Year Archive: 2023

EUVD Vulnerabilities (2023)

Browse security threats, CVE catalog items, and software security flaws mapped under the EUVD sequence for the year 2023.

CRITICAL (9.3) CVSS 4.0 Source: hackerone

A vulnerability allowing an unauthenticated attacker to perform remote code execution (RCE) on servers running the Veeam Virtualization Extensions service of Veeam Management Pack for Microsoft System...

Aliases:
GHSA-6762-qxrg-r3x8 CVE-2023-22793
Published: 2026-10-29 View Complete Profile →

EUVD-2023-53114

Actively Exploited
CRITICAL (9.8) CVSS 3.1 Source: mitre

An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file without authentication if the username of a victim is known, and the victim has no ...

Aliases:
CVE-2023-49105 GHSA-585g-f852-v6p4
Published: 2023-11-21 View Complete Profile →
CRITICAL (9.1) CVSS 3.1 Source: redhat

A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SM...

Aliases:
CVE-2023-3961 GHSA-8m6h-6qw7-f6cg
Published: 2023-11-03 View Complete Profile →
CRITICAL (9.1) CVSS 3.0 Source: GitHub_M

Cachet is an open-source status page system. Prior to the 2.4 branch, a template functionality which allows users to create templates allows them to execute any code on the server during the bad filtr...

Aliases:
GHSA-hv79-p62r-wg3p CVE-2023-43661
Published: 2023-10-11 View Complete Profile →

EUVD-2023-1342

Actively Exploited
HIGH (7.2) CVSS 3.1 Source: mitre

Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitiv...

Aliases:
GHSA-jjqf-j4w7-92w8 CVE-2023-22894
Published: 2023-04-19 View Complete Profile →