4139 matches found
QNAP QTS / QuTS hero Vulnerability in QTS, QuTS hero, and QuTScloud (QSA-23-37)
The version of QNAP QTS / QuTS hero installed on the remote host is affected by multiple vulnerabilities as referenced in the QSA-23-37 advisory. A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the...
PT-2023-6219 · Nextcloud +2 · Nextcloud Enterprise Server +3
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions 25.0.0 through 25.0.8 Nextcloud Server versions 26.0.0 through 26.0.3 Nextcloud Enterprise Server versions 22.0.0 through 22.2.10.13 Nextcloud Enterprise Server versions 23.0.0 through 23.0.12.8 Nextcloud Enterprise...
CVE-2023-27516
creationtimestamp| type| source ---|---|--- 2023-10-12 20:23:23+00:00| seen| https://t.me/cibsecurity/72185...
CVE-2023-45048
creationtimestamp| type| source ---|---|--- 2023-10-12 16:23:12+00:00| seen| https://t.me/cibsecurity/72171...
Fortinet Fortigate Improper authorization via prof-admin profile (FG-IR-23-318)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-318 advisory. - An improper authorization vulnerability in Fortinet FortiOS 7.0.0 - 7.0.11 and 7.2.0 - 7.2.4 allows an attacker belonging t...
CVE-2023-36571
creationtimestamp| type| source ---|---|--- 2023-10-10 22:23:09+00:00| seen| https://t.me/cibsecurity/72025...
Microsoft Exchange Server Security Vulnerability
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. An attacker can exploit the...
Fortinet Fortigate Webproxy process DoS (FG-IR-23-184)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-184 advisory. - A use after free vulnerability CWE-416 in FortiOS version 7.2.0 through 7.2.4 and version 7.0.0 through 7.0.10 and FortiPro...
CVE-2023-39194
creationtimestamp| type| source ---|---|--- 2023-10-09 22:16:03+00:00| seen| https://t.me/cibsecurity/71851...
QNAP QuTS hero Multiple Vulnerabilities (QSA-23-37)
QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...
(0Day) D-Link Multiple Routers cli Command Injection Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DIR-1260 and DIR-2150 routers. Authentication is required to exploit this vulnerability. The specific flaw exists within the CLI service, which listens on TCP port 23. The issue...
PT-2023-5700 · D Link · D-Link Dap-2622
Name of the Vulnerable Software and Affected Versions: D-Link DAP-2622 Description: This issue involves a command injection flaw within the Telnet CLI service, listening on TCP port 23, of the D-Link DAP-2622. The flaw stems from insufficient validation of user-supplied strings before they are us...
JVN#17434995: Shihonkanri Plus vulnerable to relative path traversal
Shihonkanri Plus provided by EKAKIN contains a relative path traversal vulnerability CWE-23. Impact An attacker may execute arbitrary code by having a legitimate user import a specially crafted backup file of the product. Solution Update the software Update the software to the latest version...
CVE-2023-41302
creationtimestamp| type| source ---|---|--- 2023-09-25 16:39:23+00:00| seen| https://t.me/cibsecurity/70992...
feelsport.be Cross Site Scripting vulnerability OBB-3705118
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
atthevilla.be Cross Site Scripting vulnerability OBB-3704662
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2018-1002205
creationtimestamp| type| source ---|---|--- 2023-09-23 17:42:16+00:00| seen| https://t.me/itsecnews/3280...
CVE-2023-5134
creationtimestamp| type| source ---|---|--- 2023-09-23 12:32:30+00:00| seen| https://t.me/cibsecurity/70962...