‼ CVE-2023-30743 ‼
📖 Read
via "National Vulnerability Database".
Due to improper neutralization of input in SAPUI5 - versions SAP_UI 750, SAP_UI 754, SAP_UI 755, SAP_UI 756, SAP_UI 757, UI_700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by the application, the vulnerability could lead to the attacker reading or modifying user’s information through phishing attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31406 ‼
📖 Read
via "National Vulnerability Database".
Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated attacker to redirect users to untrusted site using a malicious link. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48384 ‼
📖 Read
via "National Vulnerability Database".
In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-47469 ‼
📖 Read
via "National Vulnerability Database".
In ext4fsfilter driver, there is a possible out of bounds read due to a missing bounds check. This could local denial of service with System execution privileges needed.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32111 ‼
📖 Read
via "National Vulnerability Database".
In SAP PowerDesigner (Proxy) - version 16.7, an attacker can send a crafted request from a remote host to the proxy machine and crash the proxy server, due to faulty implementation of memory management causing a memory corruption. This leads to a high impact on availability of the application.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48389 ‼
📖 Read
via "National Vulnerability Database".
In modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48370 ‼
📖 Read
via "National Vulnerability Database".
In dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48374 ‼
📖 Read
via "National Vulnerability Database".
In tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.📖 Read
via "National Vulnerability Database".
📢 The rise of identity-based cyber attacks and how to mitigate them 📢
📖 Read
via "ITPro".
If identity-based cyber attacks are successful, they can give hackers the opportunity to infiltrate an entire network 📖 Read
via "ITPro".
ITPro
The rise of identity-based cyber attacks and how to mitigate them
If identity-based cyber attacks are successful, they can give hackers the opportunity to infiltrate an entire network
📢 Microsoft Authenticator mandates number matching to counter MFA fatigue attacks 📢
📖 Read
via "ITPro".
The added layer of complexity aims to keep social engineering at bay 📖 Read
via "ITPro".
ITPro
Microsoft Authenticator mandates number matching to counter MFA fatigue attacks
The added layer of complexity aims to keep social engineering at bay
‼ CVE-2023-2590 ‼
📖 Read
via "National Vulnerability Database".
Missing Authorization in GitHub repository answerdev/answer prior to 1.0.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23863 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Black and White Digital Ltd TreePress – Easy Family Trees & Ancestor Profiles plugin <= 2.0.22 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24372 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in USB Memory Direct Simple Custom Author Profiles plugin <=Â 1.0.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23884 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <=Â 2.5.20 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2591 ‼
📖 Read
via "National Vulnerability Database".
Code Injection in GitHub repository nilsteampassnet/teampass prior to 3.0.7.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23664 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ConvertBox ConvertBox Auto Embed WordPress plugin <=Â 1.0.19 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23883 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Gwyer WP Content Filter plugin <= 3.0.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23733 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joel James Lazy Social Comments plugin <=Â 2.0.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-41640 ‼
📖 Read
via "National Vulnerability Database".
Auth. (subscriber+) Stored Cross-Site Scripting (XSS) vulnerability in Rymera Web Co Wholesale Suite plugin <=Â 2.1.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23732 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Joel James Disqus Conditional Load plugin <=Â 11.0.6 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-23734 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in David Voswinkel Userlike – WordPress Live Chat plugin <= 2.2 versions.📖 Read
via "National Vulnerability Database".