5867 matches found
WordPress JS Help Desk – Best Help Desk & Support Plugin Plugin <= 2.7.7 is vulnerable to Insecure Direct Object References (IDOR)
Software JS Help Desk – Best Help Desk & Support Plugin Type Plugin Vulnerable versions = 2.7.7 Fixed in 2.7.8 OWASP Top 10 A5: Broken Access Control Classification Insecure Direct Object References IDOR CVE CVE-2023-23679 Patch priority Low CVSS severity Low 4.6 Developer Claim ownership PSID...
CVE-2023-2779
creationtimestamp| type| source ---|---|--- 2023-06-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51534...
Synology Router Manager (SRM) 1.2.x Multiple Vulnerabilities (Synology-SA-20:14)
Synology Router Manager SRM is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
GHSA-96XV-RMWJ-6P9W Grav Server-side Template Injection (SSTI) via Twig Default Filters
Hi, actually we have sent the bug report to [email protected] on 27th March 2023 and on 10th April 2023. Grav Server-side Template Injection SSTI via Insufficient Validation in filterFilter Summary: | Product | Grav CMS | | ----------------------- | --------------------------------------------...
PT-2023-20242 · Ibm · Ibm Powervm Hypervisor
Name of the Vulnerable Software and Affected Versions: IBM PowerVM Hypervisor versions FW950.00 through FW950.71 IBM PowerVM Hypervisor versions FW1010.00 through FW1010.40 IBM PowerVM Hypervisor versions FW1020.00 through FW1020.20 IBM PowerVM Hypervisor versions FW1030.00 through FW1030.11...
CVE-2023-34122
creationtimestamp| type| source ---|---|--- 2023-06-13 22:20:12+00:00| seen| https://t.me/cibsecurity/65169...
Mozilla Firefox Security Advisories (MFSA2023-18, MFSA2023-20) - Mac OS X
Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...
KLA49378 Multiple vulnerabilities in Mozilla Firefox
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Memory safety vulnerability can...
Mozilla Firefox < 114.0
The version of Firefox installed on the remote Windows host is prior to 114.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-20 advisory. - Mozilla developers and community members Andrew McCreight, Randell Jesup, and the Mozilla Fuzzing Team reported memory...
CVE-2023-32205
creationtimestamp| type| source ---|---|--- 2023-06-02 20:42:35+00:00| seen| https://t.me/cibsecurity/64940...
CVE-2023-25746
creationtimestamp| type| source ---|---|--- 2023-06-02 20:42:31+00:00| seen| https://t.me/cibsecurity/64937...
CVE-2023-25737
creationtimestamp| type| source ---|---|--- 2023-06-02 20:36:37+00:00| seen| https://t.me/cibsecurity/64902...
Upgraded Q -> 2 from #20 [1685526689823]
Judge has assessed an item in Issue 20 as 2 risk. The relevant finding follows: L-2 Rage quit forfeits pending claims in TokenDistributor --- The text was updated successfully, but these errors were encountered: All reactions...
CVE-2022-47446
creationtimestamp| type| source ---|---|--- 2023-05-24 20:27:06+00:00| seen| https://t.me/cibsecurity/64688...
telefonia.vc Cross Site Scripting vulnerability OBB-3355697
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-1693
creationtimestamp| type| source ---|---|--- 2023-05-20 18:24:01+00:00| seen| https://t.me/cibsecurity/64488...
CVE-2023-1692
creationtimestamp| type| source ---|---|--- 2023-05-20 18:24:00+00:00| seen| https://t.me/cibsecurity/64487...
cmti06.org Cross Site Scripting vulnerability OBB-3355568
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...