CVE-2023-39289

A vulnerability in the Connect Mobility Router component of Mitel MiVoice Connect through 9.6.2208.101 could allow an unauthenticated attacker to conduct an account enumeration attack due to improper configuration. A successful exploit could allow an attacker to access system information...

CVE-2023-39291: Undefined Security Weakness

A vulnerability in the Connect Mobility Router component of MiVoice Connect through 9.6.2304.102 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view system...

CVE-2023-39290: Undefined Security Weakness

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view syst...

CVE-2023-39290

A vulnerability in the Edge Gateway component of Mitel MiVoice Connect through R19.3 SP3 22.24.5800.0 could allow an authenticated attacker with elevated privileges to conduct an information disclosure attack due to improper configuration. A successful exploit could allow an attacker to view syst...

CVE-2023-39291

CVE-2023-39291 concerns Mitel MiVoice Connect’s Connect Mobility Router (affected versions up to 9.6.2304.102). The vulnerability is described as an information disclosure due to improper configuration, enabling an authenticated attacker with elevated privileges to view system information. The co...

CVE-2023-39289

CVE-2023-39289 affects Mitel MiVoice Connect, specifically the Connect Mobility Router component, with versions up to 9.6.2208.101. The vulnerability allows an unauthenticated attacker to perform an account enumeration attack due to improper configuration, potentially exposing system information....

CVE-2023-30674

Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie...

Input validation

Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie...

CVE-2023-30674

Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie...

CVE-2023-30674: Undefined Security Weakness

Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie...

Improper Authentication

github.com/labring/sealos is vulnerable to Improper Authentication. The vulnerability exists due to Improper configuration in RBAC permissions, which allows an attacker to gain access and perform unauthorized actions...

CVE-2022-22063

Memory corruption in Core due to improper configuration in boot remapper...

Memory corruption

Memory corruption in Core due to improper configuration in boot remapper...

CVE-2022-22063 Memory corruption in Core

Memory corruption in Core due to improper configuration in boot remapper...

CVE-2022-22063 Memory corruption in Core

Memory corruption in Core due to improper configuration in boot remapper...

CVE-2022-22063

CVE-2022-22063 affects Qualcomm devices with a vulnerable non-secure boot remapper that can bypass hypervisor memory protection. The root cause is an improper boot remapper configuration that allows a compromised OS to remap to hypervisor memory and read/write/execute hypervisor code, enabling po...

PT-2022-15471 · Ibm · Ibm Websphere Automation For Ibm Cloud Pak For Watson Aiops

Name of the Vulnerable Software and Affected Versions: IBM WebSphere Automation for Cloud Pak for Watson AIOps version 1.4.2 Description: The issue is related to cross-site request forgery, caused by improper cookie attribute setting. Recommendations: For IBM WebSphere Automation for Cloud Pak fo...

Buffer Overflow

fis-gtm:sid is vulnerable to buffer overflow.The vulnerability exists due improper configuration of buffer size which allows an attacker to crash the system via memcpy call...

PT-2022-32520

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue is related to improper channel configuration for DCB in ethtool. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...

Denial Of Service (DoS)

OPCFoundation.NetStandard.Opc.Ua is vulnerable to denial of service. The vulnerability exists due to improper configuration of maximum chunk count which allows malicious clients to cause an application crash via a carefully crafted message...