EspoCRM Code Issues Vulnerabilities

EspoCRM is an open source web-based customer relationship management CRM system. The system provides features such as sales automation, community and customer support. A code issue vulnerability exists in EspoCRM 8.0.2 and prior versions that stems from the presence of a Server Request Forgery SS...

CVE-2023-40083

In parsegapdata of utils.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-42675

In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

PT-2023-28560 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Telecom service affected versions not specified Description: The issue concerns a missing permission check that could allow writing permission usage records of an app. This may lead to local information disclosure without requiring additional...

VulnCheck KEV: CVE-2022-0679

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the libpath parameter before it is passed into a call to require via the narnoodistributorlibrequest AJAX action available to both unauthenticated and authenticated users which results in the disclosure...

The vulnerability of graphic drivers in microprogramming software for Intel processors, related to reading beyond the memory boundary, allows attackers to exploit the protected information.

The vulnerability of graphics drivers in microprogramming software for Intel processors is related to reading data beyond the memory boundary. Exploiting this vulnerability can allow an attacker to disclose protected information...

CVE-2023-46387

LOYTEC electronics GmbH LINX-212 and LINX-151 devices all versions are vulnerable to Incorrect Access Control via dpalconfig.zml file. This vulnerability allows remote attackers to disclose sensitive information on Loytec device data point configuration...

CVE-2023-48894

Incorrect Access Control vulnerability in jshERP V3.3 allows attackers to obtain sensitive information via the doFilter function...

CVE-2023-6415

A vulnerability has been reported in Voovi Social Networking Script that affects version 1.0 and consists of a SQL injection via signin.php in the user parameter. Exploitation of this vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all...

Mitsubishi Electric FA Engineering Software Security Vulnerability

Mitsubishi Electric FA Engineering Software is a series of engineering software from Mitsubishi Electric Japan. A security vulnerability exists in Mitsubishi Electric FA Engineering Software, which is a malicious code execution vulnerability that originates from an externally controlled file name...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data outside the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of the ASP.NET Core software platform, related to security configuration errors, allows attackers to exploit the system to disclose sensitive information.

The vulnerability of the ASP.NET Core software platform is related to security configuration errors. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by the system...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to reading data outside the buffer in memory, allows attackers to exploit this to disclose protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...

The vulnerability of Adobe InDesign’s computer design automation tool lies in insufficient validation of input data, which allows attackers to exploit this flaw to disclose protected information.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Cosmos Code Issue Vulnerability

Cosmos is a self-hosted home server from the individual developer Yann Stepienik. Designed to address the growing concern of vulnerable self-hosted applications and personal servers. A code issue vulnerability exists in Cosmos versions prior to 0.13.0, which stems from a token in the Authorizatio...

The vulnerability of the Symfony software platform for developing and managing web applications allows attackers to exploit it to disclose sensitive information, perform phishing attacks, and carry out diskloading attacks.

The vulnerability of the Symfony software platform for developing and managing web applications exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to disclose sensitive information, perform phishing attacks, and...

PT-2023-7439 · Delta Electronics · Infrasuite Device Master

Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master version 1.0.7 Description: A vulnerability exists in Delta Electronics InfraSuite Device Master that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtai...

IDEMIA SIGMA Cross-Site Scripting Vulnerability

IDEMIA SIGMA is a slim and powerful touch fingerprint device from IDEMIA, France. A security vulnerability exists in IDEMIA SIGMA, which stems from insufficient input validation and output encoding, and a stored cross-site scripting vulnerability that could lead to unauthorized access and data...

CVE-2023-49030

SQL Injection vulnerability in32ns KLive v.2019-1-19 and before allows a remote attacker to obtain sensitive information via a crafted script to the web/user.php component...

The vulnerability in the X11 browser rendering system of Firefox and Firefox ESR, as well as the Thunderbird email client, allows an attacker to compromise the confidentiality and integrity of protected information.

The vulnerability of the X11 browser rendering system for Firefox and Firefox ESR, as well as the Thunderbird email client, is related to an incorrect limitation on the visible layers of the user interface provided by the Selection API. Exploiting this vulnerability allows a remote attacker to...