CVE-2023-33161

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-33156

Microsoft Defender Elevation of Privilege Vulnerability...

CVE-2023-32085

Microsoft PostScript and PCL6 Class Printer Driver Information Disclosure Vulnerability...

CVE-2023-33158

Microsoft Excel Remote Code Execution Vulnerability...

CVE-2023-32084

HTTP.sys Denial of Service Vulnerability...

CVE-2023-32051

Raw Image Extension Remote Code Execution Vulnerability...

CVE-2023-32042

OLE Automation Information Disclosure Vulnerability...

CVE-2023-32054

Volume Shadow Copy Elevation of Privilege Vulnerability...

CVE-2023-32033

Microsoft Failover Cluster Remote Code Execution Vulnerability...

CVE-2023-32034

Remote Procedure Call Runtime Denial of Service Vulnerability...

CVE-2023-35780

Cross-Site Request Forgery CSRF vulnerability in Andy Whalen Galleria plugin = 1.0.3 versions...

UBUNTU-CVE-2023-33170

ASP.NET and Visual Studio Security Feature Bypass Vulnerability...

CVE-2023-24487

Arbitrary file read in Citrix ADC and Citrix Gateway...

CVE-2023-1691

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-37239

Format string vulnerability in the distributed file system. Attackers who bypass the selinux permission can exploit this vulnerability to crash the program...

USN-6204-1 cpdb-libs vulnerability

Seth Arnold discovered that CPDB incorrectly handled certain characters. An attacker could possibly use this issue to cause a crash or execute arbitrary code...

CVE-2023-36807 Infinite Loop when reading malformed objects in pypdf

pypdf is a pure-python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files. In version 2.10.5 an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This infinite loop blocks the current process and can utilize a single co...

GHSA-P2MF-Q26J-3XMH PlantUML Improper Access Control vulnerability

Improper Access Control in GitHub repository plantuml/plantuml prior to 1.2023.9...

GHSA-G753-GHR7-Q33W cyfs-base vulnerable to misaligned pointer dereference in `ChunkId::new`

The function ChunkId::new creates a misaligned pointer by casting mutable pointer of u8 slice which has alignment 1 to the mutable pointer of u32 which has alignment 4, and dereference the misaligned pointer leading UB, which should not be allowed in safe function...

CVE-2023-33289

The urlnorm crate through 0.1.4 for Rust allows Regular Expression Denial of Service ReDos via a crafted URL to lib.rs. NOTE: the Supplier disputes this, taking the position that "Slow printing of URLs is not a CVE."...