Design/Logic Flaw

A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service...

CVE-2023-4891

A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service...

CVE-2023-4891

A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service...

CVE-2023-4891

CVE-2023-4891 involves the Lenovo View driver and a use-after-free condition that could cause a denial of service. The affected component is the Lenovo View driver; the underlying root cause is a use-after-free. Public details in the provided documents are limited and do not specify affected vers...

Effectively Measure, Communicate, and Eliminate Cloud Risks with TotalCloud

Cloud is a dynamic and ever-evolving environment characterized by transient workloads and an expansive attack surface. This inherent nature of cloud infrastructure contributes to the ongoing complexity and challenges in maintaining robust security measures. According to the 2023 Qualys TotalCloud...

mariadb: Crash executing query with VIEW, aggregate and subquery

MariaDB before 10.7.2 allows an application crash because it does not recognize that SELECTLEX::nestlevel is local to each VIEW...

mariadb: server crashes in query_arena::set_query_arena upon SELECT from view

A flaw was found in the MariaDB Server. It contains a segmentation fault via the component, sql/sqlclass.cc, impacting availability...

CVE-2023-4891: Use After Free

A potential use-after-free vulnerability was reported in the Lenovo View driver that could result in denial of service...

PT-2023-31004 · Lenovo · Lenovo View Driver

Name of the Vulnerable Software and Affected Versions: Lenovo View driver affected versions not specified Description: A potential use-after-free issue was reported in the Lenovo View driver, which could result in denial of service. Recommendations: At the moment, there is no information about a...

Lenovo ThinkPad Resource Management Error Vulnerability

Lenovo ThinkPad is a portable computer from Lenovo, a Chinese company. Lenovo ThinkPad suffers from a resource management error vulnerability that stems from the Lenovo View Driver that could lead to a denial of service...

CVE-2023-46800

Online Matrimonial Project v1.0 is vulnerable to multiple Unauthenticated SQL Injection vulnerabilities. The 'id' parameter of the viewprofile.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-46501

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-41723

A vulnerability in Veeam ONE allows a user with the Veeam ONE Read-Only User role to view the Dashboard Schedule. Note: The criticality of this vulnerability is reduced because the user with the Read-Only role is only able to view the schedule and cannot make changes...

CVE-2023-46501: Improper Access Control

An issue in BoltWire v.6.03 allows a remote attacker to obtain sensitive information via a crafted payload to the view and change admin password function...

CVE-2023-42361: Server-Side Request Forgery (SSRF)

Local File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira Data Center v.10.3.0 and before allows an attacker to view arbitrary files and cause other impacts via use of crafted image during PDF export...

WisdomGarden Tronclass ilearn Security Breach

WisdomGarden Tronclass ilearn is a teaching platform from WisdomGarden. A security vulnerability exists in WisdomGarden Tronclass ilearn. The vulnerability stems from the uploading of files without proper privilege control, which allows a remote attacker to log in with general privileges, change...

CVE-2023-5924

A vulnerability classified as critical was found in Campcodes Simple Student Information System 1.0. This vulnerability affects unknown code of the file /admin/courses/viewcourse.php. The manipulation of the argument id leads to sql injection. The exploit has been disclosed to the public and may ...

PT-2023-29745

Name of the Vulnerable Software and Affected Versions NASA Open MCT versions through 3.1.0 Description A Cross Site Request Forgery CSRF issue allows attackers to view sensitive information via the flexibleLayout plugin. The estimated number of potentially affected devices worldwide is not...

PT-2023-32422 · Campcodes · Campcodes Simple Student Information System

Name of the Vulnerable Software and Affected Versions: Campcodes Simple Student Information System version 1.0 Description: A critical vulnerability was found in the system, affecting the file /admin/courses/view course.php. The manipulation of the id argument leads to SQL injection. The exploit...

DRUPAL-CONTRIB-2023-049

This module enables you to view all paragraph entities in an admin view. The module contains an access bypass that allows non admin users to access the view. The vulnerability can be mitigated by editing the view to change the permission required to access the page...