Vulnerabilities (CVE)

Total 420935 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-36568 1 Microsoft 3 365 Apps, Office, Office Long Term Servicing Channel 2026-06-17 N/A 7.0 HIGH
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
CVE-2023-36567 1 Microsoft 11 Windows 10 1507, Windows 10 1809, Windows 10 21h1 and 8 more 2026-06-17 N/A 7.5 HIGH
Windows Deployment Services Information Disclosure Vulnerability
CVE-2023-36566 1 Microsoft 1 Common Data Model Sdk 2026-06-17 N/A 6.5 MEDIUM
Microsoft Common Data Model SDK Denial of Service Vulnerability
CVE-2023-36565 1 Microsoft 3 365 Copilot, Office, Office Long Term Servicing Channel 2026-06-17 N/A 7.0 HIGH
Microsoft Office Graphics Elevation of Privilege Vulnerability
CVE-2023-36564 1 Microsoft 11 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 8 more 2026-06-17 N/A 6.5 MEDIUM
Windows Search Security Feature Bypass Vulnerability
CVE-2023-36563 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 6.5 MEDIUM
Microsoft WordPad Information Disclosure Vulnerability
CVE-2023-36562 1 Microsoft 1 Edge Chromium 2026-06-17 N/A 7.1 HIGH
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVE-2023-36561 1 Microsoft 1 Azure Devops Server 2026-06-17 N/A 7.3 HIGH
Azure DevOps Server Elevation of Privilege Vulnerability
CVE-2023-36560 1 Microsoft 14 .net Framework, Windows 10 1507, Windows 10 1607 and 11 more 2026-06-17 N/A 8.8 HIGH
ASP.NET Security Feature Bypass Vulnerability
CVE-2023-36559 1 Microsoft 1 Edge Chromium 2026-06-17 N/A 4.2 MEDIUM
Microsoft Edge (Chromium-based) Spoofing Vulnerability
CVE-2023-36558 1 Microsoft 3 .net, Asp.net Core, Visual Studio 2022 2026-06-17 N/A 6.2 MEDIUM
ASP.NET Core Security Feature Bypass Vulnerability
CVE-2023-36557 1 Microsoft 10 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 7 more 2026-06-17 N/A 7.8 HIGH
PrintHTML API Remote Code Execution Vulnerability
CVE-2023-36556 1 Fortinet 1 Fortimail 2026-06-17 N/A 8.8 HIGH
An incorrect authorization vulnerability [CWE-863] in FortiMail webmail version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.5 and below 6.4.7 allows an authenticated attacker to login on other users accounts from the same web domain via crafted HTTP or HTTPs requests.
CVE-2023-36555 1 Fortinet 1 Fortios 2026-06-17 N/A 3.9 LOW
An improper neutralization of script-related html tags in a web page (basic xss) in Fortinet FortiOS 7.2.0 - 7.2.4 allows an attacker to execute unauthorized code or commands via the SAML and Security Fabric components.
CVE-2023-36554 1 Fortinet 1 Fortimanager 2026-06-17 N/A 8.1 HIGH
A improper access control in Fortinet FortiManager version 7.4.0, version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.10, version 6.4.0 through 6.4.13, 6.2 all versions allows attacker to execute unauthorized code or commands via specially crafted HTTP requests.
CVE-2023-36553 1 Fortinet 1 Fortisiem 2026-06-17 N/A 9.8 CRITICAL
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiSIEM version 5.4.0 and 5.3.0 through 5.3.3 and 5.2.5 through 5.2.8 and 5.2.1 through 5.2.2 and 5.1.0 through 5.1.3 and 5.0.0 through 5.0.1 and 4.10.0 and 4.9.0 and 4.7.2 allows attacker to execute unauthorized code or commands via crafted API requests.
CVE-2023-36551 1 Fortinet 1 Fortisiem 2026-06-17 N/A 4.3 MEDIUM
A exposure of sensitive information to an unauthorized actor in Fortinet FortiSIEM version 6.7.0 through 6.7.5 allows attacker to information disclosure via a crafted http request.
CVE-2023-36550 1 Fortinet 1 Fortiwlm 2026-06-17 N/A 9.8 CRITICAL
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
CVE-2023-36549 1 Fortinet 1 Fortiwlm 2026-06-17 N/A 8.8 HIGH
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.
CVE-2023-36548 1 Fortinet 1 Fortiwlm 2026-06-17 N/A 9.8 CRITICAL
A improper neutralization of special elements used in an os command ('os command injection') in Fortinet FortiWLM version 8.6.0 through 8.6.5 and 8.5.0 through 8.5.4 allows attacker to execute unauthorized code or commands via specifically crafted http get request parameters.