Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-33196PUBLISHED: 2023-05-26Craft is a CMS for creating custom digital experiences. Cross site scripting (XSS) can be triggered by review volumes. This issue has been fixed in version 4.4.7.
CVE-2023-33185PUBLISHED: 2023-05-26
Django-SES is a drop-in mail backend for Django. The django_ses library implements a mail backend for Django using AWS Simple Email Service. The library exports the `SESEventWebhookView class` intended to receive signed requests from AWS to handle email bounces, subscriptions, etc. These requests ar...
CVE-2023-33187PUBLISHED: 2023-05-26
Highlight is an open source, full-stack monitoring platform. Highlight may record passwords on customer deployments when a password html input is switched to `type="text"` via a javascript "Show Password" button. This differs from the expected behavior which always obfuscates `ty...
CVE-2023-33194PUBLISHED: 2023-05-26
Craft is a CMS for creating custom digital experiences on the web.The platform does not filter input and encode output in Quick Post validation error message, which can deliver an XSS payload. Old CVE fixed the XSS in label HTML but didn’t fix it when clicking save. This issue was...
CVE-2023-2879PUBLISHED: 2023-05-26GDSDB infinite loop in Wireshark 4.0.0 to 4.0.5 and 3.6.0 to 3.6.13 allows denial of service via packet injection or crafted capture file
User Rank: Apprentice
7/27/2018 | 7:10:47 PM
This is a much more complex issue than the typical "voter fraud" component focused on just the voter registration elements. Even if a 100% accurate voter registration system was implemented where only valid U.S. Citizens could register, that element would miss the most urgent need for end-to-end audit trails, chain-of-custody records and appropriate background checks on those allowed access to voting machines and within the ballot processing system.
In Nevada, our citizens task force composed of professionals has worked for almost a decade trying to stimulate interest in "Trustworthy Elections" by all levels of government and by both political parties. Check out my profile for my past expertise.
We have demonstrated that "Untrusted Processing Systems, Self-Certification of Citizenship for Registration & Self-Audits by Secretaries of State Provide Untrustworthy Election Results!"
But, so far, we have been unable to get leading government officials to make any significant improvements. And, detected government failures and suspected fraud is never prosecuted by District Attorneys because they are prohibited from investigating the evidence.
Conduct a web search on "NevadansCAN elections integrity some voting machines allow remote access" to find some of our exhaustive research, documentation and Nevada court hearing records up through the Nevada Supreme Court on this vital issue.
We have tried often to amend Nevada statutes to require independent audits of the systems components before, during and after elections (proposed to be done by accredited members of the Association of Certified Fraud Examiners), but leaders of both political parties at all levels have refused to cooperate. Imaginie if our society refused to have such certified fraud examiner reviews of banking records and government secrets! How could we trust the financial institutions?
Find some of our legislative video testimony by searching on YouTube with the words "elections integrity robert frank"
We have twice contested elections in state courts the results of the Nevada Elections System by following statutes and appealed one particularly improper ruling at the district level to the Nevada Supreme Court and been summarily dismissed.
The President's and Vice President's federal commission on elections integrity was sabotaged and had to be terminated because of opposition by both parties. The Federal Elections Commission and Elections Assistance Commission refuse to ensure that at least the federal elections are conducted on trustworthy systems and are independently audited by unconflicted fraud examiners.
Does anyone have a viable way to "fix" this problem of untrustworthy election systems? We have exhausted our list of possible ideas for action.
Robert Frank, Chair, NevadansCAN.com, Las Vegas, Nevada