2312 matches found
Cisco IOS XR Software iPXE Boot Signature Bypass Vulnerability
A vulnerability in the iPXE boot function of Cisco IOS XR software could allow an authenticated, local attacker to install an unverified software image on an affected device. This vulnerability is due to insufficient image verification. An attacker could exploit this vulnerability by manipulating...
Cisco IOS XR Software Image Verification Vulnerability
A vulnerability in Cisco IOS XR Software image verification checks could allow an authenticated, local attacker to execute arbitrary code on the underlying operating system. This vulnerability is due to a time-of-check, time-of-use TOCTOU race condition when an install query regarding an ISO imag...
CVE-2023-38214
creationtimestamp| type| source ---|---|--- 2023-09-13 12:00:23+00:00| seen| https://t.me/truesecator/4841 2023-09-13 18:23:44+00:00| seen| https://t.me/cibsecurity/70391...
villaycorte.net Cross Site Scripting vulnerability OBB-3676841
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
vila-dzodzo.com Cross Site Scripting vulnerability OBB-3676769
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
vigcarrent.com Cross Site Scripting vulnerability OBB-3676736
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress WP User Control Plugin <= 1.5.3 is vulnerable to Other Vulnerability Type
Software WP User Control Type Plugin Vulnerable versions = 1.5.3 Fixed in N/A OWASP Top 10 A4: Insecure Design Classification Other Vulnerability Type CVE CVE-2023-4915 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 5604d612e4e9 Credits Lana Codes Required privilege...
Security Updates for Microsoft .NET Framework (September 2023)
The Microsoft .NET Framework installation on the remote host is missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - Multiple vulnerabilities in DiaSymReader.dll where parsing an corrupted PDB can result in remote code execution. CVE-2023-36792,...
Security Updates for Microsoft Excel Products C2R Information Disclosure (September 2023)
The Microsoft Excel Products are missing a security update. It is, therefore, affected by an information disclosure vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc...
Security Updates for Microsoft Office Products C2R Multiple Vulnerabilities (September 2023)
The Microsoft Office Products are missing a security update. It is, therefore, affected by multiple vulnerabilities, as follows: - A heap buffer overflow. CVE-2023-27911 - A security feature bypass. CVE-2023-36767 - A spoofing vulnerability. CVE-2023-41764 - An elevation of privilege vulnerabilit...
Security Updates for Microsoft Word Products C2R Multiple Vulnerabilities (September 2023)
The Microsoft Word Products are missing a security update. It is, therefore, affected by the following vulnerabilities: - A remote code execution vulnerability. CVE-2023-36762 - An information disclosure vulnerability. CVE-2023-36761 Note that Nessus has not tested for these issues but has instea...
Microsoft Patch Tuesday for September 2023 — Unusually low 5 critical vulnerabilities included in Microsoft Patch Tuesday, along with two zero-days
Microsoft disclosed 65 vulnerabilities across its suite of products and software Tuesday, only five of which are considered critical, which is very low compared to Microsofts usual security updates. However, there are two issues disclosed and patched this month that have already been exploited in...
Microsoft and Adobe Patch Tuesday, September 2023 Security Update Review
Microsoft has released the Patch Tuesday edition for September. This months updates have addressed 66 security vulnerabilities including Edge Chromium-based in multiple products, features, and roles. Microsoft Patch Tuesday for September 2023 Microsoft has addressed two zero-day publicly exploite...
bg.schadebo-diy.nl Cross Site Scripting vulnerability OBB-3674932
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Microsoft Releases September 2023 Updates
Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A cyber threat actor can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s September 2023 Security Update Guidelink i...
mirimdoce.sc.gov.br Cross Site Scripting vulnerability OBB-3674565
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
piratuba.sc.gov.br Cross Site Scripting vulnerability OBB-3674556
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
wallstreethorizon.com Cross Site Scripting vulnerability OBB-3674409
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
