Overview 790 matches · 62 in Waratek scope · 5 protected · 9 exploited · 0 CISA KEV · 27 public PoC · 4 EPSS ≥ 0.5
790matches
62in Waratek scope7.8%
5protected0.6%
9exploited1.1%
0CISA KEV0.0%
27public PoC3.4%
4EPSS ≥ 0.50.5%
Protected by Waratek
5
0.6%
Rule in development
0
0.0%
Mitigation candidate
2
0.3%
No exploit published
55
7.0%
Outside Waratek scope
13
1.6%
Not applicable
715
90.5%
Withdrawn CVE
0
0.0%
blocked by ARMR today
5
0.6%
partly blocked
0
0.0%
not blocked
785
99.4%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 184 / year
20012
Not applicable2
Medium2
not blocked2
No public exploit2
20020
20030
20041
Not applicable1
Low1
not blocked1
No public exploit1
20050
20060
20070
20080
20090
20100
20112
Not applicable2
Medium2
not blocked2
No public exploit2
20121
Not applicable1
High1
not blocked1
No public exploit1
20131
Outside Waratek scope1
High1
not blocked1
No public exploit1
20140
20150
20162
Not applicable2
Medium2
not blocked2
No public exploit2
201718
No exploit published1
Outside Waratek scope1
Not applicable16
Critical2
High5
Medium10
Low1
not blocked18
No public exploit18
201826
No exploit published1
Not applicable25
Critical4
High12
Medium10
not blocked26
Working exploit published1
Forecast only2
No public exploit23
201956
No exploit published2
Not applicable54
Critical12
High18
Medium25
Low1
not blocked56
Working exploit published1
No public exploit55
202056
No exploit published1
Outside Waratek scope1
Not applicable54
Critical7
High23
Medium25
Low1
not blocked56
Proof of concept only2
No public exploit54
2021120
Protected by Waratek2
Mitigation candidate1
No exploit published17
Outside Waratek scope6
Not applicable94
Critical9
High43
Medium64
Low4
blocked by ARMR today2
not blocked118
Exploited2
Working exploit published2
Proof of concept only2
No public exploit114
2022147
Protected by Waratek2
Mitigation candidate1
No exploit published13
Outside Waratek scope1
Not applicable130
Critical13
High49
Medium73
Low12
blocked by ARMR today2
not blocked145
Exploited1
Working exploit published7
Proof of concept only14
No public exploit125
2023184
Protected by Waratek1
No exploit published13
Outside Waratek scope3
Not applicable167
Critical9
High68
Medium100
Low7
blocked by ARMR today1
not blocked183
Exploited2
Working exploit published2
Proof of concept only37
No public exploit143
202446
No exploit published1
Not applicable45
Critical3
High22
Medium17
Low4
not blocked46
Exploited1
Proof of concept only4
No public exploit41
202526
No exploit published3
Not applicable23
Critical7
High8
Medium11
not blocked26
Exploited2
Working exploit published1
Proof of concept only5
No public exploit18
2026102
No exploit published3
Not applicable99
Critical17
High37
Medium35
Low11
None1
Unknown1
not blocked102
Exploited1
Working exploit published1
Proof of concept only16
No public exploit84
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-38994 | High | 2023-10-31 | Not applicable | No public exploit | The 'check_univention_joinstatus' prometheus monitoring script (and other scripts) in UCS 5.0-5 revealed the LDAP plaintext password of the machine account in the process list allowing attackers with local ssh access to gain higher privileges and perform followup attacks. By default, the configuration of UCS does not allow local ssh access for regular users. |
| CVE-2023-37911 | Medium | 2023-10-25 | No exploit published | Proof of concept only | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 9.4-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, when a document has been deleted and re-created, it is possible for users with view right on the re-created document but not on the deleted document to view the contents of the deleted document. Such a situation might arise when rights were added to the deleted document. This can be exploited through the diff feature and, partially, through the REST API by using versions such as `deleted:1` (where the number counts the deletions in the wiki and is thus guessable). Given sufficient rights, the attacker can also re-create the deleted document, thus extending the scope to any deleted document as long as the attacker has edit right in the location of the deleted document. This vulnerability has been patched in XWiki 14.10.8 and 15.3 RC1 by properly checking rights when deleted revisions of a document are accessed. The only workaround is to regularly clean deleted documents to minimize the potential exposure. Extra care should be taken when deleting sensitive documents that are protected individually (and not, e.g., by being placed in a protected space) or deleting a protected space as a whole. |
