AlmaLinux 9 : webkit2gtk3 (ALSA-2023:1918)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2023:1918 advisory. - A use after free issue was addressed with improved memory management. This issue is fixed in iOS 15.7.5 and iPadOS 15.7.5, Safari 16.4.1, iOS 16.4.1 and iPadOS...

CVE-2023-1020

creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:40+00:00| seen| https://t.me/cibsecurity/62747 2023-07-26 14:24:11+00:00| published-proof-of-concept| https://t.me/codeb0ss/958 2025-02-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-22...

CVE-2023-2246

creationtimestamp| type| source ---|---|--- 2023-04-23 20:38:32+00:00| seen| https://t.me/cibsecurity/62672 2023-05-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51431 2025-09-12 17:40:50+00:00| seen|...

Linux Kernel af_can.c Denial of Service Vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A denial of service vulnerability exists in the Linux Kernel that stems from a null pointer dereference issue found in the CAN protocol in net/can/afcan.c. mlpriv may not be...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67098)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65519)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65518)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized MySQL connector hangs or frequent and repeated crashes, as well as unauthorized update, insert, or delete acces...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65514)

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server has a security vulnerability that can be exploited by attackers to cause a takeover of MySQL Server...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67099)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-65513)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67094)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67109)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeatable crashes, as well as unauthorized update, insert, or delete access to...

Schneider Electric Conext Gateway Input Validation Error Vulnerability

The Schneider Electric Conext Gateway is a range of gateway devices from the French company Schneider Electric. An input validation error vulnerability exists in Schneider Electric Conext Gateway v1.16 Build 004 and prior versions, which stems from the presence of incorrect input validation, and...

CVE-2023-27350

creationtimestamp| type| source ---|---|--- 2023-04-20 20:30:49+00:00| seen| https://t.me/cibsecurity/62536 2023-04-21 00:00:00+00:00| seen| MISP/fe2a6b30-c779-4b47-994a-53cdecd26ed8 2023-04-22 08:22:51+00:00| seen| https://t.me/thehackernews/3271 2023-04-22 09:51:45+00:00| exploited|...

WordPress Blog Navigator Chatbot by Xatkit Plugin <= 4.4.9 is vulnerable to Cross Site Scripting (XSS)

Software Blog Navigator Chatbot by Xatkit Type Plugin Vulnerable versions = 4.4.9 Fixed in 4.5.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1649 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 73a888678fc8 Credits Erwan L...

Google Chrome Hit by Second Zero-Day Attack - Urgent Patch Update Released

Google on Tuesday rolled out emergency fixes to address another actively exploited high-severity zero-day flaw in its Chrome web browser. The flaw, tracked as CVE-2023-2136, is described as a case of integer overflow in Skia, an open source 2D graphics library. Clément Lecigne of Google's Threat...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...

CVE-2023-2133

creationtimestamp| type| source ---|---|--- 2023-04-19 07:43:14+00:00| seen| https://t.me/cibsecurity/62431 2023-04-20 14:49:40+00:00| exploited| https://t.me/kasperskyb2b/577 2023-07-11 14:57:43+00:00| published-proof-of-concept| Telegram/ZPMcjDlYbbDJ3etZP3BqKChdYJaSzNeePm8ZdO0d0CqNg 2023-07-13...

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection

Software Booking calendar, Appointment Booking System Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47428 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID be3286ef939c Credits thiennv Required...

CVE-2023-29849

creationtimestamp| type| source ---|---|--- 2023-04-18 17:16:10+00:00| seen| MISP/6fe209e3-4297-4f36-ac92-a5b6db77be5b 2023-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51378 2023-04-24 18:14:25+00:00| seen| https://t.me/cibsecurity/62701 2025-02-06 02:41:37+00:00| seen|...