Broadcom Advanced Secure Gateway 跨站脚本漏洞

Broadcom Advanced Secure Gateway ASG is a secure web gateway appliance from Broadcom. A cross-site scripting vulnerability exists in Broadcom Advanced Secure Gateway versions prior to 7.3.13.1, Content Analysis versions prior to 3.1.6.0, which stems from susceptibility to stored cross-site...

CVE-2023-23953

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability...

PT-2023-19318 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to a Command Injection vulnerability. Recommendations: For versions prior to 7.3.13.1 / 3.1.6.0, update to version 7.3.13.1 /...

CVE-2023-23952

Affected product: Broadcom Advanced Secure Gateway and Content Analysis. Vulnerable components/versions: ASG and Content Analysis prior to 7.3.13.1 and 3.1.6.0. Root cause: Command injection vulnerability. Impact: high (CVSSv3.1 base 9.8, Confidentiality/Integrity/Availability high). Guidance: up...

Broadcom Advanced Secure Gateway 命令注入漏洞

Broadcom Advanced Secure Gateway ASG is a secure Web gateway appliance from Broadcom. A security vulnerability exists in Broadcom Advanced Secure Gateway versions prior to 7.3.13.1 and Content Analysis versions prior to 3.1.6.0, which stems from susceptibility to command injection...

CVE-2023-23954

Broadcom Advanced Secure Gateway (ASG) and Content Analysis are affected by CVE-2023-23954, a Stored Cross‑Site Scripting vulnerability in ASG prior to v7.3.13.1 and Content Analysis prior to v3.1.6.0. The description indicates a stored XSS issue but provides no exploitation details. Rationale an...

XDR meets IAM: Comprehensive identity threat detection and response with Microsoft

Identity has become the corporate security perimeter. The average organization used 130 different cloud applications in 2022. That’s up 18 percent from 2021 alone.1 And as organizations continue to embrace digital transformation and enable remote work, they look to identity and access management...

CVE-2023-3015

A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file data/title.php. The manipulation of the argument titurl leads to server-side request forgery. The attack can be launched remotely. The...

CVE-2023-3015

A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file data/title.php. The manipulation of the argument titurl leads to server-side request forgery. The attack can be launched remotely. The...

CVE-2023-3016

A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2023-3016

A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

Cross site scripting

A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

Server side request forgery (ssrf)

A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file data/title.php. The manipulation of the argument titurl leads to server-side request forgery. The attack can be launched remotely. The...

CVE-2023-3016

CVE-2023-3016 affects yiwent Vip Video Analysis 1.0. The vulnerability is in the admin/admincore.php component and is a cross-site scripting flaw. The issue can be triggered remotely and an exploit has been disclosed publicly. Several connected sources note no confirmed vendor patch/version updat...

CVE-2023-3015

The CVE-2023-3015 entry affects yiwent Vip Video Analysis 1.0, with a vulnerability in the data/title.php file where manipulating the titurl argument triggers server-side request forgery (SSRF). It can be exploited remotely, and public disclosures exist (VDB-230359). Connected sources corroborate...

Vip Video Analysis 代码问题漏洞

Vip Video Analysis is a vip video parsing application by yiwen personal developer. A code issue vulnerability exists in Vip Video Analysis version 1.0, which stems from a server-side request forgery due to misuse of the parameter titurl...

Vip Video Analysis 跨站脚本漏洞

Vip Video Analysis is a vip video parsing application by yiwen personal developer. A cross-site scripting vulnerability exists in Vip Video Analysis version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

PT-2023-22558 · Unknown · Yiwent Vip Video Analysis

Name of the Vulnerable Software and Affected Versions: yiwent Vip Video Analysis version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file data/title.php. The manipulation of the titurl argument leads to server-side request forgery...

Wireshark Buffer Overflow Vulnerability (CNVD-2023-62289)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark that stems from a failure to properly handle incomi...

Wireshark Denial of Service Vulnerability (CNVD-2023-62288)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial of service vulnerability that stems from not properly...