CVE-2023-4762 | HIGH | 8.8 | 0.37987 | 73.5 | Yes | No | 2024-02-06 | 2024-02-06 | cisa.gov, euvd | Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulne…Google Chromium V8 contains a type confusion vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
CVE-2019-1579 | HIGH | 8.1 | 0.45961 | 73.49 | Yes | No | 2022-01-10 | 2022-01-10 | cisa.gov, euvd | Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled.Remote Code Execution in PAN-OS with GlobalProtect Portal or GlobalProtect Gateway Interface enabled. |
CVE-2019-11707 | HIGH | 8.8 | 0.37951 | 73.48 | Yes | No | 2022-05-23 | 2022-05-23 | cisa.gov, euvd | Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in …Mozilla Firefox and Thunderbird contain a type confusion vulnerability that can occur when manipulating JavaScript objects due to issues in Array.pop, allowing for an exploitable crash. |
CVE-2023-6553 | CRITICAL | 9.8 | 0.97846 | 73.45 | No | Yes | 2023-12-15 | 2026-04-08 | euvd, github | The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includ…The Backup Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.3.7 via the /includes/backup-heart.php file. This is due to an attacker being able to control the values passed to an include, and subsequently leverage that to achieve remote code execution. This makes it possible for unauthenticated attackers to easily execute code on the server. |
CVE-2022-2024 | CRITICAL | 9.8 | 0.97839 | 73.44 | No | No | 2023-02-25 | 2025-03-11 | euvd | OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11.OS Command Injection in GitHub repository gogs/gogs prior to 0.12.11. |
CVE-2026-0300 | CRITICAL | 9.3 | 0.32074 | 73.43 | Yes | Yes | 2026-05-06 | 2026-07-14 | cisa.gov, euvd, packetstorm | A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software all…A buffer overflow vulnerability in the User-ID™ Authentication Portal (aka Captive Portal) service of Palo Alto Networks PAN-OS software allows an unauthenticated attacker to execute arbitrary code with root privileges on the PA-Series and VM-Series firewalls by sending specially crafted packets.
The risk of this issue is greatly reduced if you secure access to the User-ID™ Authentication Portal per the best practice guidelines https://knowledgebase.paloaltonetworks.com/KCSArticleDetail by restricting access to only trusted internal IP addresses.
Prisma Access, Cloud NGFW and Panorama appliances are not impacted by this vulnerability. |
CVE-2016-3715 | MEDIUM | 5.5 | 0.75383 | 73.38 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol,…ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading. |
CVE-2017-6884 | HIGH | 8.8 | 0.37634 | 73.37 | Yes | No | 2017-04-06 | 2026-08-04 | cisa.gov, euvd, nvd | A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is locate…A command injection vulnerability was discovered on the Zyxel EMG2926 home router with firmware V1.00(AAQT.4)b8. The vulnerability is located in the diagnostic tools, specifically the nslookup function. A malicious user may exploit numerous vectors to execute arbitrary commands on the router, such as the ping_ip parameter to the expert/maintenance/diagnostic/nslookup URI. |
CVE-2014-4404 | HIGH | 7.8 | 0.49049 | 73.37 | Yes | No | 2022-02-10 | 2022-02-10 | cisa.gov, euvd | Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbi…Heap-based buffer overflow in IOHIDFamily in Apple OS X, which affects, iOS before 8 and Apple TV before 7, allows attackers to execute arbitrary code in a privileged context. |
CVE-2023-28252 | HIGH | 7.8 | 0.48973 | 73.34 | Yes | No | 2023-04-11 | 2023-04-11 | cisa.gov, euvd | Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation.Microsoft Windows Common Log File System (CLFS) driver contains an unspecified vulnerability that allows for privilege escalation. |
CVE-2022-44698 | MEDIUM | 5.4 | 0.76267 | 73.29 | Yes | No | 2022-12-13 | 2026-01-12 | cisa.gov, euvd | Windows SmartScreen Security Feature Bypass VulnerabilityWindows SmartScreen Security Feature Bypass Vulnerability |
CVE-2020-9715 | HIGH | 7.8 | 0.48441 | 73.15 | Yes | No | 2020-08-19 | 2026-04-13 | cisa.gov, euvd | Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier hav…Adobe Acrobat and Reader versions 2020.009.20074 and earlier, 2020.001.30002, 2017.011.30171 and earlier, and 2015.006.30523 and earlier have an use-after-free vulnerability. Successful exploitation could lead to arbitrary code execution . |
