21725 matches found
CVE-2023-38907
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...
CVE-2023-38907
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...
CVE-2023-38907
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...
CVE-2023-38907
An issue in TPLink Smart Bulb Tapo series L530 before 1.2.4, L510E before 1.1.0, L630 before 1.0.4, P100 before 1.5.0, and Tapo Application 2.8.14 allows a remote attacker to replay old messages encrypted with a still valid session key...
SUSE-SU-2023:3727-1 Security update for libqb
This update for libqb fixes the following issues: - CVE-2023-39976: Fixed potential buffer overflow with long log messages bsc1214066...
OESA-2023-1680 mosquitto security update
Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...
Cross site scripting
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcubestringreplacer.php behavior...
CVE-2023-43770
Roundcube before 1.4.14, 1.5.x before 1.5.4, and 1.6.x before 1.6.3 allows XSS via text/plain e-mail messages with crafted links because of program/lib/Roundcube/rcubestringreplacer.php behavior. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
CVE-2023-39052
An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39052
An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39052
An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39045
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Information disclosure
An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Information disclosure
An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...
CVE-2023-39041
An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...
Information disclosure
An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...