CVE

QNAP QTS and QuTS hero buffer overflow | CVE-2023-32968

December 13, 2023

NAME__________QNAP QTS and QuTS hero buffer overflowPlatforms Affected:QNAP QTS QNAP QuTS heroRisk Level:4.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________QNAP QTS and QuTS hero is...

SAP Fiori Launchpad information disclosure | CVE-2023-49584

December 13, 2023

NAME__________SAP Fiori Launchpad information disclosurePlatforms Affected:SAP Fiori Launchpad SAP_UI 750 SAP Fiori Launchpad SAP_UI 754 SAP Fiori Launchpad SAP_UI 755...

SAP Master Data Governance directory traversal | CVE-2023-49058

December 13, 2023

NAME__________SAP Master Data Governance directory traversalPlatforms Affected:SAP Master Data Governance 748 SAP Master Data Governance 749 SAP Master Data Governance...

SAP NetWeaver AS ABAP and ABAP Platform SQL injection | CVE-2023-49581

December 13, 2023

NAME__________SAP NetWeaver AS ABAP and ABAP Platform SQL injectionPlatforms Affected:SAP NetWeaver AS ABAP SAP_BASIS 731 SAP NetWeaver AS ABAP SAP_BASIS...

SAP Biller Direct cross-site scripting | CVE-2023-42479

December 13, 2023

NAME__________SAP Biller Direct cross-site scriptingPlatforms Affected:SAP Biller Direct 635 SAP Biller Direct 750Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________SAP Biller Direct is vulnerable...

SAP Emarsys SDK for Android security bypass | CVE-2023-6542

December 13, 2023

NAME__________SAP Emarsys SDK for Android security bypassPlatforms Affected:SAP Emarsys SDK for Android 3.6.2Risk Level:7.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________SAP Emarsys SDK for Android...

SAP GUI for Windows and GUI for Java information disclosure | CVE-2023-49580

December 13, 2023

NAME__________SAP GUI for Windows and GUI for Java information disclosurePlatforms Affected:SAP GUI for Windows SAP_BASIS 755 SAP GUI for Windows...

SAP BusinessObjects Web Intelligence cross-site scripting | CVE-2023-42476

December 13, 2023

NAME__________SAP BusinessObjects Web Intelligence cross-site scriptingPlatforms Affected:SAP Business Objects Web Intelligence 420Risk Level:6.8Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________SAP BusinessObjects Web Intelligence is vulnerable...

Lenovo Universal Device Client (UDC) privilege escalation | CVE-2023-6338

December 13, 2023

NAME__________Lenovo Universal Device Client (UDC) privilege escalationPlatforms Affected:Lenovo Universal Device Client 23.9Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Lenovo Universal Device Client (UDC) could...

VMware Workspace ONE Launcher privilege escalation | CVE-2023-34064

December 13, 2023

NAME__________VMware Workspace ONE Launcher privilege escalationPlatforms Affected:VMware Workspace ONE Launcher 22.0 VMware Workspace ONE Launcher 23.0Risk Level:6.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________VMware Workspace...

SAP Cloud Connector denial of service | CVE-2023-49578

December 13, 2023

NAME__________SAP Cloud Connector denial of servicePlatforms Affected:SAP Cloud Connector 2.0Risk Level:3.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________SAP Cloud Connector is vulnerable to a...

Adobe Prelude information disclosure | CVE-2023-44362

December 13, 2023

NAME__________Adobe Prelude information disclosurePlatforms Affected:Adobe Prelude 22.6Risk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Prelude could allow a remote attacker to obtain sensitive information,...

Microsoft Windows Ancillary Function Driver for WinSock privilege escalation | CVE-2023-35632

December 13, 2023

NAME__________Microsoft Windows Ancillary Function Driver for WinSock privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows...

Hitachi Vantara System Management Unit (SMU) information disclosure | CVE-2023-6538

December 13, 2023

NAME__________Hitachi Vantara System Management Unit (SMU) information disclosurePlatforms Affected:Hitachi Vantara System Management Unit (SMU) 14.8Risk Level:7.6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Hitachi Vantara System...

Microsoft Edge (Chromium-based) information disclosure | CVE-2023-38174

December 13, 2023

NAME__________Microsoft Edge (Chromium-based) information disclosurePlatforms Affected:Microsoft Edge (Chromium-based)Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Microsoft Edge (Chromium-based) could allow a remote attacker to obtain...

