Commit from GitHub Actions (Update Notebook)

jgamblin · Nov 9, 2023 · 4683a01 · 4683a01
1 parent e7a6287
commit 4683a01
Show file tree

Hide file tree

Showing 3 changed files with 30 additions and 29 deletions.
diff --git a/KEV-EPSS.ipynb b/KEV-EPSS.ipynb
diff --git a/epss_kev_nvd.csv b/epss_kev_nvd.csv
@@ -1026,3 +1026,4 @@ CVE-2023-46748,8.8,0.02932,0.89736,F5 BIG-IP Configuration utility contains an S
 CVE-2023-46747,9.8,0.96984,0.99664,F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748.
 CVE-2023-46604,,0.4471,0.97015,Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath.
 CVE-2023-22518,,0.01852,0.86954,Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data.
+CVE-2023-29552,7.5,0.005,0.73578,"The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor."
diff --git a/epss_kev_nvd.png b/epss_kev_nvd.png