Week 14, 2023
3 April to 9 April 2023. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 593CVEs publishedin the whole week
- 77CriticalCVSS 9.0 and above
- 164HighCVSS 7.0 to 8.9
- 6Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2021-27878
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is…
Product not named
ExploitedHigh8.8 - CVE-2021-27877
An issue was discovered in Veritas Backup Exec before 21.2. It supports multiple authentication schemes: SHA authentication is one of these. This…
Product not named
ExploitedHigh8.2 - CVE-2021-27876
An issue was discovered in Veritas Backup Exec before 21.2. The communication between a client and an Agent requires successful authentication, which is…
Product not named
ExploitedHigh8.1 - CVE-2019-1388
An elevation of privilege vulnerability exists in the Windows Certificate Dialog when it does not properly enforce user privileges, aka 'Windows Certificate…
Microsoft · Windows
ExploitedHigh7.8 - CVE-2023-26083
Memory leak vulnerability in Mali GPU Kernel Driver in Midgard GPU Kernel Driver all versions from r6p0 - r32p0, Bifrost GPU Kernel Driver all versions from…
Product not named
ExploitedLow3.3 - CVE-2022-27926
A reflected cross-site scripting (XSS) vulnerability in the /public/launchNewWindow.jsp component of Zimbra Collaboration (aka ZCS) 9.0 allows unauthenticated…
Product not named
ExploitedMedium6.1
Most severe new CVEsBy CVSS score
- CVE-2023-29017
vm2 Sandbox Escape vulnerability
patriksimek · vm2
Critical10.0 - CVE-2023-1782
Nomad Unauthenticated Client Agent HTTP Request Privilege Escalation
HashiCorp · Nomad
Critical10.0 - CVE-2023-28849
GLPI vulnerable to SQL injection and Stored XSS via inventory agent request
glpi-project · glpi
Critical10.0 - CVE-2023-1671
A pre-auth command injection vulnerability in the warn-proceed handler of Sophos Web Appliance older than version 4.3.10.4 allows execution of arbitrary code.
Sophos · Sophos Web Appliance
ExploitedCritical9.8 - CVE-2023-29374
In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
Product not named
Critical9.8 - CVE-2023-28706
Apache Airflow Hive Provider Beeline Remote Command Execution
Apache Software Foundation · Apache Airflow Hive Provider
Critical9.8 - CVE-2023-26921
OS Command Injection vulnerability in quectel AG550QCN allows attackers to execute arbitrary commands via ql_atfwd.
Product not named
Critical9.8 - CVE-2023-26119
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the…
net.sourceforge.htmlunit:htmlunit
Critical9.8 - CVE-2023-26866
GreenPacket OH736's WR-1200 Indoor Unit, OT-235 with firmware versions M-IDU-1.6.0.3_V1.1 and MH-46360-2.0.3-R5-GP respectively are vulnerable to remote…
Product not named
Critical9.8 - CVE-2023-24538
Backticks not treated as string delimiters in html/template
Go standard library · html/template
Critical9.8