Threat and Vulnerability Intelligence Database

Example Searches:

CVE-2023-50038	Description: There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions. CVSS: LOW (0.0) EPSS Score: 0.08% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-49991	Description: Espeak-ng 1.52-dev was discovered to contain a Stack Buffer Underflow via the function CountVowelPosition at synthdata.c. CVSS: LOW (0.0) EPSS Score: 0.05% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-49706	Description: Defective request context handling in Self Service in LinOTP 3.x before 3.2.5 allows remote unauthenticated attackers to escalate privileges, thereby allowing them to act as and with the permissions of another user. Attackers must generate repeated API requests to trigger a race condition with concurrent user activity in the self-service portal. CVSS: LOW (0.0) EPSS Score: 0.19% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-49490	Description: XunRuiCMS v4.5.5 was discovered to contain a reflective cross-site scripting (XSS) vulnerability via the component /admin.php. CVSS: LOW (0.0) EPSS Score: 0.05% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-49462	Description: libheif v1.17.5 was discovered to contain a segmentation violation via the component /libheif/exif.cc. CVSS: LOW (0.0) EPSS Score: 0.19% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-49314	Description: Asana Desktop 2.1.0 on macOS allows code injection because of specific Electron Fuses. There is inadequate protection against code injection through settings such as RunAsNode and EnableNodeCliInspectArguments, and thus r3ggi/electroniz3r can be used to perform an attack. CVSS: LOW (0.0) EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-49228	Description: An issue was discovered in Peplink Balance Two before 8.4.0. Console port authentication uses hard-coded credentials, which allows an attacker with physical access and sufficient knowledge to execute arbitrary commands as root. CVSS: LOW (0.0) EPSS Score: 0.06% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-48930	Description: xinhu xinhuoa 2.2.1 contains a File upload vulnerability. CVSS: LOW (0.0) EPSS Score: 0.13% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-48861	Description: DLL hijacking vulnerability in TTplayer version 7.0.2, allows local attackers to escalate privileges and execute arbitrary code via urlmon.dll. CVSS: LOW (0.0) EPSS Score: 0.04% Source: CVE November 27th, 2024 (5 months ago)
CVE-2023-48656	Description: An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles order clauses. CVSS: LOW (0.0) EPSS Score: 0.13% Source: CVE November 27th, 2024 (5 months ago)