8532 matches found
Hardcoded credentials
ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...
CVE-2023-33175
ToUI is affected by CVE-2023-33175 due to improper handling of the Website.user_vars attribute when using Flask-Caching (SimpleCache). The root cause is that user-specific variables are stored on the server-side cache, allowing exposure across users. Affected versions are 2.0.1 through 2.4.0; the...
CVE-2023-33175 ToUI allows user-specific variables to be shared between users
ToUI is a Python package for creating user interfaces websites and desktop apps from HTML. ToUI is using Flask-Caching SimpleCache to store user variables. Websites that use Website.uservars property. It affects versions 2.0.1 to 2.4.0. This issue has been patched in version 2.4.1...
PT-2023-22394 · Unknown · Bestweather
Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: The issue allows unauthorized apps to cause a persistent denial of service attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no information abou...
DUALSPACE Lock Master security vulnerability
DUALSPACE Lock Master is a smart and secure Android app lock from DUALSPACE. A security vulnerability exists in DUALSPACE Lock Master version 2.2.4 that stems from allowing unauthorized apps to modify values in their SharedPreference files, which contain data that affects the functionality of man...
CVE-2023-29742
CVE-2023-29742 affects BestWeather v7.3.1 for Android. An unauthorized app can trigger code execution by manipulating the app’s database. Root cause as stated: database manipulation enables code execution. Public details across connected sources mainly reiterate the affected version and the attac...
CVE-2023-29739: Undefined Security Weakness
An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component...
PT-2023-22392 · Unknown · Bestweather
Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a privileges escalation attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no informati...
CVE-2023-29742
An issue found in BestWeather v.7.3.1 for Android allows unauthorized apps to cause a code execution attack by manipulating the database...
CVE-2023-29739
An issue found in Alarm Clock for Heavy Sleepers v.5.3.2 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the component...
PT-2023-22385 · Unknown · Edjing Mix
Name of the Vulnerable Software and Affected Versions: edjing Mix version 7.09.01 Description: The issue allows unauthorized apps to cause escalation of privilege attacks by manipulating the database. Recommendations: For edjing Mix version 7.09.01, at the moment, there is no information about a...
CVE-2023-29745
The CVE-2023-29745 entry concerns BestWeather v7.3.1 on Android, where an unauthorized app can cause a persistent denial-of-service by manipulating the app’s database. The Red Hat and other connected documents corroborate the same description. Reported impact: LOCAL attack vector with HIGH integr...
Alarm Clock security vulnerability
Alarm Clock is an app from the Smart Alarm Clock Team team. It is used to set the hours and minutes of an online alarm clock. A security vulnerability exists in Alarm Clock for Heavy Sleepers version v.5.3.2, which stems from allowing unauthorized applications to cause privilege escalation via...
CVE-2023-29734
An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...
CVE-2023-29743
CVE-2023-29743 affects BestWeather v7.3.1 on Android. The issue allows unauthorized apps to manipulate the database, causing a persistent denial of service. Documents confirm impact and CVSS 7.5 (HIGH) with network attack, no privileges, no user interaction, but do not provide exploitation detail...
PT-2023-22393 · Unknown · Bestweather
Name of the Vulnerable Software and Affected Versions: BestWeather version 7.3.1 Description: An issue in BestWeather allows unauthorized apps to cause a code execution attack by manipulating the database. Recommendations: For BestWeather version 7.3.1, at the moment, there is no information abou...
CVE-2023-29734
An issue found in edjing Mix v.7.09.01 for Android allows unauthorized apps to cause escalation of privilege attacks by manipulating the database...
PT-2023-22384 · Unknown · Lock Master
Name of the Vulnerable Software and Affected Versions: The Lock Master app version 2.2.4 Description: The issue allows unauthorized apps to modify the values in the SharedPreference files of the Lock Master app. These files hold data that affects many app functions. Malicious modifications by...
CVE-2023-29734
CVE-2023-29734 affects edjing Mix for Android (v7.09.01). The issue allows unauthorized apps to escalate privileges by manipulating the app’s database. Documented impact is high (privilege escalation; potential confidentiality, integrity, and availability effects) with CVSS v3.1 base score 9.8. N...