4139 matches found
WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software Awesome Support Type Plugin Vulnerable versions = 6.1.4 Fixed in 6.1.5 OWASP Top 10 A2: Broken Authentication Classification Cross Site Request Forgery CSRF CVE CVE-2023-48323 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID afdaccd9618c Credits thiennv Required...
WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)
Software Video Player Type Plugin Vulnerable versions = 1.5.22 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48320 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 90d3d469b500 Credits SeungYongLee Required privilege...
WordPress Mollie Payments for WooCommerce Plugin <= 7.3.11 is vulnerable to Arbitrary File Upload
Software Mollie Payments for WooCommerce Type Plugin Vulnerable versions = 7.3.11 Fixed in 7.3.12 OWASP Top 10 A3: Injection Classification Arbitrary File Upload CVE CVE-2023-6090 Patch priority Medium CVSS severity Medium 9.1 Developer Claim ownership PSID 5c0982698e82 Credits Rafie Muhammad...
WordPress Quttera Web Malware Scanner Plugin <= 3.4.1.48 is vulnerable to Sensitive Data Exposure
Software Quttera Web Malware Scanner Type Plugin Vulnerable versions = 3.4.1.48 Fixed in 3.4.2.1 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-6065 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 6c25e4bb0dc6 Credits Dmitrii...
WordPress MyBookTable Bookstore Plugin <= 3.3.4 is vulnerable to Cross Site Request Forgery (CSRF)
Software MyBookTable Bookstore Type Plugin Vulnerable versions = 3.3.4 Fixed in 3.3.5 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-48331 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID ac06dff1976c Credits Nguyen Xuan...
Fortinet Fortigate DOS in headers management (FG-IR-23-151)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-151 advisory. - A numeric truncation error in Fortinet FortiProxy version 7.2.0 through 7.2.4, FortiProxy version 7.0.0 through 7.0.10,...
CVE-2023-47613
CVE-2023-47613 describes a Relative Path Traversal in Telit Cinterion modems: BGS5, EHS5/6/8, PDS5/6/8, ELS61/81, and PLS62. The vulnerability could allow a local, low-privileged attacker to escape from virtual directories and obtain read/write access to protected files on the targeted system. Th...
Fedora 39 : plantuml (2023-731133ab8e)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-731133ab8e advisory. Update plantuml to the latest version v1.2023.11. This update also includes fixes for CVE-2023-3431 and CVE-2023-3432. Tenable has extracted the...
CVE-2023-26015
creationtimestamp| type| source ---|---|--- 2023-11-03 15:23:27+00:00| seen| https://t.me/cibsecurity/73522...
CVE-2023-36034
creationtimestamp| type| source ---|---|--- 2023-11-03 06:23:09+00:00| seen| https://t.me/cibsecurity/73496...
CVE-2023-45331
creationtimestamp| type| source ---|---|--- 2023-11-02 17:23:01+00:00| seen| https://t.me/cibsecurity/73454...
CVE-2023-46290
creationtimestamp| type| source ---|---|--- 2023-10-27 22:17:25+00:00| seen| https://t.me/cibsecurity/73078 2024-05-22 17:00:07+00:00| seen| https://t.me/truesecator/5765 2024-05-23 07:59:37+00:00| seen| https://t.me/itsecnews/4458 2024-05-23 08:02:39+00:00| seen| https://t.me/icscert/847...
CVE-2023-5815
creationtimestamp| type| source ---|---|--- 2023-10-27 00:48:27+00:00| published-proof-of-concept| Telegram/5yeBsb7M6b9m6ADcmx7vtW5P2ilDEuaHNka0XyBqQNC1Lw 2023-10-29 10:36:43+00:00| published-proof-of-concept| https://t.me/CNArsenal/1385 2023-10-29 13:16:15+00:00| published-proof-of-concept|...
CVE-2023-46417
creationtimestamp| type| source ---|---|--- 2023-10-26 00:39:23+00:00| seen| https://t.me/cibsecurity/72912...
Fedora: Security Advisory for fbthrift (FEDORA-2023-17efd3f2cd)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 38 Update: fizz-2023.10.16.00-1.fc38
Fizz is a TLS 1.3 implementation. Fizz currently supports TLS 1.3 drafts 28, 26 both wire-compatible with the final specification, and 23. All major handshake modes are supported, includ ing PSK resumption, early data, client authentication, and HelloRetryRequest...
[SECURITY] Fedora 37 Update: fizz-2023.10.16.00-1.fc37
Fizz is a TLS 1.3 implementation. Fizz currently supports TLS 1.3 drafts 28, 26 both wire-compatible with the final specification, and 23. All major handshake modes are supported, includ ing PSK resumption, early data, client authentication, and HelloRetryRequest...
Moodle 4.0.x < 4.0.11, 4.1.x < 4.1.6, 4.2.x < 4.2.3 Multiple Vulnerabilities (MSA-23-0035, MSA-23-0038)
Moodle is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:moodle:moodle"; ifdescription...