Month: March 2023

SAP BusinessObjects Business Intelligence Platform denial of service | CVE-2023-27271

March 15, 2023

NAME__________SAP BusinessObjects Business Intelligence Platform denial of servicePlatforms Affected:SAP BusinessObjects Business Intelligence Platform 420 SAP BusinessObjects Business Intelligence Platform 430Risk...

Microsoft Windows Kernel privilege escalation | CVE-2023-23420

March 15, 2023

NAME__________Microsoft Windows Kernel privilege escalationPlatforms Affected:Microsoft Windows Server version 1903 Microsoft Windows 10 20H2 for x64-based Systems Microsoft Windows Server...

SAP NetWeaver AS Java privilege escalation | CVE-2023-27268

March 15, 2023

NAME__________SAP NetWeaver AS Java privilege escalationPlatforms Affected:SAP NetWeaver AS for JAVA 7.50Risk Level:5.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________SAP NetWeaver AS Java could allow...

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-24920

March 15, 2023

NAME__________Microsoft Dynamics 365 (on-premises) cross-site scriptingPlatforms Affected:Microsoft Dynamics 365 (on-premises) 9.0 Microsoft Dynamics 365 (on-premises) 9.1Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Microsoft Dynamics...

Microsoft Excel denial of service | CVE-2023-24859

March 15, 2023

NAME__________Microsoft Excel denial of servicePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2016 Microsoft Windows Server version 20H2 Microsoft Windows...

SAP NetWeaver AS for Java security bypass | CVE-2023-23857

March 15, 2023

NAME__________SAP NetWeaver AS for Java security bypassPlatforms Affected:SAP NetWeaver AS for JAVA 7.50Risk Level:7.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________SAP NetWeaver AS for Java...

Mozilla Firefox weak security | CVE-2023-28161

March 15, 2023

NAME__________Mozilla Firefox weak securityPlatforms Affected:Mozilla firefox 110Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Mozilla Firefox could provide weaker than expected, caused by an error...

Microsoft Windows Client Server Run-Time Subsystem (CSRSS) information disclosure | CVE-2023-23394

March 15, 2023

NAME__________Microsoft Windows Client Server Run-Time Subsystem (CSRSS) information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows...

Microsoft Windows DNS Server code execution | CVE-2023-23400

March 15, 2023

NAME__________Microsoft Windows DNS Server code executionPlatforms Affected:Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft...

SAP BusinessObjects Business Intelligence Platform denial of service | CVE-2023-27896

March 15, 2023

Adobe Experience Manager open redirect | CVE-2023-22264

March 15, 2023

NAME__________Adobe Experience Manager open redirectPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.15.0Risk Level:3.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Experience Manager...

Microsoft Windows Kernel privilege escalation | CVE-2023-23422

March 15, 2023

NAME__________Microsoft Windows Kernel privilege escalationPlatforms Affected:Microsoft Windows 10 20H2 for x64-based Systems Microsoft Windows Server (Server Core installation) 2019 Microsoft...

Microsoft Windows HTTP.sys privilege escalation | CVE-2023-23410

March 15, 2023

NAME__________Microsoft Windows HTTP.sys privilege escalationPlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32 Microsoft Windows...

Microsoft Windows Partition Management Driver privilege escalation | CVE-2023-23417

March 15, 2023

NAME__________Microsoft Windows Partition Management Driver privilege escalationPlatforms Affected:Microsoft Windows 10 1703 for x64-based Systems Microsoft Windows 10 1803 for x64-based...

Mozilla Firefox denial of service | CVE-2023-25751

March 15, 2023

NAME__________Mozilla Firefox denial of servicePlatforms Affected:Mozilla firefox 110 Mozilla Firefox ESR 102.8Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Mozilla Firefox is vulnerable to...

SAP NetWeaver AS for Java privilege escalation | CVE-2023-24526

March 15, 2023

NAME__________SAP NetWeaver AS for Java privilege escalationPlatforms Affected:SAP NetWeaver AS for JAVA 7.50Risk Level:5.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________SAP NetWeaver AS for Java...

