NAME__________Paragraphs admin module for Drupal security bypassPlatforms Affected:Drupal Paragraphs admin module for Drupal 8.x-1.4Risk Level:5.8Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Paragraphs admin module for...
NAME__________IBM MQ Appliance privilege escalationPlatforms Affected:IBM MQ Appliance 9.3.CDRisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________IBM MQ Appliance 9.3 CD could allow a local...
NAME__________FUJIFILM and Xerox MFPs information disclosurePlatforms Affected:https://securitydocs.business.xerox.com/wp-content/uploads/2023/11/XRX23-015_Security-Bulletin-for-Primelink-Versalink-and-WorkCentre-CVE-023-46327.pdfRisk Level:5.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________FUJIFILM Business Innovation Corp. and Xerox Corporation multifunction printers (MFPs) could...
NAME__________Bitrix24 information disclosurePlatforms Affected:Bitrix24 Bitrix24 22.0.300Risk Level:7.5Exploitability:Proof of ConceptConsequences:Obtain Information DESCRIPTION__________Bitrix24 could allow a remote attacker to obtain sensitive information,...
NAME__________Mattermost Desktop information disclosurePlatforms Affected:Mattermost Mattermost Desktop 5.5.0Risk Level:3.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Mattermost Desktop could allow a remote attacker to obtain sensitive...
NAME__________IBM Content Navigator server-side request forgeryPlatforms Affected:IBM Content Navigator 3.0.13Risk Level:5.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________IBM Content Navigator 3.0.13 is vulnerable to server-side...
NAME__________Bitrix24 denial of servicePlatforms Affected:Bitrix24 Bitrix24 22.0.300Risk Level:7.5Exploitability:Proof of ConceptConsequences:Denial of Service DESCRIPTION__________Bitrix24 is vulnerable to a denial of service,...
NAME__________Microsoft Exchange Server server-side request forgeryPlatforms Affected:Microsoft Exchange ServerRisk Level:7.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Microsoft Exchange Server is vulnerable to server-side request forgery,...
NAME__________Online Examination System open redirectPlatforms Affected:Risk Level:6.1Exploitability:Proof of ConceptConsequences:Other DESCRIPTION__________Online Examination System could allow a remote attacker to conduct phishing...
NAME__________Online Examination System open redirectPlatforms Affected:Risk Level:6.1Exploitability:Proof of ConceptConsequences:Other DESCRIPTION__________Online Examination System could allow a remote attacker to conduct phishing...
NAME__________IBM MQ Appliance denial of servicePlatforms Affected:IBM MQ Appliance 9.3 CD IBM MQ 9.0 LTS IBM MQ 9.1 LTS IBM...
NAME__________Devolutions Remote Desktop Manager Windows security bypassPlatforms Affected:Devolutions Remote Desktop Manager Windows 2023.2.33Risk Level:4.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Devolutions Remote Desktop Manager Windows...
NAME__________Devolutions Server information disclosurePlatforms Affected:Devolutions Devolutions Server 2023.2.10.0Risk Level:4.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Devolutions Server could allow a remote authenticated attacker to obtain...
NAME__________Online Examination System open redirectPlatforms Affected:Risk Level:6.1Exploitability:Proof of ConceptConsequences:Other DESCRIPTION__________Online Examination System could allow a remote attacker to conduct phishing...
NAME__________Mattermost Desktop denial of servicePlatforms Affected:Mattermost Mattermost Desktop 5.5.0Risk Level:3.1Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Mattermost Desktop is vulnerable to a denial of...
NAME__________Microsoft Edge (Chromium-based) code executionPlatforms Affected:Microsoft Edge (Chromium-based) 118.0 Microsoft Edge (Chromium-based) 119.0Risk Level:6.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge (Chromium-based) could allow...
NAME__________Microsoft Edge (Chromium-based) code executionPlatforms Affected:Microsoft Edge (Chromium-based) 118.0 Microsoft Edge (Chromium-based) 119.0Risk Level:6.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge (Chromium-based) could allow...
NAME__________pkp/pkp-lib cross-site scriptingPlatforms Affected:pkp pkp-lib 3.4.0-3Risk Level:4.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________pkp/pkp-lib is vulnerable to cross-site scripting, caused by improper validation of user-supplied...
NAME__________Mattermost Desktop information disclosurePlatforms Affected:Mattermost Mattermost Desktop 5.5.0Risk Level:2.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Mattermost Desktop could allow a local attacker to obtain sensitive...
NAME__________Microsoft Exchange Server server-side request forgeryPlatforms Affected:Microsoft Exchange ServerRisk Level:7.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Microsoft Exchange Server is vulnerable to server-side request forgery,...
NAME__________Mitsubishi Electric MELSEC iQ-F Series CPU Module denial of servicePlatforms Affected:Mitsubishi Electric FX5U-xMy/z x=326480 y=TR z=ESDSESSDSS Mitsubishi Electric FX5UC-xMy/z x=326496...
NAME__________Microsoft Exchange Server code executionPlatforms Affected:Microsoft Exchange ServerRisk Level:7.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Exchange Server could allow a remote authenticated attacker to...
NAME__________Microsoft Edge (Chromium-based) spoofingPlatforms Affected:Microsoft Edge (Chromium-based) 118.0 Microsoft Edge (Chromium-based) 119.0Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge (Chromium-based) could allow a...
NAME__________Microsoft Exchange Server server-side request forgeryPlatforms Affected:Microsoft Exchange ServerRisk Level:7.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Microsoft Exchange Server is vulnerable to server-side request forgery,...
