CVE-2023-3295

The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing file type validation of files in the file manager functional ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

What You Need To Know About The MOVEit

**The MOVEit Vulnerabilities and Latest Exploits. Impact On Governmental Agencies And Large Organizations** Governmental agencies and large organizations around the world are being hit by ransomware a ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2023-32754

Thinking Software Efence login function has insufficient validation for user input. An unauthenticated remote attacker can exploit this vulnerability to inject arbitrary SQL commands to access, modify ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2023-32752

L7 Networks InstantScan IS-8000 & InstantQoS IQ-8000’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit t ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2023-32753

OMICARD EDM’s file uploading function does not restrict upload of file with dangerous type. An unauthenticated remote attacker can exploit this vulnerability to upload and run arbitrary ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Third Flaw Uncovered in MOVEit Transfer App Amidst Cl0p Ransomware Mass Attack

[![MOVEit Transfer App](data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAQAAAC1HAwCAAAAC0lEQVR42mP8Xw8AAoMBgDTD2qgAAAAASUVORK5CYII=)]() Progress Software on Thursday [disclosed]() a third vulne ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

CVE-2023-32731

When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of ...

Continue Reading

CVSS3 - HIGH

CVSS2 - MEDIUM

Security Bulletin: IBM MQ Operator and Queue manager container images are vulnerable to multiple vulnerabilities from Kubernetes, curl and systemd

## Summary Multiple issues were identified in Red Hat UBI packages Kubernetes, curl, systemd that were shipped with IBM MQ Operator and IBM supplied MQ Advanced container images ## Vulnerability Detai ...

Continue Reading

CVSS3 - MEDIUM

CVSS2 - LOW

Back to Main

Subscribe for the latest news: