Month: March 2023

Adobe Dimension information disclosure | CVE-2023-26342

March 17, 2023

NAME__________Adobe Dimension information disclosurePlatforms Affected:Adobe Dimension 3.4.7Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Dimension could allow a remote attacker to obtain sensitive information,...

Firmanet Customer Relation Manager cross-site scripting | CVE-2021-4195

March 17, 2023

NAME__________Firmanet Customer Relation Manager cross-site scriptingPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Firmanet Customer Relation Manager is vulnerable to cross-site scripting, caused by...

NETGEAR products information disclosure |

March 17, 2023

NAME__________NETGEAR products information disclosurePlatforms Affected:NETGEAR MK62 NETGEAR MK63 NETGEAR MK60 NETGEAR RAX45 NETGEAR RAX50 NETGEAR MR60 NETGEAR CBR750 NETGEAR LAX20...

Unity Technologies Unity buffer overflow |

March 17, 2023

NAME__________Unity Technologies Unity buffer overflowPlatforms Affected:Unity Technologies UnityRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Unity Technologies Unity is vulnerable to a heap-based buffer overflow,...

Responsive media Image Formatter module for Drupal unspecified |

March 17, 2023

NAME__________Responsive media Image Formatter module for Drupal unspecifiedPlatforms Affected:Drupal Responsive media Image Formatter module for Drupal 1.0.0Risk Level:6.5Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________An unspecified...

IBM Aspera Faspex improper access controls | CVE-2023-27875

March 17, 2023

NAME__________IBM Aspera Faspex improper access controlsPlatforms Affected:IBM Aspera Faspex 5.0.4Risk Level:6.5Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________IBM Aspera Faspex 5.0.4 could allow an authenticated...

Firmanet Customer Relation Manager cross-site scripting | CVE-2022-23791

March 17, 2023

NETGEAR devices buffer overflow | CVE-2020-0578

March 17, 2023

NAME__________NETGEAR devices buffer overflowPlatforms Affected:Netgear R6400 Netgear R7000 NETGEAR R7000P NETGEAR R6400v2 NETGEAR MK62 NETGEAR MS60 NETGEAR CBR40 NETGEAR RAX20...

Unity Technologies Unity code execution |

March 17, 2023

NAME__________Unity Technologies Unity code executionPlatforms Affected:Unity Technologies UnityRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Unity Technologies Unity could allow a remote attacker to execute...

Drupal Core information disclosure |

March 17, 2023

NAME__________Drupal Core information disclosurePlatforms Affected:Drupal Drupal 9.4.11 Drupal Drupal 9.5.4 Drupal Drupal 10.0.4Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Drupal Core could allow a...

Roxy-WI directory traversal | CVE-2023-25804

March 17, 2023

NAME__________Roxy-WI directory traversalPlatforms Affected:Roxy-WI Roxy-WI 6.3.4.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Roxy-WI could allow a remote attacker to traverse directories on the system,...

Client Portal Plugin for WordPress cross-site request forgery | CVE-2023-25968

March 17, 2023

NAME__________Client Portal Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Client Portal Plugin for WordPress 1.1.8Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Client Portal Plugin...

Unity Technologies Unity information disclosure |

March 17, 2023

NAME__________Unity Technologies Unity information disclosurePlatforms Affected:Unity Technologies UnityRisk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Unity Technologies Unity could allow a remote attacker to obtain...

D-Link DIR820LA1_FW106B02 denial of service |

March 17, 2023

NAME__________D-Link DIR820LA1_FW106B02 denial of servicePlatforms Affected:D-Link DIR820LA1 FW106B02Risk Level:6.5Exploitability:HighConsequences:Denial of Service DESCRIPTION__________D-Link DIR820LA1_FW106B02 is vulnerable to a denial of service,...

Drupal Core cross-site scripting |

March 17, 2023

NAME__________Drupal Core cross-site scriptingPlatforms Affected:Drupal Drupal 9.4.11 Drupal Drupal 9.5.4 Drupal Drupal 10.0.4Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Drupal Core is vulnerable to...

WP VR Plugin for WordPress cross-site request forgery | CVE-2023-25708

March 17, 2023

NAME__________WP VR Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress WP VR Plugin for WordPress 8.2.7Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________WP VR Plugin...

Unity Technologies Unity code execution |

March 17, 2023

Media Responsive Thumbnail module for Drupal information disclosure |

March 17, 2023

NAME__________Media Responsive Thumbnail module for Drupal information disclosurePlatforms Affected:Druapl Media Responsive Thumbnail module for Druapl 8.x-1.4Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Media Responsive...

Unity Technologies Unity code execution |

March 17, 2023

NETGEAR devices command execution | CVE-2022-0182

March 17, 2023

NAME__________NETGEAR devices command executionPlatforms Affected:NETGEAR RBK752 NETGEAR RBR750 NETGEAR RBR840 NETGEAR RBS840 NETGEAR RBK852 NETGEAR RBR850 NETGEAR RBS850 NETGEAR CBR40...

Drupal Core information disclosure |

March 17, 2023

NETGEAR devices command execution | CVE-2021-0176

March 17, 2023

NAME__________NETGEAR devices command executionPlatforms Affected:Netgear R6400 Netgear R7000 NETGEAR R7000P NETGEAR EX6130 NETGEAR R6400v2 1.0.2.31 NETGEAR RBR750 NETGEAR RBS750 NETGEAR...

PrestaShop SQL injection | CVE-2023-25206

March 17, 2023

NAME__________PrestaShop SQL injectionPlatforms Affected:PrestaShop ws_productreviews module 3.6.2Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________PrestaShop is vulnerable to SQL injection. A remote attacker could send...

Sourcecodester Student Study Center Desk Management System SQL injection | CVE-2023-1407

March 17, 2023

NAME__________Sourcecodester Student Study Center Desk Management System SQL injectionPlatforms Affected:Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Sourcecodester Student Study Center Desk Management System is...

Month: March 2023

Adobe Dimension information disclosure | CVE-2023-26342

Firmanet Customer Relation Manager cross-site scripting | CVE-2021-4195

NETGEAR products information disclosure |

Unity Technologies Unity buffer overflow |

Responsive media Image Formatter module for Drupal unspecified |

IBM Aspera Faspex improper access controls | CVE-2023-27875

Firmanet Customer Relation Manager cross-site scripting | CVE-2022-23791

NETGEAR devices buffer overflow | CVE-2020-0578

Unity Technologies Unity code execution |

Drupal Core information disclosure |

Roxy-WI directory traversal | CVE-2023-25804

Client Portal Plugin for WordPress cross-site request forgery | CVE-2023-25968

Unity Technologies Unity information disclosure |

D-Link DIR820LA1_FW106B02 denial of service |

Drupal Core cross-site scripting |

WP VR Plugin for WordPress cross-site request forgery | CVE-2023-25708

Unity Technologies Unity code execution |

Media Responsive Thumbnail module for Drupal information disclosure |

Unity Technologies Unity code execution |

NETGEAR devices command execution | CVE-2022-0182

Drupal Core information disclosure |

NETGEAR devices command execution | CVE-2021-0176

PrestaShop SQL injection | CVE-2023-25206

Sourcecodester Student Study Center Desk Management System SQL injection | CVE-2023-1407

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed