7950 matches found
CVE-2023-21090
In parseUsesPermission of ParsingPackageUtils.java, there is a possible boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-13Android ID:...
CVE-2023-21098
In multiple functions of AccountManagerService.java, there is a possible loading of arbitrary code into the System Settings app due to a confused deputy. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...
CVE-2023-21083
In onNullBinding of CallScreeningServiceHelper.java, there is a possible way to record audio without showing a privacy indicator due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for...
CVE-2023-21085
CVE-2023-21085 involves Android’s System component where a missing bounds check in function nci_snd_set_routing_cmd (in file nci_hmsgs.cc ) can cause an out-of-bounds write. This flaw could enable remote code execution with no privileges and no user interaction, by an attacker in proximal/adjacen...
Fixed in Apache Tomcat 9.0.74
Moderate: Apache Tomcat denial of service CVE-2023-28709 The fix for CVE-2023-24998 was incomplete. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted that supplied exactly maxParameterCount...
CVE-2023-27812
creationtimestamp| type| source ---|---|--- 2023-04-13 18:25:57+00:00| seen| https://t.me/cibsecurity/62070...
CVE-2023-29598
creationtimestamp| type| source ---|---|--- 2023-04-13 18:25:56+00:00| seen| https://t.me/cibsecurity/62069...
CVE-2023-29597
creationtimestamp| type| source ---|---|--- 2023-04-13 18:25:55+00:00| seen| https://t.me/cibsecurity/62068...
servicos.modelo.sc.gov.br Cross Site Scripting vulnerability OBB-3260109
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-44625
creationtimestamp| type| source ---|---|--- 2023-04-13 16:24:55+00:00| seen| https://t.me/cibsecurity/62059...
CVE-2022-45358
creationtimestamp| type| source ---|---|--- 2023-04-13 16:24:53+00:00| seen| https://t.me/cibsecurity/62057...
CVE-2022-45064
creationtimestamp| type| source ---|---|--- 2023-04-13 14:23:45+00:00| seen| https://t.me/cibsecurity/62054...
servicos.ermo.sc.gov.br Cross Site Scripting vulnerability OBB-3259972
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
servicos.formosa.sc.gov.br Cross Site Scripting vulnerability OBB-3259970
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
servicos.bomjardimdaserra.sc.gov.br Cross Site Scripting vulnerability OBB-3259940
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CISA Releases Sixteen Industrial Control Systems Advisories
CISA released sixteen Industrial Control Systems ICS advisories on April 13, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSMA-23-103-01 B. Braun Battery Pack SP with Wi-Fi ICSA-23-103-01 Siemens Adaptec maxView...
CVE-2023-2014
creationtimestamp| type| source ---|---|--- 2023-04-13 07:24:42+00:00| seen| https://t.me/cibsecurity/62052...
gambervfd.org Cross Site Scripting vulnerability OBB-3259815
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...