Lucene search
+L

416 matches found

OSV
OSV
•added 2024/01/24 10:15 a.m.•13 views

CVE-2023-43998

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS5.8AI score0.00402EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2024/01/24 10:15 a.m.•7 views

CVE-2023-43998

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS5.9AI score0.00402EPSS
SaveExploits1References2
NVD
NVD
•added 2024/01/24 10:15 a.m.•28 views

CVE-2023-43998

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS5.5AI score0.00402EPSS
SaveExploits1References1
Prion
Prion
•added 2024/01/24 10:15 a.m.•25 views

Design/Logic Flaw

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.5CVSS7.1AI score0.00402EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2024/01/24 12:00 a.m.•69 views

CVE-2023-43998

The CVE-2023-43998 issue affects Line’s Books-futaba mini-app (Line v13.6.1). The root problem is leakage of the channel access token, which attackers could exploit to send crafted malicious notifications. Public sources consistently describe a token leakage pathway enabling unauthorized notifica...

5.4CVSS5.5AI score0.00402EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/01/24 12:00 a.m.•45 views

CVE-2023-43998

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.7AI score0.00402EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•14 views

PT-2024-13162 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the Books-futaba mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system, potentially...

5.4CVSS7.2AI score0.00402EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
•added 2024/01/24 12:00 a.m.•14 views

CVE-2023-43998

An issue in Books-futaba mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

7.1AI score0.00402EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•11 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Books-futaba mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

5.4CVSS6.7AI score0.00402EPSS
SaveExploits1References2
Prion
Prion
•added 2023/12/19 8:15 p.m.•27 views

Open redirect

URL Redirection to Untrusted Site 'Open Redirect' vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7...

5.8CVSS7.1AI score0.00469EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/19 8:00 p.m.•72 views

CVE-2023-38481

CVE-2023-38481 is an Open Redirect vulnerability in the CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin. Affected versions are before 1.3.7 (vendor/n/a). The issue allows redirection to an untrusted site, enabling a user-safe impact such as phishing-like redir...

6.1CVSS7AI score0.00469EPSS
SaveExploits0References1Affected Software1
Openbugbounty
Openbugbounty
•added 2023/12/13 9:29 p.m.•4 views

blue-panther-books.de Cross Site Scripting vulnerability OBB-3812642

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Vulnrichment
Vulnrichment
•added 2023/10/04 3:02 a.m.•17 views

CVE-2023-30738

An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption...

5.5CVSS7.2AI score0.0016EPSS
SaveExploits0References1
Openbugbounty
Openbugbounty
•added 2023/10/01 11:17 a.m.•11 views

ur.spanish-books.se Cross Site Scripting vulnerability OBB-3717142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2023/08/28 12:15 p.m.•4 views

CVE-2022-46783

An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...

5.3CVSS6AI score0.0029EPSS
SaveExploits0References3
OSV
OSV
•added 2023/08/28 12:15 p.m.•12 views

CVE-2022-46783

An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...

5.3CVSS5.8AI score0.0029EPSS
SaveExploits0References2
Prion
Prion
•added 2023/08/28 12:15 p.m.•28 views

Design/Logic Flaw

An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...

5CVSS5.2AI score0.0029EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/08/28 12:00 a.m.•18 views

Stormshield SSL VPN Client 加密问题漏洞

Stormshield SSL VPN Client is a VPN client from Stormshield. A security vulnerability exists in Stormshield SSL VPN Client versions prior to 3.2.0 that stems from allowing an attacker enough access to other encrypted address books...

5.3CVSS5.7AI score0.0029EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/08/28 12:00 a.m.•12 views

PT-2023-15028 · Stormshield · Stormshield Ssl Vpn Client

Name of the Vulnerable Software and Affected Versions: Stormshield SSL VPN Client versions prior to 3.2.0 Description: An issue was discovered in the Stormshield SSL VPN Client. If multiple address books are used, an attacker may be able to access the other encrypted address book. Recommendations...

5.3CVSS5.1AI score0.0029EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2023/08/28 12:00 a.m.•43 views

CVE-2022-46783

An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book...

5.5AI score0.0029EPSS
SaveExploits0References2
Rows per page
Query Builder