| CVE-2023-45911 | Critical | 2023-10-18 | Not applicable | No public exploit | An issue in WIPOTEC GmbH ComScale v4.3.29.21344 and v4.4.12.723 allows unauthenticated attackers to login as any user without a password. |
| CVE-2023-45145 | Low | 2023-10-18 | Not applicable | No public exploit | Redis is an in-memory database that persists on disk. On startup, Redis begins listening on a Unix socket before adjusting its permissions to the user-provided configuration. If a permissive umask(2) is used, this creates a race condition that enables, during a short period of time, another process to establish an otherwise unauthorized connection. This problem has existed since Redis 2.6.0-RC1. This issue has been addressed in Redis versions 7.2.2, 7.0.14 and 6.2.14. Users are advised to upgrade. For users unable to upgrade, it is possible to work around the problem by disabling Unix sockets, starting Redis with a restrictive umask, or storing the Unix socket file in a protected directory. |
| CVE-2023-45357 | Medium | 2023-10-17 | Not applicable | No public exploit | Archer Platform 6.x before 6.13 P2 HF2 (6.13.0.2.2) contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtain access to sensitive information via a popup warning message. 6.14 (6.14.0) is also a fixed release. |
| CVE-2023-44394 | Medium | 2023-10-16 | Not applicable | No public exploit | MantisBT is an open source bug tracker. Due to insufficient access-level checks on the Wiki redirection page, any user can reveal private Projects' names, by accessing wiki.php with sequentially incremented IDs. This issue has been addressed in commit `65c44883f` which has been included in release `2.25.8`. Users are advised to upgrade. Users unable to upgrade should disable wiki integration ( `$g_wiki_enable = OFF;`). |
| CVE-2023-35013 | Medium | 2023-10-16 | Not applicable | No public exploit | IBM Security Verify Governance 10.0, Identity Manager could allow a local privileged user to obtain sensitive information from source code. IBM X-Force ID: 257769. |
| CVE-2023-42792 | Medium | 2023-10-14 | Not applicable | No public exploit | Apache Airflow, in versions prior to 2.7.2, contains a security vulnerability that allows an authenticated user with limited access to some DAGs, to craft a request that could give the user write access to various DAG resources for DAGs that the user had no access to, thus, enabling the user to clear DAGs they shouldn't. Users of Apache Airflow are strongly advised to upgrade to version 2.7.2 or newer to mitigate the risk associated with this vulnerability. |
| CVE-2023-32275 | Medium | 2023-10-12 | Not applicable | Proof of concept only | An information disclosure vulnerability exists in the CtEnumCa() functionality of SoftEther VPN 4.41-9782-beta and 5.01.9674. Specially crafted network packets can lead to a disclosure of sensitive information. An attacker can send packets to trigger this vulnerability. |
| CVE-2023-44102 | Medium | 2023-10-11 | Not applicable | No public exploit | Broadcast permission control vulnerability in the Bluetooth module.Successful exploitation of this vulnerability can cause the Bluetooth function to be unavailable. |
| CVE-2023-44101 | High | 2023-10-11 | Not applicable | No public exploit | The Bluetooth module has a vulnerability in permission control for broadcast notifications.Successful exploitation of this vulnerability may affect confidentiality. |
| CVE-2023-36596 | High | 2023-10-10 | Not applicable | No public exploit | Remote Procedure Call Information Disclosure Vulnerability |
| CVE-2023-36429 | Medium | 2023-10-10 | Not applicable | No public exploit | Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability |
| CVE-2023-30802 | Medium | 2023-10-10 | Not applicable | Proof of concept only | The Sangfor Next-Gen Application Firewall version NGAF8.0.17 is vulnerable to a source code disclosure vulnerability. A remote and unauthenticated attacker can obtain PHP source code by sending an HTTP request with an invalid Content-Length field. |
| CVE-2023-44124 | Medium | 2023-09-27 | Not applicable | No public exploit | The vulnerability is to theft of arbitrary files with system privilege in the Screen recording ("com.lge.gametools.gamerecorder") app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The Screen recording app saves contents of arbitrary URIs to SD card which is a world-readable storage. |
| CVE-2023-44122 | High | 2023-09-27 | Not applicable | No public exploit | The vulnerability is to theft of arbitrary files with system privilege in the LockScreenSettings ("com.lge.lockscreensettings") app in the "com/lge/lockscreensettings/dynamicwallpaper/MyCategoryGuideActivity.java" file. The main problem is that the app launches implicit intents that can be intercepted by third-party apps installed on the same device. They also can return arbitrary data that will be passed to the "onActivityResult()" method. The LockScreenSettings app copies the received file to the "/data/shared/dw/mycategory/wallpaper_01.png" path and then changes the file access mode to world-readable and world-writable. |
| CVE-2023-43784 | High | 2023-09-22 | Not applicable | No public exploit | Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat. |
| CVE-2023-43783 | High | 2023-09-22 | Not applicable | Proof of concept only | Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversary before Cadence started. The adversary can leverage this to create or overwrite files via a symlink attack. In some kernel configurations, code injection into the Wine registry is possible. |
| CVE-2023-43782 | Medium | 2023-09-22 | Not applicable | Proof of concept only | Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence. |
| CVE-2023-31014 | Medium | 2023-09-20 | Not applicable | No public exploit | NVIDIA GeForce Now for Android contains a vulnerability in the game launcher component, where a malicious application on the same device can process the implicit intent meant for the streamer component. A successful exploit of this vulnerability may lead to limited information disclosure, denial of service, and code execution. |
| CVE-2023-40788 | Medium | 2023-09-19 | Not applicable | Proof of concept only | SpringBlade <=V3.6.0 is vulnerable to Incorrect Access Control due to incorrect configuration in the default gateway resulting in unauthorized access to error logs |
| CVE-2023-39058 | Medium | 2023-09-18 | Not applicable | Proof of concept only | An information leak in THE_B_members card v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2023-39056 | Medium | 2023-09-18 | Not applicable | Proof of concept only | An information leak in Coffee-jumbo v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2023-39049 | Medium | 2023-09-18 | Not applicable | Proof of concept only | An information leak in youmart-tokunaga v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2023-39046 | Medium | 2023-09-18 | Not applicable | Proof of concept only | An information leak in TonTon-Tei_waiting Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2023-39043 | Medium | 2023-09-18 | Not applicable | Proof of concept only | An information leak in YKC Tokushima_awayokocho Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2023-39040 | Medium | 2023-09-18 | Not applicable | Proof of concept only | An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2023-39039 | Medium | 2023-09-18 | Not applicable | Proof of concept only | An information leak in Camp Style Project Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages. |
| CVE-2022-20917 | Medium | 2023-09-15 | Not applicable | No public exploit | A vulnerability in the Extensible Messaging and Presence Protocol (XMPP) message processing feature of Cisco Jabber could allow an authenticated, remote attacker to manipulate the content of XMPP messages that are used by the affected application. This vulnerability is due to the improper handling of nested XMPP messages within requests that are sent to the Cisco Jabber client software. An attacker could exploit this vulnerability by connecting to an XMPP messaging server and sending crafted XMPP messages to an affected Jabber client. A successful exploit could allow the attacker to manipulate the content of XMPP messages, possibly allowing the attacker to cause the Jabber client application to perform unsafe actions. |
