Security Affairs newsletter Round 425 by Pierluigi Paganini
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2020-12641 | Command Injection RCE in Roundcube Webmail (CVE-2020-12641) | 9.8 | 84% | KEVPoC | KEV |
| CVE-2020-35730 | Cross-Site Scripting in Roundcube Webmail Plain-Text Email Link Handling | 6.1 | 33% | KEV | KEV |
| CVE-2021-44026 | SQL Injection in Roundcube Webmail via Search Parameters | 9.8 | 70% | KEV | KEV |
| CVE-2023-1389 | Command Injection in TP-Link Archer AX21 Router Allows Remote Code Execution | 8.8 | 100% | KEVPoC ×2 | KEV |
| CVE-2023-20178 | A vulnerability in the client update process of Cisco AnyConnect Secure Mobility Client Software for Windows and Cisco Secure Client Software for Windows could… | 7.8 | 5% | ||
| CVE-2023-20887 | Unauthenticated Command Injection RCE in VMware Aria Operations for Networks | 9.8 | 98% | KEVPoC | KEV |
| CVE-2023-27992 | Unauthenticated Command Injection in Zyxel NAS326, NAS540, NAS542 | 9.8 | 82% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
A new round of the weekly SecurityAffairs newsletter arrived! Every week the best security articles from Security Affairs are free for you in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.