xterm before 375 allows code execution via font ops, e.g., because an OSC 50 response may have Ctrl-g and therefore lead to command execution within the vi line-editing mode of Zsh. NOTE: font ops are not allowed in the xterm default configurations of some Linux distributions. CVSSv3.1 9.8 (CRITICAL) · EPSS 95th percentile
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component IS_GETCACHE. CVSSv3.1 9.8 (CRITICAL) · EPSS 73th percentile
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component INPUT_ISDESCRIPTION. CVSSv3.1 9.8 (CRITICAL) · EPSS 97th percentile
ESPCMS P8.21120101 was discovered to contain a remote code execution (RCE) vulnerability in the component UPFILE_PIC_ZOOM_HIGHT. CVSSv3.1 9.8 (CRITICAL) · EPSS 73th percentile
Windows Scripting Languages Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 98th percentile
Windows CNG Key Isolation Service Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 86th percentile
Microsoft Excel Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 95th percentile
Windows Mark of the Web Security Feature Bypass Vulnerability CVSSv3.1 5.4 (MEDIUM) · EPSS 79th percentile
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 57th percentile
Microsoft Exchange Server Elevation of Privilege Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 100th percentile
Microsoft Exchange Server Spoofing Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 52th percentile
Microsoft Exchange Server Spoofing Vulnerability CVSSv3.1 8.0 (HIGH) · EPSS 52th percentile
Windows Print Spooler Elevation of Privilege Vulnerability CVSSv3.1 7.8 (HIGH) · EPSS 82th percentile
Microsoft SharePoint Server Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 72th percentile
Windows Mark of the Web Security Feature Bypass Vulnerability CVSSv3.1 5.4 (MEDIUM) · EPSS 83th percentile
Microsoft ODBC Driver Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile
Microsoft ODBC Driver Remote Code Execution Vulnerability CVSSv3.1 8.8 (HIGH) · EPSS 71th percentile
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 59th percentile
Windows Point-to-Point Tunneling Protocol Remote Code Execution Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 60th percentile
Netlogon RPC Elevation of Privilege Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 83th percentile
Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability CVSSv3.1 8.1 (HIGH) · EPSS 85th percentile
The Linux kernel NFSD implementation prior to versions 5.19.17 and 6.0.2 are vulnerable to buffer overflow. NFSD tracks the number of pages held by each NFSD thread by combining the receive and send buffers of a remote procedure call (RPC) into a single array of pages. A client can force the send buffer to shrink by sending an RPC message over TCP with garbage data added at the end of the message. The RPC message with garbage data is still correctly formed according to the sp CVSSv3.1 7.5 (HIGH) · EPSS 98th percentile
The VR Calendar plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.3. This is due to missing or incorrect nonce validation on several functions. This makes it possible for unauthenticated attackers to delete, and modify calendars as well as the plugin settings, via forged request granted they can trick a site administrator into performing an action such as clicking on a link. CVSSv3.1 8.8 (HIGH) · EPSS 58th percentile
The Restaurant Menu – Food Ordering System – Table Reservation plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.1. This is due to missing or incorrect nonce validation on several functions called via AJAX actions such as forms_action, set_option, & chosen_options to name a few . This makes it possible for unauthenticated attackers to perform a variety of administrative actions like modifying forms, via a forged request gra CVSSv3.1 8.8 (HIGH) · EPSS 73th percentile
A buffer overrun can be triggered in X.509 certificate verification, specifically in name constraint checking. Note that this occurs after certificate chain signature verification and requires either a CA to have signed a malicious certificate or for an application to continue certificate verification despite failure to construct a path to a trusted issuer. An attacker can craft a malicious email address in a certificate to overflow an arbitrary number of bytes containing the CVSSv3.1 7.5 (HIGH) · EPSS 96th percentile