VMware Tanzu Spring Boot denial of service | CVE-2023-34055
NAME__________VMware Tanzu Spring Boot denial of servicePlatforms Affected:VMware Tanzu Spring Boot 2.7.0 VMware Tanzu Spring Boot 3.0.0 Tanzu VMware Spring...
Year: 2023
Mattermost open redirect | CVE-2023-47168
NAME__________Mattermost open redirectPlatforms Affected:Mattermost Mattermost Server 7.8.12 Mattermost Mattermost Server 8.1.3 Mattermost Mattermost Server 9.0.1 Mattermost Mattermost Server 9.1.0Risk Level:4.3Exploitability:UnprovenConsequences:Other...
Jenkins NeuVector Vulnerability Scanner Plugin security bypass | CVE-2023-49674
NAME__________Jenkins NeuVector Vulnerability Scanner Plugin security bypassPlatforms Affected:Jenkins NeuVector Vulnerability Scanner Plugin 1.22Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins NeuVector Vulnerability Scanner Plugin...
Alumne LMS cross-site scripting | CVE-2023-6359
NAME__________Alumne LMS cross-site scriptingPlatforms Affected:Alumne LMS Alumne LMS 4.0.0.1.08Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Alumne LMS is vulnerable to cross-site scripting, caused by...
ESKOM Computer e-municipality module information disclosure | CVE-2023-6151
NAME__________ESKOM Computer e-municipality module information disclosurePlatforms Affected:ESKOM Computer e-municipality module 104Risk Level:7.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________ESKOM Computer e-municipality module could allow a...
Jenkins Google Compute Engine Plugin information disclosure | CVE-2023-49652
NAME__________Jenkins Google Compute Engine Plugin information disclosurePlatforms Affected:Jenkins Google Compute Engine Plugin 4.550.vb_327fca_3db_11Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Google Compute Engine Plugin...
Jenkins MATLAB Plugin cross-site request forgery | CVE-2023-49655
NAME__________Jenkins MATLAB Plugin cross-site request forgeryPlatforms Affected:Jenkins MATLAB Plugin 2.11.0Risk Level:7.1Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins MATLAB Plugin is vulnerable to cross-site request...
Jenkins MATLAB Plugin information disclosure | CVE-2023-49656
NAME__________Jenkins MATLAB Plugin information disclosurePlatforms Affected:Jenkins MATLAB Plugin 2.11.0Risk Level:7.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins MATLAB Plugin could allow a remote authenticated attacker...
Trellix Enterprise Security Manager (ESM) server-side request forgery | CVE-2023-6070
NAME__________Trellix Enterprise Security Manager (ESM) server-side request forgeryPlatforms Affected:Trellix Enterprise Security Manager 11.6.3 Trellix Enterprise Security Manager 11.6.2 Trellix Enterprise...
Jenkins NeuVector Vulnerability Scanner Plugin cross-site request forgery | CVE-2023-49673
NAME__________Jenkins NeuVector Vulnerability Scanner Plugin cross-site request forgeryPlatforms Affected:Jenkins NeuVector Vulnerability Scanner Plugin 1.22Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Jenkins NeuVector Vulnerability Scanner...
Jenkins MATLAB Plugin security bypass | CVE-2023-49654
NAME__________Jenkins MATLAB Plugin security bypassPlatforms Affected:Jenkins MATLAB Plugin 2.11.0Risk Level:7.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Jenkins MATLAB Plugin could allow a remote authenticated attacker...
Jenkins Jira Plugin information disclosure | CVE-2023-49653
NAME__________Jenkins Jira Plugin information disclosurePlatforms Affected:Jenkins Jira Plugin 3.11Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Jenkins Jira Plugin could allow a remote authenticated attacker...
Microsoft Edge Multiple Vulnerabilities
Multiple vulnerabilities were identified in Microsoft Edge. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass,...
U.S. Treasury Sanctions Sinbad Cryptocurrency Mixer Used by North Korean Hackers
The U.S. Treasury Department on Wednesday imposed sanctions against Sinbad, a virtual currency mixer that has been put to use...
U.S. Treasury Sanctions Sinbad Cryptocurrency Mixer Used by North Korean Hackers
The U.S. Treasury Department on Wednesday imposed sanctions against Sinbad, a virtual currency mixer that has been put to use...
Dollar Tree hit by third-party data breach impacting 2 million people
Discount store chain Dollar Tree was impacted by a third-party data breach affecting 1,977,486 people after the hack of service...
Google Chrome Multiple Vulnerabilities
Multiple vulnerabilities were identified in Google Chrome. A remote attacker could exploit some of these vulnerabilities to trigger security restriction bypass,...
Hackers Exploit Critical Vulnerability in ownCloud
Security experts have urged ownCloud customers to mitigate a critical zero-day vulnerability in its “graphapi” app announced last week, after...
Google Fixes Sixth Chrome Zero-Day Bug of the Year
Google has released an update for Chrome to fix several new vulnerabilities, including one rated high severity that is currently...
DeleFriend Weakness Puts Google Workspace Security at Risk
Security researchers have uncovered a new design flaw in the Google Workspace Domain-Wide Delegation feature. Named “DeleFriend” by Hunters’ Team Axon, the vulnerability could...
A Fifth of UK SMBs Can’t Spot Scams
A worrying 17% of the UK’s small and medium-sized businesses (SMBs) can’t always spot the tell-tale signs of online fraud...
AI Boosts Malware Detection Rates by 70%
Threat intelligence-sharing platform VirusTotal has unveiled new research showing how AI can be used by cyber defenders to enhance malware...
GoTitan Botnet and PrCtrl RAT Exploit Apache Vulnerability
Threat actors have been observed exploiting a critical vulnerability, CVE-2023-46604, in Apache systems. Over the past few weeks, Fortiguard Labs identified multiple...
Estante Virtual – 5,412,603 breached accounts
HIBP In February 2019, the Brazilian book store Estante Virtual suffered a data breach that impacted 5.4M customers. The exposed...