Microsoft Windows USBHUB 3.0 Device Driver code execution | CVE-2023-35629

December 13, 2023

NAME__________Microsoft Windows USBHUB 3.0 Device Driver code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10...

Mattermost Server security bypass | CVE-2023-6547

December 13, 2023

NAME__________Mattermost Server security bypassPlatforms Affected:Mattermost Mattermost Server 8.1.5 Mattermost Mattermost Server 9.2.1Risk Level:3.7Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Mattermost Server could allow a remote...

Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows privilege escalation | CVE-2023-43586

December 13, 2023

NAME__________Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows privilege escalationPlatforms Affected:Zoom VDI Client...

Zoom Mobile App for iOS and SDKs for iOS information disclosure | CVE-2023-43585

December 13, 2023

NAME__________Zoom Mobile App for iOS and SDKs for iOS information disclosurePlatforms Affected:Zoom Zoom Meeting SDK for Android Zoom Mobile App...

SAP HCM cross-site scripting | CVE-2023-49577

December 13, 2023

NAME__________SAP HCM cross-site scriptingPlatforms Affected:SAP HCM S4HCMCIE 100 SAP HCM SAP_HRCIE 600 SAP HCM SAP_HRCIE 604 SAP HCM SAP_HRCIE 608Risk...

Microsoft Windows Internet Connection Sharing (ICS) denial of service | CVE-2023-35642

December 13, 2023

NAME__________Microsoft Windows Internet Connection Sharing (ICS) denial of servicePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows...

Microsoft Azure Connected Machine Agent privilege escalation | CVE-2023-35624

December 13, 2023

NAME__________Microsoft Azure Connected Machine Agent privilege escalationPlatforms Affected:Microsoft Azure Connected Machine AgentRisk Level:7.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Microsoft Azure Connected Machine Agent could...

Microsoft Windows spoofing | CVE-2023-36004

December 13, 2023

NAME__________Microsoft Windows spoofingPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft Windows 10 x64...

Microsoft Windows DHCP Server Service information disclosure | CVE-2023-36012

December 13, 2023

NAME__________Microsoft Windows DHCP Server Service information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016...

CVE

QNAP QTS and QuTS hero buffer overflow | CVE-2023-32968

SAP Fiori Launchpad information disclosure | CVE-2023-49584

SAP Master Data Governance directory traversal | CVE-2023-49058

SAP NetWeaver AS ABAP and ABAP Platform SQL injection | CVE-2023-49581

SAP Biller Direct cross-site scripting | CVE-2023-42479

SAP Emarsys SDK for Android security bypass | CVE-2023-6542

SAP GUI for Windows and GUI for Java information disclosure | CVE-2023-49580

SAP BusinessObjects Web Intelligence cross-site scripting | CVE-2023-42476

Lenovo Universal Device Client (UDC) privilege escalation | CVE-2023-6338

VMware Workspace ONE Launcher privilege escalation | CVE-2023-34064

SAP Cloud Connector denial of service | CVE-2023-49578

Adobe Prelude information disclosure | CVE-2023-44362

Microsoft Windows Ancillary Function Driver for WinSock privilege escalation | CVE-2023-35632

Hitachi Vantara System Management Unit (SMU) information disclosure | CVE-2023-6538

Microsoft Edge (Chromium-based) information disclosure | CVE-2023-38174

Microsoft Windows USBHUB 3.0 Device Driver code execution | CVE-2023-35629

Mattermost Server security bypass | CVE-2023-6547

Zoom Desktop Client for Windows, Zoom VDI Client for Windows and Zoom SDKs for Windows privilege escalation | CVE-2023-43586

Zoom Mobile App for iOS and SDKs for iOS information disclosure | CVE-2023-43585

SAP HCM cross-site scripting | CVE-2023-49577

Microsoft Windows Internet Connection Sharing (ICS) denial of service | CVE-2023-35642

Microsoft Azure Connected Machine Agent privilege escalation | CVE-2023-35624

Microsoft Windows spoofing | CVE-2023-36004

Microsoft Windows DHCP Server Service information disclosure | CVE-2023-36012

CVE Alert: CVE-2025-23774

CVE Alert: CVE-2025-23781

CVE Alert: CVE-2025-23769

CVE Alert: CVE-2025-23768

CVE Alert: CVE-2025-23770

You may have missed