8695 matches found
CVE-2023-1618 Authentication Bypass Vulnerability in MELSEC WS Series Ethernet Interface Module
Active Debug Code vulnerability in Mitsubishi Electric Corporation MELSEC WS Series WS0-GETH00200 Serial number 2310 and prior allows a remote unauthenticated attacker to bypass authentication and illegally log into the affected module by connecting to it via telnet which is hidden function and i...
Mitsubishi Electric MELSEC WS Series
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: WS0-GETH00200 Vulnerabilities: Active Debug Code 2. UPDATE OR REPOSTED INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-23-138-02...
Information Disclosure
github.com/elastic/beats is vulnerable to Information Disclosure. A local authenticated attacker is able to gain access to http request authorization or proxy-authorization header contents through leaked logs due to a flaw in httpjson input when debug logging is enabled, resulting in disclosure o...
CVE-2023-29791
kodbox = 1.37 is vulnerable to Cross Site Scripting XSS via the debug information...
CVE-2023-29791
kodbox = 1.37 is vulnerable to Cross Site Scripting XSS via the debug information...
Cross site scripting
kodbox = 1.37 is vulnerable to Cross Site Scripting XSS via the debug information...
CVE-2023-29791
kodbox = 1.37 is vulnerable to Cross Site Scripting XSS via the debug information...
CVE-2023-29791
kodbox = 1.37 is vulnerable to Cross Site Scripting XSS via the debug information...
CVE-2023-29791
CVE-2023-29791 affects kodbox versions 1.37 and earlier, with a Cross‑Site Scripting (XSS) flaw exposed via debug information. The vulnerability allows crafted debug output to be reflected in the UI, enabling user‑in‑context script execution. The advisory entries consistently identify the vulnera...
CVE-2023-23578
Improper access control vulnerability in SkyBridge MB-A200 firmware Ver. 01.00.05 and earlier allows a remote unauthenticated attacker to connect to the product's ADB port...
kernel: ASoC: SOF: debug: Fix potential buffer overflow by snprintf()
A potential classic buffer overflow exists in the linux kernel, such that when snprintf returns the would-be-filled size when the string overflows the given buffer size, hence using this value may result in the buffer overflow...
Exploit for Use After Free in Autodesk 3Ds_Max
CVE-2023-20052 CVE-2023-20052, information leak vulnerability...
CVE-2023-30257
A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...
CVE-2023-30257
A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...
Buffer overflow
A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root...
CVE-2023-30257
CVE-2023-30257 affects FiiO M6 (Build Number v1.0.4). A buffer overflow in the /proc/ftxxxx-debug component allows local attackers to escalate privileges to root. Connected documents confirm the affected product and root-privilege impact. No remediation or patch details are provided in the availa...
PT-2023-8236 · Google · Google Chrome
Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 114.0.5735.90 Description: The issue is related to insufficient policy enforcement in the Android Debug Bridge ADB component of Google Chrome on ChromeOS. This allows a local attacker with physical...
Pprof Debug Files Detected
Pprof is a tool for visualization and analysis of profiling data. Output files may be located inside a hidden directory named debug/pprof/ & When exposed with the web application configuration, the files contained in this directory may expose sensitive information such as internal memory addresse...
CVE-2023-31413
Filebeat versions through 7.17.9 and 8.6.2 have a flaw in httpjson input that allows the http request Authorization or Proxy-Authorization header contents to be leaked in the logs when debug logging is enabled...