Lucene search
+L

17961 matches found

CVE
CVE
•added 2023/11/09 12:00 a.m.•57 views

CVE-2023-47372

CVE-2023-47372 involves leakage of a channel access token in UPDATESALON C-LOUNGE for Line version 13.6.1, enabling remote attackers to send malicious notifications to victims. Connected sources corroborate token leakage and unrelated security notes, but do not provide a concrete exploit path, af...

6.5CVSS6.5AI score0.00353EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/11/09 12:00 a.m.•54 views

CVE-2023-47369

CVE-2023-47369 involves leakage of a channel access token in the best_training_member component (Line 13.6.1), enabling remote attackers to trigger or send malicious notifications. Multiple sources (NVD, Red Hat, PRION, CNNVD, CVE records) consistently describe token leakage as the underlying iss...

6.5CVSS6.5AI score0.00353EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/11/09 12:00 a.m.•6 views

PT-2023-30429

Name of the Vulnerable Software and Affected Versions Platinum Clinic Line version 13.6.1 Description The issue allows remote attackers to send malicious notifications to victims due to the leakage of the channel access token. Recommendations For Platinum Clinic Line version 13.6.1, update to a...

6.5CVSS5.9AI score0.00353EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•11 views

CVE-2023-47363: Inadequate Encryption Strength

The leakage of channel access token in F.B.P members Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.5CVSS6.7AI score0.00353EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/09 12:00 a.m.•17 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue with F.B.P members. A remote attacker could exploit the vulnerability to send a malicious notification to the victim...

6.5CVSS6.7AI score0.00353EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/11/09 12:00 a.m.•15 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version 13.6.1, which stems from an access token disclosure issue in UPDATESALON C-LOUNGE. A remote attacker can exploit the vulnerability to send a malicious notification to the victim...

6.5CVSS6.8AI score0.00353EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/11/09 12:00 a.m.•45 views

CVE-2023-47367

The leakage of channel access token in platinum clinic Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.7AI score0.00353EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•8 views

CVE-2023-47372: Inadequate Encryption Strength

The leakage of channel access token in UPDATESALON C-LOUNGE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.5CVSS6.7AI score0.00353EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2023/11/09 12:00 a.m.•24 views

CVE-2023-47368

The leakage of channel access token in taketorinoyu Line 13.6.1 allows remote attackers to send malicious notifications to victims...

7.2AI score0.00353EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/11/09 12:00 a.m.•36 views

CVE-2023-47364

The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.7AI score0.00353EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/11/09 12:00 a.m.•46 views

CVE-2023-47365

The leakage of channel access token in Lil.OFF-PRICE STORE Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.7AI score0.00353EPSS
SaveExploits1References1
CVE
CVE
•added 2023/11/09 12:00 a.m.•85 views

CVE-2023-47364

CVE-2023-47364 affects nagaoka taxi Line, version 13.6.1. The issue is described as leakage of the channel access token, enabling remote attackers to send malicious notifications to victims. The provided sources confirm the same description across NVD, Red Hat, CNNVD, and other catalogs, but do n...

6.5CVSS6.5AI score0.00353EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/11/09 12:00 a.m.•78 views

CVE-2023-47363

CVE-2023-47363 affects Line app, specifically F.B.P members version 13.6.1. The issue is leakage of the channel access token, enabling remote attackers to send malicious notifications to victims. The Red Hat/CNNVD entries corroborate token leakage and mention Line 13.6.1. No exploitation details ...

6.5CVSS6.5AI score0.00353EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/11/09 12:00 a.m.•58 views

CVE-2023-47368

The CVE-2023-47368 entry concerns Line (Line messaging app) version 13.6.1, where leakage of the channel access token in taketorinoyu can enable a remote attacker to send malicious notifications to victims. The connected documents corroborate that the vulnerability involves an access-token disclo...

6.5CVSS6.5AI score0.00353EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•8 views

CVE-2023-47366: Inadequate Encryption Strength

The leakage of channel access token in craftmembers Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.5CVSS6.7AI score0.00353EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/11/09 12:00 a.m.•34 views

CVE-2023-47366

The leakage of channel access token in craftmembers Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.7AI score0.00353EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/09 12:00 a.m.•9 views

CVE-2023-47364: Inadequate Encryption Strength

The leakage of channel access token in nagaoka taxi Line 13.6.1 allows remote attackers to send malicious notifications to victims...

6.5CVSS6.7AI score0.00353EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•30 views

Fedora 37 : firefox (2023-45b3c1d9ed)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-45b3c1d9ed advisory. - Updated to latest upstream 113.0 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessu...

9.8CVSS7.3AI score0.00918EPSS
SaveExploits0References13
Kitploit
Kitploit
•added 2023/11/03 11:30 a.m.•55 views

Aws-Waf-Header-Analyzer - The Purpose Of The Project Is To Create Rate Limit In AWS WaF Based On HTTP Headers

The purpose of the project is to create rate limit in AWS WaF based on HTTP headers. Golang is a dependencie to build the binary. See the documentation to install: https://go.dev/doc/install make sudo make install The rules configuration is very simple, for example, the threshold is the limited o...

7.3AI score
SaveExploits0References1
osv_asb
osv_asb
•added 2023/11/01 12:00 a.m.•68 views

ASB-A-278558814

In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS5.9AI score0.00085EPSS
SaveExploits0References2
Rows per page
Query Builder