Critical: Red Hat Security Advisory: jboss-amq-6-amq63-openshift-container security update

An update for jboss-amq-6-amq63-openshift-container is now available for RHEL-7 based Middleware Containers. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

WordPress Ultimate Addons for Contact Form 7 Plugin <= 3.2.6 is vulnerable to Broken Access Control

Software Ultimate Addons for Contact Form 7 Type Plugin Vulnerable versions = 3.2.6 Fixed in 3.2.7 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-47693 Patch priority High CVSS severity High 7.5 Developer Themefic PSID bddec613524f Credits minhtuanact...

Oracle Linux 7 : squid (ELSA-2023-6805)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6805 advisory. - Resolves: CVE-2021-28651 squid: Bug 5104: Memory leak in RFC 2169 response parsing 778 - Resolves: CVE-2021-28652 squid: Bug 5106: Broken cache manager URL...

Oracle Linux 7 : xorg-x11-server (ELSA-2023-6802)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6802 advisory. 1.20.4-24 - CVE fix for: CVE-2023-5367 Resolves: https://issues.redhat.com/browse/RHEL-13424 Tenable has extracted the preceding description block directly from...

Oracle Linux 7 : python3 (ELSA-2023-6823)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6823 advisory. - Remove the 'getfile' feature of pydoc Orabug: 33182027CVE-2021-3426 - Fix buffer overflow in PyCArgrepr Orabug: 32551171CVE-2021-3177 - Test fixups for...

CVE-2023-43787 affecting package libX11 for versions less than 1.8.7-1

CVE-2023-43787 affecting package libX11 for versions less than 1.8.7-1. An upgraded version of the package is available that resolves this issue...

RHEL 7 : python3 (RHSA-2023:6823)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6823 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic dat...

RHEL 7 : squid (RHSA-2023:6805)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6805 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: Denial of...

RHEL 7 : xorg-x11-server (RHSA-2023:6802)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6802 advisory. X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user...

wingdesignstudio.de Improper Access Control vulnerability OBB-3775297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

rodelhaus.de Improper Access Control vulnerability OBB-3775098

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

presswerk.de Improper Access Control vulnerability OBB-3775036

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

dg-heienbach.de Improper Access Control vulnerability OBB-3774743

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bruderschaft.de Improper Access Control vulnerability OBB-3774669

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

at.wetter.com Cross Site Scripting vulnerability OBB-3774421

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bn.cland-med.com Cross Site Scripting vulnerability OBB-3774372

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-47004

creationtimestamp| type| source ---|---|--- 2023-11-07 00:26:06+00:00| seen| https://t.me/cibsecurity/73648 2025-04-29 20:12:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13907...

WordPress WP Google My Business Auto Publish Plugin <= 3.7 is vulnerable to Cross Site Request Forgery (CSRF)

Software WP Google My Business Auto Publish Type Plugin Vulnerable versions = 3.7 Fixed in 3.8 OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2023-47237 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 19fe6caa3a0c Credits...

WordPress ImageMapper Plugin <= 1.2.6 is vulnerable to Broken Access Control

Software ImageMapper Type Plugin Vulnerable versions = 1.2.6 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-5506 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 273249a3fdc4 Credits Lana Codes Required privilege...

WordPress Plugin Name: Device Theme Switcher Plugin <= 3.0.2 is vulnerable to Cross Site Request Forgery (CSRF)

Software Plugin Name: Device Theme Switcher Type Plugin Vulnerable versions = 3.0.2 Fixed in N/A OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-47556 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID f206c5d29e7d Credits...