Month: March 2023

Microsoft Windows Point-to-Point Protocol over Ethernet (PPPoE) code execution | CVE-2023-23414

March 15, 2023

NAME__________Microsoft Windows Point-to-Point Protocol over Ethernet (PPPoE) code executionPlatforms Affected:Microsoft Windows 10 20H2 for x64-based Systems Microsoft Windows Server (Server...

Microsoft Windows Accounts Control privilege escalation | CVE-2023-23412

March 15, 2023

NAME__________Microsoft Windows Accounts Control privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft...

Adobe Illustrator information disclosure | CVE-2023-25862

March 15, 2023

NAME__________Adobe Illustrator information disclosurePlatforms Affected:Adobe Illustrator 2023 27.2.0Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Illustrator could allow a remote attacker to obtain sensitive...

Adobe Experience Manager open redirect | CVE-2023-22266

March 15, 2023

NAME__________Adobe Experience Manager open redirectPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.15.0Risk Level:3.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Experience Manager...

Microsoft Dynamics 365 information disclosure | CVE-2023-24922

March 15, 2023

NAME__________Microsoft Dynamics 365 information disclosurePlatforms Affected:Microsoft Dynamics 365 (on-premises) 9.0 Microsoft Dynamics 365 (on-premises) 9.1Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Microsoft Dynamics 365...

Microsoft Windows Media code execution | CVE-2023-23402

March 15, 2023

NAME__________Microsoft Windows Media code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft Windows...

NETGEAR Routers denial of service | CVE-2020-0283

March 15, 2023

NAME__________NETGEAR Routers denial of servicePlatforms Affected:NETGEAR RBK852 NETGEAR RBS850 NETGEAR CBR750 NETGEAR CAX80Risk Level:7.1Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________NETGEAR Routers are vulnerable...

Adobe Commerce and Magento Open Source cross-site scripting | CVE-2023-22249

March 15, 2023

NAME__________Adobe Commerce and Magento Open Source cross-site scriptingPlatforms Affected:Adobe Commerce 2.4.4-p2 Adobe Commerce 2.4.5-p1 Adobe Magento Open Source 2.4.4-p2 Adobe...

Adobe Experience Manager cross-site scripting | CVE-2023-22253

March 15, 2023

NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.15.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...

Adobe Experience Manager open redirect | CVE-2023-22257

March 15, 2023

Microsoft Windows Central Resource Manager privilege escalation | CVE-2023-23393

March 15, 2023

NAME__________Microsoft Windows Central Resource Manager privilege escalationPlatforms Affected:Microsoft Windows Server 2019 Microsoft Windows 10 1809 for x64-based Systems Microsoft Windows...

Microsoft Windows Hyper-V denial of service | CVE-2023-23411

March 15, 2023

NAME__________Microsoft Windows Hyper-V denial of servicePlatforms Affected:Microsoft Windows 10 x32 Microsoft Windows 10 x64 Microsoft Windows Server 2016 Microsoft Windows...

Adobe Experience Manager open redirect | CVE-2023-22258

March 15, 2023

Mozilla Firefox information disclosure | CVE-2023-25750

March 15, 2023

NAME__________Mozilla Firefox information disclosurePlatforms Affected:Mozilla firefox 110Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Mozilla Firefox could allow a remote attacker to obtain sensitive information,...

SAP NetWeaver AS for ABAP and ABAP Platform denial of service | CVE-2023-25618

March 15, 2023

NAME__________SAP NetWeaver AS for ABAP and ABAP Platform denial of servicePlatforms Affected:SAP NetWeaver AS ABAP 700 SAP NetWeaver AS ABAP...

Microsoft OneDrive for Android information disclosure | CVE-2023-24923

March 15, 2023

NAME__________Microsoft OneDrive for Android information disclosurePlatforms Affected:Microsoft OneDrive for AndroidRisk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Microsoft OneDrive for Android could allow a remote...

Microsoft Windows Resilient File System (ReFS) privilege escalation | CVE-2023-23418

March 15, 2023

NAME__________Microsoft Windows Resilient File System (ReFS) privilege escalationPlatforms Affected:Microsoft Windows 11 21H2 for ARM64-based Systems Microsoft Windows 11 21H2 for...