CVE-2015-2590 | CRITICAL | 9.8 | 0.25469 | 73.11 | Yes | No | 2022-03-03 | 2022-03-03 | cisa.gov, euvd | An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution. |
CVE-2008-0655 | HIGH | 8.8 | 0.36844 | 73.1 | Yes | No | 2008-02-07 | 2025-11-12 | cisa.gov, euvd | Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors.Multiple unspecified vulnerabilities in Adobe Reader and Acrobat before 8.1.2 have unknown impact and attack vectors. |
CVE-2020-10221 | HIGH | 8.8 | 0.36754 | 73.06 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS comma…rConfig lib/ajaxHandlers/ajaxAddTemplate.php contains an OS command injection vulnerability that allows remote attackers to execute OS commands via shell metacharacters in the fileName POST parameter. |
CVE-2018-4990 | HIGH | 8.8 | 0.36614 | 73.01 | Yes | No | 2022-06-08 | 2022-06-08 | cisa.gov, euvd | Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution.Adobe Acrobat and Reader have a double free vulnerability that could lead to remote code execution. |
CVE-2019-15975 | CRITICAL | 9.8 | 0.96391 | 72.94 | No | No | 2020-01-06 | 2024-11-15 | euvd | Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote…Multiple vulnerabilities in the authentication mechanisms of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to bypass authentication and execute arbitrary actions with administrative privileges on an affected device. For more information about these vulnerabilities, see the Details section of this advisory. |
CVE-2014-4077 | HIGH | 7.8 | 0.47679 | 72.89 | Yes | No | 2022-05-25 | 2022-05-25 | cisa.gov, euvd | Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included…Microsoft Input Method Editor (IME) Japanese is a keyboard with Japanese characters that can be enabled on Windows systems as it is included by default (with the default set as disabled). IME Japanese contains an unspecified vulnerability when IMJPDCT.EXE (IME for Japanese) is installed which allows attackers to bypass a sandbox and perform privilege escalation. |
CVE-2020-5735 | HIGH | 8.8 | 0.36217 | 72.88 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attack…Amcrest cameras and NVR contain a stack-based buffer overflow vulnerability through port 37777 that allows an unauthenticated, remote attacker to crash the device and possibly execute code. |
CVE-2018-5430 | HIGH | 7.7 | 0.48753 | 72.86 | Yes | No | 2022-12-29 | 2022-12-29 | cisa.gov, euvd | TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web applic…TIBCO JasperReports Server contain a vulnerability which may allow any authenticated user read-only access to the contents of the web application, including key configuration files. |
CVE-2020-5135 | CRITICAL | 9.8 | 0.24563 | 72.8 | Yes | No | 2022-03-15 | 2022-03-15 | cisa.gov, euvd | A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code …A buffer overflow vulnerability in SonicOS allows a remote attacker to cause Denial of Service (DoS) and potentially execute arbitrary code by sending a malicious request to the firewall. |
CVE-2026-12569 | CRITICAL | 9.3 | 0.30198 | 72.77 | Yes | No | 2026-06-18 | 2026-08-01 | cisa.gov, euvd, nvd | A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be ex…A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The vulnerability may be exploited through the deserialization of untrusted data. * This advisory also applies to all CPS versions
* The identified vulnerability also impacts Windchill and FlexPLM releases prior to 11.0 M030 |
CVE-2018-19949 | CRITICAL | 9.8 | 0.24449 | 72.76 | Yes | No | 2022-05-24 | 2022-05-24 | cisa.gov, euvd | A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands. |
CVE-2025-4632 | CRITICAL | 9.8 | 0.24437 | 72.75 | Yes | No | 2025-05-13 | 2026-02-26 | cisa.gov, euvd | Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attack…Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority. |
CVE-2023-0297 | CRITICAL | 9.8 | 0.95845 | 72.75 | No | No | 2023-01-14 | 2025-04-07 | euvd | Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31.Code Injection in GitHub repository pyload/pyload prior to 0.5.0b3.dev31. |
