Lucene search
+L

13501 matches found

ATTACKERKB
ATTACKERKB
added 2023/12/07 7:15 a.m.7 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS5.8AI score0.00508EPSS
SaveExploits1References2
OSV
OSV
added 2023/12/07 7:15 a.m.8 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS5.8AI score0.00508EPSS
SaveExploits1References1
NVD
NVD
added 2023/12/07 7:15 a.m.30 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS0.00508EPSS
SaveExploits1References1
Prion
Prion
added 2023/12/07 7:15 a.m.27 views

Design/Logic Flaw

An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

6.4CVSS7.1AI score0.00524EPSS
SaveExploits0References1Affected Software1
Prion
Prion
added 2023/12/07 7:15 a.m.23 views

Design/Logic Flaw

An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5CVSS7.1AI score0.00508EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/12/07 7:15 a.m.21 views

Design/Logic Flaw

An issue in DARTS SHOP MAXIM mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

6.4CVSS7.1AI score0.00577EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.8 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line craftbeer bar canvas mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS8AI score0.00524EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.7 views

PT-2023-28765 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the SCOL Members Card mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system. Recommendation...

5.3CVSS5.1AI score0.00508EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.11 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line PARK DANDAN mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS7.9AI score0.00546EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/12/07 12:00 a.m.36 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.6AI score0.00508EPSS
SaveExploits1References1
CVE
CVE
added 2023/12/07 12:00 a.m.42 views

CVE-2023-43299

The CVE-2023-43299 entry concerns the DA BUTCHERS mini-app on Line v13.6.1. The issue allows an attacker to send crafted malicious notifications through leakage of the channel access token. Affected component: DA BUTCHERS mini-app (Line integration) version 13.6.1. Root cause and impact, as state...

5.3CVSS5.2AI score0.00508EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/12/07 12:00 a.m.48 views

CVE-2023-43304

Vulnerability CVE-2023-43304 affects LINE’s PARK DANDAN mini-app on Line v13.6.1. The issue allows an attacker to send crafted malicious notifications through leakage of the channel access token, enabling unauthorized notifications without user interaction. The root cause is token leakage within ...

8.2CVSS8AI score0.00546EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/12/07 12:00 a.m.42 views

CVE-2023-43301

Summary: CVE-2023-43301 affects Line’s DARTS SHOP MAXIM mini-app (Line v13.6.1). The root issue is leakage of the channel access token in the mini-app, enabling attackers to send crafted malicious notifications. This could lead to unauthorized activities via the mini-app using the leaked token. T...

8.2CVSS8AI score0.00577EPSS
SaveExploits1References1Affected Software1
CVE
CVE
added 2023/12/07 12:00 a.m.42 views

CVE-2023-43302

The affected component is the Line sanTas mini-app (v13.6.1). The vulnerability arises from leakage of the channel access token, enabling an attacker to send crafted malicious notifications. Public sources in the connected documents consistently describe this issue as impacting sanTas mini-app on...

8.2CVSS8AI score0.00577EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.10 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line SCOL Members Card mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

5.3CVSS5.5AI score0.00508EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.8 views

PT-2023-28773 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the studio kent mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system, potentially affectin...

8.2CVSS8AI score0.00571EPSS
SaveExploits1References7
CVE
CVE
added 2023/12/07 12:00 a.m.63 views

CVE-2023-43298

The CVE affects Line’s SCOL Members Card mini-app on v13.6.1. The root problem is leakage of the channel access token, which enables attackers to send crafted malicious notifications. Affects the mini-app’s ability to authenticate/authorize token usage; impacts confidentiality/integrity per the c...

5.3CVSS5.2AI score0.00508EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/12/07 12:00 a.m.44 views

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2023:4654-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4654-1 advisory. Update AMD ucode to 20231030 bsc1215831: - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attack...

9.8CVSS7.5AI score0.01018EPSS
SaveExploits0References25
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.10 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line DA BUTCHERS mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

5.3CVSS5.5AI score0.00508EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/12/07 12:00 a.m.57 views

CVE-2023-43304

An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

8.3AI score0.00546EPSS
SaveExploits1References1
Rows per page
Query Builder