CVE-2022-25937

creationtimestamp| type| source ---|---|--- 2023-02-13 07:29:32+00:00| seen| https://t.me/cibsecurity/57985 2025-03-21 15:19:37+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8356...

CVE-2023-22346

creationtimestamp| type| source ---|---|--- 2023-02-13 07:29:31+00:00| seen| https://t.me/cibsecurity/57984...

CVE-2020-36661

creationtimestamp| type| source ---|---|--- 2023-02-13 05:14:24+00:00| seen| https://t.me/cibsecurity/57980...

WordPress Portfolio – WordPress Portfolio Plugin Plugin <= 2.8.10 is vulnerable to Cross Site Scripting (XSS)

Software Portfolio – WordPress Portfolio Plugin Type Plugin Vulnerable versions = 2.8.10 Fixed in 2.8.11 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-23685 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 518a0520e6c9 Credit...

macOS 13.x < 13.2.1 Multiple Vulnerabilities (HT213633)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.2.1. It is, therefore, affected by multiple vulnerabilities: - A type confusion issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.2.1, iOS 16.3.1 and iPadOS 16.3.1, Safari 16.3...

PostgreSQL 12.x < 12.14, 13.x < 13.10, 14.x < 14.7, 15.x < 15.2 Information Disclosure Vulnerability - Linux

PostgreSQL is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

AZL-13280 CVE-2022-43552 affecting package cmake for versions less than 3.21.4-13

A use after free vulnerability exists in curl 7.87.0. Curl can be asked to tunnel virtually all protocols it supports through an HTTP proxy. HTTP proxies can and often do deny such tunnel operations. When getting denied to tunnel the specific protocols SMB or TELNET, curl would use a heap-allocat...

Debian DSA-5341-1 : wpewebkit - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5341 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing...

CVE-2022-27628

creationtimestamp| type| source ---|---|--- 2023-02-06 16:22:54+00:00| seen| https://t.me/cibsecurity/57546 2025-01-13 16:11:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1364...

AZL-34796 CVE-2021-37501 affecting package hdf5 for versions less than 1.12.1-13

Buffer Overflow vulnerability in HDFGroup hdf5-h5dump 1.12.0 through 1.13.0 allows attackers to cause a denial of service via h5toolsstrsprint in /hdf5/tools/lib/h5toolsstr.c...

CVE-2022-42826

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13, iOS 16.1 and iPadOS 16, Safari 16.1. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-47983

creationtimestamp| type| source ---|---|--- 2023-02-01 20:14:13+00:00| seen| https://t.me/cibsecurity/57317...

CVE-2022-34398

creationtimestamp| type| source ---|---|--- 2023-02-01 12:13:58+00:00| seen| https://t.me/cibsecurity/57258...

CVE-2023-23630

creationtimestamp| type| source ---|---|--- 2023-02-01 07:13:55+00:00| seen| https://t.me/cibsecurity/57243...

CVE-2022-47770

creationtimestamp| type| source ---|---|--- 2023-02-01 07:13:50+00:00| seen| https://t.me/cibsecurity/57238...

CVE-2023-23077

CVE-2023-23077 affects Zoho ManageEngine ServiceDesk Plus version 13. It is a Cross-Site Scripting (XSS) vulnerability exploitable via the comment field when adding a new status comment. Root cause cited by PT Security: inadequate protection of the web page structure, allowing an XSS payload. The...

CVE-2023-20908

In several functions of SettingsState.java, there is a possible system crash loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11...

CVE-2023-20913

In onCreate of PhoneAccountSettingsActivity.java and related files, there is a possible way to mislead the user into enabling a malicious phone account due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is...

CVE-2023-20920

In queue of UsbRequest.java, there is a possible way to corrupt memory due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-...

CVE-2023-20919

In getStringsForPrefix of Settings.java, there is a possible prevention of package uninstallation due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...