‼ CVE-2023-45374 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the SportsTeams extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. It does not check for the anti-CSRF edit token in Special:SportsTeamsManager and Special:UpdateFavoriteTeams.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39854 ‼
📖 Read
via "National Vulnerability Database".
The web interface of ATX Ucrypt through 3.5 allows authenticated users (or attackers using default credentials for the admin, master, or user account) to include files via a URL in the /hydra/view/get_cc_url url parameter. There can be resultant SSRF.📖 Read
via "National Vulnerability Database".
🦿 Upgrade to Microsoft Windows 11 Home for Just $30 Through 10/15 🦿
📖 Read
via "Tech Republic".
You can now upgrade up to five computers to Microsoft Windows 11 Home for one low price and get a new sleek interface, advanced tools and enhanced security.📖 Read
via "Tech Republic".
TechRepublic
Upgrade to Microsoft Windows 11 Home for Just $10
You can now upgrade up to five computers to Microsoft Windows 11 Home for one low price and get a new sleek interface, advanced tools and enhanced security.
‼ CVE-2023-44236 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Devnath verma WP Captcha plugin <=Â 2.0.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5331 ‼
📖 Read
via "National Vulnerability Database".
Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exposing unauthorized file information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44473 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Michael Tran Table of Contents Plus plugin <=Â 2302 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5330 ‼
📖 Read
via "National Vulnerability Database".
Mattermost fails to enforce a limit for the size of the cache entry for OpenGraph data allowing an attacker to send a specially crafted request to the /api/v4/opengraph filling the cache and turning the server unavailable.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-45613 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Ktor before 2.3.5 server certificates were not verified📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5333 ‼
📖 Read
via "National Vulnerability Database".
Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44238 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Joakim Ling Remove slug from custom post type plugin <=Â 1.0.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44240 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Peter Butler Timthumb Vulnerability Scanner plugin <=Â 1.54 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44237 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Moriyan Jay WP Site Protector plugin <=Â 2.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44993 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in QuantumCloud AI ChatBot plugin <=Â 4.7.8 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-45612 ‼
📖 Read
via "National Vulnerability Database".
In JetBrains Ktor before 2.3.5 default configuration of ContentNegotiation with XML format was vulnerable to XXE📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44246 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in Matias s Shockingly Simple Favicon plugin <=Â 1.8.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43700 ‼
📖 Read
via "National Vulnerability Database".
Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43697 ‼
📖 Read
via "National Vulnerability Database".
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows anunprivileged remote attacker to make the site unable to load necessary strings via changing file pathsusing HTTP requests.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43698 ‼
📖 Read
via "National Vulnerability Database".
Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clientsbrowser via injecting code into the website.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43696 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in SICK APU allows an unprivileged remote attacker todownload as well as upload arbitrary files via anonymous access to the FTP server.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5100 ‼
📖 Read
via "National Vulnerability Database".
Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows anunprivileged remote attacker to retrieve potentially sensitive information via intercepting network trafficthat is not encrypted.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43699 ‼
📖 Read
via "National Vulnerability Database".
Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APUallows an unprivileged remote attacker to guess the password via trial-and-error as the login attemptsare not limited.📖 Read
via "National Vulnerability Database".