CVE-2023-39641

Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent...

CVE-2023-39641

Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent...

Sql injection

Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent...

Design/Logic Flaw

An out-of-bounds read flaw was found in the parsemodule function in bfd/vms-alpha.c in Binutils...

Design/Logic Flaw

Rejected reason: This was assigned as a duplicate of CVE-2023-4244...

Design/Logic Flaw

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass.This issue affects Digital Yepas: before 1.0.1...

CVE-2023-39641

Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent...

CVE-2023-39641

Active Design psaffiliate before v1.9.8 was discovered to contain a SQL injection vulnerability via the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent...

Active Design psaffiliate SQL Injection Vulnerability

Active Design psaffiliate is an application from Active Design. A security vulnerability exists in Active Design psaffiliate versions prior to v1.9.8, which stems from the component PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent that contains an SQL injection vulnerability...

CVE-2023-39641

Active Design psaffiliate before v1.9.8 is affected by a SQL injection vulnerability in PsaffiliateGetaffiliatesdetailsModuleFrontController::initContent(). The issue affects the affected product/component (psaffiliate) and the root cause is a SQL injection flaw in the referenced module. CVSS 3.1...

Design/Logic Flaw

The com.cutestudio.colordialer application through 2.1.8-2 for Android allows a remote attacker to initiate phone calls without user consent, because of improper export of the com.cutestudio.dialer.activities.DialerActivity component. A third-party application without any permissions can craft an...

Malicious code in healthbridge-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a45a21805510c3390a5789a690b22ba697abed37486f11b580a61895f01ab42 The OpenSSF Package Analysis project identified 'healthbridge-design-system' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8100 Malicious code in healthbridge-design-system (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 8a45a21805510c3390a5789a690b22ba697abed37486f11b580a61895f01ab42 The OpenSSF Package Analysis project identified 'healthbridge-design-system' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

Design/Logic Flaw

This CVE exists because of an incomplete fix for CVE-2021-3750. More specifically, the qemu-kvm package as released for Red Hat Enterprise Linux 9.1 via RHSA-2022:7967 included a version of qemu-kvm that was actually missing the fix for CVE-2021-3750...

Design/Logic Flaw

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority as the vendor eventually states that this issue is identical to CVE-2023-3935...

Design/Logic Flaw

An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially...

Design/Logic Flaw

Inappropriate implementation in Input in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Medium...

Design/Logic Flaw

Inappropriate implementation in Prompts in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to spoof security UI via a crafted HTML page. Chromium security severity: Medium...

Design/Logic Flaw

A PII Enumeration via Credential Recovery in the Self Service Credential Recovery of BlackBerry AtHoc version 7.15 could allow an attacker to potentially associate a list of contact details with an AtHoc IWS organization...

Design/Logic Flaw

In btaavrcmsg of btaavact.cc, there is a possible use after free due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...