8705 matches found
CVE-2023-27703
The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface...
Information disclosure
The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface...
CVE-2023-23591
The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...
Design/Logic Flaw
The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...
CVE-2023-23591
CVE-2023-23591 affects Terminalfour’s Logback component. An information disclosure vulnerability allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. Fixed releases are Terminalfour 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1. The i...
PT-2023-19064 · Unknown +1 · Terminalfour +1
Name of the Vulnerable Software and Affected Versions: Terminalfour versions prior to 8.2.18.7 Terminalfour versions prior to 8.2.18.2.2 Terminalfour versions prior to 8.3.11.1 Terminalfour versions prior to 8.3.14.1 Description: The Logback component in Terminalfour allows OS administrators to...
CVE-2023-23591
The Logback component in Terminalfour before 8.3.14.1 allows OS administrators to obtain sensitive information from application server logs when debug logging is enabled. The fixed versions are 8.2.18.7, 8.2.18.2.2, 8.3.11.1, and 8.3.14.1...
Terminalfour 安全漏洞
Terminalfour is a digital marketing and web content management platform for higher education from Terminalfour, Inc. Terminalfour suffers from an information disclosure vulnerability that stems from insufficient protection of sensitive information when debug logging is enabled. An attacker could...
PT-2023-21299 · Pikpak · Pikpak
Name of the Vulnerable Software and Affected Versions: pikpak version 1.29.2 Description: The Android version of pikpak was discovered to contain an information leak via the debug interface. Recommendations: For pikpak version 1.29.2, consider disabling the debug interface as a temporary workarou...
CVE-2023-27703
CVE-2023-27703 affects Android pikpak v1.29.2, describing an information leak via the debug interface. The vulnerability is a local issue with low severity (CVSS 3.1: low; confidentiality impact: low; no impact on integrity/availability). Root cause: information leakage through the debugging inte...
CVE-2023-27703
The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface...
CVE-2023-26588
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016...
CVE-2023-26588
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016...
Hardcoded credentials
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016...
CVE-2023-26588
Use of hard-coded credentials vulnerability in Buffalo network devices allows an attacker to access the debug function of the product. The affected products and versions are as follows: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier, BS-GSL2016P firmware Ver. 1.10-0.03 and earlier, BS-GSL2016...
PT-2023-20753 · Buffalo · Bs-Gs2008P +5
Name of the Vulnerable Software and Affected Versions: BS-GSL2024 firmware Ver. 1.10-0.03 and earlier BS-GSL2016P firmware Ver. 1.10-0.03 and earlier BS-GSL2016 firmware Ver. 1.10-0.03 and earlier BS-GS2008 firmware Ver. 1.0.10.01 and earlier BS-GS2016 firmware Ver. 1.0.10.01 and earlier BS-GS202...
ntru-rs has unsound FFI: Wrong API usage causes write past allocated area
The following usage causes undefined behavior. rust let kp: ntru::types::KeyPair = …; kp.getpublic.exportDefault::default When compiled with debug assertions, the code above will trigger a attempt to subtract with overflow panic before UB occurs. Other mistakes e.g. using EncParams from a differe...
AZL-34751 CVE-2023-24538 affecting package golang for versions less than 1.19.8-1
Templates do not properly consider backticks as Javascript string delimiters, and do not escape them as expected. Backticks are used, since ES6, for JS template literals. If a template contains a Go template action within a Javascript template literal, the contents of the action can be used to...
RLSA-2023:1470 Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fixes: kernel: tun: avoid double free in tunfreenetdev CVE-2022-4744 ALSA: pcm: Move rwsem lock inside sndctlelemread to prevent UAF CVE-2023-0266 kernel: net: CPU soft lockup in TC mirred...
