AlmaLinux 9 : nodejs:18 (ALSA-2023:3577)

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:3577 advisory. c-ares: 0-byte UDP payload Denial of Service CVE-2023-32067 c-ares: Buffer Underwrite in aresinetnetpton CVE-2023-31130 c-ares: Insufficient randomness in...

Mozilla Firefox Security Advisories (MFSA2023-18, MFSA2023-20) - Mac OS X

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

CVE-2023-33498

creationtimestamp| type| source ---|---|--- 2023-06-07 18:35:09+00:00| seen| https://t.me/cibsecurity/65040...

Security Bulletin: [All] Spring Framework (Publicly disclosed vulnerability)

Summary In Spring Framework versions 5.2.0 - 5.2.8, 5.1.0 - 5.1.17, 5.0.0 - 5.0.18, 4.3.0 - 4.3.28, and older unsupported versions, the protections against RFD attacks from CVE-2015-5211 may be bypassed depending on the browser used through the use of a jsessionid path parameter. This effects ITN...

Security Bulletin: [All] Spring Framework - CVE-2021-22096 (Publicly disclosed vulnerability)

Summary In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17, and older unsupported versions, it is possible for a user to provide malicious input to cause the insertion of additional log entries. This effects ITNCM version 6.4.2. Vulnerability Details CVEID:CVE-2021-22096 DESCRIPTION:...

CVE-2023-33599

creationtimestamp| type| source ---|---|--- 2023-05-23 18:26:30+00:00| seen| https://t.me/cibsecurity/64636...

14-18.oise.fr Cross Site Scripting vulnerability OBB-3358684

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2826

creationtimestamp| type| source ---|---|--- 2023-05-21 12:24:18+00:00| seen| https://t.me/cibsecurity/64496...

CVE-2023-30333

creationtimestamp| type| source ---|---|--- 2023-05-18 22:32:34+00:00| seen| https://t.me/cibsecurity/64423 2025-01-23 20:03:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2811...

CVE-2023-32097

creationtimestamp| type| source ---|---|--- 2023-05-18 22:32:28+00:00| seen| https://t.me/cibsecurity/64417 2025-01-21 22:01:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2493...

CVE-2023-32322

creationtimestamp| type| source ---|---|--- 2023-05-18 20:33:05+00:00| seen| https://t.me/cibsecurity/64414...

CVE-2023-20003

creationtimestamp| type| source ---|---|--- 2023-05-18 19:15:49+00:00| seen| https://t.me/cibsecurity/64376...

baeyer.de Cross Site Scripting vulnerability OBB-3353843

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

deportesclm.educa.jccm.es Cross Site Scripting vulnerability OBB-3353638

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

amobee.com Cross Site Scripting vulnerability OBB-3353533

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dalsaram.com Cross Site Scripting vulnerability OBB-3353451

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

alrtil.com Cross Site Scripting vulnerability OBB-3353435

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2789

creationtimestamp| type| source ---|---|--- 2023-05-18 16:32:07+00:00| seen| https://t.me/cibsecurity/64401...

pcexpansion.es Cross Site Scripting vulnerability OBB-3353108

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mci.edu Cross Site Scripting vulnerability OBB-3353065

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...