CVE-2019-8720

CVE-2019-8720 is a WebKit-based memory-corruption vulnerability affecting WebKitGTK/WebKit2GTK components. Public sources in the Connected Documents identify arbitrary-code-execution potential when processing malicious web content (WebKitGTK/WebKit2GTK). Debian’s security advisory lists CVE-2019-...

CVE-2023-24733

PMB v7.4.6 has a reflected Cross-Site Scripting (XSS) vulnerability via the query parameter in /admin/convert/export_z3950_new.php. An attacker can inject arbitrary script into the browser context of the affected site, potentially stealing cookie-based authentication credentials, enabling session...

CVE-2023-0656

CVE-2023-0656 is a stack-based buffer overflow in the SonicOS web management interface of SonicWall firewalls. The vulnerability can be exploited remotely by an unauthenticated attacker via crafted HTTP requests to overflow a stack buffer, potentially causing a Denial of Service (DoS) and a crash...

CVE-2023-26255

CVE-2023-26255 affects the STAGIL Navigation for Jira Menu & Themes plugin for Jira (before 2.0.52). Multiple sources confirm an unauthenticated path traversal/local file inclusion via the snjCustomDesignConfig endpoint when the fileName parameter is modified, enabling an attacker to read server ...

CVE-2023-26256

STAGIL Navigation for Jira Menu & Themes plugin (Jira)

CVE-2022-47075

Smart Office Web 20.28 and earlier versions are affected by CVE-2022-47075 and CVE-2022-47076, both resulting in information disclosure. The impact is unauthenticated data exposure via insecure endpoints: ExportEmployeeDetails.aspx (action parameter) and ExportReportingManager.aspx for CVE-2022-4...

CVE-2023-0552

CVE-2023-0552 concerns the WordPress plugin Pie Register (pre-3.8.2.3). The issue is an Open Redirect caused by improper validation of the redirection URL during login and logout. Exploitation would involve an attacker steering a user to a malicious site via the redirect_to parameter, with potent...

CVE-2023-23529

CVE-2023-23529 is a type confusion vulnerability in WebKit/WebKitGTK that could allow arbitrary code execution when processing malicious web content. Apple’s advisory covers iOS/iPadOS/macOS/Safari patches (iOS 15.7.4, 16.3.1, macOS Ventura 13.2.1, Safari 16.3) and notes active exploitation repor...

CVE-2023-26609

The CVE-2023-26609 vulnerability affects ABUS TVIP 20000-21150 devices, where shell metacharacters in the /cgi-bin/mft/wireless_mft ap field allow remote code execution. Public exploit discussions exist (PacketStorm/Wiki entries) and ICS CVE notes confirm remote exploitation with a CVSS v3.1 base...

CVE-2023-23295

CVE-2023-23295 affects Korenix JetWave 4200 Series (1.3.0) and JetWave 3000 Series (1.6.0). The flaw is command injection via the /goform/formSysCmd endpoint, where an attacker can modify the sysCmd parameter to execute commands as root. CVSS v3.1 base score 8.8 (Network attack, Low privileges, H...

CVE-2023-25158

CVE-2023-25158 is a CVSS 9.8 Critical SQL injection in GeoTools (open-source Java geospatial library) affecting OGC Filter execution against JDBCDataStore implementations. The root cause is direct concatenation of filter parameters into SQL without sanitization. Affected vectors include PropertyI...

CVE-2022-47986

Summary: CVE-2022-47986 affects IBM Aspera Faspex 4.4.2 PL1 and earlier due to a YAML deserialization flaw that allowed remote code execution. The vulnerability is triggered by a specially crafted obsolete API call; the obsolete call was removed in Faspex 4.4.2 PL2. IBM’s bulletin confirms remedi...

CVE-2022-39952

Fortinet FortiNAC is affected by CVE-2022-39952 via an external control of the file name or path in the /configWizard/keyUpload.jsp endpoint. A unauthenticated attacker can write arbitrary files, enabling unauthenticated remote code execution (root context) and potential data loss or modification...

CVE-2022-41335

CVE-2022-41335 describes a relative path traversal in Fortinet FortiOS (versions 7.2.0–7.2.2, 7.0.0–7.0.8, before 6.4.10), FortiProxy (7.2.0–7.2.1, 7.0.0–7.0.7, before 2.0.10), and FortiSwitchManager (7.2.0 and before 7.0.0). An authenticated attacker can read and write files on the underlying Li...

CVE-2023-23752

CVE-2023-23752 affects Joomla! 4.0.0–4.2.7, where an improper access check on webservice endpoints allows unauthenticated access, enabling information disclosure. Exploit PoCs in public repos demonstrate unauthenticated disclosure against Joomla! 4.2.8 in some cases. Root cause: insufficient auth...

CVE-2023-20085

Cisco Identity Services Engine (ISE) web-based management interface is vulnerable to cross-site scripting (XSS) due to insufficient input validation. An unauthenticated, remote attacker could inject malicious scripts on management pages, potentially executing in the user’s browser context or acce...

CVE-2023-21823

CVE-2023-21823 (Windows Graphics Component RCE) : A Windows Graphics Component remote code execution vulnerability that can give an attacker SYSTEM-level code execution when exploited. Public discussion across sources notes exploitation risk and active exploitation in the wild around Patch Tuesda...

CVE-2023-23376

CVE-2023-23376 is a Windows Common Log File System Driver elevation-of-privilege vulnerability. The flaw in the CLFS driver could allow a local attacker to gain SYSTEM privileges, potentially enabling a chain with other bugs. Public exploitation and in-the-wild activity are discussed in Patch Tue...

CVE-2023-21716

CVE-2023-21716 corresponds to a Microsoft Word/Office remote code execution vulnerability. A heap corruption flaw resides in Word’s wwlib when parsing RTF font tables with an excessive number of fonts in the fonttbl, causing an out-of-bounds write that can lead to arbitrary code execution when a ...

CVE-2023-21715

CVE-2023-21715 is a Microsoft Publisher security feature bypass vulnerability affecting Microsoft 365 Apps for Enterprise. Exploitation allows a specially crafted document to bypass macro defenses and run code that would normally be blocked by policy; the attack is described as local with authent...