13806 matches found
CVE-2023-39040
An information leak in Cheese Cafe Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
PT-2023-26748 · Unknown · Cheese Cafe Line
Name of the Vulnerable Software and Affected Versions: Cheese Cafe Line version 13.6.1 Description: An information leak in Cheese Cafe Line allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to sensitive...
CVE-2023-39046
CVE-2023-39046 concerns TonTon-Tei_waiting Line v13.6.1. The documentation describes an information leak that enables an attacker to obtain the channel access token and send crafted messages. No root cause details or patch/fix information are provided in the connected documents. CVSS-like metrics...
CVE-2023-39039
CVE-2023-39039 affects Camp Style Project Line v13.6.1, causing an information leak that allows an attacker to obtain the channel access token and send crafted messages. The initial documents consistently describe the vulnerability as an information disclosure issue in Camp Style Project Line v13...
[SECURITY] Fedora 37 Update: flac-1.3.4-3.fc37
FLAC stands for Free Lossless Audio Codec. Grossly oversimplified, FLAC is similar to Ogg Vorbis, but lossless. The FLAC project consists of the stream format, reference encoders and decoders in library form, flac, a command-line program to encode and decode FLAC files, metaflac, a command-line...
[SECURITY] Fedora 39 Update: oggvideotools-0.9.1-15.fc39
A toolbox for manipulating Ogg video files, which usually consist of a video stream Theora and an audio stream Vorbis. It includes a number of handy command line tools for manipulating these video files, such as for splitting the different streams...
OESA-2023-1627 rubygem-railties security update
Rails internals: application bootup, plugins, generators, and rake tasks. Railties is responsible to glue all frameworks together. Overall, it: handles all the bootstrapping process for a Rails application; manages rails command line interface; provides Rails generators core; Security Fixes:...
The vulnerability of the command-line interface of the SQLite database management system allows a hacker to gain unauthorized access to prohibited user functions.
The vulnerability of the command-line interface of the SQLite database management system is related to errors in the implementation of the azAllowedFunctions protection mechanism. Exploiting this vulnerability can allow an attacker to gain unauthorized access to prohibited user functions...
PT-2023-9272 · Eclipse +4 · Eclipse Jetty +4
Name of the Vulnerable Software and Affected Versions: Eclipse Jetty versions prior to 9.4.52 Eclipse Jetty versions prior to 10.0.16 Eclipse Jetty versions prior to 11.0.16 Eclipse Jetty versions prior to 12.0.0-beta2 Description: The issue is related to the formation of a command line that...
CVE-2023-36634
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially...
CVE-2023-25608
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all...
Design/Logic Flaw
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially...
Design/Logic Flaw
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all...
CVE-2023-36634
FortiAP-U CVE-2023-36634 applies to FortiAP-U versions 5.4–7.0.0 and 6.0–6.2.5, due to incomplete filtering of special elements (CWE-792) in the command line interpreter. An authenticated attacker could list and delete arbitrary files/directories via specially crafted command arguments. The impac...
CVE-2023-36634
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially...
CVE-2023-36634
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-U 7.0.0, 6.2.0 through 6.2.5, 6.0 all versions, 5.4 all versions may allow an authenticated attacker to list and delete arbitrary files and directory via specially...
CVE-2023-25608
CVE-2023-25608 affects Fortinet FortiAP-W2, FortiAP-C, FortiAP, and FortiAP-U products due to incomplete filtering of special elements (CWE-792) in the command line interpreter. An authenticated attacker could read arbitrary files by supplying specially crafted command arguments. Affected version...
CVE-2023-25608
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all...
CVE-2023-25608
An incomplete filtering of one or more instances of special elements vulnerability CWE-792 in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5, 7.0.0 through 7.0.1, 6.4 all versions, 6.2 all versions, 6.0 all versions; FortiAP-C 5.4.0 through 5.4.4, 5.2 all...
