CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-33106 Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability CVE-2023-33063 Qualcomm Multiple Chipsets Use-After-Free Vulnerability...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2023-9570703)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which can b...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2023-9571000)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server, which can be...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2023-9571298)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server, which ca...

CVE-2023-40465

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal...

Microsoft Outlook Vulnerability Exploited by Russian Forest Blizzard Group

By Waqas Forest Blizzard aka STRONTIUM, APT28, and Fancy Bear is thought to have affiliations with or support from the Russian military intelligence agency. This is a post from HackRead.com Read the original post: Microsoft Outlook Vulnerability Exploited by Russian Forest Blizzard Group...

CVE-2015-3038

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

CVE-2015-0352

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

CVE-2015-0355

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

CVE-2015-0350

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

GHSA-95HW-V8FQ-666Q

creationtimestamp| type| source ---|---|--- 2023-12-02 00:26:35+00:00| exploited| https://t.me/arpsyndicate/864...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versio...

Memory corruption

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versio...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versio...

CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versio...