CVE-2023-22875

IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356...

Design/Logic Flaw

IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356...

CVE-2023-22875 IBM Security QRadar SIEM information disclosure

IBM QRadar SIEM 7.4 and 7.5copies certificate key files used for SSL/TLS in the QRadar web user interface to managed hosts in the deployment that do not require that key. IBM X-Force ID: 244356...

Malicious code in lucifoxerox (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b4a7fcf5bb116e54e53ad483dfa8d8efe73e50fda487cde5a6d08dc14cf8d47f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in tradeshift-ui-docs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d51029431396577ccfb0afdac8c2f5ade3ed3cbc43cbd4e81b5ca9051fccbf6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in action-surefire-report (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5dd64ecec34f5bd03737caac41ac1993aafb8bfc6ac4de27c5ff59368d76b4f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Siemens JT2Go < 14.1.0.5 Multiple Vulnerabilities (SSA-360681)

The version of Siemens JT2Go installed on the remote Windows hosts is prior to 14.1.0.5. It is, therefore, affected by multiple vulnerabilities in the APDFL library that could be triggered when the application reads malicious PDF files. If a user is tricked to open a malicious PDF file this could...

CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

DEBIAN-CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

Race condition

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

UBUNTU-CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

CVE-2022-3590 WP <= 6.1.1 - Unauthenticated Blind SSRF via DNS Rebinding

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

CVE-2022-3590

WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden...

PT-2022-23007

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 6.1 WordPress versions 6.1 through 6.2 WordPress versions 6.1 through 6.9.1 Description WordPress is susceptible to an unauthenticated blind Server-Side Request Forgery SSRF issue within the pingback feature. This i...

WP <= 6.2 - Unauthenticated Blind SSRF via DNS Rebinding

Description WordPress is affected by an unauthenticated blind SSRF in the pingback feature. Because of a TOCTOU race condition between the validation checks and the HTTP request, attackers can reach internal hosts that are explicitly forbidden. PoC...

CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

PYSEC-2022-42986

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...

CVE-2022-23491

CVE-2022-23491 affects Certifi, a root CA bundle used to validate TLS certificates. The description notes Certifi 2022.12.07 removes TrustCor root certificates from its store as part of Mozilla trust-store updates due to an investigation into TrustCor. The vulnerability type is CWE-345: Insuffici...

CVE-2022-23491

Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi 2022.12.07 removes root certificates from "TrustCor" from the root store. These are in the process of being removed from Mozilla's trust...