Total
210374 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2023-21736 | 1 Microsoft | 4 365 Apps, Office, Office Long Term Servicing Channel and 1 more | 2023-01-18 | N/A | 7.8 HIGH |
Microsoft Office Visio Remote Code Execution Vulnerability. This CVE ID is unique from CVE-2023-21737, CVE-2023-21738. | |||||
CVE-2022-46456 | 1 Nasm | 1 Netwide Assembler | 2023-01-18 | N/A | 6.1 MEDIUM |
NASM v2.16 was discovered to contain a global buffer overflow in the component dbgdbg_typevalue at /output/outdbg.c. | |||||
CVE-2023-22963 | 1 Personnummer | 1 Personnummer | 2023-01-18 | N/A | 5.3 MEDIUM |
The personnummer implementation before 3.0.3 for Dart mishandles numbers in which the last four digits match the ^000[0-9]$ regular expression. | |||||
CVE-2023-0022 | 1 Sap | 1 Businessobjects Business Intelligence Platform | 2023-01-18 | N/A | 8.8 HIGH |
SAP BusinessObjects Business Intelligence Analysis edition for OLAP allows an authenticated attacker to inject malicious code that can be executed by the application over the network. On successful exploitation, an attacker can perform operations that may completely compromise the application causing a high impact on the confidentiality, integrity, and availability of the application. | |||||
CVE-2020-20412 | 2 Stepmania, Xiph.org | 2 Stepmania, Libvorbis | 2023-01-18 | 4.3 MEDIUM | 6.5 MEDIUM |
lib/codebook.c in libvorbis before 1.3.6, as used in StepMania 5.0.12 and other products, has insufficient array bounds checking via a crafted OGG file. NOTE: this may overlap CVE-2018-5146. | |||||
CVE-2023-21766 | 1 Microsoft | 5 Windows 10, Windows 11, Windows Server 2016 and 2 more | 2023-01-18 | N/A | 4.7 MEDIUM |
Windows Overlay Filter Information Disclosure Vulnerability. | |||||
CVE-2023-21682 | 1 Microsoft | 15 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 12 more | 2023-01-18 | N/A | 5.3 MEDIUM |
Windows Point-to-Point Protocol (PPP) Information Disclosure Vulnerability. | |||||
CVE-2023-21558 | 1 Microsoft | 8 Windows 10, Windows 11, Windows 8.1 and 5 more | 2023-01-18 | N/A | 7.8 HIGH |
Windows Error Reporting Service Elevation of Privilege Vulnerability. | |||||
CVE-2023-21768 | 1 Microsoft | 2 Windows 11, Windows Server 2022 | 2023-01-18 | N/A | 7.8 HIGH |
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability. | |||||
CVE-2023-21767 | 1 Microsoft | 8 Windows 10, Windows 11, Windows 8.1 and 5 more | 2023-01-18 | N/A | 7.8 HIGH |
Windows Overlay Filter Elevation of Privilege Vulnerability. | |||||
CVE-2023-21724 | 1 Microsoft | 6 Windows 10 20h2, Windows 10 21h2, Windows 10 22h2 and 3 more | 2023-01-18 | N/A | 7.8 HIGH |
Microsoft DWM Core Library Elevation of Privilege Vulnerability. | |||||
CVE-2023-21683 | 1 Microsoft | 13 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 10 more | 2023-01-18 | N/A | 7.5 HIGH |
Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability. This CVE ID is unique from CVE-2023-21677, CVE-2023-21758. | |||||
CVE-2023-21726 | 1 Microsoft | 15 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 12 more | 2023-01-18 | N/A | 7.8 HIGH |
Windows Credential Manager User Interface Elevation of Privilege Vulnerability. | |||||
CVE-2023-21725 | 1 Microsoft | 1 Windows Malicious Software Removal Tool | 2023-01-18 | N/A | 6.3 MEDIUM |
Windows Malicious Software Removal Tool Elevation of Privilege Vulnerability. | |||||
CVE-2021-36781 | 1 Opensuse | 1 Factory | 2023-01-18 | 3.6 LOW | 4.4 MEDIUM |
A Incorrect Default Permissions vulnerability in the parsec package of openSUSE Factory allows local attackers to imitate the service leading to DoS or clients talking to an imposter service. This issue affects: openSUSE Factory parsec versions prior to 0.8.1-1.1. | |||||
CVE-2021-36783 | 1 Suse | 1 Rancher | 2023-01-18 | N/A | 8.8 HIGH |
A Insufficiently Protected Credentials vulnerability in SUSE Rancher allows authenticated Cluster Owners, Cluster Members, Project Owners and Project Members to read credentials, passwords and API tokens that have been stored in cleartext and exposed via API endpoints. This issue affects: SUSE Rancher Rancher versions prior to 2.6.4; Rancher versions prior to 2.5.13. | |||||
CVE-2023-21728 | 1 Microsoft | 15 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 12 more | 2023-01-18 | N/A | 7.5 HIGH |
Windows Netlogon Denial of Service Vulnerability. | |||||
CVE-2023-21733 | 1 Microsoft | 6 Windows 10 20h2, Windows 10 21h2, Windows 10 22h2 and 3 more | 2023-01-18 | N/A | 7.0 HIGH |
Windows Bind Filter Driver Elevation of Privilege Vulnerability. | |||||
CVE-2023-21732 | 1 Microsoft | 15 Windows 10 1607, Windows 10 1809, Windows 10 20h2 and 12 more | 2023-01-18 | N/A | 8.8 HIGH |
Microsoft ODBC Driver Remote Code Execution Vulnerability. | |||||
CVE-2021-4200 | 1 Suse | 1 Rancher | 2023-01-18 | 5.5 MEDIUM | 5.4 MEDIUM |
A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4. |