CVE-2023-44047

creationtimestamp| type| source ---|---|--- 2023-09-28 00:42:00+00:00| seen| https://t.me/cibsecurity/71160...

PT-2023-28594 · Unknown · Common Voice

Name of the Vulnerable Software and Affected Versions: Common Voice version 1.88.2 Description: The issue is related to reflected Cross-Site Scripting XSS in the context of Common Voice’s server origin, given that user-controlled data flows to a path expression. This may lead to reflected...

CVE-2023-35813

creationtimestamp| type| source ---|---|--- 2023-09-26 15:23:42+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/7811 2023-12-31 05:27:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6343 2024-01-01 05:39:46+00:00| seen| https://t.me/arpsyndicate/2298 2024-01-01...

fido-device-onboard bug fix and enhancement update

An update is available for fido-device-onboard. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The fido-device-onboard package provides a rust implementation of...

dmidecode security update

An update is available for dmidecode. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The dmidecode packages provide utilities for extracting Intel 64 and Intel...

CVE-2023-38907

An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...

Security Bulletin: IBM Events Operator is affected by an openssl vulnerability

Summary Openssl is used by IBM Events Operator as part of the Operating System CVE-2022-4304. This is a library that provides secure communication. Vulnerability Details CVEID:CVE-2022-4304 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by a timing-base...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-41991 Apple Multiple Products Improper Certificate Validation Vulnerability CVE-2023-41992 Apple Multiple Products Kernel Privilege Escalation Vulnerability...

CVE-2022-9648

creationtimestamp| type| source ---|---|--- 2023-09-23 00:28:36+00:00| seen| Telegram/yK-Um5pIgelPVQQzco5rC215RhA6M6d9eM9-8X6BajCtaNp...

CVE-2022-4039

creationtimestamp| type| source ---|---|--- 2023-09-22 18:31:51+00:00| seen| https://t.me/cibsecurity/70948...

ROS-20230922-01

Vulnerability in the StringSubstitutor component of the Apache Common Text library is related to mismanagement of code generation. code generation. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary code...

CVE-2023-42280

mee-admin 1.5 is vulnerable to Directory Traversal. The download method in the CommonFileController.java file does not verify the incoming data, resulting in arbitrary file reading...

Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2022-4450).

Summary OpenSSL is used by IBM Events Operator as part of the Operating System CVE-2022-4450. Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbioe...

Security Bulletin: IBM Events Operator is affected by a denial of service in OpenSSL (CVE-2023-0215).

Summary OpenSSL is used by IBM Events Operator as part of its Operating System CVE-2023-0215. Vulnerability Details CVEID:CVE-2023-0215 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a use-after-free error related to the incorrect handling of streaming ASN.1 data by the...

CVE-2023-20594

creationtimestamp| type| source ---|---|--- 2023-09-20 22:29:33+00:00| seen| https://t.me/cibsecurity/70826 2025-06-27 21:55:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19793...

UBUNTU-CVE-2023-4504

Due to failure in validating the length provided by an attacker-crafted PPD PostScript document, CUPS and libppd are susceptible to a heap-based buffer overflow and possibly code execution. This issue has been fixed in CUPS version 2.4.7, released in September of 2023...

OpenPrinting CUPS Buffer Error Vulnerability

OpenPrinting CUPS is a standards-based, open source printing system for Linux® and other Unix®-like operating systems from OpenPrinting, Inc. A security vulnerability exists in OpenPrinting CUPS that stems from an inability to verify the length of a CUPS document produced by an attacker, resultin...

CVE-2023-41890

creationtimestamp| type| source ---|---|--- 2023-09-19 18:29:29+00:00| seen| https://t.me/cibsecurity/70728...

CVE-2023-41834

creationtimestamp| type| source ---|---|--- 2023-09-19 16:29:26+00:00| seen| https://t.me/cibsecurity/70718...

Fedora: Security Advisory for python-matrix-common (FEDORA-2023-c0696d7b53)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...