Vulnerabilities

Microsoft Edge (Chromium-based) privilege escalation | CVE-2023-38187

July 24, 2023

NAME__________Microsoft Edge (Chromium-based) privilege escalationPlatforms Affected:Microsoft Edge (Chromium-based) 114.0 Microsoft Edge (Chromium-based) 115.0Risk Level:7.5Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Microsoft Edge (Chromium-based) could allow...

HashiCorp Nomad and Nomad Enterprise information disclosure | CVE-2023-3300

July 24, 2023

NAME__________HashiCorp Nomad and Nomad Enterprise information disclosurePlatforms Affected:HashiCorp Nomad 1.4.1 HashiCorp Nomad 1.5.6 HashiCorp Nomad Enterprise 1.5.6 HashiCorp Nomad Enterprise...

Microsoft Edge (Chromium-based) spoofing | CVE-2023-35392

July 24, 2023

NAME__________Microsoft Edge (Chromium-based) spoofingPlatforms Affected:Microsoft Edge (Chromium-based) 114.0 Microsoft Edge (Chromium-based) 115.0Risk Level:4.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge (Chromium-based) could allow a...

ShowMojo MojoBox Digital Lockbox replay attack | CVE-2023-34625

July 24, 2023

NAME__________ShowMojo MojoBox Digital Lockbox replay attackPlatforms Affected:ShowMojo MojoBox Digital Lockbox 1.4Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ShowMojo MojoBox Digital Lockbox could allow a...

HashiCorp Nomad Enterprise information disclosure | CVE-2023-3299

July 24, 2023

NAME__________HashiCorp Nomad Enterprise information disclosurePlatforms Affected:HashiCorp Nomad Enterprise 1.2.11 HashiCorp Nomad Enterprise 1.5.6 HashiCorp Nomad Enterprise 1.4.10Risk Level:3.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________HashiCorp...

Multiple Samsung Harman AMX N-Series devices information disclosure | CVE-2023-38523

July 24, 2023

NAME__________Multiple Samsung Harman AMX N-Series devices information disclosurePlatforms Affected:Harman N-Series N1115 Wallplate Video Encoder Harman N-Series N1x22A Video Encoder/Decoder Harman...

Daily Vulnerability Trends: Mon Jul 24 2023

July 24, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-3519Unauthenticated remote code execution CVE-2023-34960 No description provided CVE-2023-38408The PKCS#11 feature in...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

July 23, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

July 23, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Samba denial of service | CVE-2023-34966

July 23, 2023

NAME__________Samba denial of servicePlatforms Affected:Samba Samba 4.16.10 Samba Samba 4.17.9 Samba Samba 4.18.4Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Samba is vulnerable to...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

July 23, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Omnis Software Omnis Studio security bypass | CVE-2023-38334

July 23, 2023

NAME__________Omnis Software Omnis Studio security bypassPlatforms Affected:Omnis Software Omnis Studio 10.22.00Risk Level:6.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Omnis Software Omnis Studio could allow a...

Samba man-in-the-middle | CVE-2023-3347

July 23, 2023

NAME__________Samba man-in-the-middlePlatforms Affected:Samba Samba 4.16 Samba Samba 4.17 Samba Samba 4.18.0Risk Level:6.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Samba is vulnerable to a man-in-the-middle attack,...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22041

July 23, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Samba information disclosure | CVE-2023-34968

July 23, 2023

NAME__________Samba information disclosurePlatforms Affected:Samba Samba 4.16.10 Samba Samba 4.17.9 Samba Samba 4.18.4Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Samba could allow a remote attacker...

HashiCorp Nomad and Nomad Enterprise denial of service | CVE-2023-3072

July 23, 2023

NAME__________HashiCorp Nomad and Nomad Enterprise denial of servicePlatforms Affected:HashiCorp Nomad 0.7 HashiCorp Nomad 1.4.10 HashiCorp Nomad 1.5.6 HashiCorp Nomad Enterprise...

Samba denial of service | CVE-2023-34967

July 23, 2023

NAME__________Samba denial of servicePlatforms Affected:Samba Samba 4.16.10 Samba Samba 4.17.9 Samba Samba 4.18.4Risk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Samba is vulnerable to...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22045

July 23, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

PaulPrinting CMS /account/delivery cross-site scripting |

July 23, 2023

NAME__________PaulPrinting CMS /account/delivery cross-site scriptingPlatforms Affected:CodePaul PaulPrinting CMSRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________PaulPrinting CMS is vulnerable to cross-site scripting, caused by improper...

Omnis Software Omnis Studio security bypass | CVE-2023-38335

July 23, 2023

NAME__________Omnis Software Omnis Studio security bypassPlatforms Affected:Omnis Software Omnis Studio 10.22.00Risk Level:5.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Omnis Software Omnis Studio could allow a...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22006

July 23, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

July 22, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

July 22, 2023

NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...

SolarWinds Database Performance Analyzer cross-site scripting | CVE-2023-33231

July 22, 2023

NAME__________SolarWinds Database Performance Analyzer cross-site scriptingPlatforms Affected:SolarWinds Database Performance Analyzer 2023.2Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________SolarWinds Database Performance Analyzer is vulnerable to...

Vulnerabilities

Microsoft Edge (Chromium-based) privilege escalation | CVE-2023-38187

HashiCorp Nomad and Nomad Enterprise information disclosure | CVE-2023-3300

Microsoft Edge (Chromium-based) spoofing | CVE-2023-35392

ShowMojo MojoBox Digital Lockbox replay attack | CVE-2023-34625

HashiCorp Nomad Enterprise information disclosure | CVE-2023-3299

Multiple Samsung Harman AMX N-Series devices information disclosure | CVE-2023-38523

Daily Vulnerability Trends: Mon Jul 24 2023

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

Samba denial of service | CVE-2023-34966

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049

Omnis Software Omnis Studio security bypass | CVE-2023-38334

Samba man-in-the-middle | CVE-2023-3347

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22041

Samba information disclosure | CVE-2023-34968

HashiCorp Nomad and Nomad Enterprise denial of service | CVE-2023-3072

Samba denial of service | CVE-2023-34967

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22045

PaulPrinting CMS /account/delivery cross-site scripting |

Omnis Software Omnis Studio security bypass | CVE-2023-38335

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22006

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044

Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22036

SolarWinds Database Performance Analyzer cross-site scripting | CVE-2023-33231

[AKIRA] – Ransomware Victim: Hometown Credit Union

CVE Alert: CVE-2025-7846 – vanquish – WordPress User Extra Fields

CVE Alert: CVE-2025-10897 – JMA Plugins – WooCommerce Designer Pro

[INCRANSOM] – Ransomware Victim: VZW Avalon

Ai Layoffs To Backfire: Half Quietly Rehired At Lower Pay

You may have missed