4191 matches found
Fedora 39 : dotnet6.0 (2023-1dd7cbebc9)
The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1dd7cbebc9 advisory. This is the October 24, 2023 release for .NET 6. Release Notes: https://github.com/dotnet/core/blob/main/release-notes/6.0/6.0.24/6.0.24.md Tenable has...
Adobe Photoshop 24.x < 24.7.2 / 25.x < 25.1 Multiple Vulnerabilities (macOS APSB23-56)
The version of Adobe Photoshop installed on the remote macOS or Mac OS X host is prior to 24.7.2/25.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb23-56 advisory. - Adobe Photoshop versions 24.7.1 and earlier and 25.0 and earlier are affected by an out-of-bound...
PT-2023-7136 · Adobe · Audition
Name of the Vulnerable Software and Affected Versions: Adobe Audition versions 24.0 and earlier Adobe Audition versions 23.6.1 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...
schweden-urlaub-24.de Improper Access Control vulnerability OBB-3775153
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
24-gute-taten.de Improper Access Control vulnerability OBB-3774561
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-37283
creationtimestamp| type| source ---|---|--- 2023-10-25 22:49:24+00:00| seen| https://t.me/cibsecurity/72877...
hotel-stern-geiselwind.de Improper Access Control vulnerability OBB-3765111
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
envies-server.de Improper Access Control vulnerability OBB-3764988
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-46058
creationtimestamp| type| source ---|---|--- 2023-10-24 07:37:58+00:00| seen| https://t.me/cibsecurity/72805...
CVE-2023-45966
creationtimestamp| type| source ---|---|--- 2023-10-24 00:38:02+00:00| seen| https://t.me/cibsecurity/72803...
CVE-2023-46603
creationtimestamp| type| source ---|---|--- 2023-10-24 00:37:57+00:00| seen| https://t.me/cibsecurity/72800...
CVE-2023-33840
creationtimestamp| type| source ---|---|--- 2023-10-24 00:37:56+00:00| seen| https://t.me/cibsecurity/72799...
CVE-2023-27152
creationtimestamp| type| source ---|---|--- 2023-10-24 00:37:47+00:00| seen| https://t.me/cibsecurity/72793...
WordPress Mediabay Plugin <= 1.6 is vulnerable to Broken Access Control
Software Mediabay Type Plugin Vulnerable versions = 1.6 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-46612 Patch priority Medium CVSS severity Medium 4.3 Developer Claim ownership PSID 01f288807115 Credits emad Required privilege Subscriber...
WordPress DoLogin Security Plugin <= 3.7.1 is vulnerable to Broken Access Control
Software DoLogin Security Type Plugin Vulnerable versions = 3.7.1 Fixed in 3.8 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-46608 Patch priority Medium CVSS severity Medium 5.3 Developer Claim ownership PSID 5adc7395b967 Credits Mika Required privilege...
CVE-2023-4488
creationtimestamp| type| source ---|---|--- 2023-10-20 03:30:00+00:00| published-proof-of-concept| https://t.me/codeb0ss/1259 2023-10-24 19:46:01+00:00| published-proof-of-concept| Telegram/MH7W9xti9Ufogoeh4Aj-lvsVoLvgje1UwX9vgwgn1I1IA...
Vulnerability Scanning: How Often Should I Scan?
The time between a vulnerability being discovered and hackers exploiting it is narrower than ever – just 12 days. So it makes sense that organizations are starting to recognize the importance of not leaving long gaps between their scans, and the term "continuous vulnerability scanning" is becomin...
23-24-198-139-static.hfc.comcastbusiness.net Cross Site Scripting vulnerability OBB-3748194
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
PT-2023-6219 · Nextcloud +2 · Nextcloud Enterprise Server +3
Name of the Vulnerable Software and Affected Versions: Nextcloud Server versions 25.0.0 through 25.0.8 Nextcloud Server versions 26.0.0 through 26.0.3 Nextcloud Enterprise Server versions 22.0.0 through 22.2.10.13 Nextcloud Enterprise Server versions 23.0.0 through 23.0.12.8 Nextcloud Enterprise...
