Month: August 2023

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator command execution | CVE-2023-37428

August 24, 2023

NAME__________HPE Aruba Networking EdgeConnect SD-WAN Orchestrator command executionPlatforms Affected:HPE Aruba Networking EdgeConnect SD-WAN Orchestrator 9.0 HPE Aruba Networking EdgeConnect SD-WAN...

Pandora FMS cross-site scripting | CVE-2023-24514

August 24, 2023

NAME__________Pandora FMS cross-site scriptingPlatforms Affected:Artica Pandora FMS 767Risk Level:6.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Pandora FMS is vulnerable to cross-site scripting, caused by improper...

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator weak security | CVE-2023-37426

August 24, 2023

NAME__________HPE Aruba Networking EdgeConnect SD-WAN Orchestrator weak securityPlatforms Affected:HPE Aruba Networking EdgeConnect SD-WAN Orchestrator 9.0 HPE Aruba Networking EdgeConnect SD-WAN...

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37430

August 24, 2023

NAME__________HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injectionPlatforms Affected:HPE Aruba Networking EdgeConnect SD-WAN Orchestrator 9.0 HPE Aruba Networking EdgeConnect SD-WAN...

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37437

August 24, 2023

NAME__________HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injectionPlatforms Affected:HPE Aruba Networking EdgeConnect SD-WAN Orchestrator 9.0 HPE Aruba Networking EdgeConnect SD-WAN...

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37438

August 24, 2023

NAME__________HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injectionPlatforms Affected:HPE Aruba Networking EdgeConnect SD-WAN Orchestrator 9.0 HPE Aruba Networking EdgeConnect SD-WAN...

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37431

August 24, 2023

NAME__________HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injectionPlatforms Affected:HPE Aruba Networking EdgeConnect SD-WAN Orchestrator 9.0 HPE Aruba Networking EdgeConnect SD-WAN...

Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects denial of service | CVE-2023-20200

August 24, 2023

NAME__________Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects denial of servicePlatforms Affected:Cisco UCS 6300...

ASUS RT-AX92U SQL injection | CVE-2023-35720

August 24, 2023

NAME__________ASUS RT-AX92U SQL injectionPlatforms Affected:ASUS ROG Rapture RT-AX92URisk Level:6.5Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________ASUS RT-AX92U is vulnerable to SQL injection. A remote attacker...

Config Pages module for Drupal information disclosure |

August 24, 2023

NAME__________Config Pages module for Drupal information disclosurePlatforms Affected:Drupal Config Pages Module for Drupal 8.x-2.8Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Config Pages module for...

RARLabs WinRAR code execution | CVE-2023-38831

August 24, 2023

NAME__________RARLabs WinRAR code executionPlatforms Affected:RARLAB WinRAR 6.22Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________RARLabs WinRAR could allow a remote attacker to execute arbitrary code...

Pandora FMS cross-site scripting | CVE-2023-24516

August 24, 2023

NAME__________Pandora FMS cross-site scriptingPlatforms Affected:Artica Pandora FMS 767Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Pandora FMS is vulnerable to cross-site scripting, caused by improper...

Cisco Nexus 3000 and 9000 Series Switches denial of service | CVE-2023-20169

August 24, 2023

NAME__________Cisco Nexus 3000 and 9000 Series Switches denial of servicePlatforms Affected:Cisco Nexus 9000 Series Switches in standalone NX-OS mode Cisco...

Cisco Nexus 3000 and 9000 Series Switches security bypass | CVE-2023-20115

August 24, 2023

NAME__________Cisco Nexus 3000 and 9000 Series Switches security bypassPlatforms Affected:Cisco Nexus 3000 Series Switches Cisco Nexus 9000 Series Switches in...

Douran DSGate code execution | CVE-2023-38996

August 24, 2023

NAME__________Douran DSGate code executionPlatforms Affected:Douran DSGateRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Douran DSGate could allow a local authenticated attacker to execute arbitrary code...

