Week 32, 2023
7 August to 13 August 2023. The CVEs published in the week, the most severe of them, and what CISA added to its catalog of known exploited vulnerabilities.
- 785CVEs publishedin the whole week
- 92CriticalCVSS 9.0 and above
- 322HighCVSS 7.0 to 8.9
- 2Added to KEVknown exploited, newly listed
Added to KEVAttackers use these now; patch them first
- CVE-2023-38180
.NET and Visual Studio Denial of Service Vulnerability
Microsoft · .NET 6.0
ExploitedHigh7.5 - CVE-2017-18368
The ZyXEL P660HN-T1A v1 TCLinux Fw $7.3.15.0 v001 / 3.40(ULM.0)b31 router distributed by TrueOnline has a command injection vulnerability in the Remote System…
Product not named
ExploitedCritical9.8
Most severe new CVEsBy CVSS score
- CVE-2023-3572
PHOENIX CONTACT: OS Command Injection in WP 6xxx Web panels
PHOENIX CONTACT · WP 6070-WVPS
Critical10.0 - CVE-2023-3452
Canto <= 3.0.4 - Unauthenticated Remote File Inclusion
flightbycanto · Canto
Critical9.8 - CVE-2023-37483
Improper Access Control Vulnerabilities in SAP PowerDesigner
SAP_SE · SAP PowerDesigner
Critical9.8 - CVE-2023-39001
A command injection vulnerability in the component diag_backup.php of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows…
Product not named
Critical9.8 - CVE-2023-39008
A command injection vulnerability in the component /api/cron/settings/setJob/ of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2…
Product not named
Critical9.8 - CVE-2023-36910
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1507
Critical9.8 - CVE-2023-35385
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1507
Critical9.8 - CVE-2023-21709
Microsoft Exchange Server Elevation of Privilege Vulnerability
Microsoft · Microsoft Exchange Server 2016 Cumulative Update 23
Critical9.8 - CVE-2023-36911
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
Microsoft · Windows 10 Version 1507
Critical9.8 - CVE-2020-36034
SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges,…
Product not named
Critical9.8