13799 matches found
CVE-2023-43991
An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43994
An issue in Cleaningmakotoya mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43989
An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43989
An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43993
An issue in smaregiappmarket mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43992
An issue in STOCKMAN GROUP mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
CVE-2023-43993
An issue in smaregiappmarket mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
Authorization
An issue in Otakara lapis totuka mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
Design/Logic Flaw
An issue in nature fitness saijo mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
Code injection
An issue in PRIMA CLINIC mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
[SECURITY] Fedora 38 Update: ImageMagick-7.1.1.26-2.fc38
ImageMagick is an image display and manipulation tool for the X Window System. ImageMagick can read and write JPEG, TIFF, PNM, GIF, and Photo CD image formats. It can resize, rotate, sharpen, color reduce, or add special effects to an image, and when finished you can either save the completed wor...
PT-2024-13155 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the cherub-hair mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations: For...
CVE-2023-43996
CVE-2023-43996 affects Line mini-apps built by Q co ltd on Line v13.6.1. The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Impact is limited to unauthorized notification delivery via token leakage. Remediation from the connected doc...
Arbitrary file read vulnerability through the CLI can lead to RCE
Jenkins has a built-in command line interface CLI to access Jenkins from a script or shell environment. Jenkins uses the https://github.com/kohsuke/args4jargs4j library to parse command arguments and options on the Jenkins controller when processing CLI commands. This command parser has a feature...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Yoruichi hobby base mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by compromising a channel access token...
PT-2024-13158 · Line · Line
Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the smaregi app market mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For version 13.6.1, consider restricting access to...
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line Cleaningmakotoya mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...
CVE-2023-44001
CVE-2023-44001 affects Line’s Ailand clinic mini-app (Line v13.6.1). The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Impact is limited to ability to abuse the channel access token to inject notifications; no broader exploit/vector...
