13083 matches found
CVE-2022-32705
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32713
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32701
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32714
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32707
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32687
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32689
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32684
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
CVE-2022-32675
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2022. Notes: none...
pluto in Libreswan before 4.11 allows a denial of service (responder SPI mishandling and daemon crash) via unauthenticated IKEv1 Aggressive Mode packets. The earliest affected version is 3.28.
...
PT-2023-22605
Name of the Vulnerable Software and Affected Versions Dolibarr versions prior to 17.0.1 Zyxel ATP Series, USG FLEX Series, USG FLEX 50W Series, and USG20W-VPN Series affected versions not specified Description The issue allows remote code execution by an authenticated user via an uppercase...
CVE-2022-47152
creationtimestamp| type| source ---|---|--- 2023-05-24 20:27:18+00:00| seen| https://t.me/cibsecurity/64697...
CVE-2022-46816
creationtimestamp| type| source ---|---|--- 2023-05-24 20:27:04+00:00| seen| https://t.me/cibsecurity/64686...
CVE-2023-31860
creationtimestamp| type| source ---|---|--- 2023-05-24 00:40:25+00:00| seen| https://t.me/cibsecurity/64652 2025-01-17 16:56:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2151...
PT-2023-4017 · Miniorange · Miniorange Oauth Single Sign On – Sso
Name of the Vulnerable Software and Affected Versions: miniOrange OAuth Single Sign On – SSO OAuth Client plugin versions through 6.23.3 Description: The issue is related to an Improper Authentication vulnerability in the miniOrange OAuth Single Sign On – SSO OAuth Client plugin, which allows...
PT-2023-24243 · Amazon · Amazon Alexa
Name of the Vulnerable Software and Affected Versions: Amazon Alexa software version 8960323972 Description: The issue allows attackers to deliver security-relevant commands via an audio signal between 16 and 22 kHz, which is often outside the range of human adult hearing. Commands at these...
CVE-2022-47311
creationtimestamp| type| source ---|---|--- 2023-05-23 02:25:49+00:00| seen| https://t.me/cibsecurity/64584...
Barracuda ESG TAR Filename Command Injection
This module exploits CVE-2023-2868, a command injection vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the ESG processes TAR file attachments - filenames containing shell metacharacters backticks are passed directly to shell commands during...
