CVE-2023-45279

Yamcs 5.8.6 allows XSS issue 1 of 2. It comes with a Bucket as its primary storage mechanism. Buckets allow for the upload of any file. There's a way to upload a display referencing a malicious JavaScript file to the bucket. The user can then open the uploaded display by selecting Telemetry from...

CVE-2023-30154

Multiple improper neutralization of SQL parameters in module AfterMail aftermailpresta for PrestaShop, before version 2.2.1, allows remote attackers to perform SQL injection attacks via idcustomer, idconf, idproduct and token parameters in aftermailajax.php via the 'idproduct' parameter in hooks...

PT-2023-22562 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: AfterMail aftermailpresta for PrestaShop versions prior to 2.2.1 Description: The issue is related to multiple improper neutralization of SQL parameters, allowing remote attackers to perform SQL injection attacks. This can be done via...

CVE-2023-44106

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-44106

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally...

Design/Logic Flaw

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-44106

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2023-44106

CVE-2023-44106 describes an API permission management vulnerability in the Fwk-Display module. The NVD entry states a API permission issue could cause features to perform abnormally with a CVSS v3.1 base score of 9.8 (CRITICAL, network attack, no user interaction). Connected docs corroborate the ...

CVE-2023-44106

API permission management vulnerability in the Fwk-Display module.Successful exploitation of this vulnerability may cause features to perform abnormally...

PT-2023-29102 · Unknown · Fwk-Display

Name of the Vulnerable Software and Affected Versions: Fwk-Display module affected versions not specified Description: The issue concerns an API permission management vulnerability in the Fwk-Display module. Successful exploitation of this vulnerability may cause features to perform abnormally...

lg-informationdisplay.com Cross Site Scripting vulnerability OBB-3727502

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-33039

Memory corruption in Automotive Display while destroying the image handle created using connected display driver...

Memory corruption

Memory corruption in Automotive Display while destroying the image handle created using connected display driver...

CVE-2023-33039 Use After Free in Automotive Display

Memory corruption in Automotive Display while destroying the image handle created using connected display driver...

CVE-2023-33039

CVE-2023-33039 concerns Memory corruption in the Automotive Display when destroying the image handle created using the connected display driver. From connected docs, the affected component is Automotive Display in Qualcomm-derived tooling, with root cause described as memory corruption during ima...

CVE-2023-33039 Use After Free in Automotive Display

Memory corruption in Automotive Display while destroying the image handle created using connected display driver...

Qualcomm Chip Resource Management Error Vulnerability

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a resource management error vulnerability that...

CVE-2023-32819

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS08014138...

CVE-2023-32819

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS08014138...

CVE-2023-32819

In display, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07993705; Issue ID: ALPS08014138...