Month: March 2023

Adobe Illustrator code execution | CVE-2023-25861

March 15, 2023

NAME__________Adobe Illustrator code executionPlatforms Affected:Adobe Illustrator 2023 27.2.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Illustrator could allow a remote attacker to execute arbitrary...

Mozilla Firefox weak security | CVE-2023-25752

March 15, 2023

NAME__________Mozilla Firefox weak securityPlatforms Affected:Mozilla firefox 110 Mozilla Firefox ESR 102.8Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Mozilla Firefox could provide weaker than expected,...

Adobe Experience Manager cross-site scripting | CVE-2023-21615

March 15, 2023

NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.15.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...

Adobe Experience Manager open redirect | CVE-2023-22260

March 15, 2023

NAME__________Adobe Experience Manager open redirectPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.15.0Risk Level:3.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Experience Manager...

SAP Authenticator for Android information disclosure | CVE-2023-27895

March 15, 2023

NAME__________SAP Authenticator for Android information disclosurePlatforms Affected:SAP Authenticator for Android 1.3.0Risk Level:6.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________SAP Authenticator for Android could allow a...

Adobe Experience Manager open redirect | CVE-2023-22265

March 15, 2023

Mozilla Firefox information disclosure | CVE-2023-28160

March 15, 2023

NAME__________Mozilla Firefox information disclosurePlatforms Affected:Mozilla firefox 110Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Mozilla Firefox could allow a remote attacker to obtain sensitive information,...

SAP BusinessObjects Business Intelligence platform information disclosure | CVE-2023-27894

March 15, 2023

NAME__________SAP BusinessObjects Business Intelligence platform information disclosurePlatforms Affected:SAP BusinessObjects Business Intelligence Platform 420 SAP BusinessObjects Business Intelligence Platform 430Risk Level:5Exploitability:UnprovenConsequences:Obtain...

Microsoft Windows privilege escalation | CVE-2023-23423

March 15, 2023

NAME__________Microsoft Windows privilege escalationPlatforms Affected:Microsoft Windows 10 20H2 for x64-based Systems Microsoft Windows Server (Server Core installation) 2019 Microsoft Windows...

Adobe Experience Manager cross-site scripting | CVE-2023-22269

March 15, 2023

Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosure | CVE-2023-24866

March 15, 2023

NAME__________Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosurePlatforms Affected:Microsoft Windows Server version 20H2 Microsoft Windows 10 20H2 for...

Adobe Commerce and Magento Open Source security bypass | CVE-2023-22250

March 15, 2023

NAME__________Adobe Commerce and Magento Open Source security bypassPlatforms Affected:Adobe Commerce 2.4.4-p2 Adobe Commerce 2.4.5-p1 Adobe Magento Open Source 2.4.4-p2 Adobe...

Mozilla Firefox denial of service | CVE-2023-28162

March 15, 2023

NAME__________Mozilla Firefox denial of servicePlatforms Affected:Mozilla firefox 110 Mozilla Firefox ESR 102.8Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Mozilla Firefox is vulnerable to...

Microsoft Windows PostScript Printer Driver information disclosure | CVE-2023-24856

March 15, 2023

NAME__________Microsoft Windows PostScript Printer Driver information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32...

Adobe Photoshop code execution | CVE-2023-25908

March 15, 2023

NAME__________Adobe Photoshop code executionPlatforms Affected:Adobe Photoshop 2022 23.5.3 Adobe Photoshop 2023 24.1.1Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Photoshop could allow a remote...

Mozilla Firefox spoofing | CVE-2023-28164

March 15, 2023

NAME__________Mozilla Firefox spoofingPlatforms Affected:Mozilla firefox 110 Mozilla Firefox ESR 102.8Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Mozilla Firefox could allow a remote attacker to...

Adobe Illustrator code execution | CVE-2023-25860

March 15, 2023

Adobe Experience Manager open redirect | CVE-2023-2256

March 15, 2023

Microsoft Excel security bypass | CVE-2023-23398

March 15, 2023

NAME__________Microsoft Excel security bypassPlatforms Affected:Microsoft Excel 2013 SP1 x32 Microsoft Excel 2013 SP1 x64 Microsoft Excel 2013 SP1 RT Microsoft...

Microsoft OneDrive for MacOS privilege escalation | CVE-2023-24930

March 15, 2023

NAME__________Microsoft OneDrive for MacOS privilege escalationPlatforms Affected:Microsoft OneDrive for MacOS InstallerRisk Level:7.8Exploitability:UnprovenConsequences:Gain Privilege DESCRIPTION__________Microsoft OneDrive for MacOS could allow a...

Microsoft Windows Point-to-Point Protocol over Ethernet (PPPoE) code execution | CVE-2023-23407

March 15, 2023

NAME__________Microsoft Windows Point-to-Point Protocol over Ethernet (PPPoE) code executionPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows...

Microsoft Azure HDInsight spoofing | CVE-2023-23408

March 15, 2023

NAME__________Microsoft Azure HDInsight spoofingPlatforms Affected:Microsoft Azure HDInsightsRisk Level:4.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Azure HDInsight could allow a remote authenticated attacker to conduct...

Adobe Commerce and Magento Open Source information disclosure | CVE-2023-22247

March 15, 2023

NAME__________Adobe Commerce and Magento Open Source information disclosurePlatforms Affected:Adobe Commerce 2.4.4-p2 Adobe Commerce 2.4.5-p1 Adobe Magento Open Source 2.4.4-p2 Adobe...

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-24919

March 15, 2023

NAME__________Microsoft Dynamics 365 (on-premises) cross-site scriptingPlatforms Affected:Microsoft Dynamics 365 (on-premises) 9.0 Microsoft Dynamics 365 (on-premises) 9.1Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Microsoft Dynamics...

Month: March 2023

Adobe Illustrator code execution | CVE-2023-25861

Mozilla Firefox weak security | CVE-2023-25752

Adobe Experience Manager cross-site scripting | CVE-2023-21615

Adobe Experience Manager open redirect | CVE-2023-22260

SAP Authenticator for Android information disclosure | CVE-2023-27895

Adobe Experience Manager open redirect | CVE-2023-22265

Mozilla Firefox information disclosure | CVE-2023-28160

SAP BusinessObjects Business Intelligence platform information disclosure | CVE-2023-27894

Microsoft Windows privilege escalation | CVE-2023-23423

Adobe Experience Manager cross-site scripting | CVE-2023-22269

Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosure | CVE-2023-24866

Adobe Commerce and Magento Open Source security bypass | CVE-2023-22250

Mozilla Firefox denial of service | CVE-2023-28162

Microsoft Windows PostScript Printer Driver information disclosure | CVE-2023-24856

Adobe Photoshop code execution | CVE-2023-25908

Mozilla Firefox spoofing | CVE-2023-28164

Adobe Illustrator code execution | CVE-2023-25860

Adobe Experience Manager open redirect | CVE-2023-2256

Microsoft Excel security bypass | CVE-2023-23398

Microsoft OneDrive for MacOS privilege escalation | CVE-2023-24930

Microsoft Windows Point-to-Point Protocol over Ethernet (PPPoE) code execution | CVE-2023-23407

Microsoft Azure HDInsight spoofing | CVE-2023-23408

Adobe Commerce and Magento Open Source information disclosure | CVE-2023-22247

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-24919

CISA’s 2024 Year in Review: Major Advances in Cybersecurity Collaboration

CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

You may have missed