Year: 2023

SugarCRM file upload |

October 31, 2023

NAME__________SugarCRM file uploadPlatforms Affected:SugarCRM SugarCRM 12.0.3 SugarCRM SugarCRM 13.0.1Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________SugarCRM could allow a remote attacker to upload arbitrary...

Neon text plugin for WordPress cross-site scripting | CVE-2023-5817

October 31, 2023

NAME__________Neon text plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Neon text plugin for WordPress 1.1 WordPress Neon text plugin for WordPress...

Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code execution | CVE-2023-39427

October 31, 2023

NAME__________Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code executionPlatforms Affected:Ashlar-Vellum Cobalt 1204.77 Ashlar-Vellum Graphite 13.0.48 Ashlar-Vellum Xenon 1204.77...

ZenTao cross-site request forgery | CVE-2023-46375

October 31, 2023

NAME__________ZenTao cross-site request forgeryPlatforms Affected:ZenTao ZenTao 4.1.3Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ZenTao is vulnerable to cross-site request forgery, caused by improper validation...

Online Art Gallery Project SQL injection | CVE-2023-44162

October 31, 2023

NAME__________Online Art Gallery Project SQL injectionPlatforms Affected:Online Art Gallery Project Online Art Gallery Project 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Online Art Gallery...

SugarCRM code execution |

October 31, 2023

NAME__________SugarCRM code executionPlatforms Affected:SugarCRM SugarCRM 12.0.3 SugarCRM SugarCRM 13.0.1Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________SugarCRM could allow a remote attacker to execute arbitrary...

Thumbnail carousel slider plugin for WordPress cross-site request forgery | CVE-2023-5821

October 31, 2023

NAME__________Thumbnail carousel slider plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Thumbnail carousel slider plugin for WordPress 1.0 WordPress Thumbnail carousel...

ZenTao information disclosure | CVE-2023-46376

October 31, 2023

NAME__________ZenTao information disclosurePlatforms Affected:ZenTao ZenTao 4.1.3Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________ZenTao could allow a remote attacker to obtain sensitive information, caused by...

ZPE Systems Nodegrid OS command execution | CVE-2023-43322

October 31, 2023

NAME__________ZPE Systems Nodegrid OS command executionPlatforms Affected:ZPE Systems Nodegrid OS 5.8.10 ZPE Systems Nodegrid OS 5.10.3Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ZPE Systems...

Online Art Gallery Project SQL injection | CVE-2023-43738

October 31, 2023

Online Art Gallery Project SQL injection | CVE-2023-44376

October 31, 2023

Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code execution | CVE-2023-39936

October 31, 2023

Animated Counters plugin for WordPress cross-site scripting | CVE-2023-5774

October 31, 2023

NAME__________Animated Counters plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Animated Counters plugin for WordPress 1.7 WordPress Animated Counters plugin for WordPress...

DragonPath 707GR1 cross-site scripting | CVE-2023-5789

October 31, 2023

NAME__________DragonPath 707GR1 cross-site scriptingPlatforms Affected:DragonPath 707GR1Risk Level:2.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________DragonPath 707GR1 is vulnerable to cross-site scripting, caused by improper validation of...

Online Art Gallery Project SQL injection | CVE-2023-44375

October 31, 2023

BaserCMS cross-site request forgery | CVE-2023-43649

October 31, 2023

NAME__________BaserCMS cross-site request forgeryPlatforms Affected:BaserCMS BaserCMS 1.6.13.1 BaserCMS BaserCMS 1.6.11.4 BaserCMS BaserCMS 1.6.15 baserCMS baserCMS 3.0.7 baserCMS baserCMS 3.0.8 baserCMS...

ZenTao cross-site scripting | CVE-2023-46374

October 31, 2023

NAME__________ZenTao cross-site scriptingPlatforms Affected:ZenTao ZenTao 4.1.3Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________ZenTao is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

BaserCMS cross-site scripting | CVE-2023-29009

October 31, 2023

NAME__________BaserCMS cross-site scriptingPlatforms Affected:BaserCMS BaserCMS 1.6.13.1 BaserCMS BaserCMS 1.6.11.4 BaserCMS BaserCMS 1.6.15 baserCMS baserCMS 3.0.7 baserCMS baserCMS 3.0.8 baserCMS baserCMS...

Peppermint directory traversal | CVE-2023-46864

October 31, 2023

NAME__________Peppermint directory traversalPlatforms Affected:Peppermint Labs Peppermint 0.2.4Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Peppermint could allow a remote attacker to traverse directories on the...

Year: 2023

SugarCRM file upload |

Neon text plugin for WordPress cross-site scripting | CVE-2023-5817

Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code execution | CVE-2023-39427

ZenTao cross-site request forgery | CVE-2023-46375

Online Art Gallery Project SQL injection | CVE-2023-44162

SugarCRM code execution |

Thumbnail carousel slider plugin for WordPress cross-site request forgery | CVE-2023-5821

ZenTao information disclosure | CVE-2023-46376

ZPE Systems Nodegrid OS command execution | CVE-2023-43322

Online Art Gallery Project SQL injection | CVE-2023-43738

Online Art Gallery Project SQL injection | CVE-2023-44376

Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code execution | CVE-2023-39936

Animated Counters plugin for WordPress cross-site scripting | CVE-2023-5774

DragonPath 707GR1 cross-site scripting | CVE-2023-5789

Online Art Gallery Project SQL injection | CVE-2023-44375

BaserCMS cross-site request forgery | CVE-2023-43649

ZenTao cross-site scripting | CVE-2023-46374

BaserCMS cross-site scripting | CVE-2023-29009

Peppermint directory traversal | CVE-2023-46864

BaserCMS cross-site scripting | CVE-2023-43648

Peppermint directory traversal | CVE-2023-46863

Cacti SQL injection | CVE-2023-46490

BaserCMS cross-site scripting | CVE-2023-43647

BaserCMS file upload | CVE-2023-43792

Otelier – 436,855 breached accounts

CISA: CISA Releases Five Industrial Control Systems Advisories

CISA: CISA Releases Best Practice Guidance for Mobile Communications

CISA: CISA Issues BOD 25-01, Implementing Secure Practices for Cloud Services

CISA: CISA and ONCD Release Playbook for Strengthening Cybersecurity in Federal Grant Programs for Critical Infrastructure

You may have missed