Month: March 2023

Aruba Networks ArubaOS information disclosure | CVE-2023-22775

March 2, 2023

NAME__________Aruba Networks ArubaOS information disclosurePlatforms Affected:Aruba Networks ArubaOS 10.3.1.0 Aruba Networks ArubaOS 10.3.0.0 Aruba Networks ArubaOS 8.6.0 Aruba Networks ArubaOS...

IBM MQ denial of service | CVE-2022-43902

March 2, 2023

NAME__________IBM MQ denial of servicePlatforms Affected:IBM MQ Appliance 9.2.CD IBM MQ Appliance 9.2.LTS IBM MQ Appliance 9.3.LTS IBM MQ Appliance...

Arubanetworks ArubaOS command execution | CVE-2023-22770

March 2, 2023

NAME__________Arubanetworks ArubaOS command executionPlatforms Affected:Aruba Networks ArubaOS 10.3.1.0 Aruba Networks ArubaOS 8.6.0.19 Aruba Networks ArubaOS 8.10.0.4 Aruba Networks SD-WAN 8.7.0.0-2.3.0.8Risk...

IBM Financial Transaction Manager path traversal | CVE-2020-5001

March 2, 2023

NAME__________IBM Financial Transaction Manager path traversalPlatforms Affected:IBM Financial Transaction Manager 3.2.0 IBM Financial Transaction Manager 3.2.7Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________IBM Financial...

Linux Kernel denial of service | CVE-2023-1077

March 2, 2023

NAME__________Linux Kernel denial of servicePlatforms Affected:Linux KernelRisk Level:6.2Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Linux Kernel is vulnerable to a denial of service, caused...

Dell PowerScale OneFS denial of service | CVE-2023-25540

March 2, 2023

NAME__________Dell PowerScale OneFS denial of servicePlatforms Affected:Risk Level:6Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Dell PowerScale OneFS is vulnerable to a denial of service,...

EC-CUBE cross-site scripting | CVE-2023-22838

March 2, 2023

NAME__________EC-CUBE cross-site scriptingPlatforms Affected:EC-CUBE EC-CUBE 4.2.0Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________EC-CUBE is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

STAGIL Navigation plugin for Jira directory traversal | CVE-2023-26256

March 2, 2023

NAME__________STAGIL Navigation plugin for Jira directory traversalPlatforms Affected:Risk Level:4.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________STAGIL Navigation plugin for Jira could allow a remote authenticated...

Cisco Finesse Reverse Proxy VPN-less denial of service | CVE-2023-20088

March 2, 2023

NAME__________Cisco Finesse Reverse Proxy VPN-less denial of servicePlatforms Affected:Cisco System Unified Contact Center Enterprise Cisco Unified Contact Center Express Cisco...

Group control for forums module for Drupal security bypass |

March 2, 2023

NAME__________Group control for forums module for Drupal security bypassPlatforms Affected:Drupal Group control for forums module for Drupal 2.0.1Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security...

Snyk Kubernetes Monitor security bypass | CVE-2023-1065

March 2, 2023

NAME__________Snyk Kubernetes Monitor security bypassPlatforms Affected:Snyk Kubernetes MonitorRisk Level:6.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Snyk Kubernetes Monitor could allow a remote attacker to bypass...

Aruba Networks ArubaOS directory traversal | CVE-2023-22776

March 2, 2023

NAME__________Aruba Networks ArubaOS directory traversalPlatforms Affected:Aruba Networks ArubaOS 10.3.1.0 Aruba Networks ArubaOS 10.3.0.0 Aruba Networks ArubaOS 8.6.0 Aruba Networks ArubaOS...

Cisco Unified Intelligence Center server-side request forgery | CVE-2023-20062

March 2, 2023

NAME__________Cisco Unified Intelligence Center server-side request forgeryPlatforms Affected:Cisco Unified Contact Center Enterprise Cisco Unified Contact Center Express Cisco Unified Intelligence...

EC-CUBE cross-site scripting | CVE-2023-22438

March 2, 2023

NAME__________EC-CUBE cross-site scriptingPlatforms Affected:EC-CUBE EC-CUBE 4.2.0 EC-CUBE EC-CUBE 2.17.2 EC-CUBE EC-CUBE 3.0.18-p5Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________EC-CUBE is vulnerable to cross-site scripting,...

Arubanetworks ArubaOS command execution | CVE-2023-22769

March 2, 2023

STAGIL Navigation plugin for Jira directory traversal | CVE-2023-26255

March 2, 2023

Multiple Hitachi products security bypass | CVE-2020-36652

March 2, 2023

NAME__________Multiple Hitachi products security bypassPlatforms Affected:Hitachi Automation Director Hitachi Infrastructure Analytics Advisor on Linux Hitachi Ops Center Analyzer on Linux...

DataEase cross-site scripting | CVE-2023-25807

March 2, 2023

NAME__________DataEase cross-site scriptingPlatforms Affected:Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________DataEase is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | CVE-2023-20069

March 2, 2023

NAME__________Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scriptingPlatforms Affected:Cisco Prime Infrastructure Cisco Evolved Programmable Network ManagerRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting...

Month: March 2023

Aruba Networks ArubaOS information disclosure | CVE-2023-22775

IBM MQ denial of service | CVE-2022-43902

Arubanetworks ArubaOS command execution | CVE-2023-22770

IBM Financial Transaction Manager path traversal | CVE-2020-5001

Linux Kernel denial of service | CVE-2023-1077

Dell PowerScale OneFS denial of service | CVE-2023-25540

EC-CUBE cross-site scripting | CVE-2023-22838

STAGIL Navigation plugin for Jira directory traversal | CVE-2023-26256

Cisco Finesse Reverse Proxy VPN-less denial of service | CVE-2023-20088

Group control for forums module for Drupal security bypass |

Snyk Kubernetes Monitor security bypass | CVE-2023-1065

Aruba Networks ArubaOS directory traversal | CVE-2023-22776

Cisco Unified Intelligence Center server-side request forgery | CVE-2023-20062

EC-CUBE cross-site scripting | CVE-2023-22438

Arubanetworks ArubaOS command execution | CVE-2023-22769

STAGIL Navigation plugin for Jira directory traversal | CVE-2023-26255

Multiple Hitachi products security bypass | CVE-2020-36652

DataEase cross-site scripting | CVE-2023-25807

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | CVE-2023-20069

Cisco Unified Intelligence Center information disclosure | CVE-2023-20061

Linux Kernel denial of service | CVE-2023-1075

Web2py open redirect | CVE-2023-22432

Linux Kernel denial of service | CVE-2023-1079

DOS SS1 and Rakuraku PC Cloud information disclosure | CVE-2023-22335

Cobalt Strike Beacon Detected – 198[.]181[.]32[.]32:80

Cobalt Strike Beacon Detected – 101[.]126[.]18[.]76:7979

Cobalt Strike Beacon Detected – 1[.]117[.]72[.]208:8080

Cobalt Strike Beacon Detected – 103[.]231[.]74[.]38:8443

Cobalt Strike Beacon Detected – 147[.]182[.]192[.]11:443

You may have missed