TIBCO Security Advisory: February22, 2023 - TIBCO BusinessConnect -CVE-2023-26214

TIBCO BusinessConnect Reflected XSS Vulnerability Original release date: February 22, 2023 Last revised: --- CVE-2023-26214 Source: TIBCO Software Inc. Products Affected TIBCO BusinessConnect versions 7.3.0 and below The following component is affected: BusinessConnect UI Description The componen...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability CVE-2022-40765 Mitel MiVoice Connect...

CVE-2022-44563

creationtimestamp| type| source ---|---|--- 2023-02-18 13:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7775 2023-02-19 21:50:11+00:00| published-proof-of-concept| Telegram/fV5WAw89TJE3mX7iA0X18pm5lwQ8AySxeotkMKmTKhRCw 2023-02-21 13:05:46+00:00|...

AZL-13606 CVE-2023-0475 affecting package terraform for versions less than 1.3.2-22

HashiCorp go-getter up to 1.6.2 and 2.1.1 is vulnerable to decompression bombs. Fixed in 1.7.0 and 2.2.0...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added...

CVE-2023-23462

creationtimestamp| type| source ---|---|--- 2023-02-15 22:36:56+00:00| seen| https://t.me/cibsecurity/58276...

SUSE CVE-2012-5248

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK...

SUSE CVE-2012-5251

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK...

SUSE CVE-2012-5255

Buffer overflow in Adobe Flash Player before 10.3.183.29 and 11.x before 11.4.402.287 on Windows and Mac OS X, before 10.3.183.29 and 11.x before 11.2.202.243 on Linux, before 11.1.111.19 on Android 2.x and 3.x, and before 11.1.115.20 on Android 4.x; Adobe AIR before 3.4.0.2710; and Adobe AIR SDK...

SUSE CVE-2018-6876

The OLEProperty class in ole/oleprop.cpp in libfpx 1.3.1-10, as used in ImageMagick 7.0.7-22 Q16 and other products, allows remote attackers to cause a denial of service stack-based buffer under-read via a crafted bmp image...

CVE-2023-23379

creationtimestamp| type| source ---|---|--- 2023-02-14 22:41:58+00:00| seen| https://t.me/cibsecurity/58169...

CVE-2023-21706

creationtimestamp| type| source ---|---|--- 2023-02-14 22:35:56+00:00| seen| https://t.me/cibsecurity/58149 2023-02-22 03:33:02+00:00| seen| https://t.me/realvulnerabilities/6...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view the newly add...

leiria2020-21-22.com Cross Site Scripting vulnerability OBB-3192820

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view the newly...

CVE-2023-24689

creationtimestamp| type| source ---|---|--- 2023-02-09 22:26:28+00:00| seen| https://t.me/cibsecurity/57874...

CVE-2023-25150 Document content of files can be obtained through Collabora for files of other users

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users...

CVE-2022-32656

creationtimestamp| type| source ---|---|--- 2023-02-06 22:23:47+00:00| seen| https://t.me/cibsecurity/57591 2023-07-10 13:19:09+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/2706...

CVE-2022-4664

creationtimestamp| type| source ---|---|--- 2023-02-06 22:23:26+00:00| seen| https://t.me/cibsecurity/57576 2025-03-25 21:25:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8775...

Mitsubishi Electric Multiple Factory Automation Products (Update D)

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GOT2000 compatible HMI software, CC-Link IE TSN Industrial Managed Switch, MELSEC iQ-R Series OPC UA Server Module Vulnerabilities: Infinite Loop, OS Command Injection 2...