96 matches found
CVE-2023-3048 IDOR in TMT's Lockcell
Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15...
CVE-2023-3048
CVE-2023-3048 affects TMT Lockcell prior to version 15, where an authorization bypass is possible via a user-controlled key, enabling authentication abuse. The core issue is an IDOR-style authorization bypass that, according to the CVE entry, affects Lockcell versions before 15. Publicly availabl...
CVE-2023-3048 IDOR in TMT's Lockcell
Authorization Bypass Through User-Controlled Key vulnerability in TMT Lockcell allows Authentication Abuse, Authentication Bypass. This issue affects Lockcell: before 15...
Fedora: Security Advisory for chromium (FEDORA-2022-3f28aa88cf)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-3048
creationtimestamp| type| source ---|---|--- 2022-09-26 20:22:45+00:00| seen| https://t.me/cibsecurity/50499 2025-05-21 16:42:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17156...
CVE-2022-3048
CVE-2022-3048 refers to an inappropriate implementation in the Chrome OS lockscreen within Google Chrome on Chrome OS, prior to version 105.0.5195.52. The issue allowed a local attacker with physical access to bypass lockscreen navigation restrictions. Public advisories indicate a fix shipped wit...
openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10120-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10120-1 advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039, CVE-2022-3041 - Use after free in Layout...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 105 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 105.0.5195.52 Mac/linux and 105.0.5195.52/53/54 Windows contains a number of fixes and improvements -- a list of changes is...
CVE-2020-3048
CVE-2021-3048 affects PAN-OS devices where external dynamic lists (EDLs) contain invalid URLs. The issue causes the Device Server daemon (devsrvr) to stop responding, leading to failed commits and configuration changes; if the device restarts, a DoS condition may occur and traffic processing can ...
Palo Alto Networks PAN-OS 9.0.x < 9.0.14 / 9.1.x < 9.1.9 / 10.0.x < 10.0.5 Vulnerability
The version of Palo Alto Networks PAN-OS running on the remote host is 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.9 or 10.0.x prior to 10.0.5. It is, therefore, affected by a vulnerability. - Certain invalid URL entries contained in an External Dynamic List EDL cause the Device Server daemon...
CVE-2021-3048
creationtimestamp| type| source ---|---|--- 2021-08-11 20:50:55+00:00| seen| https://t.me/cibsecurity/27177...
CVE-2021-3048
Certain invalid URL entries contained in an External Dynamic List EDL cause the Device Server daemon devsrvr to stop responding. This condition causes subsequent commits on the firewall to fail and prevents administrators from performing commits and configuration changes even though the firewall...
CVE-2021-3048
CVE-2021-3048 affects PAN-OS devices due to invalid URL entries in an External Dynamic List (EDL) that cause the Device Server daemon (devsrvr) to stop responding, leading to failed commits/config changes and, on restart, a DoS condition. Affected: PAN-OS 9.0.x < 9.0.14; 9.1.x < 9.1.9; 10.0.x
SUSE: Security Advisory (SUSE-SU-2016:3048-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Huawei EulerOS: Security Advisory for libpng (EulerOS-SA-2019-1421)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2010-3048
creationtimestamp| type| source ---|---|--- 2020-01-16 20:39:05+00:00| seen| https://t.me/cibsecurity/9247...
CVE-2010-3048
Cisco Unified Personal Communicator 7.0 (1.13056) is affected by a denial-of-service vulnerability arising from failure to free allocated memory for received data and lack of validation after memory allocation succeeds. The issue is triggered remotely over the network and results in a DoS conditi...
CVE-2018-3048
CVE-2018-3048 affects Oracle Financial Services Applications, Banking Corporate Lending (Core module). Affected versions: 12.3.0, 12.4.0, 12.5.0, 14.0.0, 14.1.0. Vulnerability allows a low-privileged attacker with network access via HTTP, with user interaction, to perform unauthorized update/inse...
Security Bulletin: IBM OpenPages GRC Platform is affected by multiple XSS reflection vulnerabilities (CVE-2017-1147, CVE-2016-3048)
Summary IBM OpenPages GRC Platform has addressed potential security exposure due to multiple XSS reflection vulnerabilities. Vulnerability Details CVEID: CVE-2017-1147 DESCRIPTION: IBM OpenPages GRC Platform is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary...
CVE-2016-3048
CVE-2016-3048 affects IBM OpenPages GRC Platform versions 7.1, 7.2, and 7.3, with a cross-site scripting (XSS) vulnerability in the Web UI that can allow embedding arbitrary JavaScript within a trusted session. The IBM security bulletin for OpenPages confirms XSS in multiple CVEs (including CVE-2...