Lucene search
+L

2301 matches found

Cvelist
Cvelist
added 2023/12/07 12:00 a.m.37 views

CVE-2023-43302

An issue in sanTas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

8.3AI score0.00577EPSS
SaveExploits1References1
CVE
CVE
added 2023/12/07 12:00 a.m.64 views

CVE-2023-43298

The CVE affects Line’s SCOL Members Card mini-app on v13.6.1. The root problem is leakage of the channel access token, which enables attackers to send crafted malicious notifications. Affects the mini-app’s ability to authenticate/authorize token usage; impacts confidentiality/integrity per the c...

5.3CVSS5.2AI score0.00508EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/12/07 12:00 a.m.34 views

CVE-2023-43303

An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token via captured network traffic...

8.3AI score0.00528EPSS
SaveExploits0References1
CVE
CVE
added 2023/12/07 12:00 a.m.55 views

CVE-2023-43303

CVE-2023-43303 affects the Line-based craftbeer bar canvas mini-app (v13.6.1). The root cause is leakage of the channel access token, allowing an attacker to send crafted malicious notifications. The vulnerability impacts confidentiality (HIGH) and enables unauthenticated network-based abuse with...

8.2CVSS7.2AI score0.00528EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/12/07 12:00 a.m.57 views

CVE-2023-43304

An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

8.3AI score0.00546EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line DARTS SHOP MAXIM mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS7.9AI score0.00577EPSS
SaveExploits1References2
CVE
CVE
added 2023/12/07 12:00 a.m.54 views

CVE-2023-43300

The CVE concerns Line’s urban_project mini-app (Line v13.6.1), where leakage of a channel access token enables attackers to craft and dispatch malicious notifications. Affected component: channel-token handling within the mini-app; root cause described as token leakage. Impact: attacker could sen...

8.2CVSS8AI score0.0053EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line urbanproject mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS8AI score0.0053EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/12/07 12:00 a.m.38 views

CVE-2023-43299

An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.6AI score0.00508EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/12/07 12:00 a.m.13 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

6.9AI score0.00508EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.20 views

PT-2023-28772 · Line · Line +1

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the PARK DANDAN mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, consider disabling the...

8.2CVSS7.2AI score0.00546EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/12/06 12:00 a.m.12 views

PT-2023-28769 · Line · Darts Shop Maxim Mini-App

Name of the Vulnerable Software and Affected Versions: DARTS SHOP MAXIM mini-app on Line version 13.6.1 Description: An issue in the DARTS SHOP MAXIM mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This can potentially lead to...

8.2CVSS6.8AI score0.00577EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/12/06 12:00 a.m.14 views

PT-2023-28771

Name of the Vulnerable Software and Affected Versions Line version 13.6.1 Description An issue in the craftbeer bar canvas mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to craft and send malicious...

8.2CVSS5.9AI score0.00528EPSS
SaveExploits0References10
ATTACKERKB
ATTACKERKB
added 2023/11/14 3:15 a.m.8 views

CVE-2023-45558

An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

7.5CVSS7.1AI score0.00693EPSS
SaveExploits1References2
NVD
NVD
added 2023/11/14 3:15 a.m.26 views

CVE-2023-45558

An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

7.5CVSS0.00693EPSS
SaveExploits1References1
NVD
NVD
added 2023/11/14 3:15 a.m.16 views

CVE-2023-45560

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

7.5CVSS0.00693EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2023/11/14 3:15 a.m.6 views

CVE-2023-45560

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

7.5CVSS7.1AI score0.00693EPSS
SaveExploits1References2
Prion
Prion
added 2023/11/14 3:15 a.m.18 views

Design/Logic Flaw

An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

5CVSS7AI score0.00693EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/11/14 3:15 a.m.17 views

Code injection

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

5CVSS7AI score0.00693EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2023/11/14 12:00 a.m.22 views

CVE-2023-45560

An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...

7.7AI score0.00693EPSS
SaveExploits1References1
Rows per page
Query Builder