CVE-2023-38737

IBM WebSphere Application Server Liberty 22.0.0.13 through 23.0.0.7 is vulnerable to a denial of service, caused by sending a specially-crafted request. A remote attacker could exploit this vulnerability to cause the server to consume memory resources. IBM X-Force ID: 262567...

CVE-2023-4325

creationtimestamp| type| source ---|---|--- 2023-08-15 22:31:03+00:00| seen| https://t.me/cibsecurity/68583...

CVE-2023-4333

creationtimestamp| type| source ---|---|--- 2023-08-15 22:30:48+00:00| seen| https://t.me/cibsecurity/68572...

CVE-2020-36138

creationtimestamp| type| source ---|---|--- 2023-08-11 18:22:55+00:00| seen| https://t.me/cibsecurity/68370...

CVE-2021-28025

creationtimestamp| type| source ---|---|--- 2023-08-11 18:22:48+00:00| seen| https://t.me/cibsecurity/68365...

CVE-2023-4304

creationtimestamp| type| source ---|---|--- 2023-08-11 07:32:22+00:00| seen| https://t.me/cibsecurity/68307 2024-01-26 22:00:37+00:00| seen| https://t.me/arpsyndicate/3088...

CVE-2023-38184

creationtimestamp| type| source ---|---|--- 2023-08-08 22:20:31+00:00| seen| https://t.me/cibsecurity/68054...

Important: openssh

Issue Overview: The PKCS11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if the target user's ssh-agent is forwarded to an attacker-controlled system the code in /usr/lib is not necessarily safe for loading into...

CVE-2023-37218

Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

Path traversal

Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2023-37218

CVE-2023-37218 affects Tadiran Telecom Aeonix (software UC&C). The vulnerability is a Path Traversal (CWE-22) due to improper limitation of a pathname to a restricted directory. Attack vector is NETWORK with no authentication required and no user interaction; CVSS 3.1 base score 7.5 (HIGH) with C...

CVE-2023-37218 Tadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted Directory

Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2023-37218 Tadiran Telecom Aeonix - CWE-22: Improper Limitation of a Pathname to a Restricted Directory

Tadiran Telecom Aeonix - CWE-22 Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2022-31200

creationtimestamp| type| source ---|---|--- 2023-07-27 22:28:45+00:00| seen| https://t.me/cibsecurity/67342...

CVE-2023-3242

creationtimestamp| type| source ---|---|--- 2023-07-26 22:27:54+00:00| seen| https://t.me/cibsecurity/67311...

AZL-35126 CVE-2023-37920 affecting package python-certifi for versions less than 2023.05.07-1.cm2

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi prior to version 2023.07.22 recognizes "e-Tugra" root certificates. e-Tugra's root certificates were subject to an investigation prompted ...

Design/Logic Flaw

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious...

Design/Logic Flaw

An issue was discovered in Nokia NetAct 22. A remote user, authenticated to the website, can visit the Site Configuration Tool section and arbitrarily upload potentially dangerous files without restrictions via the /netact/sct dir parameter in conjunction with the operation=upload value...

CVE-2022-28865

An issue was discovered in Nokia NetAct 22 through the Site Configuration Tool website section. A malicious user can change a filename of an uploaded file to include JavaScript code, which is then stored and executed by a victim's web browser. The most common mechanism for delivering malicious...

PT-2023-12954 · Nokia · Nokia Netact

Name of the Vulnerable Software and Affected Versions: Nokia NetAct version 22 Description: An issue was discovered in the Administration of Measurements website section, where a malicious user can edit or add the templateName parameter to include malicious code. This code is then downloaded as a...