CVE-2021-0035

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

CVE-2023-33005

Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login...

CVE-2023-32313 Inspect method manipulation in vm2

vm2 is a sandbox that can run untrusted code with Node's built-in modules. In versions 3.9.17 and lower of vm2 it was possible to get a read-write reference to the node inspect method and edit options for console.log. As a result a threat actor can edit options for the console.log command. This...

CVE-2023-31845

Sourcecodester Faculty Evaluation System v1.0 is vulnerable to SQL Injection via /eval/admin/manageclass.php?id=...

meteorite-identification.com Cross Site Scripting vulnerability OBB-3332681

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-31914

Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...

CVE-2023-2645

creationtimestamp| type| source ---|---|--- 2023-05-11 12:15:17+00:00| seen| https://t.me/cibsecurity/63867 2025-01-19 21:02:02+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg4pubboct2z...

New Discord username policy raises user privacy fears

Discord, the Voice over IP VoIP and instant message communications tool, is changing how usernames function in a major way soon. Many users are not keen on this change at all. What is going on over there, and why are so many people concerned about the upcoming alterations? When Discord launched...

CVE-2023-29336

creationtimestamp| type| source ---|---|--- 2023-05-09 22:12:11+00:00| exploited| https://t.me/ctinow/110762 2023-05-09 22:44:47+00:00| seen| https://t.me/cibsecurity/63672 2023-05-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1023 2023-05-10 07:39:00+00:00| exploited...

CVE-2021-26354

Insufficient bounds checking in ASP may allow an attacker to issue a system call from a compromised ABL which may cause arbitrary memory values to be initialized to zero, potentially leading to a loss of integrity...

CVE-2022-23818

Insufficient input validation on the model specific register: VMHSAVEPA may potentially lead to loss of SEV-SNP guest memory integrity...

CVE-2022-48250

In audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges...

CVE-2022-48234

In FM service , there is a possible missing params check. This could lead to local denial of service in FM service...

CVE-2023-23523

creationtimestamp| type| source ---|---|--- 2023-05-09 00:38:21+00:00| seen| https://t.me/cibsecurity/63478...

UltiDev Cassini Detection (HTTP)

HTTP based detection of UltiDev Cassini. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.126424";...

CVE-2022-30995

Sensitive information disclosure due to improper authentication. The following products are affected: Acronis Cyber Protect 15 Windows, Linux before build 29486, Acronis Cyber Backup 12.5 Windows, Linux before build 16545...

CVE-2023-25789

CVE-2023-25789: WordPress Tapfiliate plugin

The vulnerability of the implementation of the technology for quickly identifying and configuring Cisco Network Plug-and-Play (PnP) devices in the Cisco DNA Center allows a hacker to disclose protected information.

The vulnerability of the implementation of the technology for rapid identification and configuration of Cisco Network Plug-and-Play PnP devices in the Cisco DNA Center is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclos...

CVE-2023-30403

An issue in the time-based authentication mechanism of Aigital Aigital Wireless-N Repeater MiniRouter v0.131229 allows attackers to bypass login by connecting to the web app after a successful attempt by a legitimate user...

Android Security Bulletin—May 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2023-05-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...