6301 matches found
CVE-2023-39843
creationtimestamp| type| source ---|---|--- 2023-08-16 00:30:46+00:00| seen| https://t.me/cibsecurity/68604...
WordPress Advanced File Manager Plugin < 5.1.1 is vulnerable to Sensitive Data Exposure
Software Advanced File Manager Type Plugin Vulnerable versions 5.1.1 Fixed in 5.1.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-3814 Patch priority Low CVSS severity Low 4.9 Developer Claim ownership PSID c11d3f659c9c Credits Dmitrii Required...
CVE-2023-32006 vulnerabilities
Vulnerabilities for packages: nodejs...
CVE-2023-32006
The use of module.constructor.createRequire can bypass the policy mechanism and require modules outside of the policy.json definition for a given module. This vulnerability affects all users using the experimental policy mechanism in all active release lines: 16.x, 18.x, and, 20.x. Please note th...
CVE-2023-39393
creationtimestamp| type| source ---|---|--- 2023-08-13 16:18:45+00:00| seen| https://t.me/cibsecurity/68409...
CVE-2021-46895
creationtimestamp| type| source ---|---|--- 2023-08-13 16:18:26+00:00| seen| https://t.me/cibsecurity/68392...
CVE-2023-39948
creationtimestamp| type| source ---|---|--- 2023-08-11 18:16:49+00:00| seen| https://t.me/cibsecurity/68346...
alsto.de Cross Site Scripting vulnerability OBB-3574780
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-40224
creationtimestamp| type| source ---|---|--- 2023-08-11 00:16:13+00:00| seen| https://t.me/cibsecurity/68259...
CVE-2023-40216
creationtimestamp| type| source ---|---|--- 2023-08-10 20:16:02+00:00| seen| https://t.me/cibsecurity/68239 2023-11-08 13:02:31+00:00| seen| https://t.me/cultofwire/1098...
CVE-2023-28779
creationtimestamp| type| source ---|---|--- 2023-08-10 16:16:00+00:00| seen| https://t.me/cibsecurity/68202...
CVE-2022-45821
creationtimestamp| type| source ---|---|--- 2023-08-08 16:14:20+00:00| seen| https://t.me/cibsecurity/67986...
CVE-2023-30482
creationtimestamp| type| source ---|---|--- 2023-08-08 16:14:19+00:00| seen| https://t.me/cibsecurity/67985...
CVE-2023-36546
creationtimestamp| type| source ---|---|--- 2023-08-08 16:14:18+00:00| seen| https://t.me/cibsecurity/67984...
RLSA-2023:4537 Moderate: nodejs:16 security, bug fix, and enhancement update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The package has been upgraded to a later upstream version: nodejs 16.20.1. BZ2223678, BZ2223680, BZ2223682, BZ2223684, BZ2223686, BZ2223688 Security Fixes: nodejs...
RHEL 8 : nodejs:16 (RHSA-2023:4537)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:4537 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
Upgraded Q -> 3 from #16 [1691315821722]
Judge has assessed an item in Issue 16 as 3 risk. The relevant finding follows: L-04: MorphoTokenisedDeposit override decimalsOffset ==0 increase ERC4626 inflation attack risk --- The text was updated successfully, but these errors were encountered: All reactions...
CVE-2023-22314
creationtimestamp| type| source ---|---|--- 2023-08-03 16:40:17+00:00| seen| https://t.me/cibsecurity/67675...
Moxa EDR-810 Industrial Secure Router Privilege Escalation (CVE-2016-8346)
An issue was discovered in Moxa EDR-810 Industrial Secure Router. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to access configuration and log files PRIVILEGE ESCALATION. This plugin only works with Tenable.ot. Please visit...
Moxa PT-7728 Series Switch Improper Authorization (CVE-2016-4514)
Moxa PT-7728 devices with software 3.4 build 15081113 allow remote authenticated users to change the configuration via vectors involving a local proxy. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C...