3609 matches found
BELL-CVE-2023-4734
Bulletin has no description...
CVE-2023-41640
An improper error handling vulnerability in the component ErroreNonGestito.aspx of GruppoSCAI RealGimm 1.1.37p38 allows attackers to obtain sensitive technical information via a crafted SQL query...
CVE-2023-34173
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Alexander Semikashev Yandex Metrica Counter plugin = 1.4.3 versions...
CVE-2023-33208 WordPress Cookie Monster Plugin <= 1.51 is vulnerable to Cross Site Scripting (XSS)
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in gsmith Cookie Monster plugin = 1.51 versions...
[Important] [Security] Virtuozzo ReadyKernel Patch 160.0 for Virtuozzo Hybrid Server 7.5
The cumulative Virtuozzo ReadyKernel patch was updated with security fixes. The patch applies to all supported kernels of Virtuozzo Hybrid Server 7.5. NOTE: As the kernel 3.10.0-1160.41.1.vz7.183.5 has reached the end of its support period, no more ReadyKernel updates are planned for it...
CVE-2023-4042 Ghostscript: incomplete fix for cve-2020-16305
A flaw was found in ghostscript. The fix for CVE-2020-16305 in ghostscript was not included in RHSA-2021:1852-06 advisory as it was claimed to be. This issue only affects the ghostscript package as shipped with Red Hat Enterprise Linux 8...
Security update for python-mitmproxy (moderate)
openSUSE Security Update: Security update for python-mitmproxy Announcement ID: openSUSE-SU-2023:0232-1 Rating: moderate References: 1190603 Cross-References: CVE-2021-39214 CVSS scores: CVE-2021-39214 NVD : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports...
CVE-2023-37847
novel-plus v3.6.2 was discovered to contain a SQL injection vulnerability...
BELL-CVE-2023-25775
Bulletin has no description...
CVE-2023-36313
PHPJabbers Document Creator v1.0 is vulnerable to Cross Site Scripting XSS via all post parameters of "Export Requests" aside from "requestfeed"...
Medium: bouncycastle
Issue Overview: A flaw was found in Bouncy Castle 1.73. This issue targets the fix of LDAP wild cards. Before the fix there was no validation for the X.500 name of any certificate, subject, or issuer, so the presence of a wild card may lead to information disclosure. This could allow a malicious...
CVE-2023-36893
Microsoft Outlook Spoofing Vulnerability...
SUSE-SU-2023:3229-1 Security update for rubygem-actionpack-5_1
This update for rubygem-actionpack-51 fixes the following issues: - CVE-2023-28362: Fixed possible XSS via User Supplied Values to redirectto bsc1213312...
Description of the security update for Outlook 2016: August 8, 2023 (KB5002459)
None None...
CVE-2023-33666
The CVE-2023-33666 entry affects the ai-dev aioptimizedcombinations project prior to v0.1.3. The vulnerability is a SQL injection via the component /includes/ajax.php, as cited across multiple feeds. The available data indicate a critical impact (CVSS3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) with...
Debian dla-3504 : gir1.2-gst-plugins-base-1.0 - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3504 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3504-1 [email protected] https://www.debian.org/lts/security/...
CVE-2023-22052
...
CVE-2023-33151 Microsoft Outlook Spoofing Vulnerability
...
