CVSS3 - CRITICAL - API Security Blog

CVE-2023-21708

Remote Procedure Call Runtime Remote Code Execution VulnerabilityRead More ...

March 14, 2023

CVE-2023-23392

HTTP Protocol Stack Remote Code Execution VulnerabilityRead More ...

March 14, 2023

CVE-2023-25957

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All Versions >= 1.16.4 = 2.2.0 = 3.1.9 = 3.1.9 Read More ...

March 14, 2023

Security Advisory 0066

## Security Advisory 0066 _._CSAF PDF #### **Date: August** 20th, 2021 #### **Version:** 1.0 Revision | Date | Changes ---|---|--- 1.0 | August 20th, 2021 | Initial Release The CVE-ID tracking this ...

March 13, 2023

Predictions for 2023 from Latest API Threat Research | API Security Newsletter

March has arrived and is roaring like a very confused lion, at least in the northern hemisphere. And much like in the wild, brood production is increasing. We've already seen some fruits of that labor ...

March 09, 2023

Predictions for 2023 from Latest API Threat Research | API Security Newsletter

March has arrived and is roaring like a very confused lion, at least in the northern hemisphere. And much like in the wild, brood production is increasing. We've already seen some fruits of that labor ...

March 09, 2023

Predictions for 2023 from Latest API Threat Research | API Security Newsletter

March has arrived and is roaring like a very confused lion, at least in the northern hemisphere. And much like in the wild, brood production is increasing. We've already seen some fruits of that labor ...

March 09, 2023

Tenable Nessus 10.x >= 10.2.1 and < 10.4.3 Multiple Vulnerabilities (TNS-2023-11)

According to its self-reported version, the Tenable Nessus application running on the remote host is between 10.2.1 and 10.4.2. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior ...

March 09, 2023

Tenable Nessus 8.15.x >= 8.15.4 and < 8.15.9 Multiple Vulnerabilities (TNS-2023-10)

According to its self-reported version, the Tenable Nessus application running on the remote host is between 8.15.4 and 8.15.8. It is, therefore, affected by multiple vulnerabilities in OpenSSL prior ...

March 09, 2023

Wago (CVE-2022-45138)

The configuration backend of the web-based management can be used by unauthenticated users, although only authenticated users should be able to use the API. The vulnerability allows an unauthenticated ...

March 08, 2023