7083 matches found
CVE-2023-23529
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...
CVE-2023-23529
A type confusion issue was addressed with improved checks. This issue is fixed in iOS 15.7.4 and iPadOS 15.7.4, iOS 16.3.1 and iPadOS 16.3.1, macOS Ventura 13.2.1, Safari 16.3. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this...
File Upload Vulnerability in Rainbond
Rainbond is a cloud-native application management platform. Rainbond suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...
D-Link Multiple DIR Devices RCE Vulnerability (Feb 2022)
Multiple D-Link DIR devices are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
WordPress Apollo13 Framework Extensions Plugin <= 1.8.10 is vulnerable to Broken Access Control
Software Apollo13 Framework Extensions Type Plugin Vulnerable versions = 1.8.10 Fixed in 1.9.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-25959 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID e663c34e63b0 Credits István Márton...
D-Link Multiple DIR Devices RCE Vulnerability (Sep 2019)
Multiple D-Link DIR devices are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2023-0962
creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:10+00:00| seen| https://t.me/cibsecurity/58711 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51291...
CVE-2023-0961
creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:09+00:00| seen| https://t.me/cibsecurity/58710 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51290...
Unspecified Vulnerability in Mozilla Firefox (CNVD-2023-68437)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 110, which stems from an invalid down conversion in GetTableSelectionMode, and can be exploited by attackers to cause undefined...
CVE-2023-23530
creationtimestamp| type| source ---|---|--- 2023-02-22 09:45:08+00:00| seen| https://t.me/GhostPrincess/10714 2023-02-22 13:30:07+00:00| exploited| https://t.me/truesecator/4102 2023-02-22 13:59:22+00:00| seen| https://t.me/thehackernews/3083 2023-02-25 06:30:00+00:00| seen|...
U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added three security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of shortcomings is as follows - CVE-2022-47986 CVSS score: 9.8 - IBM Aspera Faspex Code...
U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added three security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of shortcomings is as follows - CVE-2022-47986 CVSS score: 9.8 - IBM Aspera Faspex Code...
CVE-2023-20855
creationtimestamp| type| source ---|---|--- 2023-02-22 02:17:04+00:00| seen| https://t.me/cibsecurity/58655 2023-02-22 09:26:25+00:00| exploited| https://t.me/truesecator/4100...
CVE-2023-0943
creationtimestamp| type| source ---|---|--- 2023-02-21 22:16:49+00:00| seen| https://t.me/cibsecurity/58636 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51280...
K59591931: Drupal vulnerability CVE-2018-7602
Security Advisory Description A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to...
K18193959: Spring Framework vulnerability CVE-2018-1258
Security Advisory Description Spring Security in combination with Spring Framework versions prior to 5.0.6 contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CVE-2018-1258 Impact Traffix SD...
CVE-2023-0938
creationtimestamp| type| source ---|---|--- 2023-02-21 12:16:42+00:00| seen| https://t.me/cibsecurity/58570 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51288...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability CVE-2022-40765 Mitel MiVoice Connect...