Vulnerabilities (CVE)

Filtered by vendor Microsoft Subscribe
Total 21874 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-35900 3 Ibm, Microsoft, Redhat 5 Robotic Process Automation, Robotic Process Automation As A Service, Robotic Process Automation For Cloud Pak and 2 more 2024-11-21 N/A 4.3 MEDIUM
IBM Robotic Process Automation for Cloud Pak 21.0.0 through 21.0.7.4 and 23.0.0 through 23.0.5 is vulnerable to disclosing server version information which may be used to determine software vulnerabilities at the operating system level. IBM X-Force ID: 259368.
CVE-2023-35898 3 Ibm, Linux, Microsoft 4 Aix, Infosphere Information Server, Linux Kernel and 1 more 2024-11-21 N/A 4.3 MEDIUM
IBM InfoSphere Information Server 11.7 could allow an authenticated user to obtain sensitive information due to an insecure security configuration in InfoSphere Data Flow Designer. IBM X-Force ID: 259352.
CVE-2023-35896 3 Ibm, Linux, Microsoft 3 Content Navigator, Linux Kernel, Windows 2024-11-21 N/A 5.4 MEDIUM
IBM Content Navigator 3.0.13 is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. IBM X-Force ID: 259247.
CVE-2023-35838 2 Microsoft, Wireguard 2 Windows, Wireguard 2024-11-21 N/A 5.7 MEDIUM
The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while the VPN is enabled. NOTE: the tunnelcrack.mathyvanhoef.com website uses this CVE ID to refer more generally to "LocalNet attack resulting in the blocking of traffic" rather than to only WireGuard.
CVE-2023-35621 1 Microsoft 1 Dynamics 365 2024-11-21 N/A 7.5 HIGH
Microsoft Dynamics 365 Finance and Operations Denial of Service Vulnerability
CVE-2023-35394 1 Microsoft 1 Azure Hdinsights 2024-11-21 N/A 4.6 MEDIUM
Azure HDInsight Jupyter Notebook Spoofing Vulnerability
CVE-2023-35393 1 Microsoft 1 Azure Hdinsights 2024-11-21 N/A 4.5 MEDIUM
Azure Apache Hive Spoofing Vulnerability
CVE-2023-35391 1 Microsoft 3 .net, Asp.net Core, Visual Studio 2022 2024-11-21 N/A 6.2 MEDIUM
ASP.NET Core SignalR and Visual Studio Information Disclosure Vulnerability
CVE-2023-35389 1 Microsoft 1 Dynamics 365 2024-11-21 N/A 6.5 MEDIUM
Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2023-35388 1 Microsoft 1 Exchange Server 2024-11-21 N/A 8.0 HIGH
Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2023-35387 1 Microsoft 11 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 8 more 2024-11-21 N/A 8.8 HIGH
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
CVE-2023-35385 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 9.8 CRITICAL
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
CVE-2023-35384 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 5.4 MEDIUM
Windows HTML Platforms Security Feature Bypass Vulnerability
CVE-2023-35383 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 7.5 HIGH
Microsoft Message Queuing Information Disclosure Vulnerability
CVE-2023-35381 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 8.8 HIGH
Windows Fax Service Remote Code Execution Vulnerability
CVE-2023-35380 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2024-11-21 N/A 7.8 HIGH
Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-35379 1 Microsoft 1 Windows Server 2008 2024-11-21 N/A 7.8 HIGH
Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability
CVE-2023-35378 1 Microsoft 7 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 4 more 2024-11-21 N/A 7.0 HIGH
Windows Projected File System Elevation of Privilege Vulnerability
CVE-2023-35374 1 Microsoft 1 Paint 3d 2024-11-21 N/A 7.8 HIGH
Paint 3D Remote Code Execution Vulnerability
CVE-2023-35373 1 Microsoft 1 Mono 2024-11-21 N/A 5.3 MEDIUM
Mono Authenticode Validation Spoofing Vulnerability