CVE-2026-42731

Incorrect Privilege Assignment vulnerability in miniOrange miniorange otp verification miniorange-otp-verification allows Privilege Escalation.This issue affects miniorange otp verification: from n/a through = 5.4.9...

CVE-2023-42731

In Gnss service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

CVE-2022-42731

mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage...

Adobe InDesign 16.0 < 17.0.0 Multiple Vulnerabilities (APSB21-107) (macOS)

The version of Adobe InDesign installed on the remote macOS host is prior to 17.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-107 advisory. - Adobe InDesign versions 16.4 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially...

CVE-2023-42731

creationtimestamp| type| source ---|---|--- 2023-12-23 07:37:42+00:00| seen| https://t.me/ctinow/158705...

CVE-2023-42731

CVE-2023-42731 affects the Gnss service in UNISOC chipsets. The vulnerability is an out-of-bounds read caused by a missing bounds check, leading to local denial of service with System execution privileges required. The CVSSv3.1 base score is 4.4 (Medium) with LOCAL attack vector, low attack compl...

CVE-2022-42731

creationtimestamp| type| source ---|---|--- 2022-10-11 18:25:56+00:00| seen| https://t.me/cibsecurity/51121...

CVE-2022-42731

mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage...

CVE-2022-42731

mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage...

CVE-2022-42731

CVE-2022-42731 affects django-mfa2, specifically the mfa/FIDO2.py component. The vulnerability is a replay attack where the device registration challenge is not invalidated after use, enabling an attacker to register another device for a user. Affected versions are before 2.5.1 and 2.6.x before 2...

CVE-2022-42731

mfa/FIDO2.py in django-mfa2 before 2.5.1 and 2.6.x before 2.6.1 allows a replay attack that could be used to register another device for a user. The device registration challenge is not invalidated after usage...

CVE-2021-42731

creationtimestamp| type| source ---|---|--- 2021-11-17 16:20:43+00:00| seen| https://t.me/cibsecurity/32473...

CVE-2021-42731

Adobe InDesign versions 16.4 and earlier are affected by a Buffer Overflow vulnerability when parsing a specially crafted file. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary code execution in the context of the current user. Exploitation of this issue requires...

CVE-2021-42731

Adobe InDesign 16.4 and earlier are affected by a Buffer Overflow when parsing a specially crafted file, allowing arbitrary code execution in the user’s context. Exploitation requires user interaction (victim must open a malicious file). Several connected sources corroborate CVE-2021-42731 and re...

Adobe InDesign 16.0 < 17.0.0 Multiple Vulnerabilities (APSB21-107)

The version of Adobe InDesign installed on the remote Windows host is prior to 17.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-107 advisory. - Adobe InDesign versions 16.4 and earlier are affected by a Buffer Overflow vulnerability when parsing a special...