IBM InfoSphere Information Server 代码问题漏洞

IBM InfoSphere Information Server is a leading integration platform with service offerings that help you understand, cleanse, monitor, transform and deliver data. A code execution vulnerability exists in IBM InfoSphere Information Server version 11.7, which can be exploited by an attacker to...

IBM InfoSphere Information Server 跨站脚本漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server version 11.7,...

IBM InfoSphere Information Server SQL注入漏洞

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An SQL injection vulnerability exists in IBM InfoSphere Information Server version 11.7, which...

PT-2023-2890 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior...

PT-2023-4704 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 macOS Big Sur versions prior to 11.7.7 macOS Monterey versions prior to 12.6.6 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior...

PT-2023-23776 · Apple · Macos Monterey +7

Name of the Vulnerable Software and Affected Versions: watchOS versions prior to 9.5 tvOS versions prior to 16.5 macOS Ventura versions prior to 13.4 iOS versions prior to 15.7.6 and prior to 16.5 iPadOS versions prior to 15.7.6 and prior to 16.5 macOS Big Sur versions prior to 11.7.7 macOS...

Brother iPrint&Scan 安全漏洞

Brother iPrint&Scan is a free application from Brother that allows you to print and scan from your Android device. A security vulnerability exists in Brother iPrint&Scan V6.11.2 and earlier versions, which stems from an access control vulnerability that contains incorrect access control, and whic...

Savy Soda Wifi HD Wireless Disk Drive 路径遍历漏洞

Savy Soda Wifi HD Wireless Disk Drive is Savy Soda's application capable of turning your iPhone or iPad into mobile network storage. A security vulnerability exists in Savy Soda Wifi HD Wireless Disk Drive version 11, which stems from vulnerability to local file inclusion attacks...

PT-2023-23509 · Unknown · Savysoda Wifi Hd Wireless Disk Drive

Name of the Vulnerable Software and Affected Versions: savysoda Wifi HD Wireless Disk Drive version 11 Description: The issue concerns a Local File Inclusion problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

GHSA-P6M6-9J36-VFJX glazedlists XML Deserialization vulnerability

An XML Deserialization vulnerability in glazedlists v1.11.0 allows an attacker to execute arbitrary code via the BeanXMLByteCoder.decode parameter...

Credentials displayed without masking by cavisson-ns-nd-integration

cavisson-ns-nd-integration stores credentials in job config.xml files on the Jenkins controller as part of its configuration. While these credentials are stored encrypted on disk, in cavisson-ns-nd-integration 4.8.0.149 and earlier, the job configuration form does not mask these credentials,...

PT-2023-23381 · Alkacon · Alkacon Opencms

Name of the Vulnerable Software and Affected Versions: alkacon-OpenCMS version 11.0.0.0 Description: A stored cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title field under the Upload Image module. This enables...

PT-2023-21085 · Tongda Oa · Tongda Oa

Name of the Vulnerable Software and Affected Versions: Tongda OA version 11.10 Description: A critical vulnerability has been found in Tongda OA, affecting the actionGetdata function of the GatewayController.php file. This vulnerability leads to unrestricted upload and can be initiated remotely...

CVE-2023-21118

In unflattenString8 of Sensor.cpp, there is a possible out of bounds read due to a heap buffer overflow. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-12...

CVE-2023-20930

In pushDynamicShortcut of ShortcutPackage.java, there is a possible way to get the device into a boot loop due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...

CVE-2023-21107

In retrieveAppEntry of NotificationAccessDetails.java, there is a missing permission check. This could lead to local escalation of privilege across user boundaries with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11...

CVE-2023-21112

In AnalyzeMfcResp of NxpMfcReader.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-11 Android-...

PT-2023-17704 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 Description: In the onSetRuntimePermissionGrantStateByDeviceAdmin function of AdminRestrictedPermissionsUtils.java, there is a possible way for the work profile to read SMS messages due to a permissions bypass. Thi...

PT-2023-17897 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue arises from uncaught exceptions in parsing persisted user data within the registerPhoneAccount function of PhoneAccountRegistrar.java. This can lead to a local persistent...

PT-2023-17721 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to a possible way to get the device into a boot loop due to resource exhaustion in the pushDynamicShortcut function of ShortcutPackage.java. This could lead to...