CVE-2023-0463

The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk...

CVE-2020-0463

In sdpserverhandleclientreq of sdpserver.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure from the bluetooth server with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2025-0463

creationtimestamp| type| source ---|---|--- 2025-01-14 17:03:10+00:00| seen| https://infosec.exchange/users/cve/statuses/113827786871340573 2025-01-14 17:16:00+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpqvkgvig2n 2025-01-14 17:19:59+00:00|...

CVE-2025-0463 Shanghai Lingdang Information Technology Lingdang CRM index.php unrestricted upload

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&miniproconsttype=1&relatedmodule=Singin. The...

CVE-2025-0463 Shanghai Lingdang Information Technology Lingdang CRM index.php unrestricted upload

A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&miniproconsttype=1&relatedmodule=Singin. The...

Photon OS 3.0: Python3 PHSA-2022-3.0-0463

An update of the python3 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0463. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Python2 PHSA-2022-3.0-0463

An update of the python2 package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2022-3.0-0463. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Oracle Linux 9 : rpm (ELSA-2024-0463)

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0463 advisory. - TOCTOU race in checks for unsafe symlinks CVE-2021-35937 - races with chown/chmod/capabilities calls during installation CVE-2021-35938 Tenable has...

RHEL 9 : rpm (RHSA-2024:0463)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0463 advisory. The RPM Package Manager RPM is a command-line driven package management system capable of installing, uninstalling, verifying, querying, and...

CVE-2024-0463

creationtimestamp| type| source ---|---|--- 2024-01-12 19:36:54+00:00| seen| https://t.me/ctinow/167476 2024-02-02 09:36:07+00:00| seen| https://t.me/ctinow/178008...

CVE-2024-0463 code-projects Online Faculty Clearance HTTP POST Request admin_view_info.php sql injection

A vulnerability was found in code-projects Online Faculty Clearance 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /production/adminviewinfo.php of the component HTTP POST Request Handler. The manipulation of the argument haydi leads to sql...

CVE-2024-0463

CVE-2024-0463 affects code-projects Online Faculty Clearance 1.0. The vulnerability is a SQL injection in the HTTP POST Request Handler for the file /production/admin_view_info.php, triggered by manipulating the haydi parameter. Attackers can exploit remotely, and the exploit has been disclosed p...

SUSE CVE-2010-0463

Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests...

CVE-2023-0463

creationtimestamp| type| source ---|---|--- 2023-01-27 00:38:57+00:00| seen| https://t.me/cibsecurity/56961...

Oracle Linux 8 : thunderbird (ELSA-2023-0463)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-0463 advisory. 102.7.1-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 102.7.1-1 - Update to 102.7.1 build1 102.7.0-1 -...

RHEL 8 : thunderbird (RHSA-2023:0463)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:0463 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.7.1. Security Fixes: Mozilla:...

CVE-2023-0463

The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk...

CVE-2023-0463

The force offline MFA prompt setting is not respected when switching to offline mode in Devolutions Remote Desktop Manager 2022.3.29 to 2022.3.30 allows a user to save sensitive data on disk...

CVE-2023-0463

CVE-2023-0463 affects Devolutions Remote Desktop Manager 2022.3.29–2022.3.30. The root cause is that the force offline MFA prompt setting is not respected when switching to offline mode, allowing a user to save sensitive data on disk. Impact: local compromise of data confidentiality, integrity, a...

Cisco Secure Email and Web Manager (SMA) HTTP Response Header Injection (cisco-sa-ESA-HTTP-Inject-nvsycUmR)

According to its self-reported version, Cisco Secure Email and Web Manager SMA is affected by a vulnerability due to a failure to sanitize input values. An unauthenticated, remote attacker can exploit this, by injecting malicious HTTP headers, in order to conduct an HTTP response splitting attack...