Sec Feed Reader

Navigation

Schnelluebersicht mit Zeitraum und Severity: Startseite
Erweiterte Filter und Listen: diese Seite (entries), inkl. Volltext/Titel-Suche wie unter Suche.

Erweiterte Filter

Quelle

Severity Kategorie CVE-ID

Suchbegriff

Suchbereich Suchmodus Von (Datum)

Bis (Datum)

Sortierung Reihenfolge

13352 Eintraege gefunden · 50 pro Seite · Seite 243 von 268.

Veroeffentlicht	Quelle	Titel	Severity	CVEs	Kategorie
2023-12-04 00:00	cisa_kev	CVE-2023-42917 — Apple Multiple Products WebKit Memory Corruption Vulnerability	HIGH	CVE-2023-42917	threat_intel
2023-12-04 00:00	cisa_kev	CVE-2023-42916 — Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability	MEDIUM	CVE-2023-42916	threat_intel
2023-11-30 00:00	cisa_kev	CVE-2023-49103 — ownCloud graphapi Information Disclosure Vulnerability	CRITICAL	CVE-2023-49103	threat_intel
2023-11-30 00:00	cisa_kev	CVE-2023-6345 — Google Skia Integer Overflow Vulnerability	CRITICAL	CVE-2023-6345	threat_intel
2023-11-21 00:00	cisa_kev	CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability	HIGH	CVE-2023-4911	threat_intel
2023-11-16 00:00	cisa_kev	CVE-2020-2551 — Oracle Fusion Middleware Unspecified Vulnerability	CRITICAL	CVE-2020-2551	threat_intel
2023-11-16 00:00	cisa_kev	CVE-2023-36584 — Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability	MEDIUM	CVE-2023-36584	threat_intel
2023-11-16 00:00	cisa_kev	CVE-2023-1671 — Sophos Web Appliance Command Injection Vulnerability	CRITICAL	CVE-2023-1671	threat_intel
2023-11-15 07:45	openkritis	NIS2-Umsetzung und Werkstattgespräch	-	—	security_news
2023-11-14 00:00	cisa_kev	CVE-2023-36033 — Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability	HIGH	CVE-2023-36033	threat_intel
2023-11-14 00:00	cisa_kev	CVE-2023-36025 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability	HIGH	CVE-2023-36025	threat_intel
2023-11-14 00:00	cisa_kev	CVE-2023-36036 — Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability	HIGH	CVE-2023-36036	threat_intel
2023-11-13 00:00	cisa_kev	CVE-2023-36845 — Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability	CRITICAL	CVE-2023-36845	threat_intel
2023-11-13 00:00	cisa_kev	CVE-2023-36847 — Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability	MEDIUM	CVE-2023-36847	threat_intel
2023-11-13 00:00	cisa_kev	CVE-2023-36851 — Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability	MEDIUM	CVE-2023-36851	threat_intel
2023-11-13 00:00	cisa_kev	CVE-2023-47246 — SysAid Server Path Traversal Vulnerability	CRITICAL	CVE-2023-47246	threat_intel
2023-11-13 00:00	cisa_kev	CVE-2023-36846 — Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability	MEDIUM	CVE-2023-36846	threat_intel
2023-11-13 00:00	cisa_kev	CVE-2023-36844 — Juniper Junos OS EX Series PHP External Variable Modification Vulnerability	MEDIUM	CVE-2023-36844	threat_intel
2023-11-08 00:00	cisa_kev	CVE-2023-29552 — Service Location Protocol (SLP) Denial-of-Service Vulnerability	HIGH	CVE-2023-29552	threat_intel
2023-11-07 00:00	cisa_kev	CVE-2023-22518 — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability	CRITICAL	CVE-2023-22518	threat_intel
2023-11-02 00:00	cisa_kev	CVE-2023-46604 — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2023-46604	threat_intel
2023-10-31 00:00	cisa_kev	CVE-2023-46747 — F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability	CRITICAL	CVE-2023-46747 CVE-2023-46748	threat_intel
2023-10-31 00:00	cisa_kev	CVE-2023-46748 — F5 BIG-IP Configuration Utility SQL Injection Vulnerability	CRITICAL	CVE-2023-46747 CVE-2023-46748	threat_intel
2023-10-27 07:45	openkritis	Verarbeitendes Gewerbe in NIS2	-	—	security_news
2023-10-26 00:00	cisa_kev	CVE-2023-5631 — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability	MEDIUM	CVE-2023-5631	threat_intel
2023-10-23 00:00	cisa_kev	CVE-2023-20273 — Cisco IOS XE Web UI Command Injection Vulnerability	CRITICAL	CVE-2021-1435 CVE-2023-20198 CVE-2023-20273	threat_intel
2023-10-19 00:00	apache_httpd_sec	CVE-2023-31122: Out-of-bounds Read vulnerability in mod_macro of Apache HTTP Server.This issue affects Apache HTTP Server: through 2.4.57.	-	CVE-2023-31122	vendor_advisory
