Lucene search
+L

13662 matches found

Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.8 views

PT-2023-28773 · Line · Line

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the studio kent mini-app allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to exploit the system, potentially affectin...

8.2CVSS8AI score0.00571EPSS
SaveExploits1References7
CVE
CVE
added 2023/12/07 12:00 a.m.63 views

CVE-2023-43298

The CVE affects Line’s SCOL Members Card mini-app on v13.6.1. The root problem is leakage of the channel access token, which enables attackers to send crafted malicious notifications. Affects the mini-app’s ability to authenticate/authorize token usage; impacts confidentiality/integrity per the c...

5.3CVSS5.2AI score0.00508EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/12/07 12:00 a.m.44 views

SUSE SLES15 Security Update : kernel-firmware (SUSE-SU-2023:4654-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4654-1 advisory. Update AMD ucode to 20231030 bsc1215831: - CVE-2022-23820: Failure to validate the AMD SMM communication buffer may allow an attack...

9.8CVSS7.5AI score0.01018EPSS
SaveExploits0References25
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.10 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line DA BUTCHERS mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

5.3CVSS5.5AI score0.00508EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2023/12/07 12:00 a.m.57 views

CVE-2023-43304

An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

8.3AI score0.00546EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.19 views

PT-2023-28772 · Line · Line +1

Name of the Vulnerable Software and Affected Versions: Line version 13.6.1 Description: An issue in the PARK DANDAN mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. Recommendations: For Line version 13.6.1, consider disabling the...

8.2CVSS7.2AI score0.00546EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line sanTas mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS8AI score0.00577EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line DARTS SHOP MAXIM mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS7.9AI score0.00577EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/12/07 12:00 a.m.6 views

PT-2023-9048 · Oracle · Oracle Trade Management +1

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.3 through 12.2.13 Description: A vulnerability in the Oracle Trade Management product of Oracle E-Business Suite, specifically in the Claim Line LOV component, allows an unauthenticated attacker with...

7.8CVSS7.3AI score0.00657EPSS
SaveExploits0References10
CNNVD
CNNVD
added 2023/12/07 12:00 a.m.9 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line urbanproject mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS8AI score0.0053EPSS
SaveExploits0References2
OSV
OSV
added 2023/12/06 10:44 a.m.5 views

SUSE-SU-2023:4656-1 Security update for traceroute

This update for traceroute fixes the following issues: - CVE-2023-46316: wrapper scripts do not properly parse command lines bsc1216591...

5.5CVSS5.5AI score0.00367EPSS
SaveExploits2References3
Fedora
Fedora
added 2023/12/06 1:47 a.m.12 views

[SECURITY] Fedora 38 Update: rust-sequoia-sq-0.26.0-10.fc38

Command-line frontends for Sequoia...

7.4AI score
SaveExploits0
Fedora
Fedora
added 2023/12/06 1:40 a.m.13 views

[SECURITY] Fedora 39 Update: rust-sequoia-sq-0.26.0-10.fc39

Command-line frontends for Sequoia...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.11 views

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root...

9CVSS8AI score0.01037EPSS
SaveExploits0References2Affected Software1
Citrix
Citrix
added 2023/12/06 12:00 a.m.10 views

See List and kill current AAA VPN Session on the CLI

See and Kill current AAA Sessions...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
added 2023/12/06 12:00 a.m.10 views

PT-2023-28769 · Line · Darts Shop Maxim Mini-App

Name of the Vulnerable Software and Affected Versions: DARTS SHOP MAXIM mini-app on Line version 13.6.1 Description: An issue in the DARTS SHOP MAXIM mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This can potentially lead to...

8.2CVSS6.8AI score0.00577EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
added 2023/12/06 12:00 a.m.13 views

PT-2023-28771

Name of the Vulnerable Software and Affected Versions Line version 13.6.1 Description An issue in the craftbeer bar canvas mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to craft and send malicious...

8.2CVSS5.9AI score0.00524EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2023/12/06 12:00 a.m.22 views

The vulnerability of the FortiOS operating system lies in its failure to handle CRLF sequences in HTTP headers, allowing attackers to inject arbitrary HTTP headers.

The vulnerability of the FortiOS operating system is related to the failure to handle CRLF sequences in HTTP headers. Exploiting this vulnerability allows a remote attacker to inject arbitrary HTTP headers...

4.2CVSS6AI score0.00464EPSS
SaveExploits0References2Affected Software2
OpenVAS
OpenVAS
added 2023/12/06 12:00 a.m.8 views

Fedora: Security Advisory for rust-sequoia-sq (FEDORA-2023-9790b327cb)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/12/06 12:00 a.m.13 views

Fedora: Security Advisory for rust-sequoia-sq (FEDORA-2023-6215ea423b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Rows per page
Query Builder