5033 matches found
Design/Logic Flaw
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command...
CVE-2023-5399
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command...
CVE-2023-5399
Schneider Electric C-Bus Toolkit (SpaceLogic C-Bus Toolkit) contains a path traversal flaw in the FileCommand feature that can allow unauthenticated remote code execution. The root cause is improper validation of a user-supplied path prior to file operations, enabling an attacker to tamper with f...
CISA Adds Two Known Exploited Vulnerabilities to Catalog, Removes Five KEVs
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation: CVE-2023-42793 JetBrains TeamCity Authentication Bypass Vulnerability CVE-2023-28229 Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability Thes...
CVE-2023-5276
creationtimestamp| type| source ---|---|--- 2023-09-29 22:37:51+00:00| seen| https://t.me/cibsecurity/71324...
CVE-2023-20226
creationtimestamp| type| source ---|---|--- 2023-09-27 22:35:57+00:00| seen| https://t.me/cibsecurity/71134...
Path traversal
Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2023-42487 Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2023-42487 Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2023-41027
creationtimestamp| type| source ---|---|--- 2023-09-22 20:32:00+00:00| seen| https://t.me/cibsecurity/70955...
CVE-2023-41029
creationtimestamp| type| source ---|---|--- 2023-09-22 20:31:52+00:00| seen| https://t.me/cibsecurity/70950...
CVE-2023-23766
creationtimestamp| type| source ---|---|--- 2023-09-22 18:31:49+00:00| seen| https://t.me/cibsecurity/70946...
CVE-2023-22512
creationtimestamp| type| source ---|---|--- 2023-09-22 14:38:21+00:00| seen| https://t.me/truesecator/4880...
club-cloud.de Cross Site Scripting vulnerability OBB-3702770
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-23363
creationtimestamp| type| source ---|---|--- 2023-09-22 09:02:24+00:00| seen| https://t.me/cibsecurity/70938...
communityrelations.unc.edu Cross Site Scripting vulnerability OBB-3702558
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-38344
creationtimestamp| type| source ---|---|--- 2023-09-22 04:38:19+00:00| seen| https://t.me/cibsecurity/70929...
CVE-2023-43128
creationtimestamp| type| source ---|---|--- 2023-09-22 02:44:59+00:00| seen| https://t.me/cibsecurity/70931...