CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 01/06/2023 |
| CVE-2023-23956 | 보통5.4 | A user can supply malicious HTML and JavaScript code that will be executed in the client browser | 30/05/2023 |
| CVE-2023-20868 | 보통6.1 | NSX-T contains a reflected cross-site scripting vulnerability due to a lack of input validation. A remote attacker can inject HTML or JavaScript to redirect to malicious pages. | 26/05/2023 |
| CVE-2023-27789 | 높음7.5 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint. | 16/03/2023 |
| CVE-2023-27788 | 높음7.5 | An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint. | 16/03/2023 |
| CVE-2023-27787 | 높음7.5 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint. | 16/03/2023 |
| CVE-2023-27786 | 높음7.5 | An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function. | 16/03/2023 |
| CVE-2023-27785 | 높음7.5 | An issue found in TCPreplay TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse endpoints function. | 16/03/2023 |
| CVE-2023-27784 | 높음7.5 | An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint. | 16/03/2023 |
| CVE-2023-27783 | 높음7.5 | An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c. | 16/03/2023 |
| CVE-2023-23951 | 보통6.1 | Ability to enumerate the Oracle LDAP attributes for the current user by modifying the query used by the application | 26/01/2023 |
| CVE-2023-23950 | 보통6.1 | User’s supplied input (usually a CRLF sequence) can be used to split a returning response into two responses. | 26/01/2023 |
| CVE-2023-23949 | 보통5.4 | An authenticated user can supply malicious HTML and JavaScript code that will be executed in the client browser. | 26/01/2023 |
| CVE-2022-25631 | 높음7.8 | Symantec Endpoint Protection, prior to 14.3 RU6 (14.3.9210.6000), may be susceptible to a Elevation of Privilege vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated | 20/01/2023 |
| CVE-2022-25628 | 높음8.8 | An authenticated user can perform XML eXternal Entity injection in Management Console in Symantec Identity Manager 14.4 | 16/12/2022 |
| CVE-2022-25627 | 보통6.7 | An authenticated administrator who has physical access to the environment can carry out Remote Command Execution on Management Console in Symantec Identity Manager 14.4 | 16/12/2022 |
| CVE-2022-25626 | 보통5.3 | An unauthenticated user can access Identity Manager’s management console specific page URLs. However, the system doesn’t allow the user to carry out server side tasks without a valid web session. | 16/12/2022 |