CVE-2020-28717

The CVE-2020-28717 issue affects kindeditor (KindEditor) version 4.1.12, specifically the content1 parameter in demo.jsp. The root cause is a Cross-Site Scripting (XSS) vulnerability due to improper input sanitization in that parameter, allowing an attacker to inject and execute arbitrary JavaScr...

CVE-2023-4275

Rejected reason: It is invalid...

CVE-2023-32560

CVE-2023-32560 affects Ivanti Avalanche/ Wavelink Avalanche Manager prior to v6.4.1, where processing certain item data types can trigger a buffer overflow on the stack, enabling arbitrary code execution with SYSTEM privileges. Public materials (Metasploit exploit module, packetstorm/Nessus entri...

CVE-2023-30700

The CVE-2023-30700 issue affects the Android/Samsung framework component SemWifiApTimeOutImpl, where a PendingIntent hijacking vulnerability could allow local attackers to access a ContentProvider without proper permission. Concrete details found in connected sources indicate affected framework v...

CVE-2023-23346

HCL DRYiCE MyCloud is affected by the use of a broken cryptographic algorithm. An attacker can potentially compromise the confidentiality and integrity of sensitive information...

CVE-2023-23574

CVE-2023-23574 – Nozomi Networks Guardian/CMC exposes an authenticated blind SQL Injection in the alerts_count component caused by improper input validation. Affected before version 22.6.2, this allows an authenticated attacker to run arbitrary SQL against the web application's DBMS, potentially ...

CVE-2023-4242

CVE-2023-4242 affects the WordPress plugin FULL – Customer . The issue allows an authenticated user with subscriber-level permissions or higher to disclose sensitive site configuration information via the REST route /health . Affected versions are up to and including 2.2.3 ; the underlying cause ...

CVE-2023-38751

CVE-2023-38751 affects Special Interest Group Network for Analysis and Liaison’s Inter-SOC Cooperation API. The vulnerability is an improper authorization in the Information Provision function, enabling authorized API users to view the information receiver’s organization data that is marked as no...

CVE-2023-35386

creationtimestamp| type| source ---|---|--- 2023-08-08 22:14:26+00:00| seen| https://t.me/cibsecurity/68028 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen|...

CVE-2023-39210

CVE-2023-39210 affects the Zoom Client SDK for Windows (before 5.15.0). The issue is cleartext storage of sensitive information that can lead to information disclosure via local access by an authenticated user. Impact is confidentiality (high); impact to integrity/availability not indicated. Reme...

amextra.org Cross Site Scripting vulnerability OBB-3571838

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hive Pro Achieves ISO/IEC 27001: 2022 Certification

Hive Pro has achieved ISO 27001: 2022 Certification, Demonstrating A Continuous Commitment to Excellence in Information Security August 8th, 2023 - HERNDON, VA: Hive Pro, a pioneer in the Threat Exposure Management market, is thrilled to announce that they have successfully attained ISO 27001:202...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-21652 Key Management Errors in HLOS

Cryptographic issue in HLOS as derived keys used to encrypt/decrypt information is present on stack after use...

CVE-2023-36926

Summary : SAP Host Agent 7.22 has an information-disclosure flaw due to a missing authentication check, allowing an unauthenticated attacker to set an undocumented parameter to a compatibility value and invoke read functions to expose non-sensitive server information. The impact is limited to inf...

CVE-2023-38764

CVE-2023-38764 affects ChurchCRM v5.0.0. A SQL injection vulnerability exists in /QueryView.php that can leak sensitive information via the birthmonth and percls parameters. Core impact is confidentiality breach; no exploitation details are provided in the sources. Remediation/fix details are not...

CVE-2023-33909

In Contacts service, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges...

CVE-2023-36054

MIT Kerberos 5 (krb5) contains a vulnerability CVE-2023-36054 where lib/kadm5/kadm_rpc_xdr.c frees an uninitialized pointer due to improper validation between n_key_data and the key_data array. A remote authenticated user can trigger a kadmind crash. Affected versions include krb5 before 1.20.2 a...

ROS-20230807-01

A vulnerability in the OpenLDAP protocol implementation is related to the failure to take measures to protect the SQL query structure. Exploitation of the vulnerability may allow a remote attacker to affect confidentiality, integrity, and availability of protected information by using a specially...

Triangle MicroWorks SCADA Data Gateway Arbitrary Code Execution Vulnerability

Triangle MicroWorks SCADA Data Gateway is a SCADA data gateway product from Triangle MicroWorks, Inc. An arbitrary code execution vulnerability exists in Triangle MicroWorks SCADA Data Gateway, which can be exploited by an attacker to execute arbitrary code...