Month: April 2023

YourChannel Plugin for WordPress security bypass | CVE-2023-1868

April 8, 2023

NAME__________YourChannel Plugin for WordPress security bypassPlatforms Affected:WordPress YourChannel plugin for WordPress 1.2.3Risk Level:6.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________YourChannel Plugin for WordPress could allow...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20146

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

YourChannel Plugin for WordPress cross-site request forgery | CVE-2023-1866

April 8, 2023

NAME__________YourChannel Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress YourChannel plugin for WordPress 1.2.3Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________YourChannel Plugin for WordPress is...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20144

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Sp*tify Play Button Plugin for WordPress cross-site scripting | CVE-2023-26536

April 8, 2023

NAME__________Sp*tify Play Button Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Sp*tify Play Button Plugin for WordPress 2.05Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Sp*tify Play...

IBM Db2 Mirror for i information disclosure | CVE-2022-43928

April 8, 2023

NAME__________IBM Db2 Mirror for i information disclosurePlatforms Affected:IBM i 7.3 IBM i 7.4 IBM Db2 Web Query for i 2.3.0...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20138

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20142

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20139

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20143

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20150

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20140

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

AdvisoryID: 67449 | CVE-2022-43914

April 8, 2023

NAME__________AdvisoryID: 67449Platforms Affected:IBM TRIRIGA Application Platform 4.0Risk Level:4.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________IBM TRIRIGA Application Platform 4.0 is vulnerable to cross-site scripting. This...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command execution | CVE-2023-20124

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command executionPlatforms Affected:Cisco RV016 Multi-WAN VPN Routers Cisco RV042...

Air Cargo Management System SQL injection | CVE-2023-1856

April 8, 2023

NAME__________Air Cargo Management System SQL injectionPlatforms Affected:Risk Level:6.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Air Cargo Management System is vulnerable to SQL injection. A remote...

YourChannel Plugin for WordPress cross-site request forgery | CVE-2023-1867

April 8, 2023

YourChannel Plugin for WordPress security bypass | CVE-2023-1865

April 8, 2023

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20149

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

IBM TRIRIGA XML external entity injection | CVE-2023-27876

April 8, 2023

NAME__________IBM TRIRIGA XML external entity injectionPlatforms Affected:IBM TRIRIGA Application Platform 4.0Risk Level:7.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________IBM TRIRIGA 4.0 is vulnerable to an...

G Data Total Security privilege escalation | CVE-2023-27347

April 8, 2023

NAME__________G Data Total Security privilege escalationPlatforms Affected:G Data Total Security 25.5.13.25Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________G Data Total Security could allow a...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20141

April 8, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

YourChannel Plugin for WordPress cross-site request forgery | CVE-2023-1871

April 8, 2023

Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command execution | CVE-2023-20121

April 8, 2023

NAME__________Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command executionPlatforms Affected:Cisco Prime Infrastructure Cisco Identity Services Engine...

Earnings and Expense Tracker App information disclosure | CVE-2023-1858

April 8, 2023

NAME__________Earnings and Expense Tracker App information disclosurePlatforms Affected:Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Earnings and Expense Tracker App could allow a remote authenticated...

Month: April 2023

YourChannel Plugin for WordPress security bypass | CVE-2023-1868

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20146

YourChannel Plugin for WordPress cross-site request forgery | CVE-2023-1866

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20144

Sp*tify Play Button Plugin for WordPress cross-site scripting | CVE-2023-26536

IBM Db2 Mirror for i information disclosure | CVE-2022-43928

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20138

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20142

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20139

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20143

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20150

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20140

AdvisoryID: 67449 | CVE-2022-43914

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command execution | CVE-2023-20124

Air Cargo Management System SQL injection | CVE-2023-1856

YourChannel Plugin for WordPress cross-site request forgery | CVE-2023-1867

YourChannel Plugin for WordPress security bypass | CVE-2023-1865

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20149

IBM TRIRIGA XML external entity injection | CVE-2023-27876

G Data Total Security privilege escalation | CVE-2023-27347

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20141

YourChannel Plugin for WordPress cross-site request forgery | CVE-2023-1871

Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command execution | CVE-2023-20121

Earnings and Expense Tracker App information disclosure | CVE-2023-1858

CISA: Fortinet Updates Guidance and Indicators of Compromise following FortiManager Vulnerability Exploitation

CISA: CISA Releases Four Industrial Control Systems Advisories

CISA: JCDC’s Industry-Government Collaboration Speeds Mitigation of CrowdStrike IT Outage

CISA: CISA Releases Three Industrial Control Systems Advisories

CISA: Foreign Threat Actor Conducting Large-Scale Spearphishing Campaign with RDP Attachments

You may have missed