_android | Jun 28, 2023 |
| CVE-2023-32439 Known exploited | High 8.8 | A type confusion issue was addressed with improved checks. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32435 Known exploited | High 8.8 | A memory corruption issue was addressed with improved state management. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32434 Known exploited | High 7.8 | An integer overflow was addressed with improved input validation. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32409 Known exploited | High 8.6 | The issue was addressed with improved bounds checks. Assigned by apple | Jun 23, 2023 |
| CVE-2023-32373 Known exploited | High 8.8 | A use-after-free issue was addressed with improved memory management. Assigned by apple | Jun 23, 2023 |
| CVE-2023-28204 Known exploited | Medium 6.5 | An out-of-bounds read was addressed with improved input validation. Assigned by apple | Jun 23, 2023 |
| CVE-2023-2533 Known exploited | High 8.4 | PaperCut MF/NG 22.0.10 (Build 65996 2023-03-27) - Remote code execution via CSRF Assigned by Fluid Attacks | Jun 20, 2023 |
| CVE-2023-27992 Known exploited | Critical 9.8 | The pre-authentication command injection vulnerability in the Zyxel NAS326 firmware versions prior to V5.21(AAZF.14)C0, NAS540 firmware versions prior to V5.21(AATB.11)C0, and NAS542 firmware version… Assigned by Zyxel | Jun 19, 2023 |
| CVE-2023-29360 Known exploited | High 8.4 | Microsoft Streaming Service Elevation of Privilege Vulnerability Assigned by microsoft | Jun 13, 2023 |
| CVE-2023-29357 Known exploited | Critical 9.8 | Microsoft SharePoint Server Elevation of Privilege Vulnerability Assigned by microsoft | Jun 13, 2023 |
| CVE-2023-20867 Known exploited | Low 3.9 | VMware Tools Authentication Bypass Vulnerability Assigned by vmware | Jun 13, 2023 |
| CVE-2023-27997 Known exploited | Critical 9.2 | A heap-based buffer overflow vulnerability [CWE-122] in FortiOS version 7.2.4 and below, version 7.0.11 and below, version 6.4.12 and below, version 6.0.16 and below and FortiProxy version 7.2.3 and… Assigned by fortinet | Jun 13, 2023 |
| CVE-2023-20887 Known exploited | Critical 9.8 | Aria Operations for Networks contains a command injection vulnerability. Assigned by vmware | Jun 7, 2023 |
| CVE-2023-33538 Known exploited | High 8.8 | TP-Link TL-WR940N V2/V4, TL-WR841N V8/V10, and TL-WR740N V1/V2 was discovered to contain a command injection vulnerability via the component /userRpm/WlanNetworkRpm . Assigned by mitre | Jun 7, 2023 |
| CVE-2023-3079 Known exploited | High 8.8 | Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Assigned by Chrome | Jun 5, 2023 |
| CVE-2023-34362 Known exploited | Critical 9.8 | In Progress MOVEit Transfer before 2021.0.6 (13.0.6), 2021.1.4 (13.1.4), 2022.0.4 (14.0.4), 2022.1.5 (14.1.5), and 2023.0.1 (15.0.1), a SQL injection vulnerability has been found in the MOVEit Transf… Assigned by mitre | Jun 2, 2023 |
