CVE-2023-43703

Os Commerce is currently susceptible to a Cross-Site Scripting XSS vulnerability. This vulnerability allows attackers to inject JS through the "productinfoname" parameter, potentially leading to unauthorized execution of scripts within a user's web browser...

SUSE-SU-2023:3866-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...

SUSE-SU-2023:3862-1 Security update for salt

This update for salt fixes the following issues: Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers can read from the wrong environment because they get the same cache directory base name. bsc1214797, bsc1193948 Bugs...

CVE-2023-44206

Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 15 Linux, Windows before build 35979...

info-tech.com.sg Improper Access Control vulnerability OBB-3705255

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-23429 · Fuxa · Fuxa

Name of the Vulnerable Software and Affected Versions: FUXA versions 1.1.12 and earlier Description: The issue is related to a Local File Inclusion vulnerability. It can be exploited via the file parameter, specifically by accessing the fuxa.log file. Recommendations: For versions 1.1.12 and...

Information disclosure

An information leak was found in OpenStack's undercloud. This flaw allows unauthenticated, remote attackers to inspect sensitive data after discovering the IP address of the undercloud, possibly leading to compromising private information, including administrator access credentials...

Design/Logic Flaw

NVIDIA DGX H100 BMC contains a vulnerability in IPMI, where an attacker may cause insufficient protection of credentials. A successful exploit of this vulnerability may lead to code execution, denial of service, information disclosure, and escalation of privileges...

CVE-2023-25529

The CVE-2023-25529 vulnerability affects NVIDIA DGX H100 BMC and DGX A100 BMC, in the host KVM daemon, allowing an unauthenticated attacker to observe timing differences and leak another user’s session token. Reported impact includes information disclosure, privilege escalation, and data tamperin...

CVE-2023-39044

CVE-2023-39044 concerns ajino-Shiretoko Line v13.6.1, where an information leak could let an attacker obtain the channel access token and send crafted messages. The root cause isn't explicitly stated in the provided documents. No exploit code/status is shown; mitigation guidance in PT-Security PT...

PT-2023-26849 · Dell · Dell Emc Scg Policy Manager

Name of the Vulnerable Software and Affected Versions: Dell SCG Policy Manager version 5.16.00.14 Description: The issue concerns a broken cryptographic algorithm vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by performing Man-in-the-Middle MitM...

Moderate: Red Hat Security Advisory: linux-firmware security update

An update for linux-firmware is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

CVE-2023-37154

creationtimestamp| type| source ---|---|--- 2023-09-18 18:53:57+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9042 2024-08-16 08:24:35+00:00| published-proof-of-concept| https://t.me/Rootsec2/989 2024-10-09 08:57:28+00:00| seen| https://t.me/cvedetector/7434 2026-07-29...

CVE-2023-42320

Buffer Overflow vulnerability in Tenda AC10V4 v.USAC10V4.0siV16.03.10.13cnTDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function...

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

Tencent TDSQL Chitu management platform Cross-Site Scripting Vulnerability

Tencent TDSQL Chitu management platform is a tdsql chitu management platform from China's Tencent Tencent. A cross-site scripting vulnerability exists in Tencent TDSQL Chitu management platform version v.10.3.19.5.0, which originated from a vulnerability that allows remote attackers to obtain...

PT-2023-28326 · Unknown · Tdsql Chitu Management Platform

Name of the Vulnerable Software and Affected Versions: TDSQL Chitu management platform version 10.3.19.5.0 Description: An issue in the TDSQL Chitu management platform allows a remote attacker to obtain sensitive information via the get db info function in the install.php file. Recommendations: F...

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC10V4 v.USAC10V4.0siV16.03.10.13cnTDC01 version, which originates from a vulnerability that allows remote attackers to cause a denial of service via the mac parameter in the GetParentControlInfo functi...

koh.phangan.info Cross Site Scripting vulnerability OBB-3690573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-41267 Apache HDFS Provider error message suggested installation of incorrect pip package

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The...