SuiteCRM Security Breach

SuiteCRM is a customer relationship management system from the SuiteCRM team. A security vulnerability exists in SuiteCRM versions prior to 7.14.1 that stems from the presence of improper access control...

FD Application Code Issue Vulnerability

FD Application is an application software from FD. A code issue vulnerability exists in FD Application Apr. 2022 Edition 9.01 and prior versions that stems from improperly restricting XML External Entity References XXE, which could allow an attacker to read arbitrary files on the system by...

CVE-2023-5323

Cross-site Scripting XSS - Generic in GitHub repository dolibarr/dolibarr prior to 18.0...

PT-2023-5865

Name of the Vulnerable Software and Affected Versions Milesight UR5X, UR32L, UR32, UR35, UR41 versions prior to 35.3.0.7 Description An information disclosure issue exists in Milesight routers. This allows attackers to access sensitive router components. Reports indicate that approximately 19,000...

CVE-2023-5319

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5320 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5320 Cross-site Scripting (XSS) - DOM in thorsten/phpmyfaq

Cross-site Scripting XSS - DOM in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5317 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5319 Cross-site Scripting (XSS) - Stored in thorsten/phpmyfaq

Cross-site Scripting XSS - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.18...

CVE-2023-5227

CVE-2023-5227 targets thorsten/phpmyfaq prior to version 3.1.8, enabling unrestricted upload of files with dangerous types in the image/file upload workflow. Connected data corroborate related issues across feeds, with some sources indicating a fix at 3.1.18 and others listing 3.1.8 as the affect...

phpMyFAQ Cross-Site Scripting Vulnerability

phpMyFAQ is a multi-language, fully database-driven FAQ system by the individual developer Thorsten Rinne. A cross-site scripting vulnerability exists in phpMyFAQ versions prior to 3.1.18. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

CVE-2023-5289

CVE-2023-5289 affects the rdiffweb project from ikus060, specifically versions prior to 2.8.4. The root issue is Allocation of Resources Without Limits or Throttling, leading to potential resource exhaustion. The known remediation is to upgrade to version 2.8.4 or later. Exploitation details are ...

PT-2023-13452 · Cambium · Cambium Enterprise Wi-Fi System

Name of the Vulnerable Software and Affected Versions: Cambium Enterprise Wi-Fi System Software versions prior to 6.4.2 Description: The issue is related to the lack of sanitization of the ping host argument in the device-agent of the Cambium Enterprise Wi-Fi System Software. This can potentially...

JetBrains TeamCity < 2022.10.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.10.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. CVE-2022-48342 - In JetBrains TeamCity before 2022.10.2 there was an XSS...

PT-2023-32038 · Unknown · Microweber

Name of the Vulnerable Software and Affected Versions: microweber/microweber versions prior to 2.0 Description: The issue concerns the use of hard-coded credentials in the GitHub repository microweber/microweber. A patch is available and is anticipated to be part of version 2.0. Recommendations:...

SUSE CVE-2023-5186

Use after free in Passwords in Google Chrome prior to 117.0.5938.132 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. Chromium security severity: High...

CVE-2023-5244 Cross-site Scripting (XSS) - Reflected in microweber/microweber

Cross-site Scripting XSS - Reflected in GitHub repository microweber/microweber prior to 2.0...

PT-2023-9289 · Hashicorp +1 · Hashicorp Vault +2

Name of the Vulnerable Software and Affected Versions: HashiCorp Vault versions prior to 1.13.0 Description: The issue is related to the Google Cloud secrets engine in HashiCorp Vault and Vault Enterprise, where existing Google Cloud IAM Conditions were not preserved upon creating or updating...

CVE-2023-5173

In a non-standard configuration of Firefox, an integer overflow could have occurred based on network traffic possibly under influence of a local unprivileged webpage, leading to an out-of-bounds write to privileged process memory. This bug only affects Firefox if a non-standard preference allowin...

CVE-2023-4737

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Hedef Tracking Admin Panel allows SQL Injection. This issue affects Admin Panel: before 1.2...