Lucene search
+L

13501 matches found

Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.19 views

PT-2023-28772 · Line · Line +1

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the PARK DANDAN mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, consider disabling the...

8.2CVSS7.2AI score0.00546EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.5 views

PT-2023-9048 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: A vulnerability in the Oracle Trade Management product of Oracle E-Business Suite, specifically in the Claim Line LOV component, allows an unauthenticated attacker with...

7.8CVSS7.3AI score0.00657EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line sanTas mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS8AI score0.00577EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line DARTS SHOP MAXIM mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS7.9AI score0.00577EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line urbanproject mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS8AI score0.0053EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/06 10:44 a.m.5 views

SUSE-SU-2023:4656-1 Security update for traceroute

This update for traceroute fixes the following issues: - CVE-2023-46316: wrapper scripts do not properly parse command lines bsc1216591...

5.5CVSS5.5AI score0.00367EPSS
SaveExploits2References3
Fedora
Fedora
added 2023/12/06 1:47 a.m.12 views

[SECURITY] Fedora 38 Update: rust-sequoia-sq-0.26.0-10.fc38

Command-line frontends for Sequoia...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:40 a.m.13 views

[SECURITY] Fedora 39 Update: rust-sequoia-sq-0.26.0-10.fc39

Command-line frontends for Sequoia...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.11 views

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root...

9CVSS8AI score0.01037EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2023/12/06 12:00 a.m.10 views

See List and kill current AAA VPN Session on the CLI

See and Kill current AAA Sessions...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/12/06 12:00 a.m.10 views

PT-2023-28769 · Line · Darts Shop Maxim Mini-App

Name of the Vulnerable Software and Affected Versions: DARTS SHOP MAXIM mini-app on Line version 13.6.1 Description: An issue in the DARTS SHOP MAXIM mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This can potentially lead to...

8.2CVSS6.8AI score0.00577EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/12/06 12:00 a.m.13 views

PT-2023-28771

Name of the Vulnerable Software and Affected Versions Line version 13.6.1 Description An issue in the craftbeer bar canvas mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to craft and send malicious...

8.2CVSS5.9AI score0.00524EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.22 views

The vulnerability of the FortiOS operating system lies in its failure to handle CRLF sequences in HTTP headers, allowing attackers to inject arbitrary HTTP headers.

The vulnerability of the FortiOS operating system is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

4.2CVSS6AI score0.00464EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
added 2023/12/06 12:00 a.m.8 views

Fedora: Security Advisory for rust-sequoia-sq (FEDORA-2023-9790b327cb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/12/06 12:00 a.m.12 views

Fedora: Security Advisory for rust-sequoia-sq (FEDORA-2023-6215ea423b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Openbugbounty
Openbugbounty
added 2023/12/05 8:13 p.m.5 views

line-rite.com Improper Access Control vulnerability OBB-3803831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
Openbugbounty
Openbugbounty
added 2023/12/05 8:13 p.m.2 views

line-xhispania.com Improper Access Control vulnerability OBB-3803832

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

7AI score
SaveExploits0
OSV
OSV
added 2023/12/05 6:15 a.m.7 views

CVE-2022-47531

An issue was discovered in Ericsson Evolved Packet Gateway EPG versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell...

8.8CVSS5.9AI score0.00969EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/12/05 6:15 a.m.5 views

CVE-2022-47531

An issue was discovered in Ericsson Evolved Packet Gateway EPG versions 3.x before 3.25 and 2.x before 2.16, allows authenticated users to bypass system CLI and execute commands they are authorized to execute directly in the UNIX shell...

8.8CVSS7.5AI score0.00969EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/12/04 12:00 a.m.50 views

Amazon Linux 2 : vim (ALAS-2023-2353)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2353 advisory. Vim is an open source command line text editor. When closing a window, vim may try to access already freed window structure. Exploitation beyond crashing the application has not been shown to be...

4.3CVSS6.4AI score0.00755EPSS
SaveExploits0References16
Rows per page
Query Builder