2023-10-19 00:00	apache_httpd_sec	CVE-2023-43622: An attacker, opening a HTTP/2 connection with an initial window size of 0, was able to block handling of that connection indefinitely in Apache HTTP Server. This could be used to exhaust worker resources in the server, similar to the well known "slow loris" attack pattern. This has been fixed in version 2.4.58, so that such connection are terminated properly after the configured connection timeout. This issue affects Apache HTTP Server: from 2.4.55 through 2.4.57. Users are recommended to upgrade to version 2.4.58, which fixes the issue.	-	CVE-2023-43622	vendor_advisory
2023-10-19 00:00	apache_httpd_sec	CVE-2023-45802: When a HTTP/2 stream was reset (RST frame) by a client, there was a time window were the request's memory resources were not reclaimed immediately. Instead, de-allocation was deferred to connection close. A client could send new requests and resets, keeping the connection busy and open and causing the memory footprint to keep on growing. On connection close, all resources were reclaimed, but the process might run out of memory before that. This was found by the reporter during testing of CVE-2023-44487 (HTTP/2 Rapid Reset Exploit) with their own test client. During "normal" HTTP/2 use, the probability to hit this bug is very low. The kept memory would not become noticeable before the connection closes or times out. Users are recommended to upgrade to version 2.4.58, which fixes the issue.	HIGH	CVE-2023-44487 CVE-2023-45802	vendor_advisory
2023-10-18 00:00	cisa_kev	CVE-2023-4966 — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability	CRITICAL	CVE-2023-4966	threat_intel
2023-10-16 00:00	cisa_kev	CVE-2023-20198 — Cisco IOS XE Web UI Privilege Escalation Vulnerability	CRITICAL	CVE-2023-20198	threat_intel
2023-10-10 00:00	cisa_kev	CVE-2023-36563 — Microsoft WordPad Information Disclosure Vulnerability	MEDIUM	CVE-2023-36563	threat_intel
2023-10-10 00:00	cisa_kev	CVE-2023-20109 — Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability	MEDIUM	CVE-2023-20109	threat_intel
2023-10-10 00:00	cisa_kev	CVE-2023-21608 — Adobe Acrobat and Reader Use-After-Free Vulnerability	HIGH	CVE-2023-21608	threat_intel
2023-10-10 00:00	cisa_kev	CVE-2023-41763 — Microsoft Skype for Business Privilege Escalation Vulnerability	MEDIUM	CVE-2023-41763	threat_intel
2023-10-10 00:00	cisa_kev	CVE-2023-44487 — HTTP/2 Rapid Reset Attack Vulnerability	HIGH	CVE-2023-44487	threat_intel
2023-10-05 00:00	cisa_kev	CVE-2023-42824 — Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability	HIGH	CVE-2023-42824	threat_intel
2023-10-05 00:00	cisa_kev	CVE-2023-40044 — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability	CRITICAL	CVE-2023-40044	threat_intel
2023-10-05 00:00	cisa_kev	CVE-2023-22515 — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability	CRITICAL	CVE-2023-22515	threat_intel
2023-10-04 00:00	cisa_kev	CVE-2023-42793 — JetBrains TeamCity Authentication Bypass Vulnerability	CRITICAL	CVE-2023-42793	threat_intel
2023-10-04 00:00	cisa_kev	CVE-2023-28229 — Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability	HIGH	CVE-2023-28229	threat_intel
2023-10-03 00:00	cisa_kev	CVE-2023-4211 — Arm Mali GPU Kernel Driver Use-After-Free Vulnerability	MEDIUM	CVE-2023-4211	threat_intel
2023-10-02 00:00	cisa_kev	CVE-2023-5217 — Google Chromium libvpx Heap Buffer Overflow Vulnerability	HIGH	CVE-2023-5217	threat_intel
2023-09-28 00:00	cisa_kev	CVE-2018-14667 — Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability	CRITICAL	CVE-2018-14667	threat_intel
2023-09-25 00:00	cisa_kev	CVE-2023-41993 — Apple Multiple Products WebKit Code Execution Vulnerability	HIGH	CVE-2023-41993	threat_intel
2023-09-25 00:00	cisa_kev	CVE-2023-41992 — Apple Multiple Products Kernel Privilege Escalation Vulnerability	HIGH	CVE-2023-41992	threat_intel
2023-09-25 00:00	cisa_kev	CVE-2023-41991 — Apple Multiple Products Improper Certificate Validation Vulnerability	MEDIUM	CVE-2023-41991	threat_intel
2023-09-21 00:00	cisa_kev	CVE-2023-41179 — Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability	HIGH	CVE-2023-41179	threat_intel
2023-09-19 00:00	cisa_kev	CVE-2023-28434 — MinIO Security Feature Bypass Vulnerability	HIGH	CVE-2023-28434	threat_intel
2023-09-18 00:00	cisa_kev	CVE-2022-22265 — Samsung Mobile Devices Use-After-Free Vulnerability	MEDIUM	CVE-2022-22265	threat_intel