5920 matches found
CVE-2023-6375: Files or Directories Accessible to External Parties
Tyler Technologies Court Case Management Plus may store backups in a location that can be accessed by a remote, unauthenticated attacker. Backups may contain sensitive information such as database credentials...
CVE-2023-6344: Improper Authentication
Tyler Technologies Court Case Management Plus allows a remote, unauthenticated attacker to enumerate directories using the tiffserver/te003.aspx or te004.aspx 'ifolder' parameter. This behavior is related to the use of a deprecated version of Aquaforest TIFF Server, possibly 2.x. The vulnerable...
CVE-2023-4252
creationtimestamp| type| source ---|---|--- 2023-11-28 14:00:09+00:00| seen| https://t.me/arpsyndicate/649 2023-12-17 08:36:43+00:00| seen| https://t.me/ctinow/155534...
CVE-2023-41146
Autodesk Customer Support Portal allows cases created by users under an account to see cases created by other users on the same account...
Autodesk Customer Portal Security Vulnerability
Autodesk Customer Portal is a customer portal component from Autodesk, Inc. in the United States. A security vulnerability exists in Autodesk Customer Portal that stems from allowing cases created by a user under one account to view cases created by other users under the same account...
PT-2023-27821 · Autodesk · Autodesk
Name of the Vulnerable Software and Affected Versions: Autodesk affected versions not specified Description: The issue allows Autodesk users who no longer have an active license for an account to still access cases for that account. Recommendations: At the moment, there is no information about a...
kernel: net/sched: cls_u32 component reference counter leak if tcf_change_indev() fails
A double-free flaw was found in u32setparms in net/sched/clsu32.c in the Network Scheduler component in the Linux kernel. This flaw allows a local attacker to use a failure event to mishandle the reference counter, leading to a local privilege escalation threat...
CVE-2022-21317
creationtimestamp| type| source ---|---|--- 2023-11-15 17:01:59+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5994...
Users of ReraiseCrowdfund will potentially not receive appropriate voting power
Lines of code Vulnerability details Bug Description The recent code update introduces the functionality for authorities to reduce the total voting power by invoking the decreaseTotalVotingPower function of the party. However, this functionality can lead to issues when used in the time frame after...
accure interest function is likely failed to accure interest for token with low decimal
Lines of code Vulnerability details Impact loss of precision is too high when accuring interest Proof of Concept When intereste accures, we are calling uint256 interestAmount; uint256 interestRate = IIRMirm.getInterestRateaddressthis, trancheIndex, totalDeposit, totalBorrow; interestAmount =...
CVE-2023-41377
creationtimestamp| type| source ---|---|--- 2023-10-31 23:21:12+00:00| seen| https://t.me/cibsecurity/73275...
jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin
A flaw was found in the Jenkins JUnit plugin. The affected versions of the JUnit Plugin do not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting XSS vulnerability. This may allow an attacker to control test case class names in the JUnit resources...
jenkins-2-plugins/JUnit: Stored XSS vulnerability in JUnit Plugin
A flaw was found in the Jenkins JUnit plugin. The affected versions of the JUnit Plugin do not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting XSS vulnerability. This may allow an attacker to control test case class names in the JUnit resources...
Users will retain possession of their USDe after redeeming collateral
Lines of code Vulnerability details Impact Users will retain possession of their USDe after redeeming their collateral this can lead to theft/loss of funds. Proof of Concept See belo for the coded POC. The benefactor and the beneficiary in the Order struct containing order details and confirmatio...
M-07 Unmitigated
Lines of code Vulnerability details Mitigation of M-07: Mitigation Error, see comments Link to Issue: code-423n4/2023-09-asymmetry-findings38 Comments The changes related to this issue are: Access control has been added to AfEth::depositRewards using the onlyVotiumOrRewarder modifier. This functi...
M-05 Unmitigated
Lines of code Vulnerability details Mitigation of M-05: Mitigation Error, see comments Link to Issue: code-423n4/2023-09-asymmetry-findings45 Comments To mitigate M-05, the sponsor has added a delay of one epoch when the available CVX balance is enough to cover the withdrawal: 81: uint256...
1Password reports security incident after breach at Okta
Password manager 1Password says it’s been affected by a breach at Okta, but it reports no user data has been stolen. In a security incident report, 1Password says that a member of its IT team received an unexpected email suggesting they had initiated an Okta report of a list of admins. They hadnt...
CVE-2023-4939
creationtimestamp| type| source ---|---|--- 2023-10-21 12:35:54+00:00| seen| https://t.me/cibsecurity/72732...
