Month: August 2023

Custom Field For WP Job Manager Plugin for WordPress cross-site scripting | CVE-2023-3328

August 17, 2023

NAME__________Custom Field For WP Job Manager Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Custom Field For WP Job Manager Plugin for...

IBM WebSphere Application Server Liberty denial of service | CVE-2023-38737

August 17, 2023

NAME__________IBM WebSphere Application Server Liberty denial of servicePlatforms Affected:IBM WebSphere Application Server Liberty 22.0.0.13 IBM WebSphere Application Server Liberty 23.0.0.7Risk...

Dell PowerScale OneFS information disclosure | CVE-2023-32488

August 17, 2023

NAME__________Dell PowerScale OneFS information disclosurePlatforms Affected:Dell PowerScale OneFS 8.2 Dell PowerScale OneFS 9.5.0Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Dell PowerScale OneFS could allow...

Dell PowerScale OneFS information disclosure | CVE-2023-32491

August 17, 2023

NAME__________Dell PowerScale OneFS information disclosurePlatforms Affected:Dell PowerScale OneFS 9.5.0Risk Level:6.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Dell PowerScale OneFS could allow a remote attacker to...

Dell PowerScale OneFS privilege escalation | CVE-2023-32489

August 17, 2023

NAME__________Dell PowerScale OneFS privilege escalationPlatforms Affected:Dell PowerScale OneFS 8.2 Dell PowerScale OneFS 9.5Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Dell PowerScale OneFS could allow...

Dell PowerScale OneFS privilege escalation | CVE-2023-32495

August 17, 2023

NAME__________Dell PowerScale OneFS privilege escalationPlatforms Affected:Dell PowerScale OneFS 8.2 Dell PowerScale OneFS 9.5Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Dell PowerScale OneFS could allow...

Broadcom RAID Controller web interface weak security | CVE-2023-4338

August 17, 2023

NAME__________Broadcom RAID Controller web interface weak securityPlatforms Affected:Broadcom RAID Controller web interfaceRisk Level:7.3Exploitability:UnprovenConsequences:Other DESCRIPTION__________Broadcom RAID Controller web interface could provide...

InfiniteWP Client Plugin for WordPress information disclosure | CVE-2023-29097

August 17, 2023

NAME__________InfiniteWP Client Plugin for WordPress information disclosurePlatforms Affected:WordPress InfiniteWP Client Plugin for WordPress 1.11.1Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________InfiniteWP Client Plugin for...

Dell PowerScale OneFS code execution | CVE-2023-32487

August 17, 2023

NAME__________Dell PowerScale OneFS code executionPlatforms Affected:Dell PowerScale OneFS 8.2 Dell PowerScale OneFS 9.5.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Dell PowerScale OneFS could allow...

HPE Aruba Networking Virtual Intranet Access (VIA) denial of service | CVE-2023-38402

August 17, 2023

NAME__________HPE Aruba Networking Virtual Intranet Access (VIA) denial of servicePlatforms Affected:HPE Aruba Networking Virtual Intranet Access 4.5.0Risk Level:7.1Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________HPE...

Broadcom RAID Controller web interface information disclosure | CVE-2023-4339

August 17, 2023

NAME__________Broadcom RAID Controller web interface information disclosurePlatforms Affected:Broadcom RAID Controller web interfaceRisk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Broadcom RAID Controller web interface could...

Cisco Intersight Private Virtual Appliance command execution | CVE-2023-20017

August 17, 2023

NAME__________Cisco Intersight Private Virtual Appliance command executionPlatforms Affected:Cisco Intersight Private Virtual ApplianceRisk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco Intersight Private Virtual Appliance could...

HPE Aruba Networking Virtual Intranet Access (VIA) privilege escalation | CVE-2023-38401

August 17, 2023

NAME__________HPE Aruba Networking Virtual Intranet Access (VIA) privilege escalationPlatforms Affected:HPE Aruba Networking Virtual Intranet Access 4.5.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________HPE Aruba...

Jenkins Gogs Plugin information disclosure | CVE-2023-40348

August 17, 2023

NAME__________Jenkins Gogs Plugin information disclosurePlatforms Affected:Jenkins Gogs Plugin 1.0.15Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Gogs Plugin could allow a remote attacker to...

