Author: Angelo Barbosa

CVE-2023-6151 | ESKOM Computer e-municipality module up to 104 privileges management

A vulnerability was found in ESKOM Computer e-municipality module up to 104. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to improper privilege management. This vulnerability was named CVE-2023-6151. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-6150 | ESKOM Computer e-municipality module up to 104 privileges management

A vulnerability was found in ESKOM Computer e-municipality module up to 104. It has been classified as critical. This affects an unknown part. The manipulation leads to improper privilege management. This vulnerability is uniquely identified as CVE-2023-6150. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-34055 | VMware Spring Boot up to 2.7.17/3.0.12/3.1.5 HTTP Request denial of service

A vulnerability was found in VMware Spring Boot up to 2.7.17/3.0.12/3.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component HTTP Request Handler. The manipulation leads to denial of service. This vulnerability is handled as CVE-2023-34055. The attack may be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-34054 | VMware Spring Reactor Netty up to 1.0.38/1.1.12 HTTP denial of service

A vulnerability has been found in VMware Spring Reactor Netty up to 1.0.38/1.1.12 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component HTTP Handler. The manipulation leads to denial of service. This vulnerability is known as CVE-2023-34054. The attack can be launched remotely. There is no exploit available. It is recommended to upgrade the affected...

Read More

CVE-2023-4667 | IDEMIA SIGMA Lite Web Administration Interface cross site scripting

A vulnerability, which was classified as problematic, was found in IDEMIA SIGMA Lite, SIGMA Lite +, SIGMA Wide, SIGMA Extreme, MorphoWave Compact, XP, VisionPass and MorphoWave SP. Affected is an unknown function of the component Web Administration Interface. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2023-4667. It is possible to launch the attack remotely. There is no exploit...

Read More