Month: August 2023

SAP Supplier Relationship Management information disclosure | CVE-2023-39436

August 10, 2023

NAME__________SAP Supplier Relationship Management information disclosurePlatforms Affected:SAP Supplier Relationship Management 600 SAP Supplier Relationship Management 602 SAP Supplier Relationship Management...

Siemens JT2Go, Teamcenter Visualization and Solid Edge code execution | CVE-2023-38682

August 10, 2023

NAME__________Siemens JT2Go, Teamcenter Visualization and Solid Edge code executionPlatforms Affected:Siemens JT2Go 14.2.0.4Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siemens JT2Go, Teamcenter Visualization and Solid...

Zoom Desktop Client for Windows information disclosure | CVE-2023-39209

August 10, 2023

NAME__________Zoom Desktop Client for Windows information disclosurePlatforms Affected:Zoom Zoom Desktop Client for Windows 5.15.4Risk Level:5.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Zoom Desktop Client for...

SAP Commerce Cloud security bypass | CVE-2023-39439

August 10, 2023

NAME__________SAP Commerce Cloud security bypassPlatforms Affected:SAP Commerce HY_COM 2105 SAP Commerce HY_COM 2205 SAP Commerce COM_CLOUD 2211Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________SAP...

SAP BusinessObjects Business Intelligence privilege escalation | CVE-2023-37490

August 10, 2023

NAME__________SAP BusinessObjects Business Intelligence privilege escalationPlatforms Affected:SAP BusinessObjects Business Intelligence Platform 420 SAP BusinessObjects Business Intelligence Platform 430Risk Level:7.6Exploitability:UnprovenConsequences:Gain Privileges...

Intel Arc A750 and Intel Arc A770 information disclosure | CVE-2022-38973

August 10, 2023

NAME__________Intel Arc A750 and Intel Arc A770 information disclosurePlatforms Affected:Intel Arc A770 Intel Arc A750Risk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Intel Arc A750...

Siemens Solid Edge code execution | CVE-2023-0973

August 10, 2023

NAME__________Siemens Solid Edge code executionPlatforms Affected:Siemens Solid Edge SE2023Risk Level:3.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Siemens Solid Edge could allow a remote attacker...

Siemens SICAM TOOLBOX II privilege escalation | CVE-2022-39062

August 10, 2023

NAME__________Siemens SICAM TOOLBOX II privilege escalationPlatforms Affected:Siemens SICAM TOOLBOX IIRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siemens SICAM TOOLBOX II could allow a remote...

SAP Business One SQL injection | CVE-2023-33993

August 10, 2023

NAME__________SAP Business One SQL injectionPlatforms Affected:SAP Business One 10Risk Level:3.1Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________SAP Business One is vulnerable to SQL injection. A...

PHOENIX CONTACT WP 6xxx series web panels information disclosure | CVE-2023-37856

August 10, 2023

NAME__________PHOENIX CONTACT WP 6xxx series web panels information disclosurePlatforms Affected:PHOENIX CONTACT WP 6xxx series web panels 4.0.9Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________PHOENIX...

Intel System Firmware Update Utility for Intel Server Boards and Intel Server Systems Based on Intel 621A Chipset privilege escalation | CVE-2023-22841

August 10, 2023

NAME__________Intel System Firmware Update Utility for Intel Server Boards and Intel Server Systems Based on Intel 621A Chipset privilege escalationPlatforms...

Intel Converged Security and Management Engine privilege escalation | CVE-2022-29871

August 10, 2023

NAME__________Intel Converged Security and Management Engine privilege escalationPlatforms Affected:Intel CSMERisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Intel Converged Security and Management Engine could allow...

Intel oneAPI Math Kernel Library (oneMKL) privilege escalation | CVE-2022-25864

August 10, 2023

NAME__________Intel oneAPI Math Kernel Library (oneMKL) privilege escalationPlatforms Affected:Intel oneAPI Math Kernel Library (oneMKL) 2021Risk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Intel oneAPI Math...

Intel Converged Security and Management Engine denial of service | CVE-2022-38102

August 10, 2023

NAME__________Intel Converged Security and Management Engine denial of servicePlatforms Affected:Intel CSMERisk Level:7.2Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Intel Converged Security and Management Engine...

Zoom SDK denial of service | CVE-2023-36533

August 10, 2023

NAME__________Zoom SDK denial of servicePlatforms Affected:Zoom Client SDK for Windows 5.14.6 Zoom Client SDK for iOS 5.14.6 Zoom Client SDK...

SAP BusinessObjects Business Intelligence Platform information disclosure | CVE-2023-39440

August 10, 2023

NAME__________SAP BusinessObjects Business Intelligence Platform information disclosurePlatforms Affected:SAP BusinessObjects Business Intelligence Platform 430Risk Level:4.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________SAP BusinessObjects Business Intelligence Platform...

Month: August 2023

SAP Supplier Relationship Management information disclosure | CVE-2023-39436

Siemens JT2Go, Teamcenter Visualization and Solid Edge code execution | CVE-2023-38682

Zoom Desktop Client for Windows information disclosure | CVE-2023-39209

SAP Commerce Cloud security bypass | CVE-2023-39439

SAP BusinessObjects Business Intelligence privilege escalation | CVE-2023-37490

Intel Arc A750 and Intel Arc A770 information disclosure | CVE-2022-38973

Siemens Solid Edge code execution | CVE-2023-0973

Siemens SICAM TOOLBOX II privilege escalation | CVE-2022-39062

SAP Business One SQL injection | CVE-2023-33993

PHOENIX CONTACT WP 6xxx series web panels information disclosure | CVE-2023-37856

Intel System Firmware Update Utility for Intel Server Boards and Intel Server Systems Based on Intel 621A Chipset privilege escalation | CVE-2023-22841

Intel Converged Security and Management Engine privilege escalation | CVE-2022-29871

Intel oneAPI Math Kernel Library (oneMKL) privilege escalation | CVE-2022-25864

Intel Converged Security and Management Engine denial of service | CVE-2022-38102

Zoom SDK denial of service | CVE-2023-36533

SAP BusinessObjects Business Intelligence Platform information disclosure | CVE-2023-39440

SAP NetWeaver AS ABAP and ABAP Platform information disclosure | CVE-2023-37492

PHOENIX CONTACT TC ROUTER, TC CLOUD CLIENT, and CLOUD CLIENT 1101T-TX/TX denial of service | CVE-2023-3569

Zoom clients information disclosure | CVE-2023-36535

Siemens JT2Go, Teamcenter Visualization and Solid Edge code execution | CVE-2023-28830

Siemens JT Open, JT Utilities code execution | CVE-2023-30795

Siemens Parasolid and Siemens Teamcenter Visualization code execution | CVE-2023-38524

Intel oneAPI Math Kernel Library (oneMKL) privilege escalation | CVE-2023-28658

AMD uProf denial of service | CVE-2023-20561

[HELLCAT] – Ransomware Victim: Car Care Plan – Turkey

[HELLCAT] – Ransomware Victim: Sistem Informasi Pengelolaan Keuangan Daerah (SIPKD)

CISA: CISA and Partners Release Joint Guidance on PRC-Affiliated Threat Actor Compromising Networks of Global Telecommunications Providers

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Eight Industrial Control Systems Advisories

You may have missed