CVE-2022-2068 | CRITICAL | 9.8 | 0.95764 | 72.72 | No | No | 2022-06-21 | 2025-12-30 | euvd | In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not pr…In addition to the c_rehash shell command injection identified in CVE-2022-1292, further circumstances where the c_rehash script does not properly sanitise shell metacharacters to prevent command injection were found by code review. When the CVE-2022-1292 was fixed it was not discovered that there are other places in the script where the file names of certificates being hashed were possibly passed to a command executed through the shell. This script is distributed by some operating systems in a manner where it is automatically executed. On such operating systems, an attacker could execute arbitrary commands with the privileges of the script. Use of the c_rehash script is considered obsolete and should be replaced by the OpenSSL rehash command line tool. Fixed in OpenSSL 3.0.4 (Affected 3.0.0,3.0.1,3.0.2,3.0.3). Fixed in OpenSSL 1.1.1p (Affected 1.1.1-1.1.1o). Fixed in OpenSSL 1.0.2zf (Affected 1.0.2-1.0.2ze). |
CVE-2024-21650 | CRITICAL | 10.0 | 0.9348 | 72.72 | No | No | 2024-01-08 | 2025-06-17 | euvd | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote cod…XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki is vulnerable to a remote code execution (RCE) attack through its user registration feature. This issue allows an attacker to execute arbitrary code by crafting malicious payloads in the "first name" or "last name" fields during user registration. This impacts all installations that have user registration enabled for guests. This vulnerability has been patched in XWiki 14.10.17, 15.5.3 and 15.8 RC1. |
CVE-2019-1663 | CRITICAL | 9.8 | 0.95707 | 72.7 | No | No | 2019-02-28 | 2024-11-19 | euvd | A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN…A vulnerability in the web-based management interface of the Cisco RV110W Wireless-N VPN Firewall, Cisco RV130W Wireless-N Multifunction VPN Router, and Cisco RV215W Wireless-N VPN Router could allow an unauthenticated, remote attacker to execute arbitrary code on an affected device. The vulnerability is due to improper validation of user-supplied data in the web-based management interface. An attacker could exploit this vulnerability by sending malicious HTTP requests to a targeted device. A successful exploit could allow the attacker to execute arbitrary code on the underlying operating system of the affected device as a high-privilege user. RV110W Wireless-N VPN Firewall versions prior to 1.2.2.1 are affected. RV130W Wireless-N Multifunction VPN Router versions prior to 1.0.3.45 are affected. RV215W Wireless-N VPN Router versions prior to 1.3.1.1 are affected. |
CVE-2018-17480 | HIGH | 8.8 | 0.3564 | 72.67 | Yes | No | 2022-06-08 | 2022-06-08 | cisa.gov, euvd | Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a cr…Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
CVE-2023-21554 | CRITICAL | 9.8 | 0.95454 | 72.61 | No | No | 2023-04-11 | 2025-01-23 | euvd | Microsoft Message Queuing (MSMQ) Remote Code Execution VulnerabilityMicrosoft Message Queuing (MSMQ) Remote Code Execution Vulnerability |
CVE-2017-6327 | HIGH | 8.8 | 0.35341 | 72.57 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remo…Symantec Messaging Gateway contains an unspecified vulnerability which can allow for remote code execution. With the ability to perform remote code execution, an attacker may also desire to perform privilege escalating actions. |
CVE-2019-5786 | MEDIUM | 6.5 | 0.61537 | 72.54 | Yes | No | 2022-05-23 | 2022-05-23 | cisa.gov, euvd | Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access …Google Chrome Blink contains a heap use-after-free vulnerability that allows an attacker to potentially perform out of bounds memory access via a crafted HTML page. |
CVE-2024-2389 | CRITICAL | 10.0 | 0.92944 | 72.53 | No | No | 2024-04-02 | 2025-12-16 | euvd | In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticate…In Flowmon versions prior to 11.1.14 and 12.3.5, an operating system command injection vulnerability has been identified. An unauthenticated user can gain entry to the system via the Flowmon management interface, allowing for the execution of arbitrary system commands. |
CVE-2024-21182 | HIGH | 7.5 | 0.4997 | 72.49 | Yes | No | 2024-07-16 | 2026-06-02 | cisa.gov, euvd | Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are…Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle WebLogic Server accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N). |
CVE-2024-27956 | CRITICAL | 9.9 | 0.93971 | 72.49 | No | No | 2024-03-21 | 2026-04-28 | euvd | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Inject…Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ValvePress Automatic allows SQL Injection.This issue affects Automatic: from n/a through 3.92.0. |
