CVE-2022-2177

creationtimestamp| type| source ---|---|--- 2022-09-20 14:39:03+00:00| seen| https://t.me/cibsecurity/50136...

CVE-2022-3005

creationtimestamp| type| source ---|---|--- 2022-09-20 14:38:59+00:00| seen| https://t.me/cibsecurity/50132...

helixlibrary.org Cross Site Scripting vulnerability OBB-2937418

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3000

creationtimestamp| type| source ---|---|--- 2022-09-20 12:39:08+00:00| seen| https://t.me/cibsecurity/50129...

CVE-2022-39955

creationtimestamp| type| source ---|---|--- 2022-09-20 12:39:07+00:00| seen| https://t.me/cibsecurity/50128 2023-01-20 11:00:21+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7582 2023-01-20 20:25:07+00:00| published-proof-of-concept| https://t.me/crackcodes/2342...

CVE-2022-39958

creationtimestamp| type| source ---|---|--- 2022-09-20 12:39:01+00:00| seen| https://t.me/cibsecurity/50124...

Security update 2022-09-20

...

CVE-2022-0143

creationtimestamp| type| source ---|---|--- 2022-09-20 02:38:37+00:00| seen| https://t.me/cibsecurity/50113...

CVE-2022-38545

creationtimestamp| type| source ---|---|--- 2022-09-20 02:38:28+00:00| seen| https://t.me/cibsecurity/50107...

CVE-2022-35063

creationtimestamp| type| source ---|---|--- 2022-09-20 02:38:20+00:00| seen| https://t.me/cibsecurity/50099...

CVE-2022-35061

creationtimestamp| type| source ---|---|--- 2022-09-20 02:38:20+00:00| seen| https://t.me/cibsecurity/50100...

CVE-2022-23768

creationtimestamp| type| source ---|---|--- 2022-09-20 00:38:57+00:00| seen| https://t.me/cibsecurity/50093...

CVE-2022-38576

creationtimestamp| type| source ---|---|--- 2022-09-20 00:38:55+00:00| seen| https://t.me/cibsecurity/50091...

CVE-2022-29835

creationtimestamp| type| source ---|---|--- 2022-09-20 00:38:48+00:00| seen| https://t.me/cibsecurity/50087...

CVE-2022-2995

creationtimestamp| type| source ---|---|--- 2022-09-20 00:38:47+00:00| seen| https://t.me/cibsecurity/50086...

PT-2022-6462 · Esr-20 · Esr-20

Name of the Vulnerable Software and Affected Versions: ESR-20 affected versions not specified Description: The issue is related to an uncontrolled resource consumption in the ESR-20 service router's firmware. Exploitation of this issue may allow an attacker to cause a denial of service...

PT-2022-6461 · Esr-20 · Esr-20

Name of the Vulnerable Software and Affected Versions: ESR-20 affected versions not specified Description: The issue is related to the lack of protection for service data in the ntpd daemon microcode of the ESR-20 service router. This could allow a remote attacker to gain preliminary information...

JVN#30900552: EC-CUBE plugin "Product Image Bulk Upload Plugin" vulnerable to insufficient verification in uploading files

EC-CUBE plugin "Product Image Bulk Upload Plugin", a plugin that enables to upload image files, provided by EC-CUBE CO.,LTD. contains an insufficient verification vulnerability when uploading files CWE-20. Exploiting this vulnerability allows a remote unauthenticated attacker to upload arbitrary...

JVN#36454862: Multiple vulnerabilities in Trend Micro Apex One and Trend Micro Apex One as a Service

Trend Micro Apex One and Trend Micro Apex One as a Service provided by Trend Micro Incorporated contain multiple vulnerabilities listed below. Improper validation in some components of the rollback mechanism CWE-20 - CVE-2022-40139 Version| Vector| Score ---|---|--- CVSS v3|...

CVE-2022-1700

Improper Restriction of XML External Entity Reference 'XXE' vulnerability in the Policy Engine of Forcepoint Data Loss Prevention DLP, which is also leveraged by Forcepoint One Endpoint F1E, Web Security Content Gateway, Email Security with DLP enabled, and Cloud Security Gateway prior to June 20...