5736 matches found
Siemens TIM 4R-IE Devices Concurrent Execution Using Shared Resource with Improper Synchronization (CVE-2016-4954)
The processpacket function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service peer- variable modification by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication...
APT28 Targets Ukrainian Government Entities with Fake "Windows Update" Emails
The Computer Emergency Response Team of Ukraine CERT-UA has warned of cyber attacks perpetrated by Russian nation-state hackers targeting various government bodies in the country. The agency attributed the phishing campaign to APT28, which is also known by the names Fancy Bear, Forest Blizzard,...
ABB M2M ETHERNET Improper Authentication (CVE-2018-17926)
The product M2M ETHERNET FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...
CVE-2023-28963
An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...
CVE-2023-28963
Summary: CVE-2023-28963 is an Improper Authentication vulnerability in cert-mgmt.php of Juniper Networks Junos OS J-Web component. An unauthenticated, network-based attacker can read arbitrary files from temporary folders on affected devices. Affected software: Juniper Networks Junos OS running J...
CVE-2022-48468
creationtimestamp| type| source ---|---|--- 2023-04-14 00:25:34+00:00| seen| https://t.me/cibsecurity/62098 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...
CVE-2023-25165 affecting package cert-manager for versions less than 1.7.3-8
CVE-2023-25165 affecting package cert-manager for versions less than 1.7.3-8. An upgraded version of the package is available that resolves this issue...
CVE-2023-26551
creationtimestamp| type| source ---|---|--- 2023-04-12 00:29:46+00:00| seen| https://t.me/cibsecurity/61944 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
CVE-2023-28219
creationtimestamp| type| source ---|---|--- 2023-04-12 00:23:39+00:00| seen| https://t.me/cibsecurity/61924 2023-04-12 14:53:28+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1005...
Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter
Impact A reflected cross-site scripting vulnerability has been identified in Goobi viewer core when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the...
GHSA-7V7G-9VX6-VCG2 Goobi viewer Core Reflected Cross-Site Scripting Vulnerability Using LOGID Parameter
Impact A reflected cross-site scripting vulnerability has been identified in Goobi viewer core when evaluating the LOGID parameter. An attacker could trick a user into following a specially crafted link to a Goobi viewer installation, resulting in the execution of malicious script code in the...
CVE-2020-11935
creationtimestamp| type| source ---|---|--- 2023-04-07 07:27:11+00:00| seen| https://t.me/cibsecurity/61638 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...
Wago PFC200 Authentication Bypass (CVE-2016-9362)
An issue was discovered in WAGO 750-8202/PFC200 prior to FW04 released August 2015, WAGO 750-881 prior to FW09 released August 2016, and WAGO 0758-0874-0000-0111. By accessing a specific uniform resource locator URL on the web server, a malicious user is able to edit and to view settings without...
nss: Arbitrary memory write via PKCS 12
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled...
nss: Arbitrary memory write via PKCS 12
The Mozilla Foundation Security Advisory describes this flaw as: An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled...
Tridium Niagara Improper Limitation of a Pathname to a Restricted Directory (CVE-2017-16744)
A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems can be exploited by leveraging valid platform administrator credentials. This plugin only works with Tenable.ot. Please visit...
Tridium Niagara Enterprise Security, Niagara AX, and Niagara 4 Improper Neutralization of Input During Web Page Generation (CVE-2018-18985)
Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may all...
CVE-2023-23415
creationtimestamp| type| source ---|---|--- 2023-03-14 19:28:44+00:00| seen| Telegram/8g8ttYIzDwvdynKAmJV0jqxTzqD1r8FILLeCvlsJapFUyoI 2023-03-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=989 2023-03-15 06:48:08+00:00| seen| https://t.me/moseedo/138 2023-03-15...
