Vulnerabilities

Cisco Unified Contact Center Express cross-site scripting | CVE-2023-20096

April 6, 2023

NAME__________Cisco Unified Contact Center Express cross-site scriptingPlatforms Affected:Cisco Unified Contact Center ExpressRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Cisco Unified Contact Center Express is...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20142

April 6, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Webex Meetings cross-site scripting | CVE-2023-20132

April 6, 2023

NAME__________Cisco Webex Meetings cross-site scriptingPlatforms Affected:Cisco Webex MeetingsRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Cisco Webex Meetings is vulnerable to cross-site scripting, caused by...

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site request forgery | CVE-2023-20130

April 6, 2023

NAME__________Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site request forgeryPlatforms Affected:Cisco Prime Infrastructure Cisco Evolved Programmable Network ManagerRisk Level:4.3Exploitability:UnprovenConsequences:Gain...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20150

April 6, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Webex Meetings security bypass | CVE-2023-20134

April 6, 2023

NAME__________Cisco Webex Meetings security bypassPlatforms Affected:Cisco Webex MeetingsRisk Level:4.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Cisco Webex Meetings could allow a remote authenticated attacker to...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20139

April 6, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command execution | CVE-2023-20117

April 6, 2023

NAME__________Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command executionPlatforms Affected:Cisco RV320 Dual Gigabit WAN VPN Routers...

Cisco Identity Services Engine (ISE) command execution | CVE-2023-20122

April 6, 2023

NAME__________Cisco Identity Services Engine (ISE) command executionPlatforms Affected:Cisco Identity Services Engine (ISE)Risk Level:6.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco Identity Services Engine (ISE) could...

Cisco Identity Services Engine command execution | CVE-2023-20153

April 6, 2023

NAME__________Cisco Identity Services Engine command executionPlatforms Affected:Cisco Identity Services Engine (ISE)Risk Level:6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco Identity Services Engine could allow a...

Cisco Packet Data Network Gateway (PGW) denial of service | CVE-2023-20051

April 6, 2023

NAME__________Cisco Packet Data Network Gateway (PGW) denial of servicePlatforms Affected:Cisco Packet Data Network Gateway (PGW)Risk Level:5.8Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Cisco Packet...

Cisco Identity Services Engine command execution | CVE-2023-20152

April 6, 2023

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20149

April 6, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Secure Network Analytics code execution | CVE-2023-20103

April 6, 2023

NAME__________Cisco Secure Network Analytics code executionPlatforms Affected:Cisco Secure Network AnalyticsRisk Level:4.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cisco Secure Network Analytics could allow a remote...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20144

April 6, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command execution | CVE-2023-20124

April 6, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command executionPlatforms Affected:Cisco RV016 Multi-WAN VPN Routers Cisco RV042...

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20141

April 6, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command execution | CVE-2023-20121

April 6, 2023

NAME__________Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command executionPlatforms Affected:Cisco Prime Infrastructure Cisco Identity Services Engine...

Cisco Duo Authentication for macOS and Windows security bypass | CVE-2023-20123

April 6, 2023

NAME__________Cisco Duo Authentication for macOS and Windows security bypassPlatforms Affected:Cisco Duo Two-Factor Authentication for macOS Cisco Duo Authentication for Windows...

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command execution | CVE-2023-20128

April 6, 2023

NAME__________Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command executionPlatforms Affected:Cisco RV320 Dual Gigabit WAN VPN Routers...

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | CVE-2023-20131

April 6, 2023

NAME__________Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scriptingPlatforms Affected:Cisco Prime Infrastructure Cisco Evolved Programmable Network ManagerRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting...

QNAP QTS, QNAP QuTS hero, QNAP QuTScloud, QNAP QVP (QVR Pro appliances), and QNAP QVR command execution | CVE-2023-23355

April 5, 2023

NAME__________QNAP QTS, QNAP QuTS hero, QNAP QuTScloud, QNAP QVP (QVR Pro appliances), and QNAP QVR command executionPlatforms Affected:Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access...

Multiple QNAP operating systems information disclosure | CVE-2022-27598

April 5, 2023

NAME__________Multiple QNAP operating systems information disclosurePlatforms Affected:QNAP QTS QNAP QuTS hero QNAP QuTScloud QNAP QVP (QVR Pro appliances)Risk Level:2.7Exploitability:UnprovenConsequences:Obtain Information...

Grade Point Average (GPA) Calculator cross-site scripting | CVE-2023-1771

April 5, 2023

NAME__________Grade Point Average (GPA) Calculator cross-site scriptingPlatforms Affected:Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Grade Point Average (GPA) Calculator is vulnerable to cross-site scripting,...

Vulnerabilities

Cisco Unified Contact Center Express cross-site scripting | CVE-2023-20096

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20142

Cisco Webex Meetings cross-site scripting | CVE-2023-20132

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site request forgery | CVE-2023-20130

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20150

Cisco Webex Meetings security bypass | CVE-2023-20134

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20139

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command execution | CVE-2023-20117

Cisco Identity Services Engine (ISE) command execution | CVE-2023-20122

Cisco Identity Services Engine command execution | CVE-2023-20153

Cisco Packet Data Network Gateway (PGW) denial of service | CVE-2023-20051

Cisco Identity Services Engine command execution | CVE-2023-20152

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20149

Cisco Secure Network Analytics code execution | CVE-2023-20103

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20144

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command execution | CVE-2023-20124

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20141

Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command execution | CVE-2023-20121

Cisco Duo Authentication for macOS and Windows security bypass | CVE-2023-20123

Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers command execution | CVE-2023-20128

Cisco Prime Infrastructure and Evolved Programmable Network Manager cross-site scripting | CVE-2023-20131

QNAP QTS, QNAP QuTS hero, QNAP QuTScloud, QNAP QVP (QVR Pro appliances), and QNAP QVR command execution | CVE-2023-23355

Multiple QNAP operating systems information disclosure | CVE-2022-27598

Grade Point Average (GPA) Calculator cross-site scripting | CVE-2023-1771

HackerOne Bug Bounty Disclosure: post-based-cross-site-scripting-on-ibm-research-endpoint-youssifs

HackerOne Bug Bounty Disclosure: usage-of-unsafe-random-function-in-undici-for-choosing-boundary-parrot

[FOG] – Ransomware Victim: Kooijman Vianen (kooijmanvianen[.]nl)

[RANSOMHUB] – Ransomware Victim: samsill[.]com

[RANSOMHUB] – Ransomware Victim: archaeologicalresearchservices[.]com

You may have missed