AMD Ryzen, Gen AMD EPYC Processors information disclosure | CVE-2023-20593
NAME__________AMD Ryzen, Gen AMD EPYC Processors information disclosurePlatforms Affected:AMD 2nd Generation EPYC AMD Ryzen 3000 series Desktop processors AMD Ryzen...
CVE
Apple macOS, iOS and iPadOS security bypass | CVE-2023-38606
NAME__________Apple macOS, iOS and iPadOS security bypassPlatforms Affected:Apple iOS 16.5.1 Apple iPadOS 16.5.1 Apple macOS Ventura 13.4.1 Apple iOS 15.7.7...
mooSocial mooDating cross-site scripting | CVE-2023-3845
NAME__________mooSocial mooDating cross-site scriptingPlatforms Affected:mooSocial mooDating 1.2Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________mooSocial mooDating is vulnerable to cross-site scripting, caused by improper validation...
Apple macOS Ventura denial of service | CVE-2023-38603
NAME__________Apple macOS Ventura denial of servicePlatforms Affected:Apple macOS Ventura 13.4Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Apple macOS Ventura is vulnerable to a...
Apple macOS Ventura privilege escalation | CVE-2023-38425
NAME__________Apple macOS Ventura privilege escalationPlatforms Affected:Apple macOS Ventura 13.4Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apple macOS Ventura could allow a local attacker to...
ABB Zenon code execution | CVE-2023-3324
NAME__________ABB Zenon code executionPlatforms Affected:Asea Brown Boveri Zenon 11 build 106404Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ABB Zenon could allow a local authenticated...
Apple macOS Big Sur security bypass | CVE-2023-38602
NAME__________Apple macOS Big Sur security bypassPlatforms Affected:Apple macOS Big Sur 11.7.8Risk Level:6.2Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Apple macOS Big Sur could allow a...
mooSocial mooDating cross-site scripting | CVE-2023-3844
NAME__________mooSocial mooDating cross-site scriptingPlatforms Affected:mooSocial mooDating 1.2Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________mooSocial mooDating is vulnerable to cross-site scripting, caused by improper validation...
Apache InLong information disclosure | CVE-2023-34434
NAME__________Apache InLong information disclosurePlatforms Affected:Apache InLong 1.4.0 Apache InLong 1.5.0 Apache InLong 1.6.0 Apache InLong 1.7.0Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Apache InLong...
Apple macOS Ventura privilege escalation | CVE-2023-38410
NAME__________Apple macOS Ventura privilege escalationPlatforms Affected:Apple macOS Ventura 13.4Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apple macOS Ventura could allow a local attacker to...
Diafan search cross-site scripting | CVE-2023-37164
NAME__________Diafan search cross-site scriptingPlatforms Affected:Diafan Diafan CMS 6.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Diafan is vulnerable to cross-site scripting, caused by improper validation...
Apple watchOS privilege escalation | CVE-2023-38565
NAME__________Apple watchOS privilege escalationPlatforms Affected:Apple watchOS 9.5Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apple watchOS could allow a local attacker to gain elevated privileges...
VMware Tanzu Application Service for VMs and VMware Isolation Segment information disclosure | CVE-2023-20891
NAME__________VMware Tanzu Application Service for VMs and VMware Isolation Segment information disclosurePlatforms Affected:VMware Tanzu VMware Tanzu Application Service for VMs...
ABB Zenon code execution | CVE-2023-3323
NAME__________ABB Zenon code executionPlatforms Affected:Asea Brown Boveri Zenon 11 build 106404Risk Level:5.9Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ABB Zenon could allow a physically proximate...
OTRS AG OTRS cross-site scripting | CVE-2023-38057
NAME__________OTRS AG OTRS cross-site scriptingPlatforms Affected:OTRS AG OTRS 7.0 OTRS AG OTRS 8.0Risk Level:4.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________OTRS AG OTRS is vulnerable...
XenSource Xen VZEROUPPER information disclosure |
NAME__________XenSource Xen VZEROUPPER information disclosurePlatforms Affected:XenSource XenRisk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________XenSource Xen could allow a local attacker to obtain sensitive information,...
IBOS SQL injection | CVE-2023-3826
NAME__________IBOS SQL injectionPlatforms Affected:IBOS IBOS 4.5.5Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________IBOS is vulnerable to SQL injection. A remote attacker could send specially-crafted...
Apache Felix Healthcheck Webconsole Plugin cross-site scripting | CVE-2023-38435
NAME__________Apache Felix Healthcheck Webconsole Plugin cross-site scriptingPlatforms Affected:Apache Felix Healthcheck Webconsole Plugin 2.0.2Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Apache Felix Healthcheck Webconsole Plugin...
PaulPrinting CMS /account/delivery cross-site scripting |
NAME__________PaulPrinting CMS /account/delivery cross-site scriptingPlatforms Affected:CodePaul PaulPrinting CMSRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________PaulPrinting CMS is vulnerable to cross-site scripting, caused by improper...
Daily Vulnerability Trends: Tue Jul 25 2023
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-38408The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently...
Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22041
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...
Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22044
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...
Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22049
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...
Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecified | CVE-2023-22006
NAME__________Oracle Java SE, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK unspecifiedPlatforms Affected:Oracle GraalVM for JDK 17.0.7 Oracle GraalVM for...
