Lucene search
+L

13498 matches found

Vulnrichment
Vulnrichment
added 2024/01/24 12:00 a.m.18 views

CVE-2023-43999

An issue in COLORFULlaundry mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

7.1AI score0.00394EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/01/24 12:00 a.m.4 views

CVE-2023-44001

An issue in Ailand clinic mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

7.1AI score0.00394EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2024/01/24 12:00 a.m.25 views

CVE-2023-43989

An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.7AI score0.0036EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.10 views

PT-2024-13163 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the COLORFUL laundry mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations...

5.4CVSS7.2AI score0.00394EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.9 views

PT-2024-13153 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the nature fitness saijo mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For version 13.6.1, consider restricting...

5.4CVSS7AI score0.00379EPSS
SaveExploits1References7
ATTACKERKB
ATTACKERKB
added 2024/01/24 12:00 a.m.42 views

CVE-2024-23897

Jenkins 2.441 and earlier, LTS 2.426.2 and earlier does not disable a feature of its CLI command parser that replaces an ‘@’ character followed by a file path in an argument with the file’s contents, allowing unauthenticated attackers to read arbitrary files on the Jenkins controller file system...

9.8CVSS9.6AI score0.99999EPSS
SaveIn wildExploits49References9
Vulnrichment
Vulnrichment
added 2024/01/24 12:00 a.m.4 views

CVE-2023-43989

An issue in mokumoku chohu mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4AI score0.0036EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.11 views

PT-2024-13164 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the Otakara lapis totuka mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system...

5.4CVSS5.2AI score0.0036EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.8 views

PT-2024-13165 · Line · Ailand Clinic Mini-App

Name of the Vulnerable Software and Affected Versions: Ailand clinic mini-app on Line version 13.6.1 Description: An issue in the Ailand clinic mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to...

5.4CVSS5.4AI score0.00394EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.10 views

PT-2024-13162 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the Books-futaba mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system, potentially...

5.4CVSS7.2AI score0.00402EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2024/01/24 12:00 a.m.10 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line STOCKMAN GROUP mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

5.4CVSS6.7AI score0.0036EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2024/01/24 12:00 a.m.34 views

CVE-2023-43996

An issue in Q co ltd mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.7AI score0.00394EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/01/24 12:00 a.m.11 views

WordPress plugin Albo Pretorio On line Information Disclosure Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. An information disclosure vulnerability...

7.5CVSS6.2AI score0.00429EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/01/24 12:00 a.m.29 views

CVE-2023-43997

An issue in Yoruichi hobby base mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.7AI score0.0036EPSS
SaveExploits1References1
CVE
CVE
added 2024/01/24 12:00 a.m.58 views

CVE-2023-43995

CVE-2023-43995 affects the Line picot.golf mini-app (Line v13.6.1). The root issue is leakage of the channel access token , which can allow an attacker to cause the app to send crafted, malicious notifications. The available documents do not specify exploitation prevalence, affected builds beyond...

5.4CVSS5.5AI score0.0036EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2024/01/24 12:00 a.m.52 views

CVE-2023-43993

The CVE-2023-43993 entry concerns the Line smaregi_app_market mini-app (Line v13.6.1). The root cause is leakage of the channel access token, enabling attackers to send crafted malicious notifications. Affected component: smaregi_app_market mini-app; affected version: v13.6.1. Impact stated: abil...

5.4CVSS5.5AI score0.00394EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.13 views

PT-2024-13160 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the Q co ltd mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendations...

5.4CVSS5.5AI score0.00394EPSS
SaveExploits1References6
CVE
CVE
added 2024/01/24 12:00 a.m.60 views

CVE-2023-43992

CVE-2023-43992 affects the STOCKMAN GROUP mini-app on Line version 13.6.1. The root issue is leakage of the channel access token, which can allow an attacker to send crafted malicious notifications. There is no concrete patch information in the provided documents; one PT-security entry (PT-2024-1...

5.4CVSS5.5AI score0.0036EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.13 views

PT-2024-13157 · Stockman · Stockman Group Mini-App On Line

Name of the Vulnerable Software and Affected Versions: STOCKMAN GROUP mini-app on Line version 13.6.1 Description: An issue in the STOCKMAN GROUP mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to...

5.4CVSS5.4AI score0.0036EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2024/01/24 12:00 a.m.7 views

PT-2024-13156 · Unknown · Prima Clinic Mini-App

Name of the Vulnerable Software and Affected Versions: PRIMA CLINIC mini-app on Line version 13.6.1 Description: An issue in the PRIMA CLINIC mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploi...

5.4CVSS5.3AI score0.00394EPSS
SaveExploits1References7
Rows per page
Query Builder