CVSS v4 Is Now Live and What You Need To Know About It

On November 1st, 2023, the Common Vulnerability Scoring System version 4 CVSS v4 was officially launched in General Availability GA following a period of public preview and feedback collection. This launch was orchestrated by the Forum of Incident Response and Security Teams FIRST, marking a...

October 26, 2023—KB5031445 (OS Build 19045.3636) Preview

None None...

CVE-2023-5333 Denial of Service via multiple identical User IDs in /api/v4/users/ids

Mattermost fails to deduplicate input IDs allowing a simple user to cause the application to consume excessive resources and possibly crash by sending a specially crafted request to /api/v4/users/ids with multiple identical IDs...

PCI DSS v4: Uncovering Web Skimming Threats with Payment Integrations

...

CVE-2023-40901

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg...

CVE-2023-40902

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind...

CVE-2023-40902

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind...

CVE-2023-40896

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind...

Stack overflow

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg...

Stack overflow

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter time at /goform/PowerSaveSet...

Stack overflow

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter list and bindnum at /goform/SetIpMacBind...

CVE-2023-40901

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at url /goform/setMacFilterCfg...

CVE-2023-40891

Tenda AC8 v4 USAC8V4.0siV16.03.34.06cn was discovered to contain a stack overflow via parameter firewallEn at /goform/SetFirewallCfg...

CVE-2023-40900

CVE-2023-40900 affects Tenda AC8 router (example: US_AC8V4.0si_V16.03.34.06_cn). The issue is a stack overflow in the /goform/SetNetControlList endpoint triggered by the parameter list, leading to potential crash or arbitrary code execution in the application context. Technical details consistent...

CVE-2023-40899

CVE-2023-40899 affects Tenda AC8 (v4, US_AC8V4.0si_V16.03.34.06_cn). The vulnerability is a stack overflow in the HTTP API endpoint /goform/setMacFilterCfg triggered by the macFilterType and deviceList parameters, potentially crashing the application or allowing arbitrary code execution in the af...

CVE-2023-40904

Tenda AC10 v4 USAC10V4.0siV16.03.10.13cn was discovered to contain a stack overflow via parameter macFilterType and parameter deviceList at /goform/setMacFilterCfg...

Erim Upload 4 Database Disclosure

==================================================================================================================================== | Title : Erim Upload V4 Database Disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 108.032-bit | |...

CVE-2023-38748

Use after free vulnerability exists in CX-Programmer Included in CX-One CXONE-ALD-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur...

CVE-2023-38747

Heap-based buffer overflow vulnerability exists in CX-Programmer Included in CX-One CXONE-ALD-V4 V9.80 and earlier. By having a user open a specially crafted CXP file, information disclosure and/or arbitrary code execution may occur...

CVE-2023-38747

CVE-2023-38747 affects Omron CX-Programmer (included in CX-One CXONE-AL[][]D-V4) version 9.80 and earlier. The flaw is a heap-based buffer overflow triggered by opening a specially crafted CXP file, leading to information disclosure and/or arbitrary code execution. Mitigation is to upgrade to CX-...