CVE-2023-22959

creationtimestamp| type| source ---|---|--- 2023-01-11 07:29:07+00:00| seen| https://t.me/cibsecurity/56331...

CVE-2023-21781

creationtimestamp| type| source ---|---|--- 2023-01-11 00:34:57+00:00| seen| https://t.me/cibsecurity/56281...

CVE-2023-21559

creationtimestamp| type| source ---|---|--- 2023-01-11 00:28:54+00:00| seen| https://t.me/cibsecurity/56260...

CVE-2022-38490

creationtimestamp| type| source ---|---|--- 2023-01-11 00:28:50+00:00| seen| https://t.me/cibsecurity/56257...

Security Updates for Microsoft Office Products C2R (January 2023)

The Microsoft Office Products are missing a security update. It is, therefore, affected by multiple remote code execution vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable,...

WordPress WC Vendors Marketplace Plugin < 2.4.5 is vulnerable to Cross Site Scripting (XSS)

Software WC Vendors Marketplace Type Plugin Vulnerable versions 2.4.5 Fixed in 2.4.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-0072 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID c2abc726ee8e Credits Lana Codes...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Jan 2023)

This host is missing a critical security update according to Microsoft Office Click-to-Run update January 2023 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

Security Updates for Microsoft Visio Products C2R (January 2023)

The Microsoft Visio Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, including the following: - Multiple remote code execution vulnerabilities. CVE-2023-21736, CVE-2023-21737, CVE-2023-21738 - An information disclosure vulnerability. CVE-2023-21741...

Patch Tuesday - January 2023

Microsoft is starting the new year with a bang! Today’s Patch Tuesday release addresses almost 100 CVEs. After a relatively mild holiday season, defenders and admins now have a wide range of exciting new vulnerabilities to consider. Two zero-day vulnerabilities emerged today, both affecting a wid...

The January 2023 Patch Tuesday Security Update Review

As we enter the first second Tuesday of the year, it is noteworthy that both Microsoft and Adobe have released their latest security updates and fixes. We invite you to join us as we review and discuss the particulars of these essential security patches. Microsoft Patches for January 2023 Microso...

CVE-2022-3792

creationtimestamp| type| source ---|---|--- 2023-01-10 16:28:24+00:00| seen| https://t.me/cibsecurity/56236...

January 10, 2023—KB5022340 (Monthly Rollup)

None None...

boffice.sut.ac.th Cross Site Scripting vulnerability OBB-3138346

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sistemas.conalep.edu.mx Cross Site Scripting vulnerability OBB-3138178

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Easy Testimonials Plugin < 3.9.3 is vulnerable to Cross Site Scripting (XSS)

Software Easy Testimonials Type Plugin Vulnerable versions 3.9.3 Fixed in 3.9.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4577 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 9b43bd7a7324 Credits Lana Codes Require...

KB5022282: Windows 10 Version 20H2 / Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (January 2023)

The remote Windows host is missing security update 5022282. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2023-21732 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2023-21681 - Window...

WordPress WP-ShowHide Plugin < 1.05 is vulnerable to Cross Site Scripting (XSS)

Software WP-ShowHide Type Plugin Vulnerable versions 1.05 Fixed in 1.05 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4825 Patch priority Medium CVSS severity Medium 6.3 Developer Claim ownership PSID 5336dccd451c Credits Lana Codes Required...

WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4711 Patch priority Medium CVSS severity Medium 4.3 Developer WProyal PSID 242bc7b4f228 Credits Ramuel Gall Required...

WordPress Royal Elementor Addons Plugin <= 1.3.59 is vulnerable to Broken Access Control

Software Royal Elementor Addons Type Plugin Vulnerable versions = 1.3.59 Fixed in 1.3.60 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2022-4700 Patch priority Medium CVSS severity Medium 5.4 Developer WProyal PSID 423004fa0a2f Credits Ramuel Gall Required...

Microsoft 3D Builder app Multiple Remote Code Execution Vulnerabilities (January 2023)

The version of the Microsoft 3D Builder app installed on the remote Windows host is prior or equal to 18.0.1931.0. It is, therefore, affected by multiple unspecified remote code execution vulnerabilities. Note that Nessus has not tested for these issues but has instead relied only on the...