API - API Security Blog

CVE-2023-23918

A privilege escalation vulnerability exists in Node.js Read More ...

February 25, 2023

CVE-Vulnerability-Information-Downloader – Downloads Information From NIST (CVSS), First.Org (EPSS), And CISA (Exploited Vulnerabilities) And Combines Them Into One List

[![](https://blogger.googleusercontent.com/img/a/AVvXsEiajOlbegvdpSLI8GCqOHJG772-RHZp6oKuovgIbubRlL_0Lw6K1P98QO45auYYRyLLnFj5W_xbv3m_gJagWsgihdEEr7FNfBRuh5nKJ7YaqxXYdDqCYS7pS6Zd_LHDdoIbeO3D6sx5bjwJXpF ...

February 25, 2023

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2023-23918

A privilege escalation vulnerability exists in Node.js Read More ...

February 25, 2023

CVE-2023-26039

ZoneMinder is a free, open source Closed-circuit television software application for Linux which supports IP, USB and Analog cameras. Versions prior to 1.36.33 and 1.37.33 contain an OS Command Inject ...

February 25, 2023

ManageEngine Firewall Analyzer REST API Key Disclosure (CVE-2022-36923)

The ManageEngine Firewall Analyzer running on the remote host is affected by an information disclosure vulnerability. An unauthenticated, remote attacker can exploit this, via a specially crafted mess ...

February 24, 2023

CVSS3 - HIGH

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2023:0489-1)

The remote SUSE Linux SLED15 / SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0489-1 advisory. - * Improve GStreame ...

February 24, 2023

CVSS3 - HIGH

SUSE SLES15 / openSUSE 15 Security Update : webkit2gtk3 (SUSE-SU-2023:0490-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0490-1 advisory. - * Improve GStreamer multime ...

February 24, 2023

CVSS3 - HIGH

CVE-2023-23918

A privilege escalation vulnerability exists in Node.js Read More ...

February 24, 2023