| CVE-2023-38558 | Medium | 2023-09-14 | Not applicable | No public exploit | A vulnerability has been identified in SIMATIC PCS neo (Administration Console) V4.0 (All versions), SIMATIC PCS neo (Administration Console) V4.0 Update 1 (All versions). The affected application leaks Windows admin credentials. An attacker with local access to the Administration Console could get the credentials, and impersonate the admin user, thereby gaining admin access to other Windows systems. |
| CVE-2023-38152 | Medium | 2023-09-12 | Not applicable | No public exploit | DHCP Server Service Information Disclosure Vulnerability |
| CVE-2023-24965 | Medium | 2023-09-08 | Not applicable | No public exploit | IBM Aspera Faspex 5.0.5 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. IBM X-Force ID: 246713. |
| CVE-2023-41745 | Medium | 2023-08-31 | Not applicable | No public exploit | Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30991, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. |
| CVE-2023-41742 | High | 2023-08-31 | Not applicable | No public exploit | Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. |
| CVE-2023-34725 | Medium | 2023-08-28 | Not applicable | Proof of concept only | An issue was discovered in TechView LA-5570 Wireless Gateway 1.0.19_T53, allows physical attackers to gain escalated privileges via a telnet connection. |
| CVE-2023-4230 | Medium | 2023-08-24 | Not applicable | No public exploit | A vulnerability has been identified in ioLogik 4000 Series (ioLogik E4200) firmware versions v1.6 and prior, which has the potential to facilitate the collection of information on ioLogik 4000 Series devices. This vulnerability may enable attackers to gather information for the purpose of assessing vulnerabilities and potential attack vectors. |
| CVE-2023-39974 | Medium | 2023-08-17 | Not applicable | No public exploit | Exposure of Sensitive Information vulnerability in AcyMailing Enterprise component for Joomla. It allows unauthorized actors to get the number of subscribers in a specific list. |
| CVE-2023-39250 | High | 2023-08-16 | Not applicable | No public exploit | Dell Storage Integration Tools for VMware (DSITV) and Dell Storage vSphere Client Plugin (DSVCP) versions prior to 6.1.1 and Replay Manager for VMware (RMSV) versions prior to 3.1.2 contain an information disclosure vulnerability. A local low-privileged malicious user could potentially exploit this vulnerability to retrieve an encryption key that could aid in further attacks. |
| CVE-2023-2916 | High | 2023-08-15 | Not applicable | Proof of concept only | The InfiniteWP Client plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 1.11.1 via the 'admin_notice' function. This can allow authenticated attackers with subscriber-level permissions or above to extract sensitive data including configuration. It can only be exploited if the plugin has not been configured yet. If combined with another arbitrary plugin installation and activation vulnerability, it may be possible to connect a site to InfiniteWP which would make remote management possible and allow for elevation of privileges. |
| CVE-2023-39383 | High | 2023-08-13 | Not applicable | No public exploit | Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security. |
| CVE-2023-38830 | High | 2023-08-10 | Not applicable | Proof of concept only | An information leak in PHPJabbers Yacht Listing Script v1.0 allows attackers to export clients' credit card numbers from the Reservations module. |
| CVE-2023-39214 | High | 2023-08-08 | Not applicable | No public exploit | Exposure of sensitive information in Zoom Client SDK's before 5.15.5 may allow an authenticated user to enable a denial of service via network access. |
| CVE-2023-38955 | High | 2023-08-03 | Not applicable | No public exploit | ZKTeco BioAccess IVS v3.3.1 allows unauthenticated attackers to obtain sensitive information about all managed devices, including their IP addresses and device names. |
| CVE-2023-33368 | Medium | 2023-08-03 | Not applicable | No public exploit | Some API routes exists in Control ID IDSecure 4.7.26.0 and prior, exfiltrating sensitive information and passwords to users accessing these API routes. |
| CVE-2023-3670 | High | 2023-07-28 | Not applicable | No public exploit | In CODESYS Development System 3.5.9.0 to 3.5.17.0 and CODESYS Scripting 4.0.0.0 to 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to place potentially harmful and disguised scripts that could be executed by legitimate users. |
| CVE-2023-39155 | Medium | 2023-07-26 | No exploit published | No public exploit | Jenkins Chef Identity Plugin 2.0.3 and earlier does not mask the user.pem key form field, increasing the potential for attackers to observe and capture it. |
| CVE-2023-34189 | Medium | 2023-07-25 | No exploit published | No public exploit | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.7.0. The attacker could use general users to delete and update the process, which only the admin can operate occurrences. Users are advised to upgrade to Apache InLong's 1.8.0 or cherry-pick https://github.com/apache/inlong/pull/8109 to solve it. |
| CVE-2022-46901 | High | 2023-07-25 | Not applicable | No public exploit | An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is an Access Control Violation for Database Operations. The Vocera Report Console contains a websocket interface that allows for the unauthenticated execution of various tasks and database functions. This includes system tasks, and backing up, loading, and clearing of the database. |
| CVE-2023-37645 | Medium | 2023-07-20 | Not applicable | Working exploit published | eyoucms v1.6.3 was discovered to contain an information disclosure vulnerability via the component /custom_model_path/recruit.filelist.txt. |
| CVE-2023-3299 | Low | 2023-07-20 | Not applicable | No public exploit | HashiCorp Nomad Enterprise 1.2.11 up to 1.5.6, and 1.4.10 ACL policies using a block without a label generates unexpected results. Fixed in 1.6.0, 1.5.7, and 1.4.11. |
| CVE-2023-32760 | High | 2023-07-14 | Not applicable | No public exploit | An issue in Archer Platform before v.6.13 fixed in v.6.12.0.6 and v.6.13.0 allows an authenticated attacker to obtain sensitive information via API calls related to data feeds and data publication. |
| CVE-2023-32759 | High | 2023-07-14 | Not applicable | No public exploit | An issue in Archer Platform before v.6.13 and fixed in 6.12.0.6 and 6.13.0 allows an authenticated attacker to obtain sensitive information via a crafted URL. |
| CVE-2023-37599 | High | 2023-07-13 | Not applicable | Working exploit published | An issue in issabel-pbx v.4.0.0-6 allows a remote attacker to obtain sensitive information via the modules directory |
| CVE-2023-34119 | High | 2023-07-11 | Not applicable | No public exploit | Insecure temporary file in the installer for Zoom Rooms for Windows before version 5.15.0 may allow an authenticated user to enable an escalation of privilege via local access. |
| CVE-2023-31818 | High | 2023-07-11 | Not applicable | Proof of concept only | An issue found in Marukyu Line v.13.4.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function. |
| CVE-2023-35696 | High | 2023-07-10 | Not applicable | No public exploit | Unauthenticated endpoints in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the device via HTTP requests. |
| CVE-2023-3270 | High | 2023-07-10 | Not applicable | No public exploit | Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the system. |
| CVE-2023-30960 | Medium | 2023-07-10 | Not applicable | No public exploit | A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required. |
| CVE-2023-3456 | Medium | 2023-07-06 | Not applicable | No public exploit | Vulnerability of kernel raw address leakage in the hang detector module. Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2023-3455 | Critical | 2023-07-05 | Not applicable | No public exploit | Key management vulnerability on system. Successful exploitation of this vulnerability may affect service availability and integrity. |
| CVE-2023-32613 | High | 2023-06-30 | Not applicable | No public exploit | Exposure of resource to wrong sphere issue exists in WL-WN531AX2 firmware versions prior to 2023526, which may allow a network-adjacent attacker to use functions originally available after login without logging in. |
| CVE-2023-35151 | High | 2023-06-23 | No exploit published | Proof of concept only | XWiki Platform is a generic wiki platform. Starting in version 7.3-milestone-1 and prior to versions 14.4.8, 14.10.6, and 15.1, ny user can call a REST endpoint and obtain the obfuscated passwords, even when the mail obfuscation is activated. The issue has been patched in XWiki 14.4.8, 14.10.6, and 15.1. There is no known workaround. |
