CVE-2023-5166

Docker Desktop before 4.23.0 is affected by CVE-2023-5166, enabling access token theft via a crafted extension icon URL. The issue affects Docker Desktop components related to extension icon handling and is described across multiple sources (NVD/NVD-like entries, PRION, PT-/security advisories). ...

CVE-2023-5166 Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL

Docker Desktop before 4.23.0 allows Access Token theft via a crafted extension icon URL. This issue affects Docker Desktop: before 4.23.0...

PT-2023-5447 · Docker · Docker Desktop

Name of the Vulnerable Software and Affected Versions: Docker Desktop versions prior to 4.23.0 Description: The issue affects Docker Desktop and is related to the disclosure of protected information. It allows a remote attacker to obtain an access token using a specially crafted extension icon UR...

CVE-2023-39052

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39052

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39045

An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39045

An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39045

An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in kokoroemembers card Line 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39044

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

Information disclosure

An information leak in ajino-Shiretoko Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39052

An information leak in Earthgardenwaiting 13.6.1 allows attackers to obtain the channel access token and send crafted messages...

CVE-2023-39041

An information leak in KUKURUDELI Line v13.6.1 allows attackers to obtain the channel access token and send crafted messages...

PT-2023-26752 · Unknown · Ajino-Shiretoko Line

Name of the Vulnerable Software and Affected Versions: ajino-Shiretoko Line version 13.6.1 Description: An information leak allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting access to the channel until a patch ...

PT-2023-26753 · Line · Kokoroe Members Card Line

Name of the Vulnerable Software and Affected Versions: kokoroe members card Line version 13.6.1 Description: An information leak in the kokoroe members card allows attackers to obtain the channel access token and send crafted messages. Recommendations: For version 13.6.1, consider restricting...