SUSE CVE-2021-2179

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Group Replication Plugin. Supported versions that are affected are 5.7.33 and prior and 8.0.23 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to...

Nats-Server Security Vulnerability

Nats-Server is a high performance server for Nats.io, cloud and edge native messaging systems. A security vulnerability exists in Nats-Server versions prior to 2.9.23, and 2.10.x prior to 2.10.2, which stems from the presence of an authentication bypass that allows an attacker to bypass...

PYSEC-2023-228

When installing a package from a Mercurial VCS URL ie "pip install hg+..." with pip prior to v23.3, the specified Mercurial revision could be used to inject arbitrary configuration options to the "hg clone" call ie "--config". Controlling the Mercurial configuration can modify how and which...

CVE-2023-22514

creationtimestamp| type| source ---|---|--- 2023-10-24 18:10:06+00:00| exploited| https://t.me/truesecator/5001 2025-03-18 17:48:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7943...

M-Files Web Code Issue Vulnerability

M-Files Web is an intelligent information management platform from M-Files USA, Inc. It is used to optimally support users in their daily work. A code issue vulnerability exists in M-Files Web versions prior to 23.10 that stems from an insufficient blacklist and allows remote code execution via...

CVE-2023-45145

creationtimestamp| type| source ---|---|--- 2023-10-19 00:33:58+00:00| seen| https://t.me/cibsecurity/72542 2024-02-08 03:02:10+00:00| seen| https://t.me/ctinow/181114 2024-02-08 03:41:27+00:00| seen| https://t.me/ctinow/181139...

PT-2023-18881 · M Files · M-Files Classic Web

Name of the Vulnerable Software and Affected Versions: M-Files Classic Web versions before 23.10 M-Files Classic Web LTS Service Release Versions before 23.2 LTS SR4 M-Files Classic Web LTS Service Release Versions before 23.8 LTS SR1 Description: The issue allows an attacker to execute a script ...

PT-2023-32153 · M Files · M-Files Web Companion

Name of the Vulnerable Software and Affected Versions: M-Files Web Companion versions prior to 23.10 M-Files Web Companion LTS Service Release Versions prior to 23.8 LTS SR1 Description: The issue is related to the execution of downloaded content, which allows for Remote Code Execution. This flaw...

1E Platform SQL Injection Vulnerability

1E Platform is a terminal endpoint management and automation solution from 1E. A security vulnerability exists in 1E Platform versions prior to v8.1.2, prior to v8.4.1, prior to v9.0.1, and prior to v23.7.1 SaaS, which stems from the incorrect neutralization of special elements used in SQL...

CVE-2023-44107

creationtimestamp| type| source ---|---|--- 2023-10-11 16:22:47+00:00| seen| https://t.me/cibsecurity/72094...

USN-6429-1 curl vulnerabilities

Jay Satiro discovered that curl incorrectly handled hostnames when using a SOCKS5 proxy. In environments where curl is configured to use a SOCKS5 proxy, a remote attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS, and Ubuntu 23.04...

Koha Code Issue Vulnerability

Koha is a Koha organization's system for building websites for automated library management. A security vulnerability exists in Koha Library Software version 23.0.5.04 and earlier that could allow a remote attacker to read arbitrary files via the upload-cover-image.pl component...

Koha SQL Injection Vulnerability

Koha is a Koha organization's system for automated library management and site building. A security vulnerability exists in Koha Library Software version 23.0.5.04 and earlier that could allow a remote attacker to obtain sensitive information via Intranet/cgi bin/cataloging/ysearch.pl...

CVE-2023-36709

creationtimestamp| type| source ---|---|--- 2023-10-10 22:22:54+00:00| seen| https://t.me/cibsecurity/72012...

CVE-2023-30806

creationtimestamp| type| source ---|---|--- 2023-10-10 18:16:52+00:00| seen| https://t.me/cibsecurity/71951...

AZL-35436 CVE-2023-44487 affecting package docker-buildx for versions less than 0.14.0-1

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-31328 CVE-2023-44487 affecting package moby-containerd for versions less than 1.6.22-2

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

AZL-34626 CVE-2023-44487 affecting package coredns for versions less than 1.11.1-1

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

October 10, 2023-KB5031009 Cumulative Update for .NET Framework 3.5 and 4.8.1 for Microsoft server operating system, version 23H2

None None...

frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router

A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...