3391 matches found
PT-2023-18020 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing permission check in the launchConfirmationActivity of ChooseLockSettingsHelper.java. This could allow enabling developer options without the lockscreen PIN...
CLSA-2023-1691576392 Fix CVE(s): CVE-2023-38408
SECURITY UPDATE: Fix file description leak - debian/patches/CVE-2023-38408-Fix-file-description-leak.patch: Fix the leak in pkcs11starthelper - CVE-2023-38408...
CVE-2023-3632
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3...
CVE-2023-3632
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3...
CVE-2023-3632
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass.This issue affects Kunduz - Homework Helper App: before 6.2.3...
Hardcoded credentials
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass.This issue affects Kunduz - Homework Helper App: before 6.2.3...
CVE-2023-3632 Hard-coded Cryptographic Key in Kunduz - Homework Helper App
Use of Hard-coded Cryptographic Key vulnerability in Sifir Bes Education and Informatics Kunduz - Homework Helper App allows Authentication Abuse, Authentication Bypass. This issue affects Kunduz - Homework Helper App: before 6.2.3...
CVE-2023-3632
CVE-2023-3632 affects the Kunduz - Homework Helper App by Sifir Bes Education and Informatics Kunduz. Root cause described in multiple sources as a hard-coded cryptographic key leading to authentication abuse/bypass . Affected versions are listed as prior to 6.2.3. The CVSS-based metrics indicate...
PT-2023-25533 · Unknown · Kunduz - Homework Helper App
Name of the Vulnerable Software and Affected Versions: Kunduz - Homework Helper App versions prior to 6.2.3 Description: The issue affects the Kunduz - Homework Helper App, allowing for authentication abuse and authentication bypass due to the use of a hard-coded cryptographic key. This enables...
MAL-2023-1075 Malicious code in email-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 203207e38fb9a162ab88820a819775ff32aaa219b52107e9f072ab31966399da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-36689
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPFactory WPFactory Helper plugin = 1.5.2 versions...
CVE-2023-36689
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPFactory WPFactory Helper plugin = 1.5.2 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPFactory WPFactory Helper plugin = 1.5.2 versions...
CVE-2023-36689
WPFactory Helper plugin for WordPress is affected by an unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in versions 1.5.2 (version 1.5.3 or later). There is no detailed root-cause description beyond “Unauth. Reflected XSS,” and no exploit code is included in the connected docu...
CVE-2023-36689 WordPress WPFactory Helper Plugin <= 1.5.2 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting XSS vulnerability in WPFactory WPFactory Helper plugin = 1.5.2 versions...
WordPress plugin WPFactory WPFactory Helper Cross Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
AZL-31817 CVE-2023-3180 affecting package qemu for versions less than 6.2.0-23
A flaw was found in the QEMU virtual crypto device while handling data encryption/decryption requests in virtiocryptohandlesymreq. There is no check for the value of srclen and dstlen in virtiocryptosymophelper, potentially leading to a heap buffer overflow when the two values differ...
A flaw in OpenSSH helper programs could lead to local privilege escalation
A flaw was found in OpenSSH. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. Depending on system configuration, inherite...