IBM Cognos Analytics server-side request forgery | CVE-2023-35011

August 17, 2023

NAME__________IBM Cognos Analytics server-side request forgeryPlatforms Affected:IBM Cognos Analytics 11.2.0 IBM Cognos Analytics 11.1.7 IBM Cognos Analytics 11.2.1Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access...

IBM Cognos Analytics information disclosure | CVE-2023-35009

August 17, 2023

NAME__________IBM Cognos Analytics information disclosurePlatforms Affected:IBM Cognos Analytics 11.2.0 IBM Cognos Analytics 11.1.7 IBM Cognos Analytics 11.2.1Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________IBM...

librenms cross-site scripting | CVE-2023-4347

August 17, 2023

NAME__________librenms cross-site scriptingPlatforms Affected:LibreNMS LibreNMS 22.8.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________librenms is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | CVE-2023-20222

August 17, 2023

NAME__________Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scriptingPlatforms Affected:Cisco Prime Infrastructure Cisco Evolved Programmable Network ManagerRisk Level:4.8Exploitability:HighConsequences:Cross-Site Scripting...

Tornado Web Server HTTP request smuggling |

August 17, 2023

NAME__________Tornado Web Server HTTP request smugglingPlatforms Affected:Tornado Web Server Tornado Web Server 6.3.2Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Tornado Web Server is vulnerable...

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin information disclosure | CVE-2023-40347

August 17, 2023

NAME__________Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin information disclosurePlatforms Affected:Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin 1.14Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Maven Artifact...

Jenkins Delphix Plugin information disclosure | CVE-2023-40345

August 17, 2023

NAME__________Jenkins Delphix Plugin information disclosurePlatforms Affected:Jenkins Delphix Plugin 3.0.2Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Delphix Plugin could allow a remote authenticated attacker...

Month: August 2023

Custom Field For WP Job Manager Plugin for WordPress cross-site scripting | CVE-2023-3328

IBM WebSphere Application Server Liberty denial of service | CVE-2023-38737

Dell PowerScale OneFS information disclosure | CVE-2023-32488

Dell PowerScale OneFS information disclosure | CVE-2023-32491

Dell PowerScale OneFS privilege escalation | CVE-2023-32489

Dell PowerScale OneFS privilege escalation | CVE-2023-32495

Broadcom RAID Controller web interface weak security | CVE-2023-4338

InfiniteWP Client Plugin for WordPress information disclosure | CVE-2023-29097

Dell PowerScale OneFS code execution | CVE-2023-32487

HPE Aruba Networking Virtual Intranet Access (VIA) denial of service | CVE-2023-38402

Broadcom RAID Controller web interface information disclosure | CVE-2023-4339

Cisco Intersight Private Virtual Appliance command execution | CVE-2023-20017

HPE Aruba Networking Virtual Intranet Access (VIA) privilege escalation | CVE-2023-38401

Jenkins Gogs Plugin information disclosure | CVE-2023-40348

IBM Cognos Analytics server-side request forgery | CVE-2023-35011

IBM Cognos Analytics information disclosure | CVE-2023-35009

librenms cross-site scripting | CVE-2023-4347

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | CVE-2023-20222

Tornado Web Server HTTP request smuggling |

Jenkins Maven Artifact ChoiceListProvider (Nexus) Plugin information disclosure | CVE-2023-40347

Jenkins Delphix Plugin information disclosure | CVE-2023-40345

Cisco Unified Communications Products cross-site scripting | CVE-2023-20242

Cisco ClamAV denial of service | CVE-2023-20212

Cisco P Phone 6800, 7800, and 8800 Series cross-site request forgery | CVE-2023-20237

[FUNKSEC] – Ransomware Victim: netox[.]net

[RANSOMHUB] – Ransomware Victim: sensualcollection[.]com

[RHYSIDA] – Ransomware Victim: T Smiles Dental

[SAFEPAY] – Ransomware Victim: itca[.]edu[.]sv

[HELLCAT] – Ransomware Victim: Pinger – USA

You may have missed