CVE-2022-23791

creationtimestamp| type| source ---|---|--- 2023-03-14 12:54:00+00:00| seen| https://t.me/cibsecurity/59945...

CVE-2022-47595

creationtimestamp| type| source ---|---|--- 2023-03-14 12:53:55+00:00| seen| https://t.me/cibsecurity/59942...

CVE-2023-27501

creationtimestamp| type| source ---|---|--- 2023-03-14 12:53:53+00:00| seen| https://t.me/cibsecurity/59939...

CVE-2022-46527

creationtimestamp| type| source ---|---|--- 2023-03-14 11:52:08+00:00| seen| Telegram/i3i7bKY0ZhVuqvP9UVKCrnxIrVEYZjBWV0W4sip7a5wu-g...

March 14, 2023—KB5023759 (Security-only update)

None None...

March 14, 2023—Hotpatch KB5023786 (OS Build 20348.1602)

None None...

apps.fldfs.com Cross Site Scripting vulnerability OBB-3221651

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-0350

creationtimestamp| type| source ---|---|--- 2023-03-14 01:37:40+00:00| seen| https://t.me/cibsecurity/59936...

CVE-2023-25802

creationtimestamp| type| source ---|---|--- 2023-03-14 01:37:38+00:00| seen| Telegram/hFwsmUFi2puNZVKE1nZSVi4C7URBmJT-QGopSvaIcMz4...

CVE-2023-27898

creationtimestamp| type| source ---|---|--- 2023-03-09 04:59:49+00:00| seen| https://t.me/KomunitiSiber/34 2023-03-09 06:16:33+00:00| published-proof-of-concept| https://t.me/ptswarm/163 2023-03-09 13:39:22+00:00| published-proof-of-concept| https://t.me/cKure/10774 2023-03-10 17:00:11+00:00| see...

XWiki 6.3-milestone-2 < 13.10.11, 14.x < 14.4.7, 14.5.x < 14.10 Eval Injection Vulnerability (GHSA-qxjg-jhgw-qhrv)

Xwiki is prone to an eval injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

XWiki 6.2-milestone-1 < 13.10.10, 14.x < 14.4.6, 14.5.x < 14.9 Privilege Escalation Vulnerability (GHSA-vwr6-qp4q-2wj7)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

XWiki 12.10 < 13.10.10, 14.x < 14.4.7, 14.5.x < 14.9 XSS Vulnerability (GHSA-32fq-m2q5-h83g)

Xwiki is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

XWiki 3.1-milestone-1 < 13.10.9, 14.x < 14.4.4, 14.5.x < 14.7 Privilege Escalation Vulnerability (GHSA-8cw6-4r32-6r3h)

Xwiki is prone to a privilege escalation vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescripti...

XWiki 1.3-rc-1 < 13.10.11, 14.x < 14.4.7, 14.5.x < 14.10 Improper Access Control Vulnerability (GHSA-vpx4-7rfp-h545)

Xwiki is prone to an improper access control vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

XWiki 6.2.4 < 13.10.10, 14.x < 14.4.6, 14.5.x < 14.9 Eval Injection Vulnerability (GHSA-x2qm-r4wx-8gpg)

Xwiki is prone to an eval injection vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki"; ifdescription...

XWiki 3.2-m3 < 13.10.9, 14.x < 14.4.4, 14.5.x < 14.7 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (GHSA-5cf8-vrr8-8hjm)

Xwiki is prone to an exposure of sensitive information to an unauthorized actor vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

SUSE SLES12 Security Update : nodejs14 (SUSE-SU-2023:0607-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0607-1 advisory. Update to 14.21.3: - CVE-2023-23918: Fixed permissions policies that could have been bypassed via process.mainModule bsc1208481. -...

CVE-2022-23524 affecting package helm 3.4.1-14

CVE-2022-23524 affecting package helm 3.4.1-14. A patched version of the package is available...

Updated nodejs packages fix security vulnerability

The following CVEs are fixed in this release: CVE-2023-23918: Node.js Permissions policies can be bypassed via process.mainModule High CVE-2023-23920: Node.js insecure loading of ICU data through ICUDATA environment variable Low More detailed information on each of the vulnerabilities can be foun...