Adobe Experience Manager privilege escalation | CVE-2023-22271

March 15, 2023

NAME__________Adobe Experience Manager privilege escalationPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.15.0Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Experience Manager...

SAP NetWeaver AS for ABAP and ABAP Platform server-side request forgery | CVE-2023-26459

March 15, 2023

NAME__________SAP NetWeaver AS for ABAP and ABAP Platform server-side request forgeryPlatforms Affected:SAP NetWeaver AS ABAP 700 SAP NetWeaver AS ABAP...

Microsoft Windows PostScript Printer Driver information disclosure | CVE-2023-24870

March 15, 2023

NAME__________Microsoft Windows PostScript Printer Driver information disclosurePlatforms Affected:Microsoft Windows Server version 20H2 Microsoft Windows 10 20H2 for x64-based Systems Microsoft...

Mozilla Firefox weak security | CVE-2023-28163

March 15, 2023

NAME__________Mozilla Firefox weak securityPlatforms Affected:Mozilla firefox 110 Mozilla Firefox ESR 102.8Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Mozilla Firefox could provide weaker than expected,...

SAP NetWeaver information disclosure | CVE-2023-26461

March 15, 2023

NAME__________SAP NetWeaver information disclosurePlatforms Affected:SAP NetWeaver 7.50Risk Level:6.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________SAP NetWeaver could allow a remote authenticated attacker to obtain sensitive...

Adobe Experience Manager cross-site scripting | CVE-2023-22252

March 15, 2023

NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.15.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...

Adobe Illustrator code execution | CVE-2023-25859

March 15, 2023

NAME__________Adobe Illustrator code executionPlatforms Affected:Adobe Illustrator 2023 27.2.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Illustrator could allow a remote attacker to execute arbitrary...

Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosure | CVE-2023-24863

March 15, 2023

NAME__________Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft...

Month: March 2023

SAP BusinessObjects Business Intelligence Platform denial of service | CVE-2023-27271

Microsoft Windows Kernel privilege escalation | CVE-2023-23420

SAP NetWeaver AS Java privilege escalation | CVE-2023-27268

Microsoft Dynamics 365 (on-premises) cross-site scripting | CVE-2023-24920

Microsoft Excel denial of service | CVE-2023-24859

SAP NetWeaver AS for Java security bypass | CVE-2023-23857

Mozilla Firefox weak security | CVE-2023-28161

Microsoft Windows Client Server Run-Time Subsystem (CSRSS) information disclosure | CVE-2023-23394

Microsoft Windows DNS Server code execution | CVE-2023-23400

SAP BusinessObjects Business Intelligence Platform denial of service | CVE-2023-27896

Adobe Experience Manager open redirect | CVE-2023-22264

Microsoft Windows Kernel privilege escalation | CVE-2023-23422

Microsoft Windows HTTP.sys privilege escalation | CVE-2023-23410

Microsoft Windows Partition Management Driver privilege escalation | CVE-2023-23417

Mozilla Firefox denial of service | CVE-2023-25751

SAP NetWeaver AS for Java privilege escalation | CVE-2023-24526

Adobe Experience Manager privilege escalation | CVE-2023-22271

SAP NetWeaver AS for ABAP and ABAP Platform server-side request forgery | CVE-2023-26459

Microsoft Windows PostScript Printer Driver information disclosure | CVE-2023-24870

Mozilla Firefox weak security | CVE-2023-28163

SAP NetWeaver information disclosure | CVE-2023-26461

Adobe Experience Manager cross-site scripting | CVE-2023-22252

Adobe Illustrator code execution | CVE-2023-25859

Microsoft Windows PostScript and PCL6 Class Printer Driver information disclosure | CVE-2023-24863

[KILLSEC] – Ransomware Victim: Nationwide Legal

[KILLSEC] – Ransomware Victim: Eassy Life

[INCRANSOM] – Ransomware Victim: Service Avicole JGL

[KILLSEC] – Ransomware Victim: Vogue Homes

[KILLSEC] – Ransomware Victim: Efi Sales

You may have missed