PT-2024-18986 · View · View

Name of the Vulnerable Software and Affected Versions: view component versions prior to 3.9.0 and 2.83.0 Description: The view component framework for Ruby on Rails has a cross-site scripting issue that can impact anyone rendering a component directly from a controller with the view component gem...

CVE-2023-45893: Authorization Bypass Through User-Controlled Key

An indirect Object Reference IDOR in the Order and Invoice pages in Floorsight Customer Portal Q3 2023 allows an unauthenticated remote attacker to view sensitive customer information...

PT-2025-2863

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue involves path traversal in the view issue raw file function. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2023-52275: Missing Authorization

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension...

CVE-2023-7163

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...

CVE-2023-7163

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...

Design/Logic Flaw

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...

CVE-2023-7163 D-Link D-View 8 Unauthenticated Probe-Core Server Communication

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...

CVE-2023-7163

The CVE-2023-7163 issue affects D-Link D-View 8, versions 2.0.2.89 and earlier. The root cause described across sources is manipulation of the probe inventory in the D-View service, enabling an attacker to disclose information from other probes, cause denial-of-service when the inventory becomes ...

CVE-2023-7163: Improper Input Validation

A security issue exists in D-Link D-View 8 v2.0.2.89 and prior that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial of service conditions due to the probe inventory becoming full, or the...

PT-2023-32916

Name of the Vulnerable Software and Affected Versions D-Link D-View 8 versions 2.0.2.89 and prior Description A security issue exists that could allow an attacker to manipulate the probe inventory of the D-View service. This could result in the disclosure of information from other probes, denial ...

D-Link D-View Security Breach

D-Link D-View is a web-based design network device management software from China AUO D-Link. A security vulnerability exists in D-Link D-View 8 v2.0.2.89 and earlier versions, which stems from an information disclosure vulnerability...

Tongda2000 SQL Injection Vulnerability

Tongda2000 is a network intelligent office system of China Tongda Tongda Company. Tongda2000 11.9 and previous versions exist SQL injection vulnerability, the vulnerability stems from General/wiki/cp/ct/view.php in the existence of some unknown processing, through the parameter TEMPID lead to SQL...

CVE-2023-47702

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view modify files on the system. IBM X-Force ID: 271196...

CVE-2023-47702: Improper Limitation of a Pathname to a Restricted Directory

IBM Security Guardium Key Lifecycle Manager 4.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view modify files on the system. IBM X-Force ID: 271196...

CVE-2023-6913

A session hijacking vulnerability has been detected in the Imou Life application affecting version 6.7.0. This vulnerability could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when scanning a new device and directly running WebView withou...

PT-2023-30575

Name of the Vulnerable Software and Affected Versions IBM Security Guardium Key Lifecycle Manager version 4.3 Description The issue allows a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing dot dot sequences ../ to view or...

PT-2023-32821 · Imou · Imou Life

Name of the Vulnerable Software and Affected Versions: Imou Life version 6.7.0 Description: A session hijacking issue has been detected in the Imou Life application. This issue could allow an attacker to hijack user accounts due to the QR code functionality not properly filtering codes when...

CVE-2023-5056

A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of...

CVE-2023-5056: Missing Authorization

A flaw was found in the Skupper operator, which may permit a certain configuration to create a service account that would allow an authenticated attacker in the adjacent cluster to view deployments in all namespaces in the cluster. This issue permits unauthorized viewing of information outside of...