3355 matches found
CVE-2023-44263
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Riyaz Social Metrics plugin = 2.2 versions...
CVE-2023-26148
All versions of the package ithewei/libhv are vulnerable to CRLF Injection when untrusted user input is used to set request headers. An attacker can add the \r\n carriage return line feeds characters and inject additional headers in the request sent...
CVE-2023-26147
All versions of the package ithewei/libhv are vulnerable to HTTP Response Splitting when untrusted user input is used to build headers values. An attacker can add the \r\n carriage return line feeds characters to end the HTTP response headers and inject malicious content, like for example...
CVE-2023-41307
Memory overwriting vulnerability in the security module. Successful exploitation of this vulnerability may affect availability...
CVE-2023-40450
The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. An app may bypass Gatekeeper checks...
CVE-2023-41764
Microsoft Office Spoofing Vulnerability...
CVE-2023-38150
Windows Kernel Elevation of Privilege Vulnerability...
CVE-2023-38140
Windows Kernel Information Disclosure Vulnerability...
CVE-2023-36799
.NET Core and Visual Studio Denial of Service Vulnerability...
CVE-2023-36796
Visual Studio Remote Code Execution Vulnerability...
CVE-2023-36773
3D Builder Remote Code Execution Vulnerability...
CVE-2023-36794
Visual Studio Remote Code Execution Vulnerability...
CVE-2023-36771
3D Builder Remote Code Execution Vulnerability...
CVE-2023-36765
Microsoft Office Elevation of Privilege Vulnerability...
CVE-2023-36760
3D Viewer Remote Code Execution Vulnerability...
CVE-2023-36740
3D Viewer Remote Code Execution Vulnerability...
CVE-2023-33136
Azure DevOps Server Remote Code Execution Vulnerability...
UBUNTU-CVE-2023-36788
.NET Framework Remote Code Execution Vulnerability...
Vulnerabilities fixed in Microsoft Windows
Microsoft has fixed vulnerabilities in Windows. A malicious party can exploit the vulnerabilities to launch attacks execute attacks that can lead to the following categories of damage: Denial-of-Service DoS. Circumvention of security measure Remote code execution User rights Access to sensitive...