CVE-2023-23876

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in TMS-Plugins wpDataTables plugin Read More ...

Continue Reading
CVE-2023-28724

NGINX Management Suite default file permissions are set such that an authenticated attacker may be able to modify sensitive files on NGINX Instance Manager and NGINX API Connectivity Manager.   ...

Continue Reading

CVSS3 - HIGH

CVE-2023-24461

An improper certificate validation vulnerability exists in the BIG-IP Edge Client for Windows and macOS and may allow an attacker to impersonate a BIG-IP APM system.  Note: Software versions whi ...

Continue Reading

CVSS3 - HIGH

CVE-2023-28656

NGINX Management Suite may allow an authenticated attacker to gain access to configuration objects outside of their assigned environment.   Note: Software versions which have reached End of Tech ...

Continue Reading

CVSS3 - HIGH

CVE-2023-29240

An authenticated attacker granted a Viewer or Auditor role on a BIG-IQ can upload arbitrary files using an undisclosed iControl REST endpoint.  Note: Software versions which have reached End of Tec ...

Continue Reading

CVSS3 - MEDIUM

CVE-2023-23809

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Moris Dov Stock market charts from finviz plugin Read More ...

Continue Reading
CVE-2023-29163

When UDP profile with idle timeout set to immediate or the value 0 is configured on a virtual server, undisclosed traffic can cause TMM to terminate.  Note: Software versions which have reached End ...

Continue Reading

CVSS3 - HIGH

CVE-2022-46852

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WP Table Builder plugin Read More ...

Continue Reading

Back to Main

Subscribe for the latest news: