Lucene search
+L

391 matches found

CNNVD
CNNVD
•added 2024/03/21 12:00 a.m.•13 views

Vanderbilt REDCap 安全漏洞

REDCap is a data collection and management web application. A security vulnerability exists in Vanderbilt REDCap prior to v.13.8.0, which stems from the presence of a SQL injection vulnerability that could allow a remote attacker to gain access to sensitive information via a password reset...

9.8CVSS7.9AI score0.00952EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/02/11 3:54 a.m.•10 views

SUSE CVE-2024-0985

Late privilege drop in REFRESH MATERIALIZED VIEW CONCURRENTLY in PostgreSQL allows an object creator to execute arbitrary SQL functions as the command issuer. The command intends to run SQL functions as the owner of the materialized view, enabling safe refresh of untrusted materialized views. The...

8CVSS8.4AI score0.01808EPSS
SaveExploits0References13
OSV
OSV
•added 2024/01/26 7:15 a.m.•19 views

CVE-2023-48130

An issue in GINZA CAFE mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.4CVSS5.8AI score0.00359EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/01/26 12:00 a.m.•16 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line version v13.6.1, which stems from the angel coffee applet that may disclose access tokens...

5.4CVSS6.8AI score0.00359EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•13 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line cherub-hair mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

5.4CVSS6.7AI score0.00394EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/01/24 12:00 a.m.•11 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line mokumoku chohu mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification by revealing a channel access token...

5.4CVSS6.7AI score0.0036EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/01/24 12:00 a.m.•25 views

PT-2024-13157 · Stockman · Stockman Group Mini-App On Line

Name of the Vulnerable Software and Affected Versions: STOCKMAN GROUP mini-app on Line version 13.6.1 Description: An issue in the STOCKMAN GROUP mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to...

5.4CVSS5.4AI score0.0036EPSS
SaveExploits1References7
OSV
OSV
•added 2024/01/22 6:15 a.m.•9 views

DEBIAN-CVE-2023-52354

chasquid before 1.13 allows SMTP smuggling because LF-terminated lines are accepted...

7.5CVSS7AI score0.00468EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/01/22 12:00 a.m.•23 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.6.4, which stems from an application that may be able to access sensitive user data...

5.5CVSS6.4AI score0.00291EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•17 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13, which originates from an application that may be able to modify protected portions of the file system...

5.5CVSS6.4AI score0.00227EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•22 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which stems from an application that may bypass Gatekeeper checks...

5.5CVSS6.6AI score0.0019EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•20 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13, which stems from an application that may be able to access sensitive user data...

5.5CVSS6.4AI score0.00196EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•28 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.3, which originates from an application that may be able to execute arbitrary code using kernel privileges...

7.8CVSS7.4AI score0.00206EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•20 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13.5, which originates from an application that may be able to obtain root privileges...

7.8CVSS6.5AI score0.00216EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•39 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13, which originates from an application that may be able to execute arbitrary code using kernel privileges...

7.8CVSS7.4AI score0.00224EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/01/10 12:00 a.m.•20 views

Apple macOS Ventura Security Vulnerability

Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13, which stems from an application that may be able to access sensitive user data...

5.5CVSS6.4AI score0.00196EPSS
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/12/13 8:26 p.m.•11 views

Malicious code in @dle-clo-bento-component/dist (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a652e8cb279a3db5d1420008c3f3fc8c11aab4463f7ed61925ca409f18066b19 The OpenSSF Package Analysis project identified '@dle-clo-bento-component/dist' @ 13.0.0 npm as malicious. It is considered malicious because: -...

7.1AI score
SaveExploits0
attackerkb
attackerkb
•added 2023/12/07 7:15 a.m.•15 views

CVE-2023-43303

An issue in craftbeer bar canvas mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token via captured network traffic...

8.2CVSS7.2AI score0.00528EPSS
SaveExploits0References3
OSV
OSV
•added 2023/12/07 7:15 a.m.•21 views

CVE-2023-43299

An issue in DA BUTCHERS mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS5.8AI score0.00508EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/12/07 12:00 a.m.•21 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line PARK DANDAN mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

8.2CVSS7.9AI score0.00546EPSS
SaveExploits1References2
Rows per page
Query Builder