Forum Access module for Drupal code execution |

August 24, 2023

NAME__________Forum Access module for Drupal code executionPlatforms Affected:Drupal Forum Access module for Drupal 7.x-1.5Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Forum Access module for...

Cisco FXOS Software security bypass | CVE-2023-20234

August 24, 2023

NAME__________Cisco FXOS Software security bypassPlatforms Affected:Cisco Firepower 9300 Series Security Appliances Cisco FXOS Software Cisco Firepower 4100 Series Cisco Firepower...

Cisco NX-OS Software denial of service | CVE-2023-20168

August 24, 2023

NAME__________Cisco NX-OS Software denial of servicePlatforms Affected:Cisco Nexus 3000 Series Switches Cisco MDS 9000 Series Multilayer Switches Cisco Nexus 6000...

7-Zip code execution | CVE-2023-31102

August 24, 2023

NAME__________7-Zip code executionPlatforms Affected:7-Zip 7-ZipRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________7-Zip could allow a remote attacker to execute arbitrary code on the system,...

Apache Airflow information disclosure | CVE-2023-37379

August 24, 2023

NAME__________Apache Airflow information disclosurePlatforms Affected:Apache Airflow 2.6.3Risk Level:7.6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache could allow a remote authenticated attacker to obtain sensitive information,...

Apache Airflow, Airflow SMTP Provider and Airflow IMAP Provider man-in-the-middle | CVE-2023-39441

August 24, 2023

NAME__________Apache Airflow, Airflow SMTP Provider and Airflow IMAP Provider man-in-the-middlePlatforms Affected:Apache Airflow 2.6.3 Apache Airflow SMTP Provider 1.2.0 Apache Airflow...

Cisco Application Policy Infrastructure Controller (APIC) security bypass | CVE-2023-20230

August 24, 2023

NAME__________Cisco Application Policy Infrastructure Controller (APIC) security bypassPlatforms Affected:Cisco Application Policy Infrastructure ControllerRisk Level:5.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Cisco Application Policy Infrastructure Controller...

Flexi Access module for Drupal code execution |

August 24, 2023

NAME__________Flexi Access module for Drupal code executionPlatforms Affected:Drupal Flexi Access module for Drupal 7.x-1.2Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Flexi Access module for...

7-Zip code execution | CVE-2023-40481

August 24, 2023

Month: August 2023

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator command execution | CVE-2023-37428

Pandora FMS cross-site scripting | CVE-2023-24514

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator weak security | CVE-2023-37426

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37430

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37437

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37438

HPE Aruba Networking EdgeConnect SD-WAN Orchestrator SQL injection | CVE-2023-37431

Cisco Firepower 4100 Series, Firepower 9300 Security Appliances, and UCS 6300 Series Fabric Interconnects denial of service | CVE-2023-20200

ASUS RT-AX92U SQL injection | CVE-2023-35720

Config Pages module for Drupal information disclosure |

RARLabs WinRAR code execution | CVE-2023-38831

Pandora FMS cross-site scripting | CVE-2023-24516

Cisco Nexus 3000 and 9000 Series Switches denial of service | CVE-2023-20169

Cisco Nexus 3000 and 9000 Series Switches security bypass | CVE-2023-20115

Douran DSGate code execution | CVE-2023-38996

Forum Access module for Drupal code execution |

Cisco FXOS Software security bypass | CVE-2023-20234

Cisco NX-OS Software denial of service | CVE-2023-20168

7-Zip code execution | CVE-2023-31102

Apache Airflow information disclosure | CVE-2023-37379

Apache Airflow, Airflow SMTP Provider and Airflow IMAP Provider man-in-the-middle | CVE-2023-39441

Cisco Application Policy Infrastructure Controller (APIC) security bypass | CVE-2023-20230

Flexi Access module for Drupal code execution |

7-Zip code execution | CVE-2023-40481

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

[QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

[QILIN] – Ransomware Victim: Calvert Home Mortgage Investment

[QILIN] – Ransomware Victim: LBCO Contracting LTD

You may have missed