8688 matches found
SUSE CVE-2023-4535
An out-of-bounds read vulnerability was found in OpenSC packages within the MyEID driver when handling symmetric key encryption. Exploiting this flaw requires an attacker to have physical access to the computer and a specially crafted USB device or smart card. This flaw allows the attacker to...
SUSE CVE-2023-40661
Several memory vulnerabilities were identified within the OpenSC packages, particularly in the card enrollment process using pkcs15-init when a user or administrator enrolls cards. To take advantage of these flaws, an attacker must have physical access to the computer system and employ a...
CVE-2023-44124
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording "com.lge.gametools.gamerecorder" app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be...
CVE-2023-41962
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page...
Cross site scripting
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page...
Design/Logic Flaw
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording "com.lge.gametools.gamerecorder" app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be...
CVE-2023-44124 Screen recording - Theft of arbitrary files with system privilege
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording "com.lge.gametools.gamerecorder" app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be...
CVE-2023-44124 Screen recording - Theft of arbitrary files with system privilege
The vulnerability is to theft of arbitrary files with system privilege in the Screen recording "com.lge.gametools.gamerecorder" app in the "com/lge/gametools/gamerecorder/settings/ProfilePreferenceFragment.java" file. The main problem is that the app launches implicit intents that can be...
CVE-2023-41962
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page...
CVE-2023-41962
Cross-site scripting vulnerability in Credit Card Payment Setup page of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script in the page...
Credit card thieves target Booking.com customers
Staff in the hospitality industry are trained to accommodate their guests, and when they have a few years of experience under their belt you can be sure they'll have received some extraordinary requests. Which is something that clever cybercriminals are taking advantage of. Researchers at...
PT-2023-8908 · Opensc +8 · Opensc +8
Name of the Vulnerable Software and Affected Versions: OpenSC affected versions not specified Description: The issue is related to several memory vulnerabilities within the OpenSC packages, specifically in the card enrollment process using pkcs15-init. An attacker must have physical access to the...
WordPress plugin Welcart e-Commerce security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in Welcart...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Information disclosure
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
PT-2023-26753 · Line · Kokoroe Members Card Line
Name of the Vulnerable Software and Affected Versions: kokoroe members card Line version 13.6.1 Description: An information leak in the kokoroe members card allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting...
CVE-2023-39045
CVE-2023-39045 affects the kokoroe_members card (Line version 13.6.1). Affected component exposes an information leak allowing attackers to obtain the channel access token and send crafted messages. Public docs provide no confirmed fix version; one vendor note recommends restricting access to the...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Line Security Breach
Line is the instant messaging platform of Line Inc. A security vulnerability exists in Line kokoroemembers card. No information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements...