CVE-2023-48050

SQL injection vulnerability in Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance aka odoo-biometric-attendance v. 13.0 through 16.0.1 allows a remote attacker to execute arbitrary code and to gain privileges via the db parameter in the controllers/controllers.py...

NetApp ONTAP Information Disclosure Vulnerability

NetApp ONTAP is a proprietary operating system from Network Appliance NetApp, Inc. It is used for storage disk arrays. An information disclosure vulnerability exists in NetApp ONTAP 9 versions 9.12.1P8, 9.13.1P4 and 9.13.1P5, which stems from the presence of a sensitive information disclosure...

ZKTeco ZKBio Time Security Vulnerability

ZKTeco ZKBio Time is a powerful web-based time and attendance management software from China-based ZKTeco. Cams Biometrics Zkteco, eSSL, Cams Biometrics Integration Module with HR Attendance A security vulnerability exists in versions 13.0 through 16.0.1, which stems from an SQL injection...

Malicious code in @dle-clo-bento-component/dist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a652e8cb279a3db5d1420008c3f3fc8c11aab4463f7ed61925ca409f18066b19 The OpenSSF Package Analysis project identified '@dle-clo-bento-component/dist' @ 13.0.0 npm as malicious. It is considered malicious because: -...

FreeBSD Security Vulnerabilities

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. A security vulnerability exists in FreeBSD that stems from a denial of service DOS vulnerability in which the pf4 packet filter does not properly validate TCP sequence numbers. Affected products and versions: FreeBSD...

Archer Platform Security Vulnerability

Archer Platform is a modern integrated risk management solution from Archer, Inc. A security vulnerability exists in Archer Platform version 6.x prior to 6.13 P2 6.13.0.2 that stems from the presence of an HTML content injection vulnerability...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by compromising a channel access token...

PT-2023-30774

Name of the Vulnerable Software and Affected Versions DockerSpawner versions 0.11.0 through 12 Description The issue affects JupyterHub deployments running DockerSpawner, allowing users to launch any pullable Docker image instead of restricting to the single configured image. This has been...

CVE-2023-43303

An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token via captured network traffic...

CVE-2023-43299

An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

PT-2023-9316 · Oracle · Oracle Enterprise Asset Management

Name of the Vulnerable Software and Affected Versions: Oracle Enterprise Asset Management versions 12.2.11 through 12.2.13 Description: The issue is related to insufficient input validation in the Work Definition Issues component of Oracle Enterprise Asset Management. This allows a low-privileged...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line PARK DANDAN mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

PT-2023-9318 · Oracle · Oracle E-Business Suite

Name of the Vulnerable Software and Affected Versions: Oracle E-Business Suite versions 12.2.12 through 12.2.13 Description: The issue is related to insufficient protection of service data in the Allocation Rules component of Oracle Process Manufacturing Financials. It allows a low-privileged...

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line sanTas mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

CVE-2023-42579

Improper usage of insecure protocol i.e. HTTP in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middl...

CVE-2023-42577

Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen...

PT-2023-28447 · Samsung +1 · Samsung Voice Recorder +3

Name of the Vulnerable Software and Affected Versions: Samsung Voice Recorder versions prior to 21.4.15.01 in Android 12 and Android 13 Samsung Voice Recorder versions prior to 21.4.50.17 in Android 14 Description: The issue is related to improper access control in the Samsung Voice Recorder,...

CVE-2023-48334

Cross-Site Request Forgery CSRF vulnerability in DAEXT League Table allows Cross Site Request Forgery.This issue affects League Table: from n/a through 1.13...

PT-2023-30783 · WordPress · Edoc Employee Job Application

Name of the Vulnerable Software and Affected Versions: eDoc Employee Job Application – Best WordPress Job Manager for Employees versions 1.13 and earlier Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting. This allo...

Cosmos Code Issue Vulnerability

Cosmos is a self-hosted home server from the individual developer Yann Stepienik. Designed to address the growing concern of vulnerable self-hosted applications and personal servers. A code issue vulnerability exists in Cosmos versions prior to 0.13.0, which stems from a token in the Authorizatio...