CVE-2023-31823

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

CVE-2023-31824

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function...

Information disclosure

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function...

Information disclosure

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function...

CVE-2023-31823

CVE-2023-31823 affects Marui Official app v13.6.1. The issue allows a remote attacker to access sensitive information via the channel access token used by the miniapp Store function (Marui Official Store). Impact is information disclosure; no exploitation details are provided beyond this descript...

CVE-2023-31821

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function...

CVE-2023-31819

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31823

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

CVE-2023-31824

An issue found in DERICIA Co. Ltd, DELICIA v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp DELICIA function...

CVE-2023-31821

An issue found in ALBIS Co. ALBIS v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp ALBIS function...

CVE-2023-31819

An issue found in KEISEI STORE Co, Ltd. LIVRE KEISEI v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp function...

CVE-2023-31819

CVE-2023-31819 affects KEISEI STORE Co, Ltd. LIVRE KEISEI v13.6.1, where the miniapp function exposes the channel access token, enabling a remote attacker to access sensitive information. Root cause: improper protection/exposure of the access token in the miniapp flow. Impact: potential informati...

CVE-2023-31824

CVE-2023-31824 affects DELICIA v13.6.1 from DERICIA Co. Ltd. A remote attacker could access sensitive information via the channel access token in the miniapp DELICIA function. Reported across multiple feeds (Red Hat, NVD, CVE listings) with CVSSv3.1 base score 7.5 (Network, Low attack complexity,...

CVE-2023-31823

An issue found in Marui Co Marui Official app v.13.6.1 allows a remote attacker to gain access to sensitive information via the channel access token in the miniapp Marui Official Store function...

Arbitrary File Deletion Vulnerability in Intelligent Mobile Surveillance System of Zhejiang Zhongcheng Technology Co.

Zhejiang Zhongcheng Technology Co., Ltd. is a total solution provider of intelligent manufacturing for the process industry. An arbitrary file deletion vulnerability exists in the Intelligent Mobile Monitoring System of Zhejiang Zhongcheng Technology Co. Ltd, which can be exploited by...

Unauthorized Access Vulnerability in SRM Cloud Platform of Shanghai Zhenyun Information Technology Co.

Shanghai Zhenyun Information Technology Co., Ltd. is a domestic procurement digital management platform provider. An unauthorized access vulnerability exists in the SRM cloud platform of Shanghai Zhenyun Information Technology Co., Ltd, which can be exploited by attackers to obtain sensitive...

Fastjson Deserialization Vulnerability in YouSpace APP of UFIDA Network Technology Co.

YouSpace APP is an enterprise space management software. YouSpace APP of UFIDA Network Technology Co. Ltd. suffers from a Fastjson deserialization vulnerability, which can be exploited by attackers to execute malicious code...

Command Execution Vulnerability in MCMS of Jiangxi Minsoft Technology Co.

MCMS is a java-based development of a lightweight open source content management system . Jiangxi Mingsoft Technology Co., Ltd MCMS command execution vulnerability, an attacker can exploit the vulnerability to execute commands...

Arbitrary File Download Vulnerability in ES File Browser of Beijing Xiaoxiong Bowang Technology Co.

ES File Explorer is a powerful and free local and network file manager. ES File Browser has an arbitrary file download vulnerability that can be exploited by attackers to obtain sensitive information...

File upload vulnerability in inforsuiteAS application server of Shandong Zhongchuang Software Commercial Middleware Co.(CNVD-2023-63818)

Shandong Zhongchuang Software Commercial Middleware Co., Ltd. is a company whose business scope includes the sales and maintenance services of computers, software and auxiliary equipment, electronic equipment, computer network equipment, etc. A file upload vulnerability exists in the inforsuiteAS...