Skip to main content
CVE-2023-23331 Jan 24, 01:15 CRITICAL POC Act Now

Amano Xoffice parking solutions 7.1.3879 is vulnerable to SQL Injection. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Xoffice
NVD
CVSS 3.1
9.8
EPSS
0.9%
CVE-2023-22485 Jan 24, 01:15 MEDIUM POC This Month

cmark-gfm is GitHub's fork of cmark, a CommonMark parsing and rendering library and program in C. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Information Disclosure Github Cmark Gfm
NVD GitHub
CVSS 3.1
5.3
EPSS
0.7%
CVE-2023-21796 Jan 24, 00:15 HIGH This Week

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Google Microsoft Edge Chromium
NVD
CVSS 3.1
8.3
EPSS
1.0%
CVE-2023-21795 Jan 24, 00:15 HIGH This Week

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Google Use After Free Memory Corruption Microsoft +1
NVD
CVSS 3.1
8.3
EPSS
0.9%
CVE-2023-21775 Jan 24, 00:15 HIGH This Week

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability. Rated high severity (CVSS 8.3), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

RCE Google Microsoft Edge Chromium
NVD
CVSS 3.1
8.3
EPSS
1.0%
CVE-2023-21719 Jan 24, 00:15 MEDIUM PATCH This Month

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Incorrect Authorization vulnerability could allow attackers to bypass authorization checks to access restricted resources.

Authentication Bypass Google Microsoft Edge Chromium
NVD
CVSS 3.1
6.5
EPSS
1.7%
CVE-2022-4554 Jan 24, 09:15 MEDIUM This Month

B2B Customer Ordering System developed by ID Software Project and Consultancy Services before version 1.0.0.347 has an authenticated Reflected XSS vulnerability. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS B2B Dealer Order System
NVD
CVSS 3.1
5.4
EPSS
0.2%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy