traunau.de Improper Access Control vulnerability OBB-3780331

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

stadtkapelle-kemnath.de Improper Access Control vulnerability OBB-3780240

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

snowtubing-cursdorf.de Improper Access Control vulnerability OBB-3780223

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

KB5032390: Servicing stack update for Windows 10: November 14, 2023

None None...

Fedora 39 : webkitgtk (2023-a4693c1c98)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-a4693c1c98 advisory. Fix enable-html5-database setting to properly enable/disable IndexedDB API. Fix the build with GBM disabled. Fix several crashes and rendering issues. Securi...

Rocky Linux 8 : nodejs:14 (RLSA-2021:0744)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:0744 advisory. - Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many connection attempts with an...

Rocky Linux 8 : nodejs:14 (RLSA-2023:0050)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:0050 advisory. - Minimist =1.2.5 is vulnerable to Prototype Pollution via file index.js, function setKey lines 69-95. CVE-2021-44906 - node-fetch is vulnerable to...

Fedora: Security Advisory for folly (FEDORA-2023-7934802344)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 39 Update: folly-2023.10.16.00-1.fc39

Folly acronymed loosely after Facebook Open Source Library is a library of C++14 components designed with practicality and efficiency in mind. Folly contains a variety of core library components used extensively at Facebook. In particular, it's often a dependency of Facebook's other open source C...

CVE-2023-46927

creationtimestamp| type| source ---|---|--- 2023-11-01 17:21:48+00:00| seen| https://t.me/cibsecurity/73331 2024-01-08 19:14:58+00:00| seen| https://t.me/arpsyndicate/2672...

Apple Mac OS X Security Update (HT213940)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-5044

creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:26+00:00| seen| https://t.me/cibsecurity/72915 2023-10-30 08:03:26+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5607 2023-10-30 17:00:07+00:00| seen| https://t.me/truesecator/5023 2023-11-01 13:27:15+00:00|...

AZL-60006 CVE-2023-5752 affecting package python3 for versions less than 3.9.19-14

When installing a package from a Mercurial VCS URL ie "pip install hg+..." with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call ie "--config". Controlling the Mercurial configuration can modify how and which...

Fedora: Security Advisory for fbthrift (FEDORA-2023-17efd3f2cd)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 38 Update: folly-2023.10.16.00-1.fc38

Folly acronymed loosely after Facebook Open Source Library is a library of C++14 components designed with practicality and efficiency in mind. Folly contains a variety of core library components used extensively at Facebook. In particular, it's often a dependency of Facebook's other open source C...

[SECURITY] Fedora 37 Update: folly-2023.10.16.00-1.fc37

Folly acronymed loosely after Facebook Open Source Library is a library of C++14 components designed with practicality and efficiency in mind. Folly contains a variety of core library components used extensively at Facebook. In particular, it's often a dependency of Facebook's other open source C...

CVE-2023-5178

creationtimestamp| type| source ---|---|--- 2023-10-17 11:54:14+00:00| seen| https://t.me/apsecurity/194 2023-10-17 11:54:14+00:00| seen| https://t.me/apsecurity/136 2023-11-01 19:22:17+00:00| seen| https://t.me/cibsecurity/73352 2023-11-29 07:54:21+00:00| seen| https://t.me/arpsyndicate/696...

cvc.cervantes.es Cross Site Scripting vulnerability OBB-3750848

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-33165

creationtimestamp| type| source ---|---|--- 2023-10-14 18:55:51+00:00| seen| https://t.me/cibsecurity/72288...

kjpemcos.com Cross Site Scripting vulnerability OBB-3750261

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...