Month: December 2023

Adobe Substance 3D Sampler code execution | CVE-2023-48630

December 14, 2023

NAME__________Adobe Substance 3D Sampler code executionPlatforms Affected:Adobe Substance 3D Sampler 4.2.1Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Substance 3D Sampler could allow a...

Adobe Experience Manager cross-site scripting | CVE-2023-48450

December 14, 2023

NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...

Adobe Substance 3D Stager information disclosure | CVE-2023-47081

December 14, 2023

NAME__________Adobe Substance 3D Stager information disclosurePlatforms Affected:Adobe Substance 3D Stager 2.1.1Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Substance 3D Stager could allow a...

Mattermost Server information disclosure | CVE-2023-46701

December 14, 2023

NAME__________Mattermost Server information disclosurePlatforms Affected:Mattermost Mattermost ServerRisk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Mattermost Server could allow a remote authenticated attacker to obtain sensitive...

Adobe Experience Manager cross-site scripting | CVE-2023-48479

December 14, 2023

Adobe Substance 3D Designer information disclosure | CVE-2023-48636

December 14, 2023

NAME__________Adobe Substance 3D Designer information disclosurePlatforms Affected:Adobe Substance 3D Designer 13.0.0Risk Level:5.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Substance 3D Designer could allow a...

Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDKs nformation disclosure | CVE-2023-43583

December 14, 2023

NAME__________Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDKs nformation disclosurePlatforms Affected:Zoom Video SDK Zoom Mobile...

Fortinet FortiOS and Fortinet FortiProxy code-execution | CVE-2023-36639

December 14, 2023

NAME__________Fortinet FortiOS and Fortinet FortiProxy code-executionPlatforms Affected:Fortinet FortiOS 6.0.0 Fortinet FortiOS 6.2.0 Fortinet FortiOS 6.4.0 Fortinet FortiProxy 2.0.0 Fortinet FortiOS...

Adobe Experience Manager cross-site scripting | CVE-2023-48467

December 14, 2023

NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:4.6Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...

Adobe Experience Manager cross-site scripting | CVE-2023-48440

December 14, 2023

Adobe Experience Manager cross-site scripting | CVE-2023-48447

December 14, 2023

Adobe Experience Manager cross-site scripting | CVE-2023-48460

December 14, 2023

Adobe Experience Manager cross-site scripting | CVE-2023-48449

December 14, 2023

Adobe Experience Manager cross-site scripting | CVE-2023-48468

December 14, 2023

NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:4.6Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...

Adobe Experience Manager cross-site scripting | CVE-2023-48451

December 14, 2023

Adobe Experience Manager cross-site scripting | CVE-2023-48448

December 14, 2023

Adobe Dimension information disclosure | CVE-2023-47062

December 14, 2023

NAME__________Adobe Dimension information disclosurePlatforms Affected:Adobe Dimension 3.4.10Risk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Dimension could allow a remote attacker to obtain sensitive information,...

Siemens SIMATIC STEP 7 (TIA Portal) information disclosure | CVE-2022-46141

December 14, 2023

NAME__________Siemens SIMATIC STEP 7 (TIA Portal) information disclosurePlatforms Affected:Siemens SIMATIC STEP 7 (TIA Portal) V10 Siemens SIMATIC STEP 7 (TIA...

WESEEK GROWI cross-site scripting | CVE-2023-50175

December 14, 2023

NAME__________WESEEK GROWI cross-site scriptingPlatforms Affected:WESEEK GROWIRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________WESEEK GROWI is vulnerable to cross-site scripting, caused by improper validation of...

Month: December 2023

Adobe Substance 3D Sampler code execution | CVE-2023-48630

Adobe Experience Manager cross-site scripting | CVE-2023-48450

Adobe Substance 3D Stager information disclosure | CVE-2023-47081

Mattermost Server information disclosure | CVE-2023-46701

Adobe Experience Manager cross-site scripting | CVE-2023-48479

Adobe Substance 3D Designer information disclosure | CVE-2023-48636

Zoom Mobile App for Android, Zoom Mobile App for iOS and Zoom SDKs nformation disclosure | CVE-2023-43583

Fortinet FortiOS and Fortinet FortiProxy code-execution | CVE-2023-36639

Adobe Experience Manager cross-site scripting | CVE-2023-48467

Adobe Experience Manager cross-site scripting | CVE-2023-48440

Adobe Experience Manager cross-site scripting | CVE-2023-48447

Adobe Experience Manager cross-site scripting | CVE-2023-48460

Adobe Experience Manager cross-site scripting | CVE-2023-48449

Adobe Experience Manager cross-site scripting | CVE-2023-48468

Adobe Experience Manager cross-site scripting | CVE-2023-48451

Adobe Experience Manager cross-site scripting | CVE-2023-48448

Adobe Dimension information disclosure | CVE-2023-47062

Siemens SIMATIC STEP 7 (TIA Portal) information disclosure | CVE-2022-46141

WESEEK GROWI cross-site scripting | CVE-2023-50175

Adobe Substance 3D Sampler code execution | CVE-2023-48625

Adobe Experience Manager cross-site scripting | CVE-2023-48445

Adobe Experience Manager cross-site scripting | CVE-2023-48462

Adobe Substance 3D Sampler code execution | CVE-2023-48628

Adobe After Effects code execution | CVE-2023-48633

[KILLSEC] – Ransomware Victim: Terra Energy

[KILLSEC] – Ransomware Victim: Equentis Wealth

VMWare Products Multiple Vulnerabilities

Palo Alto PAN-OS Multiple vulnerabilities

UK Shoppers Warned: Over £11.5m Lost to Scammers Last Christmas

You may have missed