CVE-2023-39006: Improper Neutralization of Input During Web Page Generation

The Crash Reporter crashreporter.php component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization...

CVE-2023-39006

The CVE-2023-39006 vulnerability affects OPNSense components, specifically the Crash Reporter (crash_reporter.php). Affected versions are Community Edition before 23.7 and Business Edition before 23.4.2, where input sanitization is mishandled. Concrete details across sources confirm the affected ...

CVE-2023-39006

The Crash Reporter crashreporter.php component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 mishandles input sanitization...

UBUNTU-CVE-2023-4205

Rejected reason: This was deemed as a false positive both by the reporter and upstream kernel...

CVE-2023-4205

CVE-2023-4205 entry is rejected/not used; not an active vulnerability.

Improper Authorization

gitlab is vulnerable to Improper Authorization. This vulnerability allows project members to manage issues in the error tracking feature if they are assigned the reporter role...

aproperties.es Cross Site Scripting vulnerability OBB-3530311

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30565

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...

CVE-2023-30565

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...

Design/Logic Flaw

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...

CVE-2023-30565

CVE-2023-30565 describes an insecure (cleartext) connection between BD Alaris System Manager (SM) and CQI Reporter that could expose infusion data. Affected: BD Alaris SM versions 12.3 and prior; CQI Reporter v10.17 and prior; PCU Model 8015 12.1.3 and prior. MITRE/ADP assessment in the connected...

CVE-2023-30565 CQI Data Sniffing

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...

BD Alaris System with Guardrails Suite MX

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION : Low attack complexity Vendor : Becton, Dickinson and Company BD Equipment : Alaris PCU, Guardrails Editor, Systems Manager, Calculation Services, CQI Reporter Vulnerabilities : Insufficient Verification of Data Authenticity, Missing...

CVE-2023-30565: Improper Enforcement of Message Integrity During Transmission in a Communication Channel

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker...

PT-2023-22793 · Unknown · Systems Manager +1

Name of the Vulnerable Software and Affected Versions: Systems Manager affected versions not specified CQI Reporter application affected versions not specified Description: The issue is related to an insecure connection between Systems Manager and the CQI Reporter application, which could...

BD Alaris System with Guardrails Suite MX security vulnerabilities

The BD Alaris System with Guardrails Suite MX is a medical device from Biddy Medical BD, Inc. A security vulnerability exists in the BD Alaris System with Guardrails Suite MX, which stems from an insecure connection between the Systems Manager and CQI Reporter applications that could expose...

catmaster.se Cross Site Scripting vulnerability OBB-3468912

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

deseti-prsty.cz Cross Site Scripting vulnerability OBB-3442341

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

korte-kultura.net Cross Site Scripting vulnerability OBB-3440335

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

org.jenkins-ci.main:jenkins-test-harness (1.623), org.jenkins-ci.main:jenkins-war (1.623) +2 more potentially affected by CVE-2023-35141 via org.jenkins-ci.main:jenkins-core (1.623)

org.jenkins-ci.main:jenkins-core MAVEN version 1.623 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.623 - org.jenkins-ci.main:jenkins-war 1.623 -...