Vulnerabilities

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29027

May 13, 2023

NAME__________Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scriptingPlatforms Affected:Rockwell Automation ArmorStart ST 281E Rockwell Automation...

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29025

May 13, 2023

NAME__________Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scriptingPlatforms Affected:Rockwell Automation ArmorStart ST 281E Rockwell Automation...

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29031

May 13, 2023

NAME__________Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scriptingPlatforms Affected:Rockwell Automation ArmorStart ST 281E Rockwell Automation...

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29029

May 13, 2023

NAME__________Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scriptingPlatforms Affected:Rockwell Automation ArmorStart ST 281E Rockwell Automation...

IBM Security Verify Access denial of service | CVE-2023-25927

May 13, 2023

NAME__________IBM Security Verify Access denial of servicePlatforms Affected:IBM Security Verify Access 10.0.0 IBM Security Verify Access 10.0.1 IBM Security Verify...

Apache OpenMeetings information disclosure | CVE-2023-28936

May 13, 2023

NAME__________Apache OpenMeetings information disclosurePlatforms Affected:Apache OpenMeetings 2.0.0 Apache OpenMeetings 7.0.0Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache OpenMeetings could allow a remote attacker to...

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29026

May 13, 2023

NAME__________Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scriptingPlatforms Affected:Rockwell Automation ArmorStart ST 281E Rockwell Automation...

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29022

May 13, 2023

NAME__________Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scriptingPlatforms Affected:Rockwell Automation ArmorStart ST 281E Rockwell Automation...

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29030

May 13, 2023

NAME__________Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scriptingPlatforms Affected:Rockwell Automation ArmorStart ST 281E Rockwell Automation...

File Tracker Manager System cross-site scripting | CVE-2023-2678

May 13, 2023

NAME__________File Tracker Manager System cross-site scriptingPlatforms Affected:Sourcecodester File Tracker Manager System 1.0Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________File Tracker Manager System is vulnerable...

COVID-19 Contact Tracing System Web App with QR Code Scanning SQL injection | CVE-2023-2677

May 13, 2023

NAME__________COVID-19 Contact Tracing System Web App with QR Code Scanning SQL injectionPlatforms Affected:Sourcecodester COVID-19 Contact Tracing System Web App with...

BirdDog Cameras and Encoders cross-site request forgery | CVE-2023-2505

May 13, 2023

NAME__________BirdDog Cameras and Encoders cross-site request forgeryPlatforms Affected:BirdDog 4K QUAD 4.5.181 BirdDog 4K QUAD 4.5.196 BirdDog MINI 2.6.2 BirdDog A300...

Apache OpenMeetings code execution | CVE-2023-29246

May 13, 2023

NAME__________Apache OpenMeetings code executionPlatforms Affected:Apache OpenMeetings 2.0.0 Apache OpenMeetings 7.0.0Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Apache OpenMeetings could allow a remote authenticated attacker...

AMD EPYC Processors code execution | CVE-2022-23818

May 12, 2023

NAME__________AMD EPYC Processors code executionPlatforms Affected:AMD 3rd Generation EPYCRisk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________AMD EPYC Processors could allow a local authenticated attacker...

Intel Trace Analyzer and Collector software information disclosure | CVE-2022-42878

May 12, 2023

NAME__________Intel Trace Analyzer and Collector software information disclosurePlatforms Affected:Intel Trace Analyzer and Collector softwareRisk Level:2.8Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Intel Trace Analyzer and...

Censor All Offensive Content From Your Site Plugin for WordPress cross-site scripting | CVE-2023-23883

May 12, 2023

NAME__________Censor All Offensive Content From Your Site Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Censor All Offensive Content From Your Site...

Schweitzer Engineering Laboratories Real-Time Automation Controller directory traversal | CVE-2023-31166

May 12, 2023

NAME__________Schweitzer Engineering Laboratories Real-Time Automation Controller directory traversalPlatforms Affected:Schweitzer Engineering Laboratories Real-Time Automation ControllerRisk Level:4.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Schweitzer Engineering Laboratories Real-Time...

Kanban Boards Plugin for WordPress cross-site scripting | CVE-2023-23884

May 12, 2023

NAME__________Kanban Boards Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Kanban Boards Plugin for WordPress 2.5.20Risk Level:5.9Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Kanban Boards for WordPress...

Schweitzer Engineering Laboratories Real-Time Automation Controller security bypass | CVE-2023-31162

May 12, 2023

NAME__________Schweitzer Engineering Laboratories Real-Time Automation Controller security bypassPlatforms Affected:Schweitzer Engineering Laboratories Real-Time Automation ControllerRisk Level:4.8Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Schweitzer Engineering Laboratories Real-Time...

Chamilo LMS cross-site scripting | CVE-2023-31806

May 12, 2023

NAME__________Chamilo LMS cross-site scriptingPlatforms Affected:Chamilo Chamilo LMS 1.11.13Risk Level:5Exploitability:HighConsequences:Gain Access DESCRIPTION__________Chamilo LMS is vulnerable to cross-site scripting, caused by improper...

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31165

May 12, 2023

NAME__________Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scriptingPlatforms Affected:Schweitzer Engineering Laboratories Real-Time Automation ControllerRisk Level:4.3Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Schweitzer Engineering Laboratories Real-Time...

Chamilo LMS cross-site scripting | CVE-2023-31805

May 12, 2023

Chamilo LMS cross-site scripting | CVE-2023-31802

May 12, 2023

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31153

May 12, 2023

NAME__________Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scriptingPlatforms Affected:Schweitzer Engineering Laboratories Real-Time Automation ControllerRisk Level:4.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Schweitzer Engineering Laboratories Real-Time...

Vulnerabilities

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29027

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29025

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29031

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29029

IBM Security Verify Access denial of service | CVE-2023-25927

Apache OpenMeetings information disclosure | CVE-2023-28936

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29026

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29022

Rockwell Automation ArmorStart ST 281E and Rockwell Automation ArmorStart ST 284EE cross-site scripting | CVE-2023-29030

File Tracker Manager System cross-site scripting | CVE-2023-2678

COVID-19 Contact Tracing System Web App with QR Code Scanning SQL injection | CVE-2023-2677

BirdDog Cameras and Encoders cross-site request forgery | CVE-2023-2505

Apache OpenMeetings code execution | CVE-2023-29246

AMD EPYC Processors code execution | CVE-2022-23818

Intel Trace Analyzer and Collector software information disclosure | CVE-2022-42878

Censor All Offensive Content From Your Site Plugin for WordPress cross-site scripting | CVE-2023-23883

Schweitzer Engineering Laboratories Real-Time Automation Controller directory traversal | CVE-2023-31166

Kanban Boards Plugin for WordPress cross-site scripting | CVE-2023-23884

Schweitzer Engineering Laboratories Real-Time Automation Controller security bypass | CVE-2023-31162

Chamilo LMS cross-site scripting | CVE-2023-31806

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31165

Chamilo LMS cross-site scripting | CVE-2023-31805

Chamilo LMS cross-site scripting | CVE-2023-31802

Schweitzer Engineering Laboratories Real-Time Automation Controller cross-site scripting | CVE-2023-31153

[NOVA] – Ransomware Victim: Portel Logistic Technologies

[QILIN] – Ransomware Victim: www[.]nuphoton[.]com

[QILIN] – Ransomware Victim: semco-tech[.]com

[KAWA4096] – Ransomware Victim: ****-*[.]co[.]jp

[QILIN] – Ransomware Victim: simmons-Boardman Publishing, Inc

You may have missed