CVE-2023-25504

creationtimestamp| type| source ---|---|--- 2023-04-17 20:41:10+00:00| seen| https://t.me/cibsecurity/62293...

CVE-2023-28488

creationtimestamp| type| source ---|---|--- 2023-04-12 20:44:38+00:00| seen| https://t.me/cibsecurity/61980 2025-02-08 06:03:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3867...

CVE-2023-29210

creationtimestamp| type| source ---|---|--- 2023-04-12 15:24:56+00:00| published-proof-of-concept| https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-p9mj-v5mf-m82x 2023-04-15 20:26:52+00:00| seen| https://t.me/cibsecurity/62235...

CVE-2023-22642

creationtimestamp| type| source ---|---|--- 2023-04-11 20:23:44+00:00| seen| https://t.me/cibsecurity/61900...

CVE-2022-42470

creationtimestamp| type| source ---|---|--- 2023-04-11 20:23:23+00:00| seen| https://t.me/cibsecurity/61885...

Input validation

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2022-42477

Fortinet FortiAnalyzer is affected by CVE-2022-42477 due to an improper input validation vulnerability (CWE-20). The issue allows an authenticated attacker to disclose file system information via custom dataset SQL queries. Affected product versions include FortiAnalyzer 7.2.1 and earlier, 7.0.6 ...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to XML external entity (XXE) attacks due to a vulnerability in XML processing in Apache Jena, in versions up to 4.1.0 (CVE-2021-39239)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to CVE-2021-39239 due to a vulnerability in XML processing in Apache Jena, in versions up to 4.1.0. Apache Jena is used by IBM Engineering Requirements Management DOORS Next for working with RDF models. The fix disables...

Improper input validation in custom dataset

An improper input validation vulnerability CWE-20 in FortiAnalyzer & FortiManager may allow an authenticated attacker to disclose file system information via custom dataset SQL queries. If enabled, disabled the FortiAnalyzer features option in FortiManager via: FortiManager 100C is not impacted d...

Siemens in OPC Foundation Local Discovery Server

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2023-1879

creationtimestamp| type| source ---|---|--- 2023-04-05 20:26:43+00:00| seen| https://t.me/cibsecurity/61487...

CVE-2023-21085

creationtimestamp| type| source ---|---|--- 2023-04-04 11:36:07+00:00| published-proof-of-concept| https://t.me/dilagrafie/2851 2023-04-07 11:00:06+00:00| seen| https://t.me/truesecator/4263 2025-02-06 02:44:20+00:00| seen| Telegram/-nSwXv397STRLBiKKVR6EOs6hUxpNxdOEBypwhd08fB81Uw...

CVE-2023-1703

creationtimestamp| type| source ---|---|--- 2023-03-29 20:15:42+00:00| seen| https://t.me/cibsecurity/61028...

CVE-2023-1704

creationtimestamp| type| source ---|---|--- 2023-03-29 20:15:33+00:00| seen| https://t.me/cibsecurity/61022...

Schneider Electric PowerLogic Improper Input Validation (CVE-2021-22767)

UNSUPPORTED WHEN ASSIGNED A CWE-20: Improper Input Validation vulnerability exists in PowerLogic EGX100 Versions 3.0.0 and newer and PowerLogic EGX300 All Versions that could cause denial of service or remote code execution via a specially crafted HTTP packet.This CVE ID is unique from...

CVE-2023-1637

creationtimestamp| type| source ---|---|--- 2023-03-28 02:26:21+00:00| seen| https://t.me/cibsecurity/60851...

This Week in Spring - March 28th, 202

Hi, Spring fans! Welcome to another installment of This Week in Spring! I'm reporting to you from Los Angeles, where my family and I have gone for my daughter's spring break. We're going to survey some prospective colleges and we're going to Disneyland. Needless to say, I'm doubly glad to have al...

CVE-2023-1093

creationtimestamp| type| source ---|---|--- 2023-03-27 20:50:08+00:00| seen| https://t.me/cibsecurity/60807 2025-02-20 01:27:44+00:00| seen| Telegram/fvfMuO5J67mdwHawy3OavQaNKCVfqCax1-kMhDESPg8knhb...

CVE-2023-0495

creationtimestamp| type| source ---|---|--- 2023-03-27 20:50:04+00:00| seen| https://t.me/cibsecurity/60804 2025-02-20 01:27:44+00:00| seen| Telegram/vyfc9JHaNZjobzsOs03YDgtqdyftRbLjqRIWAtXSQqcmg3hB...