| CVE-2023-34467 | High | 2023-06-23 | No exploit published | Proof of concept only | XWiki Platform is a generic wiki platform. Starting in version 3.5-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, the mail obfuscation configuration was not fully taken into account. While the mail displayed to the end user was obfuscated, the rest response was also containing the mail unobfuscated and users were able to filter and sort on the unobfuscated, allowing them to infer the mail content. The consequence was the possibility to retrieve the email addresses of all users even when obfuscated. This has been patched in XWiki 14.4.8, 14.10.4, and 15.0-rc-1. |
| CVE-2023-32394 | Low | 2023-06-23 | Not applicable | No public exploit | The issue was addressed with improved checks. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. A person with physical access to a device may be able to view contact information from the lock screen. |
| CVE-2023-32019 | Medium | 2023-06-14 | Not applicable | No public exploit | Windows Kernel Information Disclosure Vulnerability |
| CVE-2023-29355 | Medium | 2023-06-14 | Not applicable | No public exploit | DHCP Server Service Information Disclosure Vulnerability |
| CVE-2023-2820 | Medium | 2023-06-14 | Not applicable | No public exploit | An information disclosure vulnerability in the faye endpoint in Proofpoint Threat Response / Threat Response Auto-Pull (PTR/TRAP) could be used by an attacker on an adjacent network to obtain credentials to integrated services via a man-in-the-middle position or cryptanalysis of the session traffic. An attacker could use these credentials to impersonate PTR/TRAP to these services. All versions prior to 5.10.0 are affected. |
| CVE-2023-34250 | Medium | 2023-06-13 | Not applicable | No public exploit | Discourse is an open source discussion platform. Prior to version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches, an attacker could use the new topics dismissal endpoint to reveal the number of topics recently created (but not the actual content thereof) in categories they didn't have access to. This issue is patched in version 3.0.4 of the `stable` branch and version 3.1.0.beta5 of the `beta` and `tests-passed` branches. There are no known workarounds. |
| CVE-2023-34114 | High | 2023-06-13 | Not applicable | No public exploit | Exposure of resource to wrong sphere in Zoom for Windows and Zoom for MacOS clients before 5.14.10 may allow an authenticated user to potentially enable information disclosure via network access. |
| CVE-2022-43684 | Critical | 2023-06-13 | Not applicable | No public exploit | ServiceNow has released patches and an upgrade that address an Access Control List (ACL) bypass issue in ServiceNow Core functionality. Additional Details This issue is present in the following supported ServiceNow releases: * Quebec prior to Patch 10 Hot Fix 8b * Rome prior to Patch 10 Hot Fix 1 * San Diego prior to Patch 7 * Tokyo prior to Tokyo Patch 1; and * Utah prior to Utah General Availability If this ACL bypass issue were to be successfully exploited, it potentially could allow an authenticated user to obtain sensitive information from tables missing authorization controls. |
| CVE-2023-29403 | High | 2023-06-08 | Not applicable | No public exploit | On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers. |
| CVE-2023-33510 | High | 2023-06-07 | Protected by Waratek | Exploited | Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters. |
| CVE-2023-32550 | Critical | 2023-06-06 | Not applicable | No public exploit | Landscape's server-status page exposed sensitive system information. This data leak included GET requests which contain information to attack and leak further information from the Landscape API. |
| CVE-2022-40525 | High | 2023-06-06 | Not applicable | No public exploit | Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis. |
| CVE-2022-40523 | High | 2023-06-06 | Not applicable | No public exploit | Information disclosure in Kernel due to indirect branch misprediction. |
| CVE-2023-33518 | Medium | 2023-06-05 | Not applicable | Proof of concept only | emoncms v11 and later was discovered to contain an information disclosure vulnerability which allows attackers to obtain the web directory path and other information leaked by the server via a crafted web request. |
| CVE-2023-29538 | Medium | 2023-06-02 | Not applicable | Proof of concept only | Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> URI during a load request. This leaked directory paths on the user's machine. This vulnerability affects Firefox for Android < 112, Firefox < 112, and Focus for Android < 112. |
