The vulnerability of the Django web application platform, related to uncontrolled resource consumption, allows attackers to trigger service failures.

The vulnerability of the Django web application framework is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Veritas eDiscovery Platform Security Breach

Veritas eDiscovery Platform is a powerful engine from Veritas, Inc. for performing large-scale, dataset-driven searches to help organizations quickly identify critical parsed documents. A security vulnerability exists in Veritas eDiscovery Platform versions prior to 10.2.5, which stems from an...

The vulnerability of the XWiki platform, a collaborative web application, lies in its insufficient validation of incoming requests. This allows attackers to gain unauthorized access to cookies files.

The vulnerability of the XWiki Platform lies in the insufficient verification of incoming requests. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to cookies files...

The vulnerability of the XWiki Platform, a platform for creating collaborative web applications. This vulnerability arises due to the failure to take measures to eliminate special elements within the platform, allowing attackers to inject arbitrary code.

The vulnerability of the XWiki platform lies in its lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to inject arbitrary code remotely...

MISP Security Vulnerabilities

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.184, which stems from a...

The vulnerability of the HTML platform for Windows operating systems, which allows a hacker to bypass security restrictions

The vulnerability of the HTML platform for Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

CVE-2023-49864

An information disclosure vulnerability exists in the aVideoEncoderReceiveImage.json.php image upload functionality of WWBN AVideo dev master commit 15fed957fb. A specially crafted HTTP request can lead to arbitrary file read.This vulnerability is triggered by the downloadURLimage parameter...

WWBN AVideo Security Breach

WWBN AVideo is a video platform builder written in PHP by the WWBN team. A security vulnerability exists in WWBN AVideo, which originates from an information disclosure vulnerability in the image upload method of the aVideoEncoderReceiveImage.json.php page...

GHSA-P4V8-JGCV-9G75 safe_pqc_kyber leaks parts of secret keys

Impact On some platforms, when an attacker can time decapsulation, and in particular when the attacker can forge cipher texts, they can learn parts of the secret key. Does not apply to ephemeral usage, such as when used in the regular way in TLS. Patches Patched in 0.6.2. References -...

Fortanix EnclaveOS Confidential Computing Manager Platform Security Vulnerability

Fortanix EnclaveOS Confidential Computing Manager Platform is a cloud-native service from Fortanix, Inc. that provides a complete solution for confidential computing in the cloud and in local workloads. A security vulnerability exists in Fortanix EnclaveOS Confidential Computing Manager Platform...

GHSA-R24F-HG58-VFRW unsafe-libyaml unaligned write of u64 on 32-bit and 16-bit platforms

Affected versions allocate memory using the alignment of usize and write data to it of type u64, without using core::ptr::writeunaligned. In platforms with sub-64bit alignment for usize including wasm32 and x86 these writes are insufficiently aligned some of the time. If using an ordinary optimiz...

CVE-2023-42478

SAP Business Objects Business Intelligence Platform is vulnerable to stored XSS allowing an attacker to upload agnostic documents in the system which when opened by any other user could lead to high impact on integrity of the application...

Unrestricted Unwrap Fee Changes: Instability, Market Disruption, and Loss of Trust

Lines of code Vulnerability details Impact The current changeUnwrapFee function in the Ocean smart contract allows the owner to change the unwrap fee divisor with no restrictions, leading to several negative impacts: 1. Unstable Unwrap Fees: Frequent changes in the divisor can cause instability a...

CVE-2023-3741

An OS Command injection vulnerability in NEC Platforms DT900 and DT900S Series all versions allows an attacker to execute any command on the device...

PT-2023-7217 · Microsoft +7 · Asp.Net Core +7

Name of the Vulnerable Software and Affected Versions: ASP.NET Core affected versions not specified Description: The issue is related to errors in security settings of the ASP.NET Core platform, allowing an attacker to disclose protected information. Recommendations: At the moment, there is no...

Beijing Baichuo Smart S85F Management Platform Authorization Issues Vulnerability

Beijing Baichuo Smart S85F Management Platform is a management platform of Beijing Baichuo Company. An authorization issue vulnerability exists in Beijing Baichuo Smart S85F Management Platform version V31R02B10-01, which stems from an improper password reset in the parameter txtnewpwd in the fil...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line, which stems from a vulnerability in Tokudaya.honten. An attacker can exploit the vulnerability to obtain a channel access token to send a crafted message...

The vulnerability of the SAP S/4HANA software platform, related to the lack of protection for operational data, allows attackers to disclose protected information.

The vulnerability of the SAP S/4HANA software platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

CVE-2023-45357

Archer Platform 6.x before 6.13 P2 HF2 6.13.0.2.2 contains a sensitive information disclosure vulnerability. An authenticated attacker could potentially obtain access to sensitive information via a popup warning message. 6.14 6.14.0 is also a fixed release...

The vulnerability of the Microsoft .NET software platform, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Microsoft .NET software platform is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...