Month: September 2023

IBM Security Verify Information Queue information disclosure | CVE-2023-33835

September 1, 2023

NAME__________IBM Security Verify Information Queue information disclosurePlatforms Affected:IBM Security Verify Information Queue 10.0.4 IBM Security Verify Information Queue 10.0.5Risk Level:5.3Exploitability:UnprovenConsequences:Obtain...

Yugabyte YugabyteDB information disclosure | CVE-2023-4640

September 1, 2023

NAME__________Yugabyte YugabyteDB information disclosurePlatforms Affected:Yugabyte YugabyteDB 2.0.0 Yugabyte YugabyteDB 2.17.3Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Yugabyte YugabyteDB could allow a remote attacker to...

Unified Twig module for Drupal cross-site scripting |

September 1, 2023

NAME__________Unified Twig module for Drupal cross-site scriptingPlatforms Affected:Drupal Unified Twig module for Drupal 1.1.0Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Unified Twig module for...

PaperCut NG code execution | CVE-2023-39469

September 1, 2023

NAME__________PaperCut NG code executionPlatforms Affected:PaperCut Software PaperCut NG 22.1Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________PaperCut NG could allow a remote authenticated attacker to...

IBM Security Verify Information Queue information disclosure. | CVE-2023-33833

September 1, 2023

NAME__________IBM Security Verify Information Queue information disclosure.Platforms Affected:IBM Security Verify Information Queue 10.0.4 IBM Security Verify Information Queue 10.0.5Risk Level:2.9Exploitability:UnprovenConsequences:Obtain...

Easy Address Book Web Server cross-site scripting | CVE-2023-4492

September 1, 2023

NAME__________Easy Address Book Web Server cross-site scriptingPlatforms Affected:EFS Software Easy Address Book Web Server 1.6Risk Level:6.1Exploitability:HighConsequences:Gain Access DESCRIPTION__________Easy Address Book...

GitLab information disclosure | CVE-2023-4378

September 1, 2023

NAME__________GitLab information disclosurePlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

PTC Kepware KepServerEX code execution | CVE-2023-29445

September 1, 2023

NAME__________PTC Kepware KepServerEX code executionPlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________PTC Kepware KepServerEX could...

GitLab information disclosure | CVE-2022-4343

September 1, 2023

GitLab information disclosure | CVE-2023-4630

September 1, 2023

GitLab denial of service | CVE-2023-4647

September 1, 2023

NAME__________GitLab denial of servicePlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4...

GitLab information disclosure | CVE-2023-3950

September 1, 2023

Easy Address Book Web Server cross-site scripting | CVE-2023-4495

September 1, 2023

PTC Kepware KepServerEX information disclosure | CVE-2023-29447

September 1, 2023

NAME__________PTC Kepware KepServerEX information disclosurePlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:5.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________PTC Kepware KepServerEX could...

GitLab security bypass | CVE-2023-4018

September 1, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

GitLab denial of service | CVE-2023-3205

September 1, 2023

NAME__________GitLab denial of servicePlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4...

GitLab open redirect | CVE-2023-1279

September 1, 2023

NAME__________GitLab open redirectPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

GitLab security bypass | CVE-2023-1555

September 1, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

VMware Tools security bypass | CVE-2023-20900

September 1, 2023

NAME__________VMware Tools security bypassPlatforms Affected:VMware Tools 11 VMware Tools 12 VMware Tools 10.3Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________VMware Tools could allow a...

?GE Digital CIMPLICITY privilege escalation | CVE-2023-4487

September 1, 2023

NAME__________?GE Digital CIMPLICITY privilege escalationPlatforms Affected:GE Digital CIMPLICITY 2023Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________?GE Digital CIMPLICITY could allow a local authenticated attacker...

GitLab security bypass | CVE-2023-0120

September 1, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

?PTC Kepware KepServerEX information disclosure | CVE-2023-29446

September 1, 2023

NAME__________?PTC Kepware KepServerEX information disclosurePlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:4.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________?PTC Kepware KepServerEX could...

?PTC Kepware KepServerEX code execution | CVE-2023-29444

September 1, 2023

NAME__________?PTC Kepware KepServerEX code executionPlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________?PTC Kepware KepServerEX could...

GitLab privilege escalation | CVE-2023-3915

September 1, 2023

NAME__________GitLab privilege escalationPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

Month: September 2023

IBM Security Verify Information Queue information disclosure | CVE-2023-33835

Yugabyte YugabyteDB information disclosure | CVE-2023-4640

Unified Twig module for Drupal cross-site scripting |

PaperCut NG code execution | CVE-2023-39469

IBM Security Verify Information Queue information disclosure. | CVE-2023-33833

Easy Address Book Web Server cross-site scripting | CVE-2023-4492

GitLab information disclosure | CVE-2023-4378

PTC Kepware KepServerEX code execution | CVE-2023-29445

GitLab information disclosure | CVE-2022-4343

GitLab information disclosure | CVE-2023-4630

GitLab denial of service | CVE-2023-4647

GitLab information disclosure | CVE-2023-3950

Easy Address Book Web Server cross-site scripting | CVE-2023-4495

PTC Kepware KepServerEX information disclosure | CVE-2023-29447

GitLab security bypass | CVE-2023-4018

GitLab denial of service | CVE-2023-3205

GitLab open redirect | CVE-2023-1279

GitLab security bypass | CVE-2023-1555

VMware Tools security bypass | CVE-2023-20900

?GE Digital CIMPLICITY privilege escalation | CVE-2023-4487

GitLab security bypass | CVE-2023-0120

?PTC Kepware KepServerEX information disclosure | CVE-2023-29446

?PTC Kepware KepServerEX code execution | CVE-2023-29444

GitLab privilege escalation | CVE-2023-3915

[CHORT] – Ransomware Victim: texanscan[.]org

[CHORT] – Ransomware Victim: hartwick[.]edu

[CHORT] – Ransomware Victim: edwardsburgschoolsfoundation[.]org

[CHORT] – Ransomware Victim: Tri-TechElectronics[.]com

[CHORT] – Ransomware Victim: bartow[.]k12[.]ga[.]us

You may have missed