Month: March 2023

Adobe Substance 3D Stager buffer overflow | CVE-2023-25864

March 17, 2023

NAME__________Adobe Substance 3D Stager buffer overflowPlatforms Affected:Adobe Substance 3D Stager 2.0.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Substance 3D Stager is vulnerable to...

Adobe Substance 3D Stager information disclosure | CVE-2023-25875

March 17, 2023

NAME__________Adobe Substance 3D Stager information disclosurePlatforms Affected:Adobe Substance 3D Stager 2.0.0Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Substance 3D Stager could allow a...

NETGEAR Nighthawk WiFi6 Router denial of service | CVE-2023-28338

March 17, 2023

NAME__________NETGEAR Nighthawk WiFi6 Router denial of servicePlatforms Affected:NETGEAR Nighthawk WiFi6 Router 1.0.9Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________NETGEAR Nighthawk WiFi6 Router is...

Aruba Networks ClearPass Policy Manager information disclosure | CVE-2023-25596

March 17, 2023

NAME__________Aruba Networks ClearPass Policy Manager information disclosurePlatforms Affected:Aruba Networks ClearPass Policy Manager 6.9.13 Aruba Networks ClearPass Policy Manager 6.11.1 Aruba...

Schneider Electric IGSS denial of service | CVE-2023-27979

March 17, 2023

NAME__________Schneider Electric IGSS denial of servicePlatforms Affected:Schneider Electric IGSS Data Server 16.0.0.23040 Schneider Electric IGSS Dashboard 16.0.0.23040 Schneider Electric IGSS...

Adobe Dimension code execution | CVE-2023-25888

March 17, 2023

NAME__________Adobe Dimension code executionPlatforms Affected:Adobe Dimension 3.4.7Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Dimension could allow a remote attacker to execute arbitrary code...

Adobe Dimension code execution | CVE-2023-26332

March 17, 2023

Adobe Dimension code execution | CVE-2023-25887

March 17, 2023

Aruba Networks ClearPass Policy Manager privilege escalation | CVE-2023-25594

March 17, 2023

NAME__________Aruba Networks ClearPass Policy Manager privilege escalationPlatforms Affected:Aruba Networks ClearPass Policy Manager 6.9.13 Aruba Networks ClearPass Policy Manager 6.11.1 Aruba...

Adobe Dimension information disclosure | CVE-2023-26343

March 17, 2023

NAME__________Adobe Dimension information disclosurePlatforms Affected:Adobe Dimension 3.4.7Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Dimension could allow a remote attacker to obtain sensitive information,...

Adobe Dimension code execution | CVE-2023-26331

March 17, 2023

Lenovo System Update privilege escalation | CVE-2022-4568

March 17, 2023

NAME__________Lenovo System Update privilege escalationPlatforms Affected:Lenovo System Update 5.07Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Lenovo System Update could allow a local authenticated attacker...

Zoom for Windows clients information disclosure | CVE-2023-22880

March 17, 2023

NAME__________Zoom for Windows clients information disclosurePlatforms Affected:Zoom Zoom for Windows clients 5.13.2 Zoom Zoom Rooms for Windows clients 5.13.2 Zoom...

Adobe Dimension information disclosure | CVE-2023-26355

March 17, 2023

Adobe Dimension code execution | CVE-2023-26330

March 17, 2023

Schneider Electric IGSS code execution | CVE-2023-27984

March 17, 2023

NAME__________Schneider Electric IGSS code executionPlatforms Affected:Schneider Electric IGSS Data Server 16.0.0.23040 Schneider Electric IGSS Dashboard 16.0.0.23040 Schneider Electric IGSS Custom...

Online Pizza Ordering System file upload | CVE-2023-1392

March 17, 2023

NAME__________Online Pizza Ordering System file uploadPlatforms Affected:Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Online Pizza Ordering System could allow a remote authenticated attacker to...

Adobe Dimension information disclosure | CVE-2023-26351

March 17, 2023

Adobe Dimension code execution | CVE-2023-25899

March 17, 2023

Adobe Dimension information disclosure | CVE-2023-26344

March 17, 2023

NAME__________Adobe Dimension information disclosurePlatforms Affected:Adobe Dimension 3.4.7Risk Level:7.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Dimension could allow a remote attacker to obtain sensitive information,...

Adobe Dimension code execution | CVE-2023-26335

March 17, 2023

Adobe Dimension code execution | CVE-2023-25891

March 17, 2023

Lenovo ThinkPad X1 Fold Gen 1 privilege escalation | CVE-2022-4574

March 17, 2023

NAME__________Lenovo ThinkPad X1 Fold Gen 1 privilege escalationPlatforms Affected:Lenovo X1 Fold Gen 1Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Lenovo ThinkPad X1 Fold Gen...

Adobe ColdFusion directory traversal | CVE-2023-26361

March 17, 2023

NAME__________Adobe ColdFusion directory traversalPlatforms Affected:Adobe ColdFusion 2018 Update 15 Adobe ColdFusion 2021 Update 5Risk Level:4.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe ColdFusion could allow...

Month: March 2023

Adobe Substance 3D Stager buffer overflow | CVE-2023-25864

Adobe Substance 3D Stager information disclosure | CVE-2023-25875

NETGEAR Nighthawk WiFi6 Router denial of service | CVE-2023-28338

Aruba Networks ClearPass Policy Manager information disclosure | CVE-2023-25596

Schneider Electric IGSS denial of service | CVE-2023-27979

Adobe Dimension code execution | CVE-2023-25888

Adobe Dimension code execution | CVE-2023-26332

Adobe Dimension code execution | CVE-2023-25887

Aruba Networks ClearPass Policy Manager privilege escalation | CVE-2023-25594

Adobe Dimension information disclosure | CVE-2023-26343

Adobe Dimension code execution | CVE-2023-26331

Lenovo System Update privilege escalation | CVE-2022-4568

Zoom for Windows clients information disclosure | CVE-2023-22880

Adobe Dimension information disclosure | CVE-2023-26355

Adobe Dimension code execution | CVE-2023-26330

Schneider Electric IGSS code execution | CVE-2023-27984

Online Pizza Ordering System file upload | CVE-2023-1392

Adobe Dimension information disclosure | CVE-2023-26351

Adobe Dimension code execution | CVE-2023-25899

Adobe Dimension information disclosure | CVE-2023-26344

Adobe Dimension code execution | CVE-2023-26335

Adobe Dimension code execution | CVE-2023-25891

Lenovo ThinkPad X1 Fold Gen 1 privilege escalation | CVE-2022-4574

Adobe ColdFusion directory traversal | CVE-2023-26361

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed