Month: June 2023

Proofpoint Insider Threat Management Agent for Windows denial of service | CVE-2023-2818

June 29, 2023

NAME__________Proofpoint Insider Threat Management Agent for Windows denial of servicePlatforms Affected:Proofpoint Insider Threat Management Windows Agent 7.14Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service...

GridStack module for Drupal cross-site scripting |

June 29, 2023

NAME__________GridStack module for Drupal cross-site scriptingPlatforms Affected:Drupal GridStack module for Drupal 8.x-2.10Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________GridStack module for Drupal is vulnerable...

AWS data.all code execution | CVE-2023-36467

June 29, 2023

NAME__________AWS data.all code executionPlatforms Affected:AWS data.all 1.2.0 AWS data.all 1.5.1Risk Level:7.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________AWS data.all could allow a remote authenticated attacker...

Libraries UI module for Drupal security bypass |

June 29, 2023

NAME__________Libraries UI module for Drupal security bypassPlatforms Affected:Drupal Libraries UI module for Drupal 8.x-1.0Risk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Libraries UI module for...

TacJS module for Drupal cross-site scripting |

June 29, 2023

NAME__________TacJS module for Drupal cross-site scriptingPlatforms Affected:Drupal TacJS module for Drupal 8.x-6.3Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________TacJS module for Drupal is vulnerable...

GDPR Alert module for Drupal cross-site scripting |

June 29, 2023

NAME__________GDPR Alert module for Drupal cross-site scriptingPlatforms Affected:Drupal GDPR Alert module for Drupal 1.0.0Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________GDPR Alert module for...

Proofpoint Insider Threat Management Server information disclosure | CVE-2023-36000

June 29, 2023

NAME__________Proofpoint Insider Threat Management Server information disclosurePlatforms Affected:Proofpoint Insider Threat Management Server 7.14Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Proofpoint Insider Threat Management Server...

M-Files Server denial of service | CVE-2023-3405

June 29, 2023

NAME__________M-Files Server denial of servicePlatforms Affected:M-Files M-Files Server 23.6Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________M-Files Server is vulnerable to a denial of...

Search Autocomplete module for Drupal cross-site scripting |

June 29, 2023

NAME__________Search Autocomplete module for Drupal cross-site scriptingPlatforms Affected:Drupal Search Autocomplete module for Drupal 2.0.2Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Search Autocomplete module for...

News

Critical Security Flaw in Social Login Plugin for WordPress Exposes Users’ Accounts

June 29, 2023

A critical security flaw has been disclosed in miniOrange's Social Login and Register plugin for WordPress that could enable a...

Newly Uncovered ThirdEye Windows-Based Malware Steals Sensitive Data

June 29, 2023

A previously undocumented Windows-based information stealer called ThirdEye has been discovered in the wild with capabilities to harvest sensitive data...