CVE-2023-21713 — Microsoft Sql_server: SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 76th percentile
8.8
CVSS v3.1
95
Edit Score
Latest intel// live feed
25 results//sorted by published//last sync 2026-10-26 12:17Z
CVE-2023-21707 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 100th percentile
8.8
CVSS v3.1
100
Edit Score
CVE-2023-21706 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 90th percentile
8.8
CVSS v3.1
95
Edit Score
CVE-2023-21705 — Microsoft Sql_server: SQL Server Remote Code Execution Vulnerability
Microsoft SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 63th percentile
8.8
CVSS v3.1
94
Edit Score
CVE-2023-21692 — Microsoft Windows_10_1507: Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile
9.8
CVSS v3.1
100
Edit Score
CVE-2023-21690 — Microsoft Windows_10_1507: Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 98th percentile
9.8
CVSS v3.1
100
Edit Score
CVE-2023-21689 — Microsoft Windows_10_1507: Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability
Microsoft Protected Extensible Authentication Protocol (PEAP) Remote Code Execution Vulnerability CVSSv3.1 9.8 (CRITICAL) · EPSS 98th percentile
9.8
CVSS v3.1
100
Edit Score
CVE-2023-21686 — Microsoft Windows_10_1507: WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 64th percentile
8.8
CVSS v3.1
94
Edit Score
CVE-2023-21685 — Microsoft Windows_10_1507: WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 66th percentile
8.8
CVSS v3.1
94
Edit Score
CVE-2023-21684 — Microsoft Windows_10_1507: PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability
Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 68th percentile
8.8
CVSS v3.1
94
Edit Score
CVE-2023-21529 — Microsoft Exchange_server: Exchange Server Remote Code Execution Vulnerability
Microsoft Exchange Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 97th percentile
8.8
CVSS v3.1
100
Edit Score
CVE-2023-24482 — Siemens Comos: Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) based buffer
A vulnerability has been identified in COMOS V10.2 (All versions), COMOS V10.3.3.1 (All versions < V10.3.3.1.45), COMOS V10.3.3.2 (All versions < V10.3.3.2.33), COMOS V10.3.3.3 (All versions < V10.3.3.3.9), COMOS V10.3.3.4 (All versions < V10.3.3.4.6), COMOS V10.4.0.0 (All versions < V10.4.0.0.31), COMOS V10.4.1.0 (All versions < V10.4.1.0.32), COMOS V10.4.2.0 (All versions < V10.4.2.0.25). Cache validation service in COMOS is vulnerable to Structured Exception Handler (SEH) CVSSv3.1 10.0 (CRITICAL) · EPSS 56th percentile
10.0
CVSS v3.1
100
Edit Score
QBOT Malware Analysis
Elastic Security Labs·elastic.co
Elastic Security Labs published an in-depth reverse-engineering analysis of QBOT/QAKBOT V4, a modular banking trojan active since 2007. The report covers the three-stage execution chain from initial infection through C2 communication, detailing injection mechanisms, persistence techniques, AV evasion, and configuration extraction. The research includes YARA rules, a configuration extractor, and IOCs.
72
Edit Score
CUBA Ransomware Malware Analysis
Elastic Security Labs·elastic.co
Elastic Security Labs published a comprehensive technical analysis of the CUBA ransomware family, detailing its encryption mechanisms, process termination routines, and multi-threaded file encryption capabilities. The malware uses ChaCha20 for symmetric encryption and RSA-4096 for key protection, with command-line options to target local volumes, network shares, or specific IPs. The analysis includes YARA rules, IOCs, MITRE ATT&CK mappings, and defensive countermeasures.
68
Edit Score
CVE-2023-24188 — Ureport_project Ureport: v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function
ureport v2.2.9 was discovered to contain a directory traversal vulnerability via the deletion function which allows for arbitrary files to be deleted. CVSSv3.1 9.1 (CRITICAL) · EPSS 70th percentile
9.1
CVSS v3.1
96
Edit Score
CVE-2022-45725 — Comfast Cf-wr610n_firmware: Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the
Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target via an HTTP POST request CVSSv3.1 8.8 (HIGH) · EPSS 95th percentile
8.8
CVSS v3.1
97
Edit Score
CVE-2022-4557 — Gruparge Smartpower: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01. CVSSv3.1 9.8 (CRITICAL) · EPSS 48th percentile
9.8
CVSS v3.1
99
Edit Score
CVE-2022-45090 — Gruparge Smartpower_web: Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows
Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01. CVSSv3.1 8.8 (HIGH) · EPSS 47th percentile
8.8
CVSS v3.1
94
Edit Score
CVE-2022-45089 — Gruparge Smartpower_web: Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows
Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows SQL Injection. This issue affects Smartpower Web: before 23.01.01. CVSSv3.1 8.8 (HIGH) · EPSS 47th percentile
8.8
CVSS v3.1
94
Edit Score
CVE-2022-45088 — Gruparge Smartpower_web: Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows
Improper Input Validation vulnerability in Group Arge Energy and Control Systems Smartpower Web allows PHP Local File Inclusion. This issue affects Smartpower Web: before 23.01.01. CVSSv3.1 9.8 (CRITICAL) · EPSS 58th percentile
9.8
CVSS v3.1
99
Edit Score
CVE-2022-3568 — Orangelab Imagemagick_engine: The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via
The ImageMagick Engine plugin for WordPress is vulnerable to deserialization of untrusted input via the 'cli_path' parameter in versions up to, and including 1.7.5. This makes it possible for unauthenticated users to call files using a PHAR wrapper, granted they can trick a site administrator into performing an action such as clicking on a link, that will deserialize and call arbitrary PHP Objects that can be used to perform a variety of malicious actions granted a POP chain CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile
8.8
CVSS v3.1
94
Edit Score
CVE-2023-22794 — Activerecord_project Activerecord: A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments.
A vulnerability in ActiveRecord <6.0.6.1, v6.1.7.1 and v7.0.4.1 related to the sanitization of comments. If malicious user input is passed to either the `annotate` query method, the `optimizer_hints` query method, or through the QueryLogs interface which automatically adds annotations, it may be sent to the database withinsufficient sanitization and be able to inject SQL outside of the comment. CVSSv3.1 8.8 (HIGH) · EPSS 82th percentile
8.8
CVSS v3.1
95
Edit Score
CVE-2023-0286 — Openssl Openssl: the application sets the X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to pass
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING but the public structure definition for GENERAL_NAME incorrectly specified the type of the x400Address field as ASN1_TYPE. This field is subsequently interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather than an ASN1_STRING. When CRL checking is enabled (i.e. the application sets the X509_V_FLAG_CRL_CHEC CVSSv3.1 7.4 (HIGH) · EPSS 99th percentile
7.4
CVSS v3.1
100
Edit Score
CVE-2022-4450 — Openssl Openssl: It is possible to construct a PEM file that results in 0 bytes of
The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload data. If the function succeeds then the "name_out", "header" and "data" arguments are populated with pointers to buffers containing the relevant decoded data. The caller is responsible for freeing those buffers. It is possible to construct a PEM file that results in 0 bytes of payload data. In this case PEM_read_bio_ex() will retur CVSSv3.1 7.5 (HIGH) · EPSS 97th percentile
7.5
CVSS v3.1
94
Edit Score
CVE-2022-4304 — Openssl Openssl: A timing based side channel exists in the OpenSSL RSA Decryption implementation which could
A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypt CVSSv3.1 5.9 (MEDIUM) · EPSS 97th percentile
5.9
CVSS v3.1
84
Edit Score