Month: March 2023

Human Resource Management System /hrm/controller/login.php SQL injection |

March 23, 2023

NAME__________Human Resource Management System /hrm/controller/login.php SQL injectionPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Human Resource Management System is vulnerable to SQL injection. A...

Slimstat Analytics Plugin for WordPress SQL injection | CVE-2023-0630

March 23, 2023

NAME__________Slimstat Analytics Plugin for WordPress SQL injectionPlatforms Affected:WordPress Slimstat Analytics Plugin for WordPress 4.9.3.2Risk Level:5.4Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Slimstat Analytics Plugin for...

IBM WebSphere Application Server cross-site scripting | CVE-2023-26283

March 23, 2023

NAME__________IBM WebSphere Application Server cross-site scriptingPlatforms Affected:IBM WebSphere Application Server 9.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________IBM WebSphere Application Server 9.0 is vulnerable...

IBM QRadar SIEM privilege escalation | CVE-2022-43863

March 23, 2023

NAME__________IBM QRadar SIEM privilege escalationPlatforms Affected:IBM Security QRadar SIEM 7.5 IBM Security QRadar SIEM 7.4.3Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________IBM QRadar SIEM...

VISAM VBASE Automation Base XML external entity injection | CVE-2022-41696

March 23, 2023

NAME__________VISAM VBASE Automation Base XML external entity injectionPlatforms Affected:Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________VISAM VBASE Automation Base is vulnerable to an XML...

Keysight N6845A Geolocation Server privilege escalation | CVE-2023-1399

March 23, 2023

NAME__________Keysight N6845A Geolocation Server privilege escalationPlatforms Affected:Keysight N6845A Geolocation Server 2.4.2Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Keysight N6845A Geolocation Server could allow a...

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45468

March 23, 2023

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46286

March 23, 2023

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45121

March 23, 2023

MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosure | CVE-2022-45635

March 23, 2023

NAME__________MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosurePlatforms Affected:Risk Level:7.5Exploitability:Proof of ConceptConsequences:Obtain Information DESCRIPTION__________MEGAFEIS, BOFEI DBD+ Application for...

VISAM VBASE Automation Base XML external entity injection | CVE-2022-43512

March 23, 2023

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46300

March 23, 2023

Cisco ASA, FTD, IOS and IOS XE Software denial of service | CVE-2023-20081

March 23, 2023

NAME__________Cisco ASA, FTD, IOS and IOS XE Software denial of servicePlatforms Affected:Cisco Adaptive Security Appliance Software Cisco IOS Software Cisco...

Cisco IOS XE Software denial of service | CVE-2023-20100

March 23, 2023

NAME__________Cisco IOS XE Software denial of servicePlatforms Affected:Cisco IOS XE Software Cisco Catalyst 9800 Series Wireless Controllers Cisco Catalyst 9800...

Cisco IOS XE Software privilege escalation | CVE-2023-20065

March 23, 2023

NAME__________Cisco IOS XE Software privilege escalationPlatforms Affected:Cisco IOS XE SoftwareRisk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Cisco IOS XE Software could allow a local...

Cisco IOS XE SD-WAN Software command execution | CVE-2023-20035

March 23, 2023

NAME__________Cisco IOS XE SD-WAN Software command executionPlatforms Affected:Cisco IOS XE Software Cisco Cloud Services Router (CSR) 1000V Series Cisco 1000...

Cisco SD-WAN vManage Software cross-site request forgery | CVE-2023-20113

March 23, 2023

NAME__________Cisco SD-WAN vManage Software cross-site request forgeryPlatforms Affected:Cisco SD-WAN vManage softwareRisk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco SD-WAN vManage Software is vulnerable to...

Rockwell Automation ThinManager directory traversal | CVE-2023-27856

March 23, 2023

NAME__________Rockwell Automation ThinManager directory traversalPlatforms Affected:Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Rockwell Automation ThinManager could allow a remote attacker to traverse directories on...

Month: March 2023

Human Resource Management System /hrm/controller/login.php SQL injection |

Slimstat Analytics Plugin for WordPress SQL injection | CVE-2023-0630

IBM WebSphere Application Server cross-site scripting | CVE-2023-26283

IBM QRadar SIEM privilege escalation | CVE-2022-43863

VISAM VBASE Automation Base XML external entity injection | CVE-2022-41696

Keysight N6845A Geolocation Server privilege escalation | CVE-2023-1399

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45468

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46286

VISAM VBASE Automation Base XML external entity injection | CVE-2022-45121

MEGAFEIS, BOFEI DBD+ Application for IOS & Android information disclosure | CVE-2022-45635

VISAM VBASE Automation Base XML external entity injection | CVE-2022-43512

VISAM VBASE Automation Base XML external entity injection | CVE-2022-46300

Cisco ASA, FTD, IOS and IOS XE Software denial of service | CVE-2023-20081

Cisco IOS XE Software denial of service | CVE-2023-20100

Cisco IOS XE Software privilege escalation | CVE-2023-20065

Cisco IOS XE SD-WAN Software command execution | CVE-2023-20035

Cisco SD-WAN vManage Software cross-site request forgery | CVE-2023-20113

Rockwell Automation ThinManager directory traversal | CVE-2023-27856

Rockwell Automation ThinManager denial of service | CVE-2023-27857

Cisco IOS XE Software directory traversal | CVE-2023-20066

Apache Tomcat information disclosure | CVE-2023-28708

Cisco IOS XE Software privilege escalation | CVE-2023-20029

Cisco Access Point Software denial of service | CVE-2023-20112

VK All in One Expansion Unit Plugin for WordPress cross-site scripting | CVE-2023-0937

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Releases Eight Industrial Control Systems Advisories

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

You may have missed