13083 matches found
CVE-2023-24243
CData RSB Connect v22.0.8336 was discovered to contain a Server-Side Request Forgery SSRF...
PT-2023-19967 · Nokia · Nokia Airscale Asika Single Ran +1
Name of the Vulnerable Software and Affected Versions: NOKIA Airscale ASIKA Single RAN devices versions prior to 21B Description: An issue was discovered in the Nokia BTS baseband unit diagnostic tool AaShell, which is disabled by default. If security hardenings are removed from a Nokia Single RA...
Nokia Airscale ASIKA Single RAN 路径遍历漏洞
Nokia Airscale ASIKA Single RAN is an application for end-to-end use by Nokia of Finland. A security vulnerability exists in NOKIA Airscale ASIKA Single RAN prior to version 21B. An attacker can exploit the vulnerability to access files and directories stored outside the web root folder...
PT-2023-20458 · Nokia · Nokia Web Element Manager
Name of the Vulnerable Software and Affected Versions: Nokia Web Element Manager versions prior to 22 R1 Description: A mobile network solution internal fault is found in Nokia Web Element Manager, where an authenticated, unprivileged user can execute administrative functions. Exploitation is not...
SUSE CVE-2023-3172
Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20...
Microsoft Windows Cloud Files Mini Filter Driver 安全漏洞
Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver. An attacker could exploit the vulnerability to elevate privileges. The following products and edition...
Microsoft .NET Framework和Microsoft Visual Studio 安全漏洞
Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building...
CVE-2020-36722
The Visual Composer plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 26.0 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser...
USN-6136-1 frr vulnerabilities
It was discovered that FRR incorrectly handled parsing certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 23.04. CVE-2023-31489 It was discovered that FRR incorrectly handled parsing certai...
CVE-2023-2416
creationtimestamp| type| source ---|---|--- 2023-06-03 12:26:46+00:00| seen| https://t.me/cibsecurity/64959...
CVE-2022-4240
creationtimestamp| type| source ---|---|--- 2023-06-01 05:18:03+00:00| seen| https://t.me/cibsecurity/64790...
Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a recently patched critical security flaw in Zyxel gear to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Tracked as CVE-2023-28771 CVSS score: 9.8, the issue relates to a command...
CVE-2022-35750
Win32k Elevation of Privilege Vulnerability...
CVE-2022-24631
creationtimestamp| type| source ---|---|--- 2023-05-30 00:36:22+00:00| seen| https://t.me/cibsecurity/64770 2026-09-01 20:01:04+00:00| seen| https://t.me/hackingAttack/91679 2026-09-02 01:01:24+00:00| seen| https://t.me/hackingAttack/91679 2026-09-04 21:00:04+00:00| published-proof-of-concept|...
Pimcore 安全漏洞
Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A security vulnerability exists in Pimcore...
CVE-2022-32732
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32726
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32720
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...