9267 matches found
CVE-2023-6038
A Local File Inclusion LFI vulnerability exists in the h2o-3 REST API, allowing unauthenticated remote attackers to read arbitrary files on the server with the permissions of the user running the h2o-3 instance. This issue affects the default installation and does not require user interaction. Th...
CVE-2023-41570
MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API...
CVE-2023-41570
MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API...
Design/Logic Flaw
MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API...
CVE-2023-41570
MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API...
CVE-2023-41570: Improper Access Control
MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API...
CVE-2023-41570
MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API...
CVE-2023-41570
Affected product/versions: MikroTik RouterOS 7.1–7.11. Vulnerability: Incorrect Rest API access control mechanisms, enabling potential unauthorized information disclosure. Root cause: improper access control in the Rest API. Impact: Network-exposed vulnerability with high confidentiality impact; ...
MikroTik RouterOS Security Vulnerability
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in PCs to enable them to provide router functionality. A security vulnerability exists in MikroTik RouterOS versions v7.1 through 7.11 that stems from the presence of a...
Information Disclosure
wordpress is vulnerable to Information Disclosure. An attacker could exploit this vulnerability by tricking a user into installing a malicious Popup Builder plugin or by uploading a malicious plugin to a vulnerable WordPress installation. The malicious plugin would then inject malicious code into...
CVE-2023-6073
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...
Design/Logic Flaw
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...
CVE-2023-6073
CVE-2023-6073 affects the Volkswagen ID.3 ICAS 3 IVI ECU. Affected component: ICAS 3 IVI ECU in VW Group vehicles with the same hardware. Description provided across sources states that an attacker can perform a Denial of Service to crash the ICAS 3 IVI ECU and spoof REST API volume commands to i...
CVE-2023-6073 DoS and Control of Volume Settings for VW ID.3 ICAS3 IVI ECU
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...
CVE-2023-6073: Improper Access Control
Attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU in a Volkswagen ID.3 and other vehicles of the VW Group with the same hardware and spoof volume setting commands to irreversibly turn on audio volume to maximum via REST API calls...
PT-2023-32498 · Volkswagen · Volkswagen Id.3
Name of the Vulnerable Software and Affected Versions: Volkswagen ID.3 and other vehicles of the VW Group with the same hardware affected versions not specified Description: An attacker can perform a Denial of Service attack to crash the ICAS 3 IVI ECU and spoof volume setting commands to...
Moderate: Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (openstack-barbican) security update
An update for openstack-barbican is now available for Red Hat OpenStack Platform 16.2 Train. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
PT-2023-9396
Name of the Vulnerable Software and Affected Versions Cisco Identity Services Engine ISE affected versions not specified Description The issue is related to insufficient validation of user-supplied input in REST API calls, allowing an authenticated, remote attacker to conduct blind SQL injection...
Rocky Linux 8 : container-tools:rhel8 (RLSA-2021:0531)
The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2021:0531 advisory. - An information disclosure vulnerability was found in containers/podman in versions before 2.0.5. When using the deprecated Varlink API or the Docker-compatible...