CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 05/12/2023 |
| CVE-2023-49282 | 中危5.3 | msgraph-sdk-php is the Microsoft Graph Library for PHP. The Microsoft Graph PHP SDK published packages which contained test code that enabled the use of the phpInfo() function from any application that could access and execute the file at vendor/microsoft/microsoft-graph/tests/GetPhpInfo.php. The phpInfo function expo | 05/12/2023 |
| CVE-2023-6345KEV | 严重9.6 | Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High) | 29/11/2023 |
| CVE-2023-36013 | 中危6.5 | PowerShell Information Disclosure Vulnerability | 20/11/2023 |
| CVE-2023-36026 | 中危4.3 | Microsoft Edge (Chromium-based) Spoofing Vulnerability | 16/11/2023 |
| CVE-2023-36008 | 中危6.6 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | 16/11/2023 |
| CVE-2023-36558 | 中危5.5 | ASP.NET Core Security Feature Bypass Vulnerability | 14/11/2023 |
| CVE-2023-36038 | 高危7.5 | ASP.NET Core Denial of Service Vulnerability | 14/11/2023 |
| CVE-2023-36437 | 高危8.8 | Azure DevOps Server Remote Code Execution Vulnerability | 14/11/2023 |
| CVE-2023-36049 | 严重9.8 | .NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability | 14/11/2023 |
| CVE-2023-36007 | 中危4.1 | Microsoft Send Customer Voice survey from Dynamics 365 Spoofing Vulnerability | 14/11/2023 |
| CVE-2023-38177 | 中危6.8 | Microsoft SharePoint Server Remote Code Execution Vulnerability | 14/11/2023 |
| CVE-2023-38151 | 高危8.8 | Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability | 14/11/2023 |
| CVE-2023-36560 | 高危8.8 | ASP.NET Security Feature Bypass Vulnerability | 14/11/2023 |
| CVE-2023-36439 | 高危8.0 | Microsoft Exchange Server Remote Code Execution Vulnerability | 14/11/2023 |
| CVE-2023-36422 | 高危7.8 | Microsoft Windows Defender Elevation of Privilege Vulnerability | 14/11/2023 |