Shanxi Diankeyun Technology NODERP Authorization Issue Vulnerability

Shanxi Diankeyun Technology NODERP is an ERP system from Shanxi Diankeyun Technology. An authorization issue vulnerability exists in Shanxi Diankeyun Technology NODERP version 6.0.2, which stems from the possibility that the parameter NodUserId/NodUserToken in the file application/index/common.ph...

CVE-2023-42935

An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6.4. A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen...

CVE-2023-42935

An authentication issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6.4. A local attacker may be able to view the previous logged in user’s desktop from the fast user switching screen...

CVE-2023-42935

CVE-2023-42935 is a local-authentication issue in macOS where an attacker could view the previous log-in user’s desktop from the Fast User Switching screen. The root cause is insufficient state management around user-switch handling. Apple fixed this in macOS Ventura 13.6.4. The impact is limited...

PT-2024-19719 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17.3 iPadOS versions prior to 17.3 Description: The issue was addressed with improved authentication. Stolen Device Protection may be unexpectedly disabled. Recommendations: For iOS versions prior to 17.3, update to iOS...

PT-2024-20117

Name of the Vulnerable Software and Affected Versions Hitron Systems DVR LGUVR-16H versions 1.02 through 4.02 Description The issue is related to improper input validation, which allows an attacker to cause a network attack if the default admin ID and password are used. Recommendations For versio...

CVE-2023-7084 Voting Record <= 2.0 - Subscriber+ Stored XSS

The Voting Record WordPress plugin through 2.0 is missing sanitisation as well as escaping, which could allow any authenticated users, such as subscriber to perform Stored XSS attacks...

CVE-2021-24151 WP Editor < 1.2.7 - Authenticated SQL injection

The WP Editor WordPress plugin before 1.2.7 did not sanitise or validate its setting fields leading to an authenticated admin+ blind SQL injection issue via an arbitrary parameter when making a request to save the settings...

CVE-2023-31211 Disabled automation users could still authenticate

Insufficient authentication flow in Checkmk before 2.2.0p18, 2.1.0p38 and 2.0.0p39 allows attacker to use locked credentials...

CVE-2023-40393

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication...

Authentication flaw

An authentication issue was addressed with improved state management. This issue is fixed in macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication...

CVE-2023-40393

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication...

CVE-2023-40393

The CVE-2023-40393 issue is an authentication-related flaw in Apple macOS Sonoma 14 where photos in the Hidden Photos Album could be viewed without authentication. The Red Hat/Apple documentation confirms the fix is included in macOS Sonoma 14 (and iOS 17 / iPadOS 17 for corresponding platforms) ...

CVE-2023-40393

An authentication issue was addressed with improved state management. This issue is fixed in iOS 17 and iPadOS 17, macOS Sonoma 14. Photos in the Hidden Photos Album may be viewed without authentication...

CentOS 7 : cups (RHSA-2023:4766)

The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:4766 advisory. - An authentication issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7.7, macOS Monterey 12.6.6, macOS Ventura 13.4. ...

CVE-2023-47118 Heap buffer overflow in T64 codec decompression

ClickHouse® is an open-source column-oriented database management system that allows generating analytical data reports in real-time. A heap buffer overflow issue was discovered in ClickHouse server. An attacker could send a specially crafted payload to the native interface exposed by default on...

PT-2023-26015 · Apache · Apache Pulsar Websocket Proxy

Name of the Vulnerable Software and Affected Versions: Apache Pulsar WebSocket Proxy versions 2.8.0 through 2.8. Apache Pulsar WebSocket Proxy versions 2.9.0 through 2.9. Apache Pulsar WebSocket Proxy versions 2.10.0 through 2.10.4 Apache Pulsar WebSocket Proxy versions 2.11.0 through 2.11.1 Apac...

PT-2023-8159 · Voltronic Power · Voltronic Power Viewpower

Name of the Vulnerable Software and Affected Versions: Voltronic Power ViewPower Pro affected versions not specified Description: The issue is related to the lack of authentication in the SocketService module of Voltronic Power ViewPower Pro, allowing remote attackers to create a denial-of-servic...

SmartStar Software CWS Trust Management Issue Vulnerability

SmartStar Software CWS is a Web-based integration platform from China-based SmartStar Software. A trust management issue exists in SmartStar Software CWS v10.25. The vulnerability stems from a low-privileged specific account using a fixed key for authentication purposes, which can be exploited by...

IceCMS Security Vulnerability

IceCMS is a content management system based on Spring Boot + Vue front-end and back-end separation by NgShow individual developers. A security vulnerability exists in IceCMS version 2.0.1, which stems from the presence of an unknown function in the login of the Captcha Handler component, which ca...