| CVE-2023-25750 | Medium | 2023-06-02 | Not applicable | Proof of concept only | Under certain circumstances, a ServiceWorker's offline cache may have leaked to the file system when using private browsing mode. This vulnerability affects Firefox < 111. |
| CVE-2023-2062 | Medium | 2023-06-02 | Not applicable | No public exploit | Missing Password Field Masking vulnerability in Mitsubishi Electric Corporation EtherNet/IP configuration tools SW1DNN-EIPCT-BD and SW1DNN-EIPCTFX5-BD allows a remote unauthenticated attacker to know the password for MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP. This vulnerability results in authentication bypass vulnerability, which allows the attacker to access MELSEC iQ-R Series EtherNet/IP module RJ71EIP91 and MELSEC iQ-F Series EtherNet/IP module FX5-ENET/IP via FTP. |
| CVE-2023-28344 | High | 2023-05-31 | Not applicable | Proof of concept only | An issue was discovered in Faronics Insight 10.0.19045 on Windows. The Insight Teacher Console application allows unauthenticated attackers to view constantly updated screenshots of student desktops and to submit falsified screenshots on behalf of students. Attackers are able to view screenshots of student desktops without their consent. These screenshots may potentially contain sensitive/personal data. Attackers can also rapidly submit falsified images, hiding the actual contents of student desktops from the Teacher Console. |
| CVE-2023-2703 | High | 2023-05-23 | Not applicable | No public exploit | Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Finex Media Competition Management System allows Retrieve Embedded Sensitive Data, Collect Data as Provided by Users. This issue affects Competition Management System: before 23.07. |
| CVE-2023-33293 | Medium | 2023-05-22 | Not applicable | Proof of concept only | An issue was discovered in KaiOS 3.0 and 3.1. The binary /system/kaios/api-daemon exposes a local web server on *.localhost with subdomains for each installed applications, e.g., myapp.localhost. An attacker can make fetch requests to api-deamon to determine if a given app is installed and read the manifest.webmanifest contents, including the app version. |
| CVE-2023-31206 | High | 2023-05-22 | No exploit published | No public exploit | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of nodes of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick [1] to solve it. [1] https://cveprocess.apache.org/cve5/[1]%C2%A0https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 |
| CVE-2023-31103 | High | 2023-05-22 | No exploit published | No public exploit | Exposure of Resource to Wrong Sphere Vulnerability in Apache Software Foundation Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.6.0. Attackers can change the immutable name and type of cluster of InLong. Users are advised to upgrade to Apache InLong's 1.7.0 or cherry-pick https://github.com/apache/inlong/pull/7891 https://github.com/apache/inlong/pull/7891 to solve it. |
| CVE-2023-2025 | Medium | 2023-05-18 | Not applicable | No public exploit | OpenBlue Enterprise Manager Data Collector versions prior to 3.2.5.75 may expose sensitive information to an unauthorized user under certain circumstances. |
| CVE-2023-23448 | Medium | 2023-05-15 | Not applicable | No public exploit | Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code. |
| CVE-2023-29820 | Medium | 2023-05-12 | Not applicable | Proof of concept only | An issue found in Webroot SecureAnywhere Endpoint Protection CE 23.1 v.9.0.33.39 and before allows a local attacker to access sensitive information via the EXE installer. NOTE: the vendor's perspective is that this is not a separate vulnerability relative to CVE-2023-29818 and CVE-2023-29819. |
| CVE-2023-27564 | High | 2023-05-10 | Not applicable | Proof of concept only | The n8n package 0.218.0 for Node.js allows Information Disclosure. |
| CVE-2022-40210 | High | 2023-05-10 | Outside Waratek scope | No public exploit | Exposure of data element to wrong session in the Intel DCM software before version 5.0.1 may allow an authenticated user to potentially enable escalation of privilege via local access. |
| CVE-2022-38087 | Medium | 2023-05-10 | Not applicable | No public exploit | Exposure of resource to wrong sphere in BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable information disclosure via local access. |
