Directory traversal

ILIAS 2013-09-12 release contains a medium-criticality Directory Traversal local file inclusion vulnerability in the ScormAicc module. An attacker with a privileged account, typically holding the tutor role, can exploit this to gain unauthorized access to and potentially retrieve confidential fil...

CVE-2023-45867

ILIAS (2013-09-12 release) contains a Directory Traversal local file inclusion vulnerability in the ScormAicc module (CVE-2023-45867). An attacker with a privileged account (typically tutor) can manipulate a URL file parameter to traverse directories and read files readable by the web server user...

Debian DSA-5535-1 : firefox-esr - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5535 advisory. - It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay...

Debian DSA-5534-1 : xorg-server - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5534 advisory. - A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored ...

Debian DSA-5533-1 : gst-plugins-bad1.0 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5533 advisory. Multiple vulnerabilities were discovered in plugins for the GStreamer media framework and its codecs and demuxers, which may result in denial of service or...

macOS 12.x < 12.7.1 Multiple Vulnerabilities (HT213983)

The remote host is running a version of macOS / Mac OS X that is 12.x prior to 12.7.1. It is, therefore, affected by multiple vulnerabilities: - The issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey...

Debian DSA-5532-1 : openssl - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5532 advisory. Tony Battersby reported that incorrect cipher key and IV length processing in OpenSSL, a Secure Sockets Layer toolkit, may result in loss of confidentiality for some...

SUSE: Security Advisory (SUSE-SU-2023:4159-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-46149

creationtimestamp| type| source ---|---|--- 2023-10-22 02:44:12+00:00| published-proof-of-concept| https://t.me/codeb0ss/1267 2023-10-24 19:46:01+00:00| published-proof-of-concept| Telegram/WVZ9BmLdITCEGHwv5Sa3VoS7DPHcwW27tO-sX6j0-l8rvg 2023-12-20 20:29:22+00:00| seen| https://t.me/ctinow/157286...

msc-12.de Cross Site Scripting vulnerability OBB-3760966

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-5308

creationtimestamp| type| source ---|---|--- 2023-10-20 12:41:19+00:00| seen| https://t.me/cibsecurity/72676...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.420)

The version of AHV installed on the remote host is prior to 20220304.420. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.420 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via...

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.10057)

The version of AHV installed on the remote host is prior to 20220304.10057. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.10057 advisory. - An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes...

CVE-2023-42627

creationtimestamp| type| source ---|---|--- 2023-10-17 16:32:58+00:00| seen| https://t.me/cibsecurity/72421 2023-12-28 19:16:28+00:00| seen| https://t.me/ctinow/160156 2025-06-12 15:34:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18185...

SUSE: Security Advisory (SUSE-SU-2023:4070-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-42780

creationtimestamp| type| source ---|---|--- 2023-10-14 14:29:51+00:00| seen| https://t.me/cibsecurity/72284 2023-12-01 07:02:55+00:00| seen| https://t.me/arpsyndicate/834...

Debian DSA-5526-1 : chromium - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5526 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

vvreutum.nl Cross Site Scripting vulnerability OBB-3744150

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-43148

creationtimestamp| type| source ---|---|--- 2023-10-12 22:33:19+00:00| seen| https://t.me/cibsecurity/72195...

vanoortelektronika.nl Cross Site Scripting vulnerability OBB-3744027

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...