CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

PT-2023-8762 · Linux +6 · Linux Kernel +6

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to a NULL pointer dereference in the upi fill topology function. To avoid out-of-bound access, the code now gets the logical socket id instead of the physical id i...

discover.addisonlibrary.org Cross Site Scripting vulnerability OBB-3551780

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

These 6 Questions Will Help You Choose the Best Attack Surface Management Platform

The hype around different security categories can make it difficult to discern features and capabilities from bias when researching new platforms. You want to advance your security measures, but what steps actually make sense for your business? For anyone ready to find an attack surface managemen...

Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities

Summary IBM has addressed multiple vulnerabilities in IBM Spectrum Discover. Webpack loader-utils CVE-2022-37601 is vulnerable to execute arbitrary code on the system caused by a pollution flaw in parseQuery function. OpenStack Keystone CVE-2021-3563 is vulnerable to bypass security restriction...

CVE-2023-34733

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-34733

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-34733

Affects: Volkswagen Discover Media Infotainment System Software v0876. Root cause: lack of exception handling in the software, enabling a Denial of Service via crafted media files when a USB device is connected (plug‑and‑play). Impact: DoS with high confidentiality/integrity/availability impact p...

PT-2023-24988 · Volkswagen · Volkswagen Discover Media Infotainment System

Name of the Vulnerable Software and Affected Versions: Volkswagen Discover Media Infotainment System Software version 0876 Description: A lack of exception handling in the software allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the...

CVE-2023-34733

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature...

Volkswagen Discover Media Infotainment System 代码问题漏洞

The Volkswagen Discover Media Infotainment System is an in-car media navigation system from Volkswagen Germany. A security vulnerability exists in Volkswagen Discover Media Infotainment System version 0876, which stems from a lack of exception handling. An attacker could cause a denial of service...

CVE-2023-34733: Improper Check for Unusual or Exceptional Conditions

A lack of exception handling in the Volkswagen Discover Media Infotainment System Software Version 0876 allows attackers to cause a Denial of Service DoS via supplying crafted media files when connecting a device to the vehicle's USB plug and play feature...

CVE-2023-22894

Strapi through 4.5.5 allows attackers with access to the admin panel to discover sensitive user details by exploiting the query filter. The attacker can filter users by columns that contain sensitive information and infer a value from API responses. If the attacker has super admin access, then th...

Fedora: Security Advisory for plasma-discover (FEDORA-2023-e31c3e4b6c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2010-4301

epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service infinite loop via a crafted ZCL packet, related to Discover Attributes...

SUSE CVE-2017-8440

Starting in version 5.3.0, Kibana had a cross-site scripting XSS vulnerability in the Discover page that could allow an attacker to obtain sensitive information from or perform destructive actions on behalf of other Kibana users...

SUSE CVE-2021-37936

It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be render...

EulerOS Virtualization 3.0.2.2 : libosinfo (EulerOS-SA-2023-1267)

According to the versions of the libosinfo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to...

GSD-2023-1000521 nvme-pci: fix mempool alloc size

nvme-pci: fix mempool alloc size This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.17 by commit e1777b4286e526c58b4ee699344b0ad85aaf83a0, it...