CVE-2023-38812

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

Half-Year in Review: Recapping the top threats and security trends so far in 2023

From new ransomware groups, a growing mercenary space, espionage campaigns, supply chain attacks, and new "as a service" tools popping up, theres a lot to talk about already in the first half of 2023. Here are the main threats weve covered on our blog up until the end of June 2023. The timeline i...

How Malicious Android Apps Slip Into Disguise

Researchers say mobile malware purveyors have been abusing a bug in the Google Android platform that lets them sneak malicious code into mobile apps and evade security scanning tools. Google says it has updated its app malware detection mechanisms in response to the new research. At issue is a...

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

Multiple Codesys Products Input Validation Error Vulnerability

3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...

CVE-2023-36494

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494 F5OS-A vulnerability

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494 F5OS-A vulnerability

Audit logs on F5OS-A may contain undisclosed sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2023-36494

The CVE-2023-36494 issue affects F5OS-A, specifically audit-service on F5OS-A 1.4.0 with a path to 1.5.0. The vulnerability allows authenticated, high-privilege users with local access to read undisclosed sensitive information from audit logs. CVSSv3 base score is 4.4 (Medium) with local attack v...

K000135479: Overview of F5 vulnerabilities (August 2023)

Security Advisory Description On August 2, 2023, F5 announced the following security issues. This document is intended to serve as an overview of these vulnerabilities to help determine the impact to your F5 devices. You can find the details of each issue in the associated articles. Important :...

K000134922: F5OS-A vulnerability CVE-2023-36494

Security Advisory Description Audit logs on the F5OS-A system may contain undisclosed sensitive information. CVE-2023-36494 Impact This vulnerability may allow a high privileged authenticated attacker with local access to an F5OS-A system to read undisclosed sensitive information. Security Adviso...

PT-2023-25593 · F5 · F5Os-A

Name of the Vulnerable Software and Affected Versions: F5OS-A affected versions not specified Description: Audit logs on F5OS-A may contain undisclosed sensitive information. Software versions that have reached End of Technical Support EoTS are not evaluated. Recommendations: At the moment, there...

CVE-2023-39109

rconfig v3.9.4 was discovered to contain a Server-Side Request Forgery SSRF via the patha parameter in the doDiff Function of /classes/compareClass.php. This vulnerability allows authenticated attackers to make arbitrary requests via injection of crafted URLs...

ASB-A-227655299

Bulletin has no description...

CVE-2023-38304

An issue was discovered in Webmin 2.021. A Stored Cross-Site Scripting XSS vulnerability was discovered in the Users and Groups functionality, allowing an attacker to store a malicious payload in the Group Name field when creating a new group...

PT-2023-26347 · Linux Mint +2 · Linuxmint +2

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The issue is not considered a security issue. Recommendations: At the moment, there is no information about a newer version that contains a fix for this issue...

CVE-2023-37218

CVE-2023-37218 affects Tadiran Telecom Aeonix (software UC&C). The vulnerability is a Path Traversal (CWE-22) due to improper limitation of a pathname to a restricted directory. Attack vector is NETWORK with no authentication required and no user interaction; CVSS 3.1 base score 7.5 (HIGH) with C...

h-a-d.hr Cross Site Scripting vulnerability OBB-3553007

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...