CISA Adds 13 Known Exploited Vulnerabilities to Catalog

CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

marked denial of service vulnerability

marked is a Markdown parser and compiler written in JavaScript. marked contains a security vulnerability that could be exploited by an attacker to cause a catastrophic backtracking of certain strings and lead to a denial of service DoS...

SQL Injection Vulnerability in Flash Flood Monitoring and Early Warning Platform of Siltronic Technology Limited (CNVD-2022-13864)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A SQL injection vulnerability exists in the Flash Flood Monitoring and Early Warning Platform of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive information from...

Halo cross-site scripting vulnerability (CNVD-2022-08379)

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability that originates in Halo, versions v1.0.0 through v1.4.17 latest are susceptible to cross-site scripting XSS stored in the title of a post, which can be exploited by an attacker to...

Halo cross-site scripting vulnerability (CNVD-2022-08205)

Halo is a personal blogging system for individual developers. Halo suffers from a cross-site scripting vulnerability that originates in Halo, versions v1.0.0 through v1.4.17 latest, which is susceptible to cross-site scripting XSS stored in configuration file images that can be exploited to uploa...

NETGEAR RBR750 Command Injection Vulnerability

Netgear NETGEAR is a router from Netgear, Inc. NETGEAR has a security vulnerability in certain devices, which stems from the lack of effective filtering and escaping of command parameters, making the device vulnerable to command injection by authenticated users, which can be exploited by attacker...

CVE-2022-23178

creationtimestamp| type| source ---|---|--- 2022-01-15 18:50:39+00:00| seen| https://t.me/cibsecurity/35645 2024-11-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-25 2024-11-29 00:00:00+00:00| exploited| The Shadowserver...

File Upload Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Ltd (CNVD-2022-10328)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A file upload vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...

File Upload Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Ltd (CNVD-2022-10326)

Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. A file upload vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Co. Ltd, which can be exploited by an attacker to gain control of the server...

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-06385)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco USA, which is mainly used to configure firewall, VPN and intrusion protection security services on Cisco networks and security devices.Cisco Security Manager has a cross-site scripting vulnerability, which...

Cisco Security Manager Cross-Site Scripting Vulnerability (CNVD-2022-06379)

Cisco Security Manager CSM is a set of enterprise-class management applications from Cisco USA that are used to configure firewall, VPN, and intrusion protection security services on Cisco networks and security devices.Cisco Security Manager is vulnerable to a cross-site scripting vulnerability...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-16345)

Google Android is a Linux-based open-source operating system from the US company Google. Google Android elevation of privilege vulnerability can be exploited by attackers to elevate privileges...

Siemens SICAM PQ Analyzer Search Path Vulnerability

SICAM PQ Analyzer is a power quality system software that provides options for evaluating archived PQ measurement data and fault records. A search path vulnerability exists in Siemens SICAM PQ Analyzer, which can be exploited by an attacker with write privileges to plant an executable that will r...

Google Android Denial of Service Vulnerability (CNVD-2022-15196)

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android 10, 11, and 12, which can be exploited by attackers to cause a denial of service...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-06155)

Google Android is a Linux-based open source operating system from Google, Inc. Google Android has a security vulnerability that could be exploited by an attacker to potentially cause a local privilege escalation without the need for additional executive privileges...

CISA Adds 15 Known Exploited Vulnerabilities to Catalog

CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

Tenable Network Security Tenable.Sc Remote Code Execution Vulnerability

Tenable Network Security Tenable.Sc is a vulnerability analysis solution from Tenable Network Security, Inc. The product supports real-time vulnerability assessment and management, etc. Tenable Network Security Tenable.Sc has a remote code execution vulnerability that can be exploited by attacker...

GPAC Code Issue Vulnerability (CNVD-2022-04822)

GPAC is an open source multimedia framework. version 1.0.1 of GPAC contains a security vulnerability that can be exploited by attackers to perform denial of service attacks...

Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability (CNVD-2022-02641)

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of effective...

Sourcecodester Vehicle Service Management System Cross-Site Scripting Vulnerability

Sourcecodester Vehicle Service Management System is an open source PHP project. A simple Web application for automotive repair/service stores or businesses. sourcecodester Vehicle Service Management System version 1.0 has a cross-site scripting vulnerability that stems from a lack of valid...