High

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-10	CVE-2023-36596	Exposure of Resource to Wrong Sphere vulnerability in Microsoft products Remote Procedure Call Information Disclosure Vulnerability network low complexity microsoft CWE-668	7.5
2023-10-10	CVE-2023-36605	Unspecified vulnerability in Microsoft products Windows Named Pipe Filesystem Elevation of Privilege Vulnerability local low complexity microsoft	7.8
2023-10-10	CVE-2023-36606	Unspecified vulnerability in Microsoft products Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability network low complexity microsoft	7.5
2023-10-10	CVE-2023-36697	Unspecified vulnerability in Microsoft products Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability network low complexity microsoft	8.0
2023-10-10	CVE-2023-36707	Unspecified vulnerability in Microsoft products Windows Deployment Services Denial of Service Vulnerability network low complexity microsoft	7.5
2023-10-10	CVE-2023-44487	The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. network low complexity ietf nghttp2 netty envoyproxy eclipse caddyserver golang f5 apache apple grpc microsoft nodejs dena facebook amazon debian kazu-yamamoto istio varnish-cache-project traefik projectcontour linkerd linecorp redhat fedoraproject netapp akka konghq jenkins openresty cisco	7.5
2023-09-28	CVE-2023-5217	Out-of-bounds Write vulnerability in multiple products Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. network low complexity webmproject microsoft mozilla fedoraproject debian apple google redhat CWE-787	8.8
2023-09-15	CVE-2023-38039	Allocation of Resources Without Limits or Throttling vulnerability in multiple products When curl retrieves an HTTP response, it stores the incoming headers so that they can be accessed later via the libcurl headers API. However, curl did not have a limit in how many or how large headers it would accept in a response, allowing a malicious server to stream an endless series of headers and eventually cause curl to run out of heap memory. network low complexity haxx fedoraproject microsoft CWE-770	7.5
2023-09-12	CVE-2023-38155	Unspecified vulnerability in Microsoft Azure Devops Server Azure DevOps Server Remote Code Execution Vulnerability network high complexity microsoft	8.1
2023-09-12	CVE-2023-4863	Out-of-bounds Write vulnerability in multiple products Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. network low complexity google fedoraproject debian mozilla microsoft webmproject netapp bentley bandisoft CWE-787	8.8