2023-01-01

2023-01-02

2023-01-03

All (3) Critical (1) High (1) Medium (1)

CVE-2022-42475 CRITICAL POC KEV THREAT Emergency

FortiOS SSL-VPN contains a heap-based buffer overflow allowing unauthenticated remote code execution, exploited as a zero-day from October 2022 by suspected Chinese state-sponsored actors targeting government networks.

NVD

CVSS 3.1

9.8

EPSS

94.0%

Threat

9.8

CVE-2023-22451 HIGH PATCH This Week

Kiwi TCMS is an open source test management system. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Information Disclosure Brute Force Kiwi Tcms

NVD GitHub

CVSS 3.1

8.8

EPSS

0.7%

CVE-2023-22452 MEDIUM PATCH This Month

kenny2automate is a Discord bot. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Information Disclosure Kenny2Automate

NVD GitHub

CVSS 3.1

6.5

EPSS

0.5%