2331 matches found
Line Security Breach
Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line DARTS SHOP MAXIM mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...
CVE-2023-43304
An issue in PARK DANDAN mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...
PT-2023-28769 · Line · Darts Shop Maxim Mini-App
Name of the Vulnerable Software and Affected Versions: DARTS SHOP MAXIM mini-app on Line version 13.6.1 Description: An issue in the DARTS SHOP MAXIM mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This can potentially lead to...
PT-2023-28771
Name of the Vulnerable Software and Affected Versions Line version 13.6.1 Description An issue in the craftbeer bar canvas mini-app on Line allows attackers to send crafted malicious notifications via leakage of the channel access token. This leakage enables attackers to craft and send malicious...
CVE-2023-45558
An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45558
An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45560
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45560
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
Code injection
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
Design/Logic Flaw
An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45560
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45560
An issue in Yasukawa memberscard v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45558
An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45558
CVE-2023-45558 : An issue in Golden v13.6.1 allows an attacker to send crafted notifications by leaking the channel access token, enabling network-based impact to confidentiality. Affected: Golden 13.6.1. Root cause: leakage of the channel access token allowing unauthorized notification delivery....
CVE-2023-45558
An issue in Golden v.13.6.1 allows attackers to send crafted notifications via leakage of the channel access token...
CVE-2023-45560
CVE-2023-45560 concerns Yasukawa memberscard v.13.6.1. The issue is the leakage of the channel access token, enabling an attacker to send crafted notifications. Documented impact includes possible unauthorized notification delivery; CVSSv3.1 base score 7.5 (Network, High impact to confidentiality...
PT-2023-29576 · Unknown · Yasukawa Memberscard
Name of the Vulnerable Software and Affected Versions: Yasukawa memberscard version 13.6.1 Description: An issue in the software allows attackers to send crafted notifications via leakage of the channel access token. This can potentially lead to unauthorized access and manipulation of user...
PT-2023-29574 · Golden · Golden
Name of the Vulnerable Software and Affected Versions: Golden version 13.6.1 Description: An issue in Golden allows attackers to send crafted notifications via leakage of the channel access token. Recommendations: For Golden version 13.6.1, consider restricting access to the notification system...
Veeam ONE 11.x < 11.0.0.1379 / 11.0.1.x < 11.0.1.1880 / 12.x < 12.0.1.2591 Multiple Vulnerabiltiies (KB4508)
The version of Veeam ONE installed on the remote Windows host is affected by multiple vulnerabilities, as disclosed in the vendor's advisory with KB ID 4508, including the following: - A vulnerability in Veeam ONE allows an unauthenticated user to gain information about the SQL server connection...