Microsoft Windows Kernel privilege escalation | CVE-2023-23421

March 15, 2023

NAME__________Microsoft Windows Kernel privilege escalationPlatforms Affected:Microsoft Windows 10 1803 for x64-based Systems Microsoft Windows 10 1803 for ARM64-based Systems Microsoft...

SAP NetWeaver AS for Java information disclosure | CVE-2023-26460

March 15, 2023

NAME__________SAP NetWeaver AS for Java information disclosurePlatforms Affected:SAP NetWeaver AS for JAVA 7.50Risk Level:5.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________SAP NetWeaver AS for Java...

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-24891

March 15, 2023

NAME__________Microsoft Dynamics 365 (on-premises) cross-site scriptingPlatforms Affected:Microsoft Dynamics 365 (on-premises) 9.0 Microsoft Dynamics 365 (on-premises) 9.1Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Microsoft Dynamics...

SAP NetWeaver cross-site scripting | CVE-2023-0021

March 15, 2023

NAME__________SAP NetWeaver cross-site scriptingPlatforms Affected:SAP NetWeaver 700 SAP NetWeaver 701 SAP NetWeaver 702 SAP NetWeaver 731 SAP NetWeaver 740 SAP...

Microsoft Edge (Chromium-based) Webview2 spoofing | CVE-2023-24892

March 15, 2023

NAME__________Microsoft Edge (Chromium-based) Webview2 spoofingPlatforms Affected:Microsoft Edge (Chromium-based)Risk Level:7.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge (Chromium-based) could allow a remote attacker to conduct...

Microsoft Excel code execution | CVE-2023-23399

March 15, 2023

NAME__________Microsoft Excel code executionPlatforms Affected:Microsoft Excel 2013 SP1 x32 Microsoft Excel 2013 SP1 x64 Microsoft Excel 2013 SP1 RT Microsoft...

Mozilla Firefox for Android spoofing | CVE-2023-28159

March 15, 2023

NAME__________Mozilla Firefox for Android spoofingPlatforms Affected:Mozilla Firefox for Android 110Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Mozilla Firefox for Android could allow a remote...

Month: March 2023

Microsoft Windows Point-to-Point Protocol over Ethernet (PPPoE) code execution | CVE-2023-23414

Microsoft Windows Accounts Control privilege escalation | CVE-2023-23412

Adobe Illustrator information disclosure | CVE-2023-25862

Adobe Experience Manager open redirect | CVE-2023-22266

Microsoft Dynamics 365 information disclosure | CVE-2023-24922

Microsoft Windows Media code execution | CVE-2023-23402

NETGEAR Routers denial of service | CVE-2020-0283

Adobe Commerce and Magento Open Source cross-site scripting | CVE-2023-22249

Adobe Experience Manager cross-site scripting | CVE-2023-22253

Adobe Experience Manager open redirect | CVE-2023-22257

Microsoft Windows Central Resource Manager privilege escalation | CVE-2023-23393

Microsoft Windows Hyper-V denial of service | CVE-2023-23411

Adobe Experience Manager open redirect | CVE-2023-22258

Mozilla Firefox information disclosure | CVE-2023-25750

SAP NetWeaver AS for ABAP and ABAP Platform denial of service | CVE-2023-25618

Microsoft OneDrive for Android information disclosure | CVE-2023-24923

Microsoft Windows Resilient File System (ReFS) privilege escalation | CVE-2023-23418

Microsoft Windows Kernel privilege escalation | CVE-2023-23421

SAP NetWeaver AS for Java information disclosure | CVE-2023-26460

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-24891

SAP NetWeaver cross-site scripting | CVE-2023-0021

Microsoft Edge (Chromium-based) Webview2 spoofing | CVE-2023-24892

Microsoft Excel code execution | CVE-2023-23399

Mozilla Firefox for Android spoofing | CVE-2023-28159

CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Eight Industrial Control Systems Advisories

You may have missed