12057 matches found
ChakraCore 资源管理错误漏洞
ChakraCore is a chakra-core open source JavaScript engine with C API. ChakraCore has a security vulnerability that stems from the inclusion of a segmentation violation in the function Js::EntryPointInfo::HasInlinees...
smi8.info Cross Site Scripting vulnerability OBB-3524479
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Information disclosure
IBM InfoSphere Information Server 11.7 could allow a remote attacker to obtain system information using a specially crafted query that could aid in further attacks against the system. IBM X-Force ID: 257695...
PT-2023-25343 · Mattermost · Mattermost Boards
Name of the Vulnerable Software and Affected Versions: Mattermost Boards affected versions not specified Description: The issue is related to the improper validation of a board link in Mattermost Boards, which allows an attacker to crash a channel by posting a specially crafted boards link...
PT-2023-26082 · Tenda · Tenda Fh1202
Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Description: A stack overflow was discovered in the page parameter in the fromSafeMacFilter function. This issue affects the specified versions of Tenda F1202 and FH120...
guide2.info Cross Site Scripting vulnerability OBB-3511573
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the HNAP1 protocol implementation in the microprogramming-based router software of D–Link DIR-823G allows a attacker to cause a service failure.
The vulnerability of the HNAP1 protocol implementation in the microprogrammed software for D–Link DIR-823G routers is related to the escape operation from the buffer boundaries in memory when processing the SetParentsControlInfo parameter. Exploiting this vulnerability allows a remote attacker to...
Bazaar Social Listing Shopping Web PHP Template 2.3.2 Privilege Escalation
==================================================================================================================================== | Title : Bazaar | Social Listing Shopping Web PHP Template v2.3.2 Privilege Escalation Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.P...
CVE-2023-33900
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
Information disclosure
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
Information disclosure
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
Information disclosure
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
Information disclosure
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
Information disclosure
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-33892
In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-33881
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-32788
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2023-33898
CVE-2023-33898 concerns a vulnerability in the telephony service where a missing permission check can lead to local information disclosure without requiring privileges or user interaction. Multiple sources (NVD, Red Hat advisory, CVE listing, and related ecosystem data) describe it as a local dis...
CVE-2023-30937
CVE-2023-30937 describes a missing permission check in the telephony service that could allow local information disclosure with no extra privileges. Documents confirm this flaw affects the telephony component (noted in Red Hat/NVD records) and is associated with UNISOC chipsets/telephony implemen...