Month: July 2023

Apple macOS, iOS and iPadOS security bypass | CVE-2023-38606

July 26, 2023

NAME__________Apple macOS, iOS and iPadOS security bypassPlatforms Affected:Apple iOS 16.5.1 Apple iPadOS 16.5.1 Apple macOS Ventura 13.4.1 Apple iOS 15.7.7...

AMD Ryzen, Gen AMD EPYC Processors information disclosure | CVE-2023-20593

July 26, 2023

NAME__________AMD Ryzen, Gen AMD EPYC Processors information disclosurePlatforms Affected:AMD 2nd Generation EPYC AMD Ryzen 3000 series Desktop processors AMD Ryzen...

TravelMate Travelable Trek Management Solution cross-site scripting | CVE-2023-3862

July 26, 2023

NAME__________TravelMate Travelable Trek Management Solution cross-site scriptingPlatforms Affected:TravelMate Travelable Trek Management Solution 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________TravelMate Travelable Trek Management Solution...

Applicant Programme XML external entity injection | CVE-2023-32639

July 26, 2023

NAME__________Applicant Programme XML external entity injectionPlatforms Affected:Ministry of Justice Applicant Programme 7.06 Ministry of Justice Applicant Programme 7.05Risk Level:2.5Exploitability:UnprovenConsequences:Gain Access...

VMware Tanzu Application Service for VMs and VMware Isolation Segment information disclosure | CVE-2023-20891

July 26, 2023

NAME__________VMware Tanzu Application Service for VMs and VMware Isolation Segment information disclosurePlatforms Affected:VMware Tanzu VMware Tanzu Application Service for VMs...

Apple watchOS privilege escalation | CVE-2023-38565

July 26, 2023

NAME__________Apple watchOS privilege escalationPlatforms Affected:Apple watchOS 9.5Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apple watchOS could allow a local attacker to gain elevated privileges...

Diafan search cross-site scripting | CVE-2023-37164

July 26, 2023

NAME__________Diafan search cross-site scriptingPlatforms Affected:Diafan Diafan CMS 6.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Diafan is vulnerable to cross-site scripting, caused by improper validation...

Apple macOS Ventura privilege escalation | CVE-2023-38410

July 26, 2023

NAME__________Apple macOS Ventura privilege escalationPlatforms Affected:Apple macOS Ventura 13.4Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apple macOS Ventura could allow a local attacker to...

Apache InLong information disclosure | CVE-2023-34434

July 26, 2023

NAME__________Apache InLong information disclosurePlatforms Affected:Apache InLong 1.4.0 Apache InLong 1.5.0 Apache InLong 1.6.0 Apache InLong 1.7.0Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Apache InLong...

Apache Felix Healthcheck Webconsole Plugin cross-site scripting | CVE-2023-38435

July 26, 2023

NAME__________Apache Felix Healthcheck Webconsole Plugin cross-site scriptingPlatforms Affected:Apache Felix Healthcheck Webconsole Plugin 2.0.2Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Apache Felix Healthcheck Webconsole Plugin...

IBOS SQL injection | CVE-2023-3826

July 26, 2023

NAME__________IBOS SQL injectionPlatforms Affected:IBOS IBOS 4.5.5Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________IBOS is vulnerable to SQL injection. A remote attacker could send specially-crafted...

XenSource Xen VZEROUPPER information disclosure |

July 26, 2023

NAME__________XenSource Xen VZEROUPPER information disclosurePlatforms Affected:XenSource XenRisk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________XenSource Xen could allow a local attacker to obtain sensitive information,...

OTRS AG OTRS cross-site scripting | CVE-2023-38057

July 26, 2023

NAME__________OTRS AG OTRS cross-site scriptingPlatforms Affected:OTRS AG OTRS 7.0 OTRS AG OTRS 8.0Risk Level:4.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________OTRS AG OTRS is vulnerable...

ABB Zenon code execution | CVE-2023-3323

July 26, 2023

NAME__________ABB Zenon code executionPlatforms Affected:Asea Brown Boveri Zenon 11 build 106404Risk Level:5.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ABB Zenon could allow a physically proximate...