Node.js Security Vulnerabilities

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 20, which stems from a vulnerability that allows an attacker to retrieve statistical information from restricted files using fs.statfs...

Deciso OPNsense Command Injection Vulnerability

Deciso OPNsense is a suite of FreeBSD-based open source firewall and routing software from the Dutch company Deciso. A command injection vulnerability exists in OPNsense versions prior to 23.7, which stems from a command injection vulnerability in the component api/cron/settings/setJob. An attack...

Node.js path traversal vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 20 that stems from allowing an attacker to bypass the privilege model via path traversal using the API process.binding...

Node.js path traversal vulnerability

Node.js is an open source, cross-platform JavaScript runtime environment. A security vulnerability exists in Node.js version 20, which stems from a path traversal vulnerability due to a lack of checking of the function getValidatedPath in the API. An attacker can exploit this vulnerability to...

CVE-2022-0885

creationtimestamp| type| source ---|---|--- 2023-08-06 05:19:59+00:00| seen| https://t.me/kasraonecom/432...

CVE-2023-39552

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2023-0527. Reason: This candidate is a reservation duplicate of CVE-2023-0527. Notes: All CVE users should reference CVE-2023-0527 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental...

CVE-2022-42183

Precisely Spectrum Spatial Analyst 20.01 is vulnerable to Server-Side Request Forgery SSRF...

CVE-2023-3292

creationtimestamp| type| source ---|---|--- 2023-07-31 14:37:37+00:00| seen| https://t.me/cibsecurity/67441...

CVE-2022-4926

creationtimestamp| type| source ---|---|--- 2023-07-29 07:30:12+00:00| seen| https://t.me/cibsecurity/67412...

CVE-2023-38988

creationtimestamp| type| source ---|---|--- 2023-07-29 00:29:36+00:00| seen| https://t.me/cibsecurity/67397...

CVE-2022-31200

creationtimestamp| type| source ---|---|--- 2023-07-27 22:28:45+00:00| seen| https://t.me/cibsecurity/67342...

CISA Releases Analysis of FY22 Risk and Vulnerability Assessments

CISA has released an analysis and infographic detailing the findings from the 121 Risk and Vulnerability Assessments RVAs conducted across multiple critical infrastructure sectors in fiscal year 2022 FY22. The analysis details a sample attack path including tactics and steps a cyber threat actor...

CVE-2022-31457

creationtimestamp| type| source ---|---|--- 2023-07-26 02:27:10+00:00| seen| https://t.me/cibsecurity/67277...

Sentry 安全漏洞

Mobileiron Sentry is a Smart Gateway product from Mobileiron, Inc. A security vulnerability exists in versions of Sentry prior to 23.5.2, which can be exploited by authenticated users to download debugging or artifact bundles from arbitrary organizations and projects using a known bundle ID...

REDCap SQL注入漏洞

REDCap is a data collection and management web application. A security vulnerability exists in REDCap version 12.0.26 LTS and version 12.3.2 Standard, which stems from a SQL injection vulnerability at multiple function points...

July 25, 2023-KB5028412 Cumulative Update Preview for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 10 Version 22H2

None None...

Nokia NetAct 跨站脚本漏洞

Nokia NetAct is a network management system from Nokia of Finland. A security vulnerability exists in Nokia NetAct version 22, which originates from a vulnerability that allows an attacker to change the filename of an uploaded file to include JavaScript code, which is then stored and executed by...

Nokia NetAct 代码问题漏洞

Nokia NetAct is a network management system from the Finnish company Nokia. A security vulnerability exists in Nokia NetAct version 22, which stems from an arbitrary file upload vulnerability in the parameter /netact/sct...

Nokia NetAct 跨站请求伪造漏洞

Nokia NetAct is a network management system from Nokia, Finland. A security vulnerability exists in Nokia NetAct version 22, which originates from a cross-site request forgery CSRF vulnerability in the file createuser.jsf. The vulnerability can be exploited to create users with arbitrary privileg...

Nokia NetAct 跨站脚本漏洞

Nokia NetAct is a network management system from Nokia of Finland. A security vulnerability exists in Nokia NetAct version 22 that originates from a vulnerability that allows an attacker to edit or add the templateName parameter to include JavaScript code, which is then stored and executed by the...