NAME__________GitLab Community and Enterprise Edition cross-site scriptingPlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________Yordam Library Automation System cross-site scriptingPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Yordam Library Automation System is vulnerable to cross-site scripting, caused by...
NAME__________GitLab Community and Enterprise Edition information disclosurePlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________GitLab Community and Enterprise Edition security bypassPlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________IBM Maximo Asset Management cross-site scriptingPlatforms Affected:IBM Maximo Asset Management 7.6.1.1 IBM Maximo Asset Management 7.6.1.2 IBM Maximo Asset Management...
NAME__________GitLab Community and Enterprise Edition information disclosurePlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________GitLab Community and Enterprise Edition information disclosurePlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________Computer Parts Sales and Inventory System cross-site scriptingPlatforms Affected:Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Computer Parts Sales and Inventory System is vulnerable to...
NAME__________GitLab Community and Enterprise Edition open redirectPlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________GitLab Community and Enterprise Edition privilege escalationPlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________Sophos Connect information disclosurePlatforms Affected:Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Sophos Connect could allow a local authenticated attacker to obtain sensitive information. An...
NAME__________Gradle code executionPlatforms Affected:Gradle Gradle 6.2 Gradle Gradle 7.6Risk Level:6.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Gradle could allow a remote authenticated attacker to execute...
NAME__________GitLab Community and Enterprise Edition security bypassPlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community Edition...
NAME__________GitLab Community and Enterprise Edition denial of servicePlatforms Affected:GitLab Enterprise Edition (EE) 15.8.0 GitLab Community Edition (CE) 15.8.0 GitLab Community...
NAME__________Linux Kernel denial of servicePlatforms Affected:Linux KernelRisk Level:6.2Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Linux Kernel is vulnerable to a denial of service, caused...
NAME__________Yordam Library Automation System cross-site scriptingPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Yordam Library Automation System is vulnerable to cross-site scripting, caused by...
NAME__________e-Belediye denial of servicePlatforms Affected:e-Belediye e-BelediyeRisk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________e-Belediye is vulnerable to a denial of service, caused by the...
NAME__________Dell EMC NetWorker information disclosurePlatforms Affected:Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Dell EMC NetWorker could allow a remote attacker to obtain sensitive information....
NAME__________IBM Spectrum Symphony HOST header injectionPlatforms Affected:IBM Spectrum Symphony 7.3Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________IBM Spectrum Symphony 7.3 is vulnerable to HTTP...
A sophisticated attack campaign dubbed SCARLETEEL is targeting containerized environments to perpetrate theft of proprietary data and software. "The attacker...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released a new advisory about Royal ransomware, which emerged in the...
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-0669Fortra (formerly, HelpSystems) GoAnywhere MFT suffers from a pre-authentication command injection vulnerability...
Score: 10 MALWARE FAMILY: smokeloaderTAGS:family:smokeloader, backdoor, trojanMD5: 7e81c990211ee023d354c438b620532dSHA1: b33e485bea1f17d4d2db7377cc5611173a189c80ANALYSIS DATE: 2023-03-03T03:06:03ZTTPS: T1012, T1120, T1082 ScoreMeaningExample10Known badA malware family was detected.8-9Likely...
Score: 10 MALWARE FAMILY: djvuTAGS:family:djvu, family:smokeloader, family:vidar, backdoor, discovery, persistence, ransomware, stealer, trojanMD5: ae1a6c46eb913913ce9657d95e08d18dSHA1: 0ce678227bf82b32743c44007721001b1e6fea1fANALYSIS DATE: 2023-03-03T03:38:46ZTTPS: T1060, T1112, T1012,...
