29831 matches found
February 14, 2023āKB5022834 (OS Builds 19042.2604, 19044.2604, and 19045.2604) - EXPIRED
None None...
Internet Explorer help
None None...
JSA10361 - Pulse Connect Secure (PCS) ActiveX client vulnerability
Last Modified Date Aug 24, 2026 12:35:33 AM...
FormBook Malware Spreads via Malvertising Using MalVirt Loader to Evade Detection
An ongoing malvertising campaign is being used to distribute virtualized .NET loaders that are designed to deploy the FormBook information-stealing malware. "The loaders, dubbed MalVirt, use obfuscated virtualization for anti-analysis and evasion along with the Windows Process Explorer driver for...
FormBook Malware Spreads via Malvertising Using MalVirt Loader to Evade Detection
An ongoing malvertising campaign is being used to distribute virtualized .NET loaders that are designed to deploy the FormBook information-stealing malware. "The loaders, dubbed MalVirt, use obfuscated virtualization for anti-analysis and evasion along with the Windows Process Explorer driver for...
MalVirt: .NET Malware Loaders Spread through Malvertising Attacks
Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary MalVirt is a cluster of virtualized .NET malware loaders are distributed through malvertising attacks that use obfuscated virtualization and the Windows Process Explorer driver to evade anti-analysis and...
CVE-2023-23075
Cross Site Scripting XSS vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation...
CVE-2023-23075
Cross Site Scripting XSS vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation...
Cross site scripting
Cross Site Scripting XSS vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation...
CVE-2023-23075
Cross Site Scripting XSS vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation...
CVE-2023-23075
Cross Site Scripting XSS vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation...
CVE-2023-23075: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting XSS vulnerability in Zoho Asset Explorer 6.9 via the credential name when creating a new Assets Workstation...
PT-2023-18834 Ā· Zoho Ā· Zoho Asset Explorer
Name of the Vulnerable Software and Affected Versions: Zoho Asset Explorer version 6.9 Description: A Cross Site Scripting XSS issue exists in Zoho Asset Explorer via the credential name when creating a new Assets Workstation. This allows for potential malicious script execution. Recommendations:...
CVE-2023-23075
CVE-2023-23075 affects Zoho Asset Explorer 6.9 with a Cross Site Scripting (XSS) vulnerability exploitable via the credential name field when creating a new Assets Workstation. The CVSS v3.1 vector indicates Network attack, Low attack complexity, no privileges required, user interaction required,...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Watson Explorer and Watson Explorer Content Analytics Studio (CVE-2022-21626)
Summary There are multiple vulnerabilities in IBMĀ® Runtime Environment Javaā¢ Version 8 used by Watson Explorer and Watson Explorer Content Analytics Studio. Watson Explorer and Watson Explorer Content Analytics Studio have addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21626...
November 8, 2022āKB5019959 (OS Builds 19042.2251, 19043.2251, 19044.2251, and 19045.2251) - EXPIRED
None None...
November 8, 2022āKB5019980 (OS Build 22621.819)
None None...
Security Bulletin: IBM MQ Explorer is vulnerable to an XML External Entity Injection (XXE) attack (CVE-2022-22489)
Summary IBM MQ Explorer is vulnerable to an XML External Entity Injection XXE attack due to improper XML validation in the import Wizard. Vulnerability Details CVEID:CVE-2022-22489 DESCRIPTION: IBM MQ is vulnerable to an XML External Entity Injection XXE attack when processing XML data. A remote...
awarc (>=0.0.1, <=0.0.4), lungs-segmentation (>=1.1.1, <=1.1.2) +1 more potentially affected by CVE-2022-40897 via setuptools (49.2.0)
setuptools PYPI version 49.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - awarc =0.0.1, =1.1.1, =0.0.14, =0.0.17 Source cves: CVE-2022-40897 Source advisory: OSV:GHSA-R9HX-VWMV-Q579...
awarc (>=0.0.1, <=0.0.4), lungs-segmentation (>=1.1.1, <=1.1.2) +1 more potentially affected by CVE-2022-40897 via setuptools (49.2.0)
setuptools PYPI version 49.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - awarc =0.0.1, =1.1.1, =0.0.14, =0.0.17 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...