CVE-2023-1258

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware web service modules allows Footprinting.This issue affects Flow-X: before 4.0...

CVE-2023-1258

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware web service modules allows Footprinting.This issue affects Flow-X: before 4.0...

Code injection

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware web service modules allows Footprinting.This issue affects Flow-X: before 4.0...

CVE-2023-1258 Flow-X disclosure of sensitive information to unauthenticated users

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware web service modules allows Footprinting.This issue affects Flow-X: before 4.0...

CVE-2023-1258

CVE-2023-1258 affects ABB Flow-X firmware (Flow-X embedded hardware, web service modules). The root cause is insufficient protection of service data in the web service modules, leading to exposure of sensitive information to unauthenticated actors and enabling footprinting. Affected versions are ...

CVE-2023-1258 Flow-X disclosure of sensitive information to unauthenticated users

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in ABB Flow-X firmware on Flow-X embedded hardware web service modules allows Footprinting.This issue affects Flow-X: before 4.0...

Double Free

tensorflow is vulnerable to a Double Free attack. The vulnerability occurs when when the first and the fourth elements of the poolingratio function has parameters not equal to 1.0 in nnops.fractionalavgpoolv2 and nnops.fractionalmaxpoolv2 because pooling on batch and channel dimensions is not...

ABB Flow-X 信息泄露漏洞

ABB Flow-X is an embedded hardware from ABB Switzerland. A security vulnerability exists in ABB Flow-X versions prior to 4.0 that stems from the presence of a sensitive information exposure to unauthorized actors vulnerability...

Mageia: Security Advisory (MGASA-2023-0008)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-1584

A flaw was found in Quarkus. Quarkus OIDC can leak both ID and access tokens in the authorization code flow when an insecure HTTP protocol is used, which can allow attackers to access sensitive user data directly from the ID token or by using the access token to access user data from OIDC provide...

CVE-2023-20558

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges...

CVE-2023-20558

CVE-2023-20558 involves AMD Secure Processor/SMU SMM code. The root cause is insufficient control flow management in AmdCpmOemSmm, which could allow a privileged attacker to tamper with the SMM handler and escalate privileges. Affected software/hardware: AMD Ryzen 2000 series desktop processors (...

CVE-2023-20558

Insufficient control flow management in AmdCpmOemSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to an escalation of privileges...

CVE-2023-20559

The CVE-2023-20559 entry concerns AMD Ryzen 2000-series CPUs with a vulnerability in the System Management Mode (SMM) component. Specifically, insufficient control flow management in AmdCpmGpioInitSmm could allow a privileged attacker to tamper with the SMM handler, potentially leading to privile...

CVE-2023-20559

Insufficient control flow management in AmdCpmGpioInitSmm may allow a privileged attacker to tamper with the SMM handler potentially leading to escalation of privileges...

PT-2023-17458 · Amd · Amdcpmgpioinitsmm

Name of the Vulnerable Software and Affected Versions: AmdCpmGpioInitSmm affected versions not specified Description: The issue is related to insufficient control flow management, which may allow a privileged attacker to tamper with the SMM handler, potentially leading to escalation of privileges...

PT-2023-17457 · Amd · Amdcpmoemsmm

Name of the Vulnerable Software and Affected Versions: AmdCpmOemSmm affected versions not specified Description: The issue is related to insufficient control flow management, which may allow a privileged attacker to tamper with the SMM handler, potentially leading to an escalation of privileges...

Fedora 37 : tar (2023-123778d70d)

The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-123778d70d advisory. Fix for CVE-2022-48303 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for...

Cross-Site Scripting (XSS)

github.com/mattermost/mattermost-server is vulnerable to Cross-Site Scripting XSS attacks. An attacker is able to send AJAX requests on behalf of the victim through OAuth flow completion endpoints via sharing a crafted link with a malicious state parameter...

[NetScaler] LDAP password can be changed with an incorrect Radius Passcode

Below is an example of common 2Factor authentication flow: Root factor: Start Login Schema XML = /nsconfig/loginschema/LoginSchema/DualAuth.xml Adv Authn Policy = LDAPPol Rule = true Action = LDAPAct Next Factor if Success = RadiusFactor Login Schema Profile = LSCHEMAINT Adv Authn Policy =...