CISA: CISA Adds Six Known Exploited Vulnerabilities to Catalog
CISA Adds Six Known Exploited Vulnerabilities to Catalog CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based...
Month: November 2023
CISA: CISA Releases Four Industrial Control Systems Advisories
CISA Releases Four Industrial Control Systems Advisories CISA released four Industrial Control Systems (ICS) advisories on November 9, 2023. These...
CISA: CISA, NSA, and Partners Release New Guidance on Securing the Software Supply Chain
CISA, NSA, and Partners Release New Guidance on Securing the Software Supply Chain Today, CISA, the National Security Agency (NSA),...
CISA: CISA Releases Update to Royal Ransomware Advisory
CISA Releases Update to Royal Ransomware Advisory Today, the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security...
CISA: ACSC and CISA Release Business Continuity in a Box
ACSC and CISA Release Business Continuity in a Box Today, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD's ACSC)...
Helix Core denial of service | CVE-2023-5759
NAME__________Helix Core denial of servicePlatforms Affected:Helix Helix CoreRisk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Helix Core is vulnerable to a denial of service,...
Helix Core denial of service | CVE-2023-45319
NAME__________Helix Core denial of servicePlatforms Affected:Helix Helix CoreRisk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Helix Core is vulnerable to a denial of service,...
Helix Core denial of service | CVE-2023-35767
NAME__________Helix Core denial of servicePlatforms Affected:Helix Helix CoreRisk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Helix Core is vulnerable to a denial of service,...
Palo Alto Networks Cortex XSOAR privilege escalation | CVE-2023-3282
NAME__________Palo Alto Networks Cortex XSOAR privilege escalationPlatforms Affected:Palo Alto Networks Cortex XSOAR 6.10Risk Level:6.4Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Palo Alto Networks Cortex XSOAR...
Advanced iFrame plugin for WordPress cross-site scripting | CVE-2023-4775
NAME__________Advanced iFrame plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Advanced iFrame Plugin for WordPress 2023.8Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Advanced iFrame plugin for...
Telit products information disclosure | CVE-2023-47616
NAME__________Telit products information disclosurePlatforms Affected:Telit Cinterion BGS5 Telit Cinterion EHS5 Telit Cinterion EHS6 Telit Cinterion ELS61 Telit Cinterion PLS62 Telit...
Ivanti Secure Access Client privilege escalation | CVE-2023-35080
NAME__________Ivanti Secure Access Client privilege escalationPlatforms Affected:Ivanti Secure Access Client 22.6Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Ivanti Secure Access Client could allow a...
Telit products information disclosure | CVE-2023-47615
NAME__________Telit products information disclosurePlatforms Affected:Telit Cinterion BGS5 Telit Cinterion EHS5 Telit Cinterion EHS6 Telit Cinterion ELS61 Telit Cinterion PLS62 Telit...
Telit products security bypass | CVE-2023-47612
NAME__________Telit products security bypassPlatforms Affected:Telit Cinterion BGS5 Telit Cinterion EHS5 Telit Cinterion EHS6 Telit Cinterion ELS61 Telit Cinterion PLS62 Telit...
AsyncSSH security bypass | CVE-2023-46445
NAME__________AsyncSSH security bypassPlatforms Affected:AsyncSSH AsyncSSH 2.14.0Risk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________AsyncSSH could allow a remote attacker to bypass security restrictions, caused by...
Ivanti Secure Access Client security bypass | CVE-2023-38544
NAME__________Ivanti Secure Access Client security bypassPlatforms Affected:Ivanti Secure Access Client 22.6Risk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Ivanti Secure Access Client could allow a...
Telit products directory traversal |
NAME__________Telit products directory traversalPlatforms Affected:Telit Cinterion BGS5 Telit Cinterion EHS5 Telit Cinterion EHS6 Telit Cinterion ELS61 Telit Cinterion PLS62 Telit...
Top 10 Plugin Plugin for WordPress cross-site request forgery | CVE-2023-47238
NAME__________Top 10 Plugin Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Top 10 Plugin for WordPress 3.3.2Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Top 10...
WP Google My Business Auto Publish plugin for WordPress cross-site request forgery | CVE-2023-47237
NAME__________WP Google My Business Auto Publish plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress WP Google My Business Auto Publish Plugin...
Ivanti Secure Access Client privilege escalation | CVE-2023-41718
NAME__________Ivanti Secure Access Client privilege escalationPlatforms Affected:Ivanti Secure Access Client 22.6Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Ivanti Secure Access Client could allow a...
Fuji Electric V-Server and V-Server Lite code execution |
NAME__________Fuji Electric V-Server and V-Server Lite code executionPlatforms Affected:Fuji Electric V-Sever 4.0.18.0 Fuji Electric V-Sever 4.0.18.0 LiteRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Fuji...
Ivanti Secure Access Client denial of service | CVE-2023-38043
NAME__________Ivanti Secure Access Client denial of servicePlatforms Affected:Ivanti Secure Access Client 22.6Risk Level:7.8Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Ivanti Secure Access Client is...
EnBw SENEC legacy storage box security bypass | CVE-2023-39171
NAME__________EnBw SENEC legacy storage box security bypassPlatforms Affected:EnBw SENEC legacy storage box 1 EnBw SENEC legacy storage box 2 EnBw...
Ivanti Secure Access Client denial of service | CVE-2023-38543
NAME__________Ivanti Secure Access Client denial of servicePlatforms Affected:Ivanti Secure Access Client 22.6Risk Level:7.8Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Ivanti Secure Access Client is...