CVE-2015-1770 | HIGH | 8.8 | 0.35105 | 72.49 | Yes | No | 2022-03-28 | 2022-03-28 | cisa.gov, euvd | Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document.Microsoft Office allows remote attackers to execute arbitrary code via a crafted Office document. |
CVE-2024-0204 | CRITICAL | 9.8 | 0.95086 | 72.48 | No | No | 2024-01-22 | 2025-05-30 | euvd | Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration p…Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. |
CVE-2021-37975 | HIGH | 8.8 | 0.34887 | 72.41 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a…Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
CVE-2025-23006 | CRITICAL | 9.8 | 0.23432 | 72.4 | Yes | No | 2025-01-23 | 2026-08-04 | cisa.gov, euvd, nvd | Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and…Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands. |
CVE-2023-41892 | CRITICAL | 10.0 | 0.92555 | 72.39 | No | No | 2023-09-13 | 2025-02-13 | euvd | Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installat…Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15. |
CVE-2016-5198 | HIGH | 8.8 | 0.34814 | 72.38 | Yes | No | 2022-06-08 | 2022-06-08 | cisa.gov, euvd | Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operatio…Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read/write operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera. |
CVE-2023-24941 | CRITICAL | 9.8 | 0.94683 | 72.34 | No | No | 2023-05-09 | 2025-07-10 | euvd | Windows Network File System Remote Code Execution VulnerabilityWindows Network File System Remote Code Execution Vulnerability |
CVE-2024-8517 | CRITICAL | 9.8 | 0.94614 | 72.31 | No | No | 2024-09-06 | 2025-11-22 | euvd | SPIP before 4.3.2, 4.2.16, and
4.1.18 is vulnerable to a command injection issue. A
remote and unauthenticated attacker can execute arbitr…SPIP before 4.3.2, 4.2.16, and
4.1.18 is vulnerable to a command injection issue. A
remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request. |
CVE-2024-9680 | CRITICAL | 9.8 | 0.23184 | 72.31 | Yes | No | 2024-10-09 | 2026-08-04 | cisa.gov, euvd, nvd | An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had rep…An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulnerability being exploited in the wild. This vulnerability affects Firefox < 131.0.2, Firefox ESR < 128.3.1, Firefox ESR < 115.16.1, Thunderbird < 131.0.1, Thunderbird < 128.3.1, and Thunderbird < 115.16.0. |
CVE-2023-30258 | CRITICAL | 9.8 | 0.9425 | 72.19 | No | No | 2023-06-23 | 2025-08-29 | euvd | Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenti…Command Injection vulnerability in MagnusSolution magnusbilling 6.x and 7.x allows remote attackers to run arbitrary commands via unauthenticated HTTP request. |
CVE-2025-43300 | CRITICAL | 10.0 | 0.20388 | 72.14 | Yes | No | 2025-08-21 | 2026-04-02 | cisa.gov, euvd | An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 a…An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.8.5 and iPadOS 15.8.5, iOS 16.7.12 and iPadOS 16.7.12, iOS 18.6.2 and iPadOS 18.6.2, iPadOS 17.7.10, macOS Sequoia 15.6.1, macOS Sonoma 14.7.8, macOS Ventura 13.7.8. Processing a malicious image file may result in memory corruption. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals. |
CVE-2022-21882 | HIGH | 7.0 | 0.54553 | 72.09 | Yes | No | 2022-02-04 | 2022-02-04 | cisa.gov, euvd | Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation.Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation. |
CVE-2023-39780 | HIGH | 8.8 | 0.33878 | 72.06 | Yes | No | 2025-06-02 | 2025-06-02 | cisa.gov, euvd | ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary co…ASUS RT-AX55 devices contain an OS command injection vulnerability that could allow a remote, authenticated attacker to execute arbitrary commands. As represented by CVE-2023-41346. |
CVE-2023-48365 | CRITICAL | 9.6 | 0.24676 | 72.04 | Yes | No | 2025-01-13 | 2025-01-13 | cisa.gov, euvd | Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend …Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software. |
CVE-2019-0803 | HIGH | 7.8 | 0.4523 | 72.03 | Yes | No | 2021-11-03 | 2021-11-03 | cisa.gov, euvd | Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. …Microsoft Win32k contains an unspecified vulnerability due to it failing to properly handle objects in memory causing privilege escalation. Successful exploitation allows an attacker to run code in kernel mode. |