13075 matches found
frr: Incorrect handling of a error in parsing of an invalid section of a BGP update can de-peer a router
A vulnerability was found in FRRouting FRR. This flaw allows a remote attacker to cause a denial of service issue via a crafted BGP update with a corrupted attribute 23 Tunnel Encapsulation...
CVE-2022-3261
creationtimestamp| type| source ---|---|--- 2023-09-16 00:25:48+00:00| seen| https://t.me/cibsecurity/70614...
CVE-2023-4676
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yordam MedasPro allows Reflected XSS. This issue affects MedasPro: before 28...
CVE-2023-4676
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Yordam MedasPro allows Reflected XSS.This issue affects MedasPro: before 28...
CVE-2023-37739
i-doit Pro v25 and below was discovered to be vulnerable to path traversal...
CVE-2023-37755
i-doit pro 25 and below and I-doit open 25 and below are configured with insecure default administrator credentials, and there is no warning or prompt to ask users to change the default password and account name. Unauthenticated attackers can exploit this vulnerability to obtain Administrator...
CVE-2021-28485
creationtimestamp| type| source ---|---|--- 2023-09-14 18:24:32+00:00| seen| https://t.me/cibsecurity/70448...
PT-2023-30190
Name of the Vulnerable Software and Affected Versions Yordam MedasPro versions prior to 28 Description The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inject...
i-doit Path Traversal Vulnerability
i-doit is a configuration management database software from i-doit Inc. A security vulnerability exists in i-doit pro v25 and prior versions that stems from the presence of a path traversal vulnerability...
PaperCut NG Authorization Issues Vulnerability
PaperCut NG is a suite of next-generation printer control software from PaperCut Australia. An authorization issue vulnerability exists in PaperCut NG versions 22.0.12 and earlier, which stems from a default that allows unauthenticated XMLRPC commands to be run...
CVE-2023-40622
SAP BusinessObjects Business Intelligence Platform Promotion Management - versions 420, 430, under certain condition allows an authenticated attacker to view sensitive information which is otherwise restricted. On successful exploitation, the attacker can completely compromise the application...
SAP BusinessObjects Suite Installer Security Vulnerability
SAP BusinessObjects Suite Installer is an application from SAP, Germany. A security vulnerability exists in SAP BusinessObjects Suite Installer versions 420 and 430 that originates from allowing an attacker to delete all operating system files...
Microsoft Windows Kernel Security Vulnerability
Microsoft Windows Kernel is the kernel of the Windows operating system by Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Kernel. An attacker can exploit the vulnerability to elevate privileges. The following products and versions are affected:Windows Server 2016...
CVE-2023-40040
An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacker can start the camera feed via the com.cordovaplugincamerapreview.CameraActivity component in some situations. NOTE: this is only exploitable on Android versions that lack...
CVE-2023-20263
creationtimestamp| type| source ---|---|--- 2023-09-06 22:18:08+00:00| seen| https://t.me/cibsecurity/70026...
CVE-2023-39264
creationtimestamp| type| source ---|---|--- 2023-09-06 16:17:45+00:00| seen| https://t.me/cibsecurity/70002 2023-11-27 21:38:11+00:00| seen| https://t.me/arpsyndicate/593...
CVE-2023-39476
creationtimestamp| type| source ---|---|--- 2023-09-06 15:00:07+00:00| seen| https://t.me/truesecator/4813 2023-09-10 10:35:26+00:00| published-proof-of-concept| https://t.me/CNArsenal/1098 2023-09-10 10:47:17+00:00| published-proof-of-concept|...
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2020 and Adobe Acrobat Reader 2020, relates to access to an uninitialized pointer, allowing attackers to execute arbitrary code.
The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the access to an uninitialized pointer during the processing of embedded fonts. Exploiting this...
Path traversal allows exploiting XXE vulnerability in jobConfigHistory
jobConfigHistory 1227.v7a79fc4dc01f and earlier does not restrict timestamp query parameters in multiple endpoints. This allows attackers with Job Config History/DeleteEntry permission to delete attacker-specified directories on the Jenkins controller file system as long as they contain a file...