| CVE-2023-2069 | Medium | 2023-05-03 | Not applicable | Proof of concept only | An issue has been discovered in GitLab affecting all versions starting from 10.0 before 12.9.8, all versions starting from 12.10 before 12.10.7, all versions starting from 13.0 before 13.0.1. A user with the role of developer could use the import project feature to leak CI/CD variables. |
| CVE-2023-0485 | Medium | 2023-05-03 | Not applicable | Proof of concept only | An issue has been discovered in GitLab affecting all versions starting from 13.11 before 15.8.5, all versions starting from 15.9 before 15.9.4, all versions starting from 15.10 before 15.10.1. It was possible that a project member demoted to a user role to read project updates by doing a diff with a pre-existing fork. |
| CVE-2023-27976 | High | 2023-04-18 | Not applicable | No public exploit | A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that could cause remote code execution when a valid user visits a malicious link provided through the web endpoints. Affected Products: EcoStruxure Control Expert (V15.1 and above) |
| CVE-2023-22307 | Medium | 2023-04-18 | Not applicable | No public exploit | Sensitive data exposure in Webconf in Tribe29 Checkmk Appliance before 1.6.4 allows local attacker to retrieve passwords via reading log files. |
| CVE-2023-29208 | High | 2023-04-15 | No exploit published | No public exploit | XWiki Commons are technical libraries common to several other top level XWiki projects. Rights added to a document are not taken into account for viewing it once it's deleted. Note that this vulnerability only impact deleted documents that where containing view rights: the view rights provided on a space of a deleted document are properly checked. The problem has been patched in XWiki 14.10 by checking the rights of current user: only admin and deleter of the document are allowed to view it. |
| CVE-2023-29203 | Medium | 2023-04-15 | No exploit published | Proof of concept only | XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable from subwiki by requesting users on a subwiki which allows only global users with `uorgsuggest.vm`. This issue only concerns hidden users from main wiki. Note that the disclosed information are the username and the first and last name of users, no other information is leaked. The problem has been patched on XWiki 13.10.8, 14.4.3 and 14.7RC1. |
| CVE-2021-30153 | Medium | 2023-04-15 | Not applicable | No public exploit | An issue was discovered in the VisualEditor extension in MediaWiki before 1.31.13, and 1.32.x through 1.35.x before 1.35.2. . When using VisualEditor to edit a MediaWiki user page belonging to an existing, but hidden, user, VisualEditor will disclose that the user exists. (It shouldn't because they are hidden.) This is related to ApiVisualEditor. |
| CVE-2023-25954 | Medium | 2023-04-13 | Not applicable | No public exploit | KYOCERA Mobile Print' v3.2.0.230119 and earlier, 'UTAX/TA MobilePrint' v3.2.0.230119 and earlier, and 'Olivetti Mobile Print' v3.2.0.230119 and earlier are vulnerable to improper intent handling. When a malicious app is installed on the victim user's Android device, the app may send an intent and direct the affected app to download malicious files or apps to the device without notification. |
| CVE-2023-26588 | High | 2023-04-11 | Not applicable | No public exploit | Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016 firmware Ver. 1.10-0.03 and earlier, BS-GS2008 firmware Ver. 1.0.10.01 and earlier, BS-GS2016 firmware Ver. 1.0.10.01 and earlier, BS-GS2024 firmware Ver. 1.0.10.01 and earlier, BS-GS2048 firmware Ver. 1.0.10.01 and earlier, BS-GS2008P firmware Ver. 1.0.10.01 and earlier, BS-GS2016P firmware Ver. 1.0.10.01 and earlier, and BS-GS2024P firmware Ver. 1.0.10.01 and earlier |
| CVE-2023-26458 | High | 2023-04-11 | Not applicable | No public exploit | An information disclosure vulnerability exists in SAP Landscape Management - version 3.0, enterprise edition. It allows an authenticated SAP Landscape Management user to obtain privileged access to other systems making those other systems vulnerable to information disclosure and modification.The disclosed information is for Diagnostics Agent Connection via Java SCS Message Server of an SAP Solution Manager system and can only be accessed by authenticated SAP Landscape Management users, but they can escalate their privileges to the SAP Solution Manager system. |