Vulnerabilities

Apache Airflow AWS Provider information disclosure | CVE-2023-25956

February 24, 2023

NAME__________Apache Airflow AWS Provider information disclosurePlatforms Affected:Apache Airflow AWS Provider 7.2.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache Airflow AWS Provider could allow a...

Sales Tracker Management System SQL injection | CVE-2023-0964

February 24, 2023

NAME__________Sales Tracker Management System SQL injectionPlatforms Affected:Risk Level:5Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Sales Tracker Management System is vulnerable to SQL injection. A remote...

Devolutions Server privilege escalation | CVE-2023-0952

February 24, 2023

NAME__________Devolutions Server privilege escalationPlatforms Affected:Devolutions Devolutions Server 2022.3.12Risk Level:6.5Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Devolutions Server could allow a remote authenticated attacker to obtain...

HPE Serviceguard for Linux code execution | CVE-2022-37936

February 24, 2023

NAME__________HPE Serviceguard for Linux code executionPlatforms Affected:HPE Serviceguard for LinuxRisk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________HPE Serviceguard for Linux could allow a remote...

Yoga Class Registration System SQL injection | CVE-2023-0981

February 24, 2023

NAME__________Yoga Class Registration System SQL injectionPlatforms Affected:Risk Level:6.3Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Yoga Class Registration System is vulnerable to SQL injection. A remote...

markdown-it-py denial of service | CVE-2023-26302

February 24, 2023

NAME__________markdown-it-py denial of servicePlatforms Affected:Risk Level:3.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________markdown-it-py is vulnerable to a denial of service, caused by improper handling...

SHIRASAGI cross-site scripting | CVE-2023-22427

February 24, 2023

NAME__________SHIRASAGI cross-site scriptingPlatforms Affected:SHIRASAGI SHIRASAGI 1.16.2Risk Level:4.6Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________SHIRASAGI is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Apple iOS, iPadOS and macOS Ventura privilege escalation | CVE-2023-23531

February 24, 2023

NAME__________Apple iOS, iPadOS and macOS Ventura privilege escalationPlatforms Affected:Apple macOS Ventura 13.1 Apple iOS 16.2 Apple iPadOS 16.2Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges...

Cisco Firepower 4100, 9300 Security Appliances, and UCS Fabric Interconnects command execution | CVE-2023-20015

February 24, 2023

NAME__________Cisco Firepower 4100, 9300 Security Appliances, and UCS Fabric Interconnects command executionPlatforms Affected:Cisco UCS 6200 Series Fabric Interconnects Cisco UCS...

HPE Serviceguard for Linux server-side request forgery | CVE-2022-37938

February 24, 2023

NAME__________HPE Serviceguard for Linux server-side request forgeryPlatforms Affected:HPE Serviceguard for LinuxRisk Level:5.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________HPE Serviceguard for Linux is vulnerable to...

Misskey cross-site scripting | CVE-2023-24811

February 24, 2023

NAME__________Misskey cross-site scriptingPlatforms Affected:Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Misskey is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...

Executable Books markdown-it-py denial of service | CVE-2023-26302

February 24, 2023

NAME__________Executable Books markdown-it-py denial of servicePlatforms Affected:Executable Books markdown-it-py 2.1.0Risk Level:3.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Executable Books markdown-it-py is vulnerable to a...

Znfit Home improvement ERP management system SQL injection | CVE-2022-45564

February 24, 2023

NAME__________Znfit Home improvement ERP management system SQL injectionPlatforms Affected:Znfit Home improvement ERP management system V50_20220207Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Znfit Home improvement...

Music Gallery Site SQL injection | CVE-2023-0961

February 24, 2023

NAME__________Music Gallery Site SQL injectionPlatforms Affected:Risk Level:6.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Music Gallery Site is vulnerable to SQL injection. A remote attacker could...

Nautobot code execution | CVE-2023-25657

February 23, 2023

NAME__________Nautobot code executionPlatforms Affected:Nautobot Nautobot 1.5.6Risk Level:7.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Nautobot could allow a remote authenticated attacker to execute arbitrary code on...

Modoboa cross-site scripting | CVE-2023-0949

February 23, 2023

NAME__________Modoboa cross-site scriptingPlatforms Affected:Risk Level:4.8Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Modoboa is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by...

