Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation. CVSSv3.1 9.8 (CRITICAL) · EPSS 53th percentile
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3. CVSSv3.1 9.8 (CRITICAL) · EPSS 6th percentile
The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to execute code by installing plugins from arbitrary remote locations including non-repository sources onto the site, granted they are packaged as a valid WordPress plugin. CVSSv3.1 8.8 (HIGH) · EPSS 73th percentile
The Real Estate Manager plugin for WordPress is vulnerable to privilege escalation in versions up to, and including, 7.2 due to insufficient restriction on the 'rem_save_profile_front' function. This makes it possible for authenticated attackers, with minimal permissions such as a subscriber, to modify their user role by supplying the 'wp_capabilities' parameter during a profile update. CVSSv3.1 8.8 (HIGH) · EPSS 19th percentile
Assetnote published part 3 of a technical writeup on exploiting CVE-2023-3519, a heap buffer overflow in Citrix NetScaler that enables remote code execution. The article provides exploitation methodology and practical techniques for triggering and leveraging the vulnerability in the wild.
.NET and Visual Studio Denial of Service Vulnerability CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile
ASP.NET Elevation of Privilege Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 100th percentile
Windows Mobile Device Management Elevation of Privilege Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile
Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 85th percentile
Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 95th percentile
Microsoft Exchange Server Spoofing Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 96th percentile
Microsoft SQL OLE DB Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 76th percentile
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 84th percentile
Windows Common Log File System Driver Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 96th percentile
Visual Studio Tools for Office Runtime Spoofing Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 37th percentile
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 70th percentile
Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 8.0 (HIGH)
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 60th percentile
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 83th percentile
Windows Fax Service Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 77th percentile
Microsoft Exchange Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 88th percentile
Windows Kernel Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 95th percentile
Microsoft Teams Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 80th percentile
Microsoft Teams Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 81th percentile