CVE-2023-22651

CVE-2023-22651 — SUSE Rancher Webhook misconfiguration during upgrade : A failure in Rancher’s admission webhook update logic can misconfigure the webhook, potentially enabling privilege escalations in clusters upgrading from 2.6.x or 2.7.x to 2.7.2. Affected systems that were fresh-installed to ...

CVE-2023-22651

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...

CVE-2023-22651

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...

WordPress Library Viewer Plugin <= 2.0.6 is vulnerable to Open Redirection

Software Library Viewer Type Plugin Vulnerable versions = 2.0.6 Fixed in 2.0.6.1 OWASP Top 10 A6: Security Misconfiguration Classification Open Redirection CVE CVE-2023-32101 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 3b442fbbde91 Credits Mika Required privilege...

NETGEAR RAX30 lighttpd Misconfiguration Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of NETGEAR RAX30. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the lighttpd HTTP server. The issue results from allowing...

CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments

The U.S. Cybersecurity and Infrastructure Security Agency CISA has released an Industrial Control Systems ICS medical advisory warning of a critical flaw impacting Illumina medical devices. The issues impact the Universal Copy Service UCS software in the Illumina MiSeqDx, NextSeq 550Dx, iScan, iS...

CISA Warns of Critical Flaws in Illumina's DNA Sequencing Instruments

The U.S. Cybersecurity and Infrastructure Security Agency CISA has released an Industrial Control Systems ICS medical advisory warning of a critical flaw impacting Illumina medical devices. The issues impact the Universal Copy Service UCS software in the Illumina MiSeqDx, NextSeq 550Dx, iScan, iS...

CVE-2023-2360

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.2.0-135...

CVE-2023-2360

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.2.0-135...

Information disclosure

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.2.0-135...

CVE-2023-2360

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.2.0-135...

CVE-2023-2360

Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure ACI before build 5.2.0-135...

CVE-2023-2360

CVE-2023-2360 involves a sensitive information disclosure due to a CORS misconfiguration in Acronis Cyber Infrastructure (ACI) prior to build 5.2.0-135. The vulnerability affects ACI and is rated high by NVD (CVSSv3.1: 7.5) with network attack vector, no user interaction required, and potential e...

Many Public Salesforce Sites are Leaking Private Data

A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows an...

WordPress Thumbs Rating Plugin <= 5.0.0 is vulnerable to Race Condition

Software Thumbs Rating Type Plugin Vulnerable versions = 5.0.0 Fixed in N/A OWASP Top 10 A6: Security Misconfiguration Classification Race Condition CVE CVE-2022-45809 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID e09b57cb00e4 Credits thiennv Required privilege...

Acronis Cyber Infrastructure 安全漏洞

Acronis Cyber Infrastructure is a simple, efficient and secure solution for edge workloads from Acronis Switzerland. A security vulnerability exists in versions prior to Acronis Cyber Infrastructure 5.2.0-135, which stems from the disclosure of sensitive information due to a CORS misconfiguration...

WordPress Zephyr Project Manager Plugin <= 3.3.9 is vulnerable to Open Redirection

Software Zephyr Project Manager Type Plugin Vulnerable versions = 3.3.9 Fixed in 3.3.91 OWASP Top 10 A6: Security Misconfiguration Classification Open Redirection CVE CVE-2023-31237 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 0a67e197ec76 Credits Nguyen Xuan Chien...

WordPress WP Directory Kit Plugin <= 1.1.9 is vulnerable to Open Redirection

Software WP Directory Kit Type Plugin Vulnerable versions = 1.1.9 Fixed in 1.2.0 OWASP Top 10 A6: Security Misconfiguration Classification Open Redirection CVE CVE-2023-31229 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID e18f8bf074f1 Credits Nguyen Xuan Chien Required...

SUSE CVE-2023-22651

Improper Privilege Management vulnerability in SUSE Rancher allows Privilege Escalation. A failure in the update logic of Rancher's admission Webhook may lead to the misconfiguration of the Webhook. This component enforces validation rules and security checks before resources are admitted into th...

CVE-2022-40722

A misconfiguration of RSA padding implemented in the PingID Adapter for PingFederate to support Offline MFA with PingID mobile authenticators is vulnerable to pre-computed dictionary attacks, leading to a bypass of offline MFA...