Minio privilege escalation | CVE-2023-25812

February 23, 2023

NAME__________Minio privilege escalationPlatforms Affected:Minio Minio RELEASE.2023-02-10T18-48-39ZRisk Level:5.3Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Minio could allow a remote attacker to gain elevated privileges on the...

Cisco FXOS Software and UCS Manager Software information disclosure | CVE-2023-20016

February 23, 2023

NAME__________Cisco FXOS Software and UCS Manager Software information disclosurePlatforms Affected:Cisco Firepower 9300 Security Appliance Cisco UCS 6200 Series Fabric Interconnects...

Apple iOS, iPadOS and macOS Ventura privilege escalation | CVE-2023-23531

February 23, 2023

Cisco NX-OS Software command execution | CVE-2023-20050

February 23, 2023

NAME__________Cisco NX-OS Software command executionPlatforms Affected:Cisco Nexus 3000 Series Switches Cisco MDS 9000 Series Multilayer Switches Cisco Nexus 6000 Series...

Cisco Firepower 4100, 9300 Security Appliances, and UCS Fabric Interconnects command execution | CVE-2023-20015

February 23, 2023

NAME__________Cisco Firepower 4100, 9300 Security Appliances, and UCS Fabric Interconnects command executionPlatforms Affected:Cisco UCS 6200 Series Fabric Interconnects Cisco UCS...

IBM Spectrum Virtualize information disclosure | CVE-2022-43870

February 23, 2023

NAME__________IBM Spectrum Virtualize information disclosurePlatforms Affected:IBM Spectrum Virtualize 8.4 IBM Spectrum Virtualize 8.3 IBM Spectrum Virtualize 8.5Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________IBM...

IBM Spectrum Virtualize privilege escalation | CVE-2022-43873

February 23, 2023

NAME__________IBM Spectrum Virtualize privilege escalationPlatforms Affected:IBM Spectrum Virtualize 8.4 IBM Spectrum Virtualize 8.3 IBM Spectrum Virtualize 8.2 IBM Spectrum Virtualize...

Cisco Nexus 9000 Series Fabric Switches denial of service | CVE-2023-20089

February 23, 2023

NAME__________Cisco Nexus 9000 Series Fabric Switches denial of servicePlatforms Affected:Cisco Nexus 9000 Series Fabric Switches in ACI modeRisk Level:7.4Exploitability:UnprovenConsequences:Denial of...

Vulnerabilities

Apache Airflow AWS Provider information disclosure | CVE-2023-25956

Sales Tracker Management System SQL injection | CVE-2023-0964

Devolutions Server privilege escalation | CVE-2023-0952

HPE Serviceguard for Linux code execution | CVE-2022-37936

Yoga Class Registration System SQL injection | CVE-2023-0981

markdown-it-py denial of service | CVE-2023-26302

SHIRASAGI cross-site scripting | CVE-2023-22427

Apple iOS, iPadOS and macOS Ventura privilege escalation | CVE-2023-23531

Cisco Firepower 4100, 9300 Security Appliances, and UCS Fabric Interconnects command execution | CVE-2023-20015

HPE Serviceguard for Linux server-side request forgery | CVE-2022-37938

Misskey cross-site scripting | CVE-2023-24811

Executable Books markdown-it-py denial of service | CVE-2023-26302

Znfit Home improvement ERP management system SQL injection | CVE-2022-45564

Music Gallery Site SQL injection | CVE-2023-0961

Nautobot code execution | CVE-2023-25657

Modoboa cross-site scripting | CVE-2023-0949

Minio privilege escalation | CVE-2023-25812

Cisco FXOS Software and UCS Manager Software information disclosure | CVE-2023-20016

Apple iOS, iPadOS and macOS Ventura privilege escalation | CVE-2023-23531

Cisco NX-OS Software command execution | CVE-2023-20050

Cisco Firepower 4100, 9300 Security Appliances, and UCS Fabric Interconnects command execution | CVE-2023-20015

IBM Spectrum Virtualize information disclosure | CVE-2022-43870

IBM Spectrum Virtualize privilege escalation | CVE-2022-43873

Cisco Nexus 9000 Series Fabric Switches denial of service | CVE-2023-20089

[SARCOMA] – Ransomware Victim: Jacquet Weston Engineering

[SARCOMA] – Ransomware Victim: compass-underwriting-ltd

[SARCOMA] – Ransomware Victim: cana group corp

[LYNX] – Ransomware Victim: Sentinel Systems

[LYNX] – Ransomware Victim: Angotti